last executing test programs: 18.373650796s ago: executing program 4 (id=5573): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = io_uring_setup(0x45a6, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb", 0xae, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="93", 0x34000}], 0x1}, 0x4040) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r5 = dup(r4) fallocate(r5, 0x10, 0x0, 0x72000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) r7 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x2, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r7, 0x11, &(0x7f0000000d40)="01", 0x1) 16.294123778s ago: executing program 4 (id=5583): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f0000000500)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4840) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) r9 = syz_io_uring_setup(0xeeb, &(0x7f0000000480)={0x0, 0x8001, 0x10100, 0x3, 0x86}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd=r8, 0x73b, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x1}) io_uring_enter(r9, 0x567, 0xa9ea, 0x5, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x201f00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13.329706187s ago: executing program 4 (id=5597): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000000240)=""/145, &(0x7f00000000c0)=0x91) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000480)={0x0}) io_uring_setup(0x597f, &(0x7f0000000180)={0x0, 0xd492, 0x1, 0x0, 0x2f}) syz_mount_image$fuse(0x0, &(0x7f0000002d40)='./file0\x00', 0x1080000, 0x0, 0x0, 0x0, 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20800, 0x0) utimensat(r7, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) 11.242704947s ago: executing program 4 (id=5591): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsuid(0xffffffffffffffff) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16, @ANYBLOB="01032757c38d085641a7260000000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) wait4(r4, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x1, 0x0, 0x0) mincore(&(0x7f00001b0000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/153) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, 0x0) 11.146389436s ago: executing program 1 (id=5593): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) 11.091033769s ago: executing program 0 (id=5594): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x1ce) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10.992741929s ago: executing program 1 (id=5596): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x180, 0x380, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000006c0), 0x3, 0x2) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000700)) 10.162758619s ago: executing program 3 (id=5599): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x6e, 0x401, @vifc_lcl_addr=@multicast2, @loopback}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r4 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000005c0)={0x0, r4}) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) r6 = socket$kcm(0xa, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0) sendmsg$sock(r6, &(0x7f0000000000)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x80, 0x0, 0x0, &(0x7f0000000640)}, 0x4800) 10.157819688s ago: executing program 0 (id=5609): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xe8, 0x30, 0x7, 0x2, 0x4, 0x5, 0x7, 0x8, 0xa, 0x5, 0x2, 0x52, 0x2, 0x3}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r5, 0x0}) syz_io_uring_setup(0x580a, &(0x7f0000000040)={0x0, 0xffffffff, 0x100, 0x0, 0x22d}, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(0x4) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r6, 0x40000005, 0x3, 0x0, 0x1, [0x0], [0x4, 0x7, 0x77], [0x7, 0x80000002, 0x2, 0x7], [0x0, 0x0, 0x1, 0xfff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0) 9.97157207s ago: executing program 1 (id=5600): socket$inet6(0xa, 0x1, 0xffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x80000401) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r5, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d240500"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="8110b0e3ff000000"], &(0x7f00000002c0)='syzkaller\x00', 0x6}, 0x94) sendmsg$nl_generic(r6, 0x0, 0x4000080) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x8000}) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000080)={0x5, 0x802}) 8.388179048s ago: executing program 0 (id=5603): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000000240)=""/145, &(0x7f00000000c0)=0x91) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x1ce) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000480)={0x0}) io_uring_setup(0x597f, &(0x7f0000000180)={0x0, 0xd492, 0x1, 0x0, 0x2f}) syz_mount_image$fuse(0x0, &(0x7f0000002d40)='./file0\x00', 0x1080000, 0x0, 0x0, 0x0, 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20800, 0x0) utimensat(r7, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) 8.267344219s ago: executing program 3 (id=5604): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x228000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0xfffffffffffffffd, 0x8, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0500000001000100ff7f00000202000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r7, 0x0, 0x20000000}, 0x38) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x1, 0x1, 0x7, 0x1}}, 0x2e) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x3, &(0x7f0000000040)=0x1, 0x4) r9 = fsopen(&(0x7f0000000000)='sysv\x00', 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 6.633163739s ago: executing program 3 (id=5605): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000001300)=""/4118, 0x1016, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$tipc(r5, 0x0, 0x8820) close(r4) 6.632873765s ago: executing program 4 (id=5606): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x4007) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2, r3}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x5, [@multicast1, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}, 0x24) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.631877416s ago: executing program 1 (id=5607): r0 = socket(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) socket$inet_udplite(0x2, 0x2, 0x88) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r3, r3, r3}, &(0x7f0000000080)=""/34, 0x22, &(0x7f0000000000)={&(0x7f0000000280)={'wp512-generic\x00'}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r4, 0x1, {0x2, 0xf0, 0x3}, 0x2}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) keyctl$update(0x2, r3, &(0x7f0000000040)="3a77ca2f441f0166a88d84e4f8716573a5372153d986d6a9e3b04844134d40726f74fe922fc8c656072b789d9eaf", 0x2e) kexec_load(0x8, 0x0, 0x0, 0x160000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x14000080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004040) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x2, 0x25dfdbfb, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.581177006s ago: executing program 2 (id=5608): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) 6.537597706s ago: executing program 0 (id=5610): r0 = socket(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) socket$inet_udplite(0x2, 0x2, 0x88) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r3, r3, r3}, &(0x7f0000000080)=""/34, 0x22, &(0x7f0000000000)={&(0x7f0000000280)={'wp512-generic\x00'}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r4, 0x1, {0x2, 0xf0, 0x3}, 0x2}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) keyctl$update(0x2, r3, &(0x7f0000000040)="3a77ca2f441f0166a88d84e4f8716573a5372153d986d6a9e3b04844134d40726f74fe922fc8c656072b789d9eaf", 0x2e) 6.43074841s ago: executing program 2 (id=5611): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x62040) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xa2}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/71, 0x47}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x5c, 0x0, 0x400, 0x7fffffff, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x5b}, 0x1, 0x0, 0x0, 0x1}, 0x800) 5.112693077s ago: executing program 3 (id=5612): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) r3 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r3, 0x200004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000180)) r6 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r6, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {}], 0x2, 0x1c000) ppoll(&(0x7f0000000140)=[{r6, 0x5}], 0x1, 0x0, 0x0, 0x0) shutdown(r6, 0x0) write$apparmor_exec(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d1) 5.079518693s ago: executing program 2 (id=5613): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x13dc, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x401c, &(0x7f0000000240)='}\x00') syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x60) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020}, 0x2020) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[], 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a050000000000000000000200ffff0900010073797a300000000008000340100000010c0006400000000000000002"], 0x98}}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000340)={0x88000003, 0x0, "679c51ecbc83d0e22e845e3ede5adc714d88a57474315dc49c00", 0x1, 0x0, 0x0, 0x200, 0x2}) 3.693149681s ago: executing program 0 (id=5614): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r4 = socket(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff39, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) close(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000002240)=""/155, 0x9b}], 0x1, 0x8, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) 3.535877209s ago: executing program 2 (id=5615): rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) 3.446962235s ago: executing program 2 (id=5616): socket$inet6(0xa, 0x1, 0xffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x80000401) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r5, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d240500"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="8110b0e3ff000000"], &(0x7f00000002c0)='syzkaller\x00', 0x6}, 0x94) sendmsg$nl_generic(r6, 0x0, 0x4000080) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0x8000}) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000080)={0x5, 0x802}) 3.445230455s ago: executing program 3 (id=5617): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x8000, 0x2}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) read$eventfd(r2, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r8, 0x0) flock(r7, 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r9, 0x1) flock(r9, 0x2) recvmmsg(r0, &(0x7f000000e280), 0x58a, 0x42, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x20, 0x0, 0x0) 2.471764949s ago: executing program 1 (id=5618): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$loop(0x0, 0x75f, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021e00200001e0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000b4020380b0020080080003"], 0x364}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000d40)={0x20, 0x15, 0x35, "d9b813f758d6af9a4276c5a49b499feec1fdddb5b4245aa62a071e7b461b1b1fc8706e92f4c1eb045d17711df3ccc4951d6d8325b4"}, 0x0, &(0x7f0000000e80)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x48, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x200000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000d00)={r7, 0x0, 0x0, 0x4}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=r6, @ANYBLOB="b400000000a82de3d53dbbdb56336aa11700fc00", @ANYRES32, @ANYRES32=r7, @ANYBLOB="00000000000000000200"/25], 0x50) 2.144019874s ago: executing program 0 (id=5619): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @mcast2, 0xb}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) socket$inet_tcp(0x2, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0) writev(r3, 0x0, 0x0) userfaultfd(0x80001) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) renameat(r3, &(0x7f0000000240)='./file0\x00', r5, &(0x7f00000025c0)='./file0\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 2.051017607s ago: executing program 4 (id=5620): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)={@empty, @broadcast, @void, {@canfd={0xd, {{0x4, 0x1, 0x0, 0x1}, 0x23, 0x0, 0x0, 0x0, "7c673bbe484bb6b545b6cfa28154319666438aa6066a8b123b03077ad0ce54fcb81a368bc59ac884f868b502ea7415716c2bc91b486c6debc2f08cd5d7485080"}}}}, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x5, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.572393774s ago: executing program 3 (id=5621): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000000240)=""/145, &(0x7f00000000c0)=0x91) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x1ce) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000480)={0x0}) io_uring_setup(0x597f, &(0x7f0000000180)={0x0, 0xd492, 0x1, 0x0, 0x2f}) syz_mount_image$fuse(0x0, &(0x7f0000002d40)='./file0\x00', 0x1080000, 0x0, 0x0, 0x0, 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20800, 0x0) utimensat(r7, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) 1.529946526s ago: executing program 1 (id=5622): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x1, 0x1, 0x1, "70a49290731765372a7359e0f76f4fa5435d55a7fc3cf49b77291f7106a83ce0", 0x30383653}) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='a', 0x1, 0x9004) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) setitimer(0x2, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 0s ago: executing program 2 (id=5623): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000001300)=""/4118, 0x1016, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$tipc(r5, 0x0, 0x8820) close(r4) kernel console output (not intermixed with test programs): 840][T26651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4763'. [ 1785.611697][T21830] IPVS: starting estimator thread 0... [ 1785.747598][T26653] IPVS: using max 38 ests per chain, 91200 per kthread [ 1786.287495][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1786.294789][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1786.571371][T26666] xt_bpf: check failed: parse error [ 1787.327491][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1787.334724][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1788.321229][T26700] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1788.367538][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1788.375032][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1789.407491][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1789.414925][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1789.676368][T26711] tap0: tun_chr_ioctl cmd 1074025677 [ 1789.728099][T26711] tap0: linktype set to 825 [ 1789.889293][T26717] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1789.915708][T26717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4776'. [ 1790.447471][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1790.454931][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1790.581888][T26728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4779'. [ 1791.014281][T26734] program syz.4.4781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1791.037323][T21830] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1791.197235][T21830] usb 4-1: Using ep0 maxpacket: 32 [ 1791.203996][T21830] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1791.219061][T21830] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1791.237497][T21830] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1791.261804][T21830] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1791.273430][T21830] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1791.287315][T21830] usb 4-1: Product: syz [ 1791.291502][T21830] usb 4-1: Manufacturer: syz [ 1791.296314][T21830] usb 4-1: SerialNumber: syz [ 1791.315371][T21830] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input87 [ 1791.488386][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1791.495835][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1791.526012][T26730] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1791.548925][T26730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4780'. [ 1791.619659][T25609] usb 4-1: USB disconnect, device number 116 [ 1791.656525][T26738] netlink: 'syz.1.4782': attribute type 20 has an invalid length. [ 1791.687421][T26738] IPv6: NLM_F_CREATE should be specified when creating new route [ 1791.719308][T25609] appletouch 4-1:1.0: input: appletouch disconnected [ 1791.738199][T26738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1791.745569][T26738] IPv6: NLM_F_CREATE should be set when creating new route [ 1791.811632][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.866330][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.522689][ T30] audit: type=1326 audit(1769381296.886:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26749 comm="syz.4.4785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1792.545067][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1792.545271][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1792.576845][ T30] audit: type=1326 audit(1769381296.886:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26749 comm="syz.4.4785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1792.607542][ T30] audit: type=1326 audit(1769381296.926:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26749 comm="syz.4.4785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1792.631460][ T30] audit: type=1326 audit(1769381296.926:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26749 comm="syz.4.4785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1792.665638][T26758] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4784'. [ 1792.677410][ T30] audit: type=1326 audit(1769381296.926:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26749 comm="syz.4.4785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1792.705617][ T30] audit: type=1326 audit(1769381296.926:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26749 comm="syz.4.4785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1792.754258][ T30] audit: type=1326 audit(1769381296.926:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26749 comm="syz.4.4785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1792.784522][ T30] audit: type=1326 audit(1769381296.926:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26749 comm="syz.4.4785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1792.810351][ T30] audit: type=1326 audit(1769381296.926:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26749 comm="syz.4.4785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1792.847336][ T30] audit: type=1326 audit(1769381296.926:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26749 comm="syz.4.4785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1793.567445][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1793.574769][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1794.072063][T26779] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1794.100524][T26779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4790'. [ 1794.607472][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1794.614757][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1795.091240][T26793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4792'. [ 1795.647469][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1795.655030][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1795.667494][T12977] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 1795.841343][T12977] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1795.858153][T12977] usb 1-1: config 0 has no interface number 0 [ 1795.864297][T12977] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1795.889400][T12977] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1795.905506][T12977] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1795.917539][T12977] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1795.928757][T12977] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1795.940192][T12977] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1795.972170][T12977] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1796.007519][T12977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.038584][T12977] usb 1-1: config 0 descriptor?? [ 1796.057488][T26801] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1796.065288][T26803] netlink: 'syz.3.4795': attribute type 1 has an invalid length. [ 1796.097579][T26801] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1796.166147][T12977] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1796.170867][T26803] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1796.288162][T26805] bond8: (slave geneve4): making interface the new active one [ 1796.336072][T26805] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 1796.385872][ T1146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.415467][ T1146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.426813][ T1146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.486315][ T1146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.518319][T12977] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1796.687583][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1796.694888][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1796.707365][T12977] usb 4-1: Using ep0 maxpacket: 16 [ 1796.719787][T12977] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 1796.732756][T12977] usb 4-1: config 0 has no interface number 0 [ 1796.744185][T12977] usb 4-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=86.f0 [ 1796.757507][T12977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.766062][T12977] usb 4-1: Product: syz [ 1796.770375][T12977] usb 4-1: Manufacturer: syz [ 1796.777362][T12977] usb 4-1: SerialNumber: syz [ 1796.784035][T12977] usb 4-1: config 0 descriptor?? [ 1797.152890][T12977] usb 4-1: USB disconnect, device number 117 [ 1797.727420][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1797.734667][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1798.073870][T26829] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1798.155946][T26830] netlink: 'syz.3.4799': attribute type 6 has an invalid length. [ 1798.360880][T26824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.448407][T26824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.767475][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1798.774758][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1799.452862][T12968] usb 1-1: USB disconnect, device number 75 [ 1799.461275][T12968] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 1799.807473][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1800.617382][T12977] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1800.777530][T12977] usb 4-1: device descriptor read/64, error -71 [ 1800.847464][ C0] net_ratelimit: 1 callbacks suppressed [ 1800.847482][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1800.860362][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1800.868432][T26869] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1800.875152][T26869] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1800.888553][T26869] vhci_hcd vhci_hcd.0: Device attached [ 1800.979177][T21830] hid (null): unknown global tag 0xd [ 1800.987377][T21830] hid (null): unknown global tag 0x7d [ 1800.993327][T21830] hid (null): report_id 40248 is invalid [ 1801.018139][T21830] hid (null): unknown global tag 0xfe [ 1801.023719][T21830] hid (null): unknown global tag 0xd [ 1801.029217][T12977] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1801.038990][T21830] hid (null): unknown global tag 0xc4 [ 1801.048057][T21830] hid (null): unknown global tag 0xe [ 1801.053974][T21830] hid (null): unknown global tag 0xe [ 1801.069490][T21830] hid (null): unknown global tag 0xb2 [ 1801.107304][T21830] hid (null): report_id 334925566 is invalid [ 1801.113551][T21830] hid (null): unknown global tag 0xc [ 1801.127905][T21830] hid (null): report_id 0 is invalid [ 1801.133302][T21830] hid (null): unknown global tag 0xe [ 1801.138912][T21830] hid (null): invalid report_size 1650067927 [ 1801.145304][T21830] hid (null): report_id 44173 is invalid [ 1801.151180][T21830] hid (null): invalid report_size 7251 [ 1801.156866][T21830] hid (null): unknown global tag 0xe [ 1801.162282][T12968] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1801.170128][T21830] hid (null): unknown global tag 0xd [ 1801.176724][T21830] hid (null): unknown global tag 0xc [ 1801.182248][T21830] hid (null): report_id 22022 is invalid [ 1801.188276][T21830] hid (null): unknown global tag 0x72 [ 1801.193715][T21830] hid (null): unknown global tag 0xe [ 1801.199211][T21830] hid (null): unknown global tag 0xc [ 1801.205686][T21830] hid (null): report_id 0 is invalid [ 1801.207257][T12977] usb 4-1: device descriptor read/64, error -71 [ 1801.211440][T21830] hid (null): unknown global tag 0xf1 [ 1801.225767][T21830] hid (null): unknown global tag 0xe [ 1801.233383][T21830] hid (null): global environment stack underflow [ 1801.244214][T21830] hid (null): bogus close delimiter [ 1801.250828][T21830] hid (null): report_id 25647 is invalid [ 1801.258783][T21830] hid (null): global environment stack underflow [ 1801.267458][T21830] hid (null): unknown global tag 0xe [ 1801.277598][T21830] hid (null): unknown global tag 0xd [ 1801.294946][T21830] hid-generic 0058:00FF:0006.002D: unknown main item tag 0x1 [ 1801.308532][T21830] hid-generic 0058:00FF:0006.002D: unexpected long global item [ 1801.316719][T21830] hid-generic 0058:00FF:0006.002D: probe with driver hid-generic failed with error -22 [ 1801.332781][T12977] usb usb4-port1: attempt power cycle [ 1801.603748][T26879] netlink: 'syz.1.4808': attribute type 4 has an invalid length. [ 1801.697390][T12977] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1801.737680][T12977] usb 4-1: device descriptor read/8, error -71 [ 1801.900021][T26870] vhci_hcd: connection reset by peer [ 1801.924264][ T3502] vhci_hcd vhci_hcd.4: stop threads [ 1801.932820][ T3502] vhci_hcd vhci_hcd.4: release socket [ 1801.942021][ T3502] vhci_hcd vhci_hcd.4: disconnect device [ 1801.987519][T12977] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1802.090365][T12977] usb 4-1: device descriptor read/8, error -71 [ 1802.197457][T12977] usb usb4-port1: unable to enumerate USB device [ 1802.517278][T21830] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1802.799477][T26895] tipc: Resetting bearer [ 1802.807995][T26895] tipc: Resetting bearer [ 1802.866028][T26895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1803.014332][T26902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4813'. [ 1803.059317][T26902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4813'. [ 1803.134405][T26905] netlink: 'syz.4.4813': attribute type 13 has an invalid length. [ 1803.231425][T26905] tipc: Resetting bearer [ 1803.291666][T26905] gretap0: refused to change device tx_queue_len [ 1803.334011][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1803.334036][ T30] audit: type=1326 audit(1769381307.696:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26903 comm="syz.3.4814" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x0 [ 1803.369519][T26905] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1804.996263][T26925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4815'. [ 1806.288576][T12968] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1806.447954][T26939] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1807.767334][T12968] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1807.957469][T12968] usb 3-1: Using ep0 maxpacket: 32 [ 1808.007721][T12968] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1808.048287][T12968] usb 3-1: config 0 has no interface number 0 [ 1808.058513][T12968] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1808.096532][T12968] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1808.109041][T12968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.121635][T12968] usb 3-1: Product: syz [ 1808.128600][T12968] usb 3-1: Manufacturer: syz [ 1808.135197][T12968] usb 3-1: SerialNumber: syz [ 1808.151165][T12968] usb 3-1: config 0 descriptor?? [ 1808.168677][T12968] f81534 3-1:0.12: required endpoints missing [ 1808.208026][T26965] program syz.3.4824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1809.394676][T26978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4828'. [ 1810.088243][T12977] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1810.141930][T26989] program syz.0.4831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1810.191673][T12968] usb 3-1: USB disconnect, device number 123 [ 1810.245611][T12977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1810.270696][T12977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1810.315248][T12977] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1810.328208][T12977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.338841][T12977] usb 4-1: Product: syz [ 1810.344697][T12977] usb 4-1: Manufacturer: syz [ 1810.362772][T12977] usb 4-1: SerialNumber: syz [ 1810.379360][T12977] usb 4-1: config 0 descriptor?? [ 1810.396297][T12977] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1810.415683][T12977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1810.429119][T12977] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1810.441691][T12977] usb 4-1: media controller created [ 1810.454390][T12977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1810.502724][T12977] DVB: Unable to find symbol tda10046_attach() [ 1810.511429][T12977] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1810.520621][T12977] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1810.616498][T26981] tipc: Enabled bearer , priority 10 [ 1811.287833][T12977] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1811.321937][T12977] usb 4-1: USB disconnect, device number 122 [ 1811.700464][T27005] netlink: 'syz.0.4835': attribute type 4 has an invalid length. [ 1812.088424][T27014] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1812.194248][T27018] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1812.270783][T27018] netlink: 'syz.0.4836': attribute type 6 has an invalid length. [ 1812.398186][T27024] program syz.1.4839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1812.487330][T12968] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1812.647299][T12968] usb 4-1: device descriptor read/64, error -71 [ 1812.887271][T12968] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1813.027746][T12968] usb 4-1: device descriptor read/64, error -71 [ 1813.137827][T12968] usb usb4-port1: attempt power cycle [ 1813.325066][T27033] tipc: Resetting bearer [ 1813.357963][T27033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1813.488226][T12968] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1813.517995][T12968] usb 4-1: device descriptor read/8, error -71 [ 1813.757832][T12968] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1813.778265][T12968] usb 4-1: device descriptor read/8, error -71 [ 1813.887573][T12968] usb usb4-port1: unable to enumerate USB device [ 1814.057293][T12977] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1814.223595][T12977] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1814.232583][T12977] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1814.244858][T12977] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1814.270255][T12977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1814.285670][T12977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1814.309655][T12977] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1814.322085][T12977] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1814.332354][T12977] usb 1-1: Product: syz [ 1814.336746][T12977] usb 1-1: Manufacturer: syz [ 1814.359128][T12977] cdc_wdm 1-1:1.0: skipping garbage [ 1814.366670][T12977] cdc_wdm 1-1:1.0: skipping garbage [ 1814.398516][T12977] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1814.404587][T12977] cdc_wdm 1-1:1.0: Unknown control protocol [ 1814.646769][T27039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.686151][T27039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.832660][T12968] usb 1-1: USB disconnect, device number 77 [ 1815.444921][T27057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4847'. [ 1815.547283][T12968] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1815.698878][T12968] usb 4-1: config 0 has an invalid interface number: 87 but max is 0 [ 1815.707716][T12968] usb 4-1: config 0 has no interface number 0 [ 1815.720208][T12968] usb 4-1: too many endpoints for config 0 interface 87 altsetting 28: 204, using maximum allowed: 30 [ 1815.748672][T12968] usb 4-1: config 0 interface 87 altsetting 28 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1815.767280][T12968] usb 4-1: config 0 interface 87 altsetting 28 has 1 endpoint descriptor, different from the interface descriptor's value: 204 [ 1815.782636][T12968] usb 4-1: config 0 interface 87 has no altsetting 0 [ 1815.805477][T12968] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 1815.815231][T12968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.832805][T12968] usb 4-1: Product: syz [ 1815.837069][T12968] usb 4-1: Manufacturer: syz [ 1815.841812][T12968] usb 4-1: SerialNumber: syz [ 1815.851024][T12968] usb 4-1: config 0 descriptor?? [ 1815.891343][T12968] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1816.488910][T27065] Cannot find add_set index 3 as target [ 1816.777817][ T7070] usb 4-1: Failed to submit usb control message: -71 [ 1816.785273][ T7070] usb 4-1: unable to send the bmi data to the device: -71 [ 1816.794293][ T7070] usb 4-1: unable to get target info from device [ 1816.804471][ T7070] usb 4-1: could not get target info (-71) [ 1816.815289][T12968] usb 4-1: USB disconnect, device number 127 [ 1816.822608][ T7070] usb 4-1: could not probe fw (-71) [ 1817.044647][T27070] netlink: 'syz.1.4851': attribute type 1 has an invalid length. [ 1817.131541][T27070] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1817.242035][T27078] bond9: (slave geneve3): making interface the new active one [ 1817.274105][T27083] program syz.3.4852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1817.305634][T27070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.323884][T27078] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 1817.351552][T27070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1817.364526][ T7069] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.375353][ T7069] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.386327][ T7069] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.404120][ T7069] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.499995][ T30] audit: type=1400 audit(1769381321.866:1169): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=27069 comm="syz.1.4851" [ 1817.823116][T27087] QAT: failed to copy from user cfg_data. [ 1818.437389][T12968] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 1818.626772][T27103] trusted_key: encrypted_key: insufficient parameters specified [ 1818.646969][T12968] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1818.660423][T12968] usb 3-1: config 0 has no interface number 0 [ 1818.678281][T12968] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1818.711958][T12968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.720265][T12968] usb 3-1: Product: syz [ 1818.726130][T12968] usb 3-1: Manufacturer: syz [ 1818.731308][T12968] usb 3-1: SerialNumber: syz [ 1818.744979][T12968] usb 3-1: config 0 descriptor?? [ 1819.893867][ T30] audit: type=1326 audit(1769381324.256:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.3.4858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 1819.929849][ T30] audit: type=1326 audit(1769381324.286:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.3.4858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 1819.983943][T27118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.998067][ T30] audit: type=1326 audit(1769381324.356:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.3.4858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 1820.023448][ T30] audit: type=1326 audit(1769381324.356:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.3.4858" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 1820.025681][T27118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.295489][T27118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.351394][T27118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.614844][T27122] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1820.621403][T27122] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1820.669900][T27122] vhci_hcd vhci_hcd.0: Device attached [ 1820.725403][T27122] netdevsim netdevsim0: Direct firmware load for nel/address_bits failed with error -2 [ 1820.737365][T27122] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/address_bits [ 1820.927369][T12977] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 1821.162030][T12968] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1821.171308][T12968] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1821.191827][T12968] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1821.202233][T12968] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1821.221457][T12968] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1821.242789][T12968] usb 3-1: USB disconnect, device number 124 [ 1821.266405][T12968] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1821.281483][T12968] keyspan 3-1:0.133: device disconnected [ 1821.635398][T27123] vhci_hcd: connection reset by peer [ 1821.643028][ T7069] vhci_hcd vhci_hcd.0: stop threads [ 1821.649232][ T7069] vhci_hcd vhci_hcd.0: release socket [ 1821.654825][ T7069] vhci_hcd vhci_hcd.0: disconnect device [ 1821.943381][T27140] usb usb8: usbfs: process 27140 (syz.4.4864) did not claim interface 2 before use [ 1822.131361][T27140] openvswitch: netlink: IP tunnel dst address not specified [ 1822.926387][T27160] program syz.1.4867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1822.936073][T25609] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1823.097254][T25609] usb 3-1: Using ep0 maxpacket: 16 [ 1823.110209][T25609] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1823.125002][T25609] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1823.144366][T25609] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1823.169300][T25609] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1823.177329][T27165] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4869'. [ 1823.242553][T25609] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1823.255460][T25609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.267449][T25609] usb 3-1: Product: syz [ 1823.277115][T25609] usb 3-1: Manufacturer: syz [ 1823.287442][T25609] usb 3-1: SerialNumber: syz [ 1823.683439][T25609] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 125 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1824.422548][T27173] trusted_key: encrypted_key: insufficient parameters specified [ 1825.709037][T25609] usb 3-1: USB disconnect, device number 125 [ 1825.716766][T25609] usblp1: removed [ 1826.037510][T12977] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1826.193260][T27203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.232278][T27203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.777044][T27220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4879'. [ 1829.048174][T27231] program syz.0.4882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1830.367639][T12977] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1830.527265][T12977] usb 4-1: Using ep0 maxpacket: 32 [ 1830.543077][T12977] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1830.556892][T12977] usb 4-1: config 0 has no interface number 0 [ 1830.570369][T12977] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1830.632984][T12977] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1830.646722][T12977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.677406][T12977] usb 4-1: Product: syz [ 1830.683542][T12977] usb 4-1: Manufacturer: syz [ 1830.699046][T12977] usb 4-1: SerialNumber: syz [ 1830.712061][T12977] usb 4-1: config 0 descriptor?? [ 1830.735048][T12977] f81534 4-1:0.12: required endpoints missing [ 1831.035265][T27265] binder: 27253:27265 ioctl 40046205 0 returned -22 [ 1832.914937][T12968] usb 4-1: USB disconnect, device number 2 [ 1833.210831][T27295] netdevsim netdevsim2: Direct firmware load for nel/address_bits failed with error -2 [ 1833.233468][T27295] netdevsim netdevsim2: Falling back to sysfs fallback for: nel/address_bits [ 1835.246129][T27313] program syz.2.4900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1835.938700][T27306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4898'. [ 1837.576004][T27341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.628858][T27341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.736450][T27341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4905'. [ 1838.063839][ T30] audit: type=1326 audit(1769381342.386:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27307 comm="syz.4.4899" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7fc00000 [ 1840.594908][T27371] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[27371] [ 1841.372513][ T30] audit: type=1800 audit(1769381345.736:1175): pid=27378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4908" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1842.448819][T27394] tipc: New replicast peer: 255.255.255.255 [ 1842.458613][T27394] tipc: Enabled bearer , priority 10 [ 1843.995088][T27412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4919'. [ 1844.212722][T27418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1844.926201][T27427] binder: 27422:27427 ioctl 4018620d 0 returned -22 [ 1844.938081][T27427] binder: 27422:27427 ioctl c0306201 80000080 returned -14 [ 1845.826419][T27435] input: syz0 as /devices/virtual/input/input89 [ 1846.058058][T27439] EXT4-fs: Conflicting test_dummy_encryption options [ 1847.281657][T27427] binder: 27422:27427 ioctl d000941e 0 returned -22 [ 1848.843635][T27458] netlink: 'syz.1.4925': attribute type 10 has an invalid length. [ 1848.877272][T27458] netlink: 'syz.1.4925': attribute type 10 has an invalid length. [ 1848.885280][T27458] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4925'. [ 1849.007005][T27459] netlink: 'syz.3.4927': attribute type 1 has an invalid length. [ 1850.738799][T27487] input: syz0 as /devices/virtual/input/input91 [ 1852.957421][T27503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.998035][T27503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.048468][T27503] tipc: Bearer : already 2 bearers with priority 10 [ 1853.077850][T27503] tipc: Bearer : trying with adjusted priority [ 1853.094230][T27503] tipc: Enabling of bearer rejected, failed to enable media [ 1853.178109][T27504] misc userio: No port type given on /dev/userio [ 1853.200358][T27510] QAT: failed to copy from user cfg_data. [ 1853.266138][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.274648][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.543096][T27528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4939'. [ 1854.704426][ T30] audit: type=1804 audit(1769381359.066:1176): pid=27526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4943" name="/newroot/993/file0" dev="fuse" ino=1 res=1 errno=0 [ 1854.896736][T27532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1855.178333][T27538] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 1856.187840][T27529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4942'. [ 1856.563814][T27555] binder: 27541:27555 ioctl 40046205 0 returned -22 [ 1858.369341][T27584] input: syz0 as /devices/virtual/input/input92 [ 1858.428727][T27583] misc userio: No port type given on /dev/userio [ 1858.867523][T27586] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1858.874143][T27586] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1858.909319][T27589] netdevsim netdevsim1: Direct firmware load for nel/address_bits failed with error -2 [ 1858.926278][T27589] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/address_bits [ 1858.936699][T27586] vhci_hcd vhci_hcd.0: Device attached [ 1859.217243][T21830] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1859.290399][T27587] vhci_hcd: connection reset by peer [ 1859.296148][ T7070] vhci_hcd vhci_hcd.1: stop threads [ 1859.301923][ T7070] vhci_hcd vhci_hcd.1: release socket [ 1859.307637][ T7070] vhci_hcd vhci_hcd.1: disconnect device [ 1859.890304][ T30] audit: type=1326 audit(1769381364.256:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27591 comm="syz.3.4955" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x0 [ 1860.212868][T27608] program syz.4.4957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1860.890562][T27620] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20003 [ 1862.179390][T27638] can: request_module (can-proto-3) failed. [ 1862.517643][T27643] QAT: Device 15 not found [ 1863.489731][T27657] binder: 27644:27657 ioctl 40046205 0 returned -22 [ 1863.940645][ T30] audit: type=1800 audit(1769381368.266:1178): pid=27663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4973" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1864.204177][T27671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4965'. [ 1864.347784][ T30] audit: type=1326 audit(1769381368.706:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27668 comm="syz.0.4966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 1864.370011][T21830] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1864.393305][ T30] audit: type=1326 audit(1769381368.706:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27668 comm="syz.0.4966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 1864.438539][ T30] audit: type=1326 audit(1769381368.706:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27668 comm="syz.0.4966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 1864.474484][ T30] audit: type=1326 audit(1769381368.706:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27668 comm="syz.0.4966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 1864.510216][ T30] audit: type=1326 audit(1769381368.746:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27668 comm="syz.0.4966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 1864.574826][ T30] audit: type=1326 audit(1769381368.746:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27668 comm="syz.0.4966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 1864.597382][ T30] audit: type=1326 audit(1769381368.786:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27668 comm="syz.0.4966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 1864.627555][ T30] audit: type=1326 audit(1769381368.786:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27668 comm="syz.0.4966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 1865.186548][T27679] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[27679] [ 1865.622225][T27695] trusted_key: encrypted_key: key user:syz not found [ 1866.082199][T27699] program syz.3.4970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1867.428527][T27713] misc userio: No port type given on /dev/userio [ 1869.104942][T27740] misc userio: No port type given on /dev/userio [ 1869.735512][T27749] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1869.743461][T27749] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1869.876541][T27749] create_pit_timer: 3 callbacks suppressed [ 1869.876569][T27749] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1871.865220][T27773] tipc: Enabling of bearer rejected, already enabled [ 1871.906411][T27773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4985'. [ 1871.948034][T27773] tipc: Disabling bearer [ 1872.457883][T27778] program syz.2.4986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1873.608758][T27797] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 1874.035576][T27800] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4992'. [ 1874.158597][T27801] Cannot find add_set index 0 as target [ 1875.218923][T27810] misc userio: No port type given on /dev/userio [ 1876.287938][T27823] binder: 27813:27823 ioctl 40046205 0 returned -22 [ 1877.768871][T27836] input: syz0 as /devices/virtual/input/input93 [ 1877.830115][T27840] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1880.601334][T27876] program syz.0.5007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1881.677091][T27886] misc userio: No port type given on /dev/userio [ 1882.875711][T27908] misc userio: No port type given on /dev/userio [ 1883.828863][T27911] UHID_CREATE from different security context by process 4149 (syz.0.5013), this is not allowed. [ 1883.912077][T27914] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1883.979859][T27911] tipc: Resetting bearer [ 1884.052325][T27916] input: syz0 as /devices/virtual/input/input94 [ 1884.437335][T21830] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1884.588443][T21830] usb 1-1: Using ep0 maxpacket: 32 [ 1884.595127][T21830] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 1884.606124][T21830] usb 1-1: config 0 has no interface number 0 [ 1884.621045][T21830] usb 1-1: New USB device found, idVendor=2dc8, idProduct=880c, bcdDevice=ef.fc [ 1884.632505][T21830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.645952][T21830] usb 1-1: Product: syz [ 1884.652997][T21830] usb 1-1: Manufacturer: syz [ 1884.660853][T21830] usb 1-1: SerialNumber: syz [ 1884.677598][T21830] usb 1-1: config 0 descriptor?? [ 1884.995518][T21830] usb 1-1: USB disconnect, device number 78 [ 1885.478594][T27927] futex_wake_op: syz.1.5018 tries to shift op by 32; fix this program [ 1885.878307][T27944] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 1885.884963][T27944] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1885.931001][T27944] vhci_hcd vhci_hcd.0: Device attached [ 1885.954997][T27949] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 1885.961622][T27949] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1886.017473][T27944] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 1886.024109][T27944] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1886.031959][T27949] vhci_hcd vhci_hcd.0: Device attached [ 1886.064194][T27958] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1886.087606][T27944] vhci_hcd vhci_hcd.0: Device attached [ 1886.134996][T27949] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 1886.141621][T27949] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1886.177321][T12977] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 1886.190569][T27949] vhci_hcd vhci_hcd.0: Device attached [ 1886.205274][T27944] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(24) [ 1886.211973][T27944] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1886.286801][T27949] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1886.296784][T27944] vhci_hcd vhci_hcd.0: Device attached [ 1886.360713][T27944] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(26) [ 1886.367354][T27944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1886.408885][T27949] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1886.427591][T27944] vhci_hcd vhci_hcd.0: Device attached [ 1886.470729][T27966] vhci_hcd: connection closed [ 1886.471034][ T77] vhci_hcd vhci_hcd.0: stop threads [ 1886.482397][ T77] vhci_hcd vhci_hcd.0: release socket [ 1886.488057][ T77] vhci_hcd vhci_hcd.0: disconnect device [ 1886.499937][T27960] vhci_hcd: connection closed [ 1886.499941][T27963] vhci_hcd: connection closed [ 1886.505009][ T77] vhci_hcd vhci_hcd.0: stop threads [ 1886.516831][T27955] vhci_hcd: connection closed [ 1886.517241][T27951] vhci_hcd: connection closed [ 1886.518107][ T77] vhci_hcd vhci_hcd.0: release socket [ 1886.522258][T27947] vhci_hcd: connection reset by peer [ 1886.540734][ T77] vhci_hcd vhci_hcd.0: disconnect device [ 1886.553644][ T77] vhci_hcd vhci_hcd.0: stop threads [ 1886.568408][ T77] vhci_hcd vhci_hcd.0: release socket [ 1886.577280][ T77] vhci_hcd vhci_hcd.0: disconnect device [ 1886.594315][ T77] vhci_hcd vhci_hcd.0: stop threads [ 1886.599663][ T77] vhci_hcd vhci_hcd.0: release socket [ 1886.607558][ T77] vhci_hcd vhci_hcd.0: disconnect device [ 1886.616599][ T77] vhci_hcd vhci_hcd.0: stop threads [ 1886.623312][ T77] vhci_hcd vhci_hcd.0: release socket [ 1886.629283][ T77] vhci_hcd vhci_hcd.0: disconnect device [ 1886.639980][ T77] vhci_hcd vhci_hcd.0: stop threads [ 1886.651046][ T77] vhci_hcd vhci_hcd.0: release socket [ 1886.662244][ T77] vhci_hcd vhci_hcd.0: disconnect device [ 1889.715999][T27998] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1889.722577][T27998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1889.747099][T27998] vhci_hcd vhci_hcd.0: Device attached [ 1889.792930][T27996] trusted_key: encrypted_key: key user:syz not found [ 1889.835155][T27998] netdevsim netdevsim1: Direct firmware load for nel/address_bits failed with error -2 [ 1889.881984][T28001] misc userio: No port type given on /dev/userio [ 1889.955947][T27998] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/address_bits [ 1890.008955][T12968] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 1890.278798][T27999] vhci_hcd: connection reset by peer [ 1890.307571][ T7070] vhci_hcd vhci_hcd.1: stop threads [ 1890.323097][ T7070] vhci_hcd vhci_hcd.1: release socket [ 1890.328783][ T7070] vhci_hcd vhci_hcd.1: disconnect device [ 1891.132694][T28014] netlink: 'syz.3.5028': attribute type 6 has an invalid length. [ 1891.244025][T28014] QAT: failed to copy from user cfg_data. [ 1891.317509][T12977] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1891.771141][T28016] input: syz0 as /devices/virtual/input/input95 [ 1891.962144][T28032] netlink: 'syz.1.5032': attribute type 2 has an invalid length. [ 1892.010097][T28033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5033'. [ 1892.066794][T28032] !: entered promiscuous mode [ 1892.203019][T28028] netlink: 'syz.1.5032': attribute type 2 has an invalid length. [ 1892.630257][T21830] usb usb34-port1: attempt power cycle [ 1893.012283][T28028] !: left promiscuous mode [ 1893.241179][T21830] usb usb34-port1: unable to enumerate USB device [ 1893.650597][T28050] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1893.657126][T28050] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1893.668703][T28050] vhci_hcd vhci_hcd.0: Device attached [ 1893.681926][T28050] netdevsim netdevsim3: Direct firmware load for nel/address_bits failed with error -2 [ 1893.691905][T28050] netdevsim netdevsim3: Falling back to sysfs fallback for: nel/address_bits [ 1893.917209][T21830] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1895.167414][T12968] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1895.174541][T28069] sctp: [Deprecated]: syz.3.5039 (pid 28069) Use of int in max_burst socket option. [ 1895.174541][T28069] Use struct sctp_assoc_value instead [ 1895.375592][T28074] PKCS7: Unknown OID: [5] (bad) [ 1895.420274][T28074] PKCS7: Only support pkcs7_signedData type [ 1895.537977][T28076] usb usb7: usbfs: process 28076 (syz.4.5040) did not claim interface 0 before use [ 1896.491269][T28083] EXT4-fs: Conflicting test_dummy_encryption options [ 1898.212103][T28108] IPv6: Can't replace route, no match found [ 1901.302674][T28149] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1902.163442][T28160] input: syz0 as /devices/virtual/input/input96 [ 1903.063084][T28174] EXT4-fs: Conflicting test_dummy_encryption options [ 1904.109098][T12968] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1904.302075][T12968] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 1904.312174][T12968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.339070][T12968] usb 3-1: config 0 descriptor?? [ 1904.351527][T12968] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input97 [ 1904.696472][T28191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.717717][T28191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.063155][T28200] tipc: Enabling of bearer rejected, already enabled [ 1906.073670][T28200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5063'. [ 1906.104907][T28200] tipc: Disabling bearer [ 1906.162442][T28201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5064'. [ 1906.438383][T28214] fuse: Bad value for 'fd' [ 1906.538636][T28214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5066'. [ 1906.580773][T28214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5066'. [ 1906.596156][T28214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5066'. [ 1907.075157][T28216] F2FS-fs: Conflicting test_dummy_encryption options [ 1907.397292][T28039] usb 3-1: USB disconnect, device number 126 [ 1907.740153][T28226] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5069'. [ 1907.780009][T28226] tipc: Bearer : already 2 bearers with priority 10 [ 1907.807657][T28226] tipc: Bearer : trying with adjusted priority [ 1907.822281][T28226] tipc: Enabling of bearer rejected, failed to enable media [ 1908.671284][T12968] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1908.745616][T28232] input: syz0 as /devices/virtual/input/input98 [ 1908.874218][T12968] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1908.885217][T12968] usb 4-1: config 0 has no interface number 0 [ 1908.892877][T12968] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1908.996461][T12968] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1909.005804][T12968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.040431][T12968] usb 4-1: Product: syz [ 1909.044587][T12968] usb 4-1: Manufacturer: syz [ 1909.049301][T12968] usb 4-1: SerialNumber: syz [ 1909.192116][T12968] usb 4-1: config 0 descriptor?? [ 1909.218163][T12968] yurex 4-1:0.50: USB YUREX device now attached to Yurex #1 [ 1909.805906][T28244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5071'. [ 1910.739739][T28265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5075'. [ 1912.101130][T28267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5076'. [ 1912.218905][T28039] usb 4-1: USB disconnect, device number 3 [ 1912.228674][T28039] yurex 4-1:0.50: USB YUREX #1 now disconnected [ 1912.578715][T28282] tipc: New replicast peer: 255.255.255.255 [ 1912.595386][T28282] tipc: Enabled bearer , priority 10 [ 1912.617785][T28282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5079'. [ 1912.635423][T28282] tipc: Disabling bearer [ 1914.100187][T28299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5083'. [ 1914.347246][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1914.347259][ T30] audit: type=1326 audit(1769381418.696:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28287 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 1914.381947][ T30] audit: type=1326 audit(1769381418.696:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28287 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=229 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 1914.553262][ T30] audit: type=1326 audit(1769381418.916:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28287 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 1914.614294][T28307] tipc: Enabling of bearer rejected, already enabled [ 1914.638602][T28311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5091'. [ 1914.654606][T28311] tipc: Disabling bearer [ 1914.697610][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.704076][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.722713][ T30] audit: type=1326 audit(1769381418.956:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28287 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 1914.774132][ T30] audit: type=1326 audit(1769381419.136:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28287 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 1914.969264][ T30] audit: type=1326 audit(1769381419.306:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28287 comm="syz.0.5082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 1916.057090][T28333] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5086'. [ 1916.162395][T28330] tipc: Failed to remove unknown binding: 66,1,1/231577305:4030110229/4030110231 [ 1916.215331][T28330] tipc: Failed to remove unknown binding: 66,1,1/231577305:4030110229/4030110231 [ 1916.230468][T28330] tipc: Failed to remove unknown binding: 66,1,1/231577305:4030110229/4030110231 [ 1917.779833][T28353] fuse: Bad value for 'fd' [ 1917.798416][T28352] program syz.3.5102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1917.986803][T28355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5093'. [ 1918.041748][T28355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5093'. [ 1918.082362][T28355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5093'. [ 1921.852840][T28398] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1921.952185][T28404] tipc: Enabling of bearer rejected, already enabled [ 1922.010442][T28404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5099'. [ 1922.052541][T28404] tipc: Disabling bearer [ 1923.634712][T28427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5105'. [ 1923.644055][T28427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5105'. [ 1923.687881][T28427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5105'. [ 1925.627336][T28039] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1926.220282][T28461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5116'. [ 1926.433045][T28464] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1926.439778][T28464] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1926.473757][T28464] vhci_hcd vhci_hcd.0: Device attached [ 1926.739623][T16956] usb 34-1: SetAddress Request (18) to port 0 [ 1926.749810][T16956] usb 34-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1926.882478][T28465] vhci_hcd: connection reset by peer [ 1926.928736][ T77] vhci_hcd vhci_hcd.0: stop threads [ 1926.934201][ T77] vhci_hcd vhci_hcd.0: release socket [ 1926.945424][ T77] vhci_hcd vhci_hcd.0: disconnect device [ 1926.998439][T28472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.059266][T28472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.119821][T28472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.226527][T28472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.508097][ T30] audit: type=1326 audit(1769381431.866:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28469 comm="syz.1.5117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1927.535221][ T30] audit: type=1326 audit(1769381431.876:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28469 comm="syz.1.5117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1927.567813][ T30] audit: type=1326 audit(1769381431.876:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28469 comm="syz.1.5117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1927.600175][ T30] audit: type=1326 audit(1769381431.896:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28469 comm="syz.1.5117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1927.627325][ T30] audit: type=1326 audit(1769381431.896:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28469 comm="syz.1.5117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1927.688736][ T30] audit: type=1326 audit(1769381431.896:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28469 comm="syz.1.5117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1927.728402][ T30] audit: type=1326 audit(1769381431.896:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28469 comm="syz.1.5117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1927.769510][ T30] audit: type=1326 audit(1769381431.926:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28469 comm="syz.1.5117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1927.802782][ T30] audit: type=1326 audit(1769381431.926:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28469 comm="syz.1.5117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1927.849881][ T30] audit: type=1326 audit(1769381431.956:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28469 comm="syz.1.5117" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1930.314063][T28510] fuse: Bad value for 'fd' [ 1930.540436][T28510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5123'. [ 1930.691453][T28516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5123'. [ 1930.732999][T28516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5123'. [ 1931.809330][T16956] usb 34-1: device descriptor read/8, error -110 [ 1932.154529][T28533] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1932.161062][T28533] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1932.197784][T28533] vhci_hcd vhci_hcd.0: Device attached [ 1932.205660][T16956] usb usb34-port1: attempt power cycle [ 1932.289448][T28537] netdevsim netdevsim1: Direct firmware load for nel/address_bits failed with error -2 [ 1932.313675][T28537] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/address_bits [ 1932.358440][T12974] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1932.447389][T12968] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 1932.527478][T12974] usb 1-1: Using ep0 maxpacket: 8 [ 1932.534326][T12974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.545903][T12974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1932.558443][T12974] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1932.586844][T12974] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1932.605268][T12974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.623834][T12974] usb 1-1: config 0 descriptor?? [ 1932.788124][T16956] usb usb34-port1: unable to enumerate USB device [ 1933.172848][T12974] nzxt-kraken2 0003:1E71:170E.002E: item fetching failed at offset 2/5 [ 1933.183200][T12974] nzxt-kraken2 0003:1E71:170E.002E: hid parse failed with -22 [ 1933.194237][T12974] nzxt-kraken2 0003:1E71:170E.002E: probe with driver nzxt-kraken2 failed with error -22 [ 1933.434678][T12974] usb 1-1: USB disconnect, device number 79 [ 1933.507379][T28560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5131'. [ 1935.096082][T28583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5145'. [ 1935.170672][T28583] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5145'. [ 1935.650051][T28587] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1935.665662][T28587] bridge0: entered promiscuous mode [ 1935.676834][T28587] bridge0: entered allmulticast mode [ 1937.822574][T28621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5146'. [ 1938.528161][T28643] usb usb8: usbfs: process 28643 (syz.4.5152) did not claim interface 0 before use [ 1939.730335][T28657] program syz.4.5154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1941.234044][T28678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5161'. [ 1941.437669][T28681] batman_adv: batadv0: Adding interface: dummy0 [ 1941.475864][T28681] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1941.598783][T28681] batman_adv: batadv0: Interface activated: dummy0 [ 1942.168085][T28692] trusted_key: encrypted_key: key user:syz not found [ 1942.602412][T28702] trusted_key: encrypted_key: insufficient parameters specified [ 1944.342805][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1944.342823][ T30] audit: type=1326 audit(1769381448.696:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28716 comm="syz.3.5169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 1944.401381][ T30] audit: type=1326 audit(1769381448.736:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28716 comm="syz.3.5169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=229 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 1944.455907][ T30] audit: type=1326 audit(1769381448.736:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28716 comm="syz.3.5169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 1944.489697][ T30] audit: type=1326 audit(1769381448.756:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28716 comm="syz.3.5169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 1944.530278][ T30] audit: type=1326 audit(1769381448.756:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28716 comm="syz.3.5169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 1944.565006][ T30] audit: type=1326 audit(1769381448.756:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28716 comm="syz.3.5169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 1944.598740][ T30] audit: type=1326 audit(1769381448.756:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28716 comm="syz.3.5169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 1944.624495][ T30] audit: type=1326 audit(1769381448.756:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28716 comm="syz.3.5169" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x7ffc0000 [ 1944.826919][T28732] syz.4.5172 (28732): drop_caches: 2 [ 1945.811466][T28746] fuse: Bad value for 'rootmode' [ 1945.844437][T28746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1945.869735][T28746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1949.327911][T28787] veth1_to_bond: entered allmulticast mode [ 1951.445549][T28829] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1951.452107][T28829] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1951.478901][T28829] vhci_hcd vhci_hcd.0: Device attached [ 1951.533333][T28829] netdevsim netdevsim2: Direct firmware load for nel/address_bits failed with error -2 [ 1951.548097][T28829] netdevsim netdevsim2: Falling back to sysfs fallback for: nel/address_bits [ 1951.727313][T17035] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 1951.986572][T28830] vhci_hcd: connection reset by peer [ 1952.000104][ T7070] vhci_hcd vhci_hcd.2: stop threads [ 1952.005374][ T7070] vhci_hcd vhci_hcd.2: release socket [ 1952.011658][ T7070] vhci_hcd vhci_hcd.2: disconnect device [ 1952.280604][T28840] program syz.3.5194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1955.373363][T28888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1955.414214][T28888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1955.476894][T28888] fuse: Bad value for 'fd' [ 1955.586188][T28890] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1956.808102][ T30] audit: type=1326 audit(1769381461.176:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28900 comm="syz.4.5205" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x0 [ 1956.842553][T17035] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1957.360457][T28912] tipc: Failed to remove unknown binding: 66,1,1/3436366636:4058339706/4058339708 [ 1957.460381][T28926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1957.470209][T28912] tipc: Failed to remove unknown binding: 66,1,1/3436366636:4058339706/4058339708 [ 1957.524387][T28912] tipc: Failed to remove unknown binding: 66,1,1/3436366636:4058339706/4058339708 [ 1957.628223][T28927] program syz.2.5210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1961.392007][T28973] bond0: Device is already in use. [ 1961.416602][T28973] tipc: New replicast peer: 0.0.0.0 [ 1961.446911][T28973] tipc: Enabled bearer , priority 10 [ 1961.511944][T28973] fuse: Bad value for 'fd' [ 1961.573227][T28973] tipc: New replicast peer: 172.30.1.5 [ 1961.747761][T17035] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1961.872262][T28985] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1961.878820][T28985] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1961.960137][T28985] vhci_hcd vhci_hcd.0: Device attached [ 1961.973684][T17035] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1961.988602][T28990] program syz.4.5224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1961.999299][T17035] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1962.010047][T17035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.029071][T17035] usb 3-1: config 0 descriptor?? [ 1962.770729][T17035] waltop 0003:172F:0037.002F: collection stack underflow [ 1962.778014][T17035] waltop 0003:172F:0037.002F: item 0 1 0 12 parsing failed [ 1962.785775][T17035] waltop 0003:172F:0037.002F: probe with driver waltop failed with error -22 [ 1962.904543][T28987] vhci_hcd: connection closed [ 1962.904816][ T7070] vhci_hcd vhci_hcd.1: stop threads [ 1962.914804][ T7070] vhci_hcd vhci_hcd.1: release socket [ 1962.935209][ T7070] vhci_hcd vhci_hcd.1: disconnect device [ 1963.235119][T28977] bond0: (slave veth0_to_hsr): Error: Device is in use and cannot be enslaved [ 1963.608749][T29004] trusted_key: encrypted_key: key user:syz not found [ 1963.642711][T29007] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1963.655948][T29007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1963.710962][T29011] netdevsim netdevsim0: Direct firmware load for nel/address_bits failed with error -2 [ 1963.721257][T29011] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/address_bits [ 1963.736829][T29007] vhci_hcd vhci_hcd.0: Device attached [ 1963.987213][T27133] usb 33-1: new low-speed USB device number 6 using vhci_hcd [ 1964.157951][T29008] vhci_hcd: connection reset by peer [ 1964.164704][ T7069] vhci_hcd vhci_hcd.0: stop threads [ 1964.171664][ T7069] vhci_hcd vhci_hcd.0: release socket [ 1964.181266][ T7069] vhci_hcd vhci_hcd.0: disconnect device [ 1965.090272][T17035] usb 3-1: USB disconnect, device number 127 [ 1965.357929][T29028] trusted_key: encrypted_key: key user:syz not found [ 1967.325520][T29058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1967.636323][T29070] program syz.2.5239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1967.691043][T29072] lo: left promiscuous mode [ 1967.724703][T29072] lo: left allmulticast mode [ 1967.778914][T29072] tunl0: left promiscuous mode [ 1967.789752][T29072] tunl0: left allmulticast mode [ 1967.820094][T29072] gre0: left promiscuous mode [ 1967.830120][T29072] gre0: left allmulticast mode [ 1967.863192][T29072] gretap0: left promiscuous mode [ 1967.870206][T29072] gretap0: left allmulticast mode [ 1967.876284][T29072] erspan0: left promiscuous mode [ 1967.929924][T29072] erspan0: left allmulticast mode [ 1968.010309][T29072] ip_vti0: left promiscuous mode [ 1968.026885][T29072] ip_vti0: left allmulticast mode [ 1968.048139][T29072] ip6_vti0: left promiscuous mode [ 1968.076892][T29072] ip6_vti0: left allmulticast mode [ 1968.090444][T29072] sit0: left promiscuous mode [ 1968.123123][T29072] sit0: left allmulticast mode [ 1968.169242][T29072] ip6tnl0: left promiscuous mode [ 1968.189214][T29072] ip6tnl0: left allmulticast mode [ 1968.246215][T29072] ip6gre0: left promiscuous mode [ 1968.261188][T29072] ip6gre0: left allmulticast mode [ 1968.278339][T29072] ip6gretap0: left promiscuous mode [ 1968.287364][T29072] ip6gretap0: left allmulticast mode [ 1968.332310][T29072] vcan0: left promiscuous mode [ 1968.337214][T29072] vcan0: left allmulticast mode [ 1968.358619][T29072] bond0: left promiscuous mode [ 1968.363651][T29072] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 1968.454917][T29072] syz_tun: left promiscuous mode [ 1968.494312][T29072] veth0_to_hsr: left promiscuous mode [ 1968.537400][T29072] bond0: left allmulticast mode [ 1968.544372][T29072] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 1968.553667][T29072] syz_tun: left allmulticast mode [ 1968.578670][T29072] veth0_to_hsr: left allmulticast mode [ 1968.612378][T29072] dummy0: left promiscuous mode [ 1968.623665][T29072] dummy0: left allmulticast mode [ 1968.650829][T29072] nlmon0: left promiscuous mode [ 1968.672898][T29072] nlmon0: left allmulticast mode [ 1968.692417][T29072] caif0: left promiscuous mode [ 1968.699244][T29072] caif0: left allmulticast mode [ 1968.706549][T29072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1969.080064][T27133] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1969.393486][T12974] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1969.636752][T12974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1969.648874][T12974] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1969.677361][T12974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.712651][T12974] usb 4-1: config 0 descriptor?? [ 1969.722618][T12974] pwc: Askey VC010 type 2 USB webcam detected. [ 1970.687029][T28794] veth1_to_bond: left allmulticast mode [ 1970.786521][T29109] vhci_hcd vhci_hcd.0: port 0 already used [ 1971.539110][T12974] pwc: send_video_command error -71 [ 1971.545543][T12974] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1971.555491][T12974] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1971.586032][T12974] usb 4-1: USB disconnect, device number 5 [ 1971.739368][T29117] trusted_key: encrypted_key: key user:syz not found [ 1971.866249][T29121] PKCS7: Unknown OID: [5] (bad) [ 1971.887508][T29121] PKCS7: Only support pkcs7_signedData type [ 1972.321951][T29132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5260'. [ 1972.811304][T29135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5251'. [ 1973.769905][T29151] program syz.1.5254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1975.181555][T29171] tipc: Failed to remove unknown binding: 66,0,0/2825501065:1035243144/1035243145 [ 1975.210837][T29171] tipc: Failed to remove unknown binding: 66,0,0/2825501065:1035243144/1035243145 [ 1975.476686][T29175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5258'. [ 1975.485845][T29175] tipc: Invalid UDP bearer configuration [ 1975.485904][T29175] tipc: Enabling of bearer rejected, failed to enable media [ 1976.130233][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.136557][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.211876][T29181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5259'. [ 1977.122973][T29193] syz_tun: entered promiscuous mode [ 1977.147362][T29193] macsec1: entered allmulticast mode [ 1977.170502][T29193] syz_tun: entered allmulticast mode [ 1977.201179][T29193] syz_tun: left allmulticast mode [ 1977.206597][T29193] syz_tun: left promiscuous mode [ 1977.368470][T29200] trusted_key: encrypted_key: key user:syz not found [ 1977.513748][T29205] vhci_hcd vhci_hcd.0: port 0 already used [ 1977.651359][T29209] program syz.0.5265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1979.230405][T27133] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1981.829726][T29252] netlink: 'syz.2.5275': attribute type 4 has an invalid length. [ 1981.848173][T29252] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5275'. [ 1982.079031][T29252] delete_channel: no stack [ 1982.999621][T29261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5276'. [ 1983.475723][T29269] fuse: Unknown parameter 'gu' [ 1984.623423][T29283] program syz.0.5281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1986.277759][T12974] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1986.443179][T12974] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1986.456064][T12974] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1986.468111][T12974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1986.492310][T12974] usb 4-1: config 0 descriptor?? [ 1986.950861][T12974] waltop 0003:172F:0037.0030: collection stack underflow [ 1986.959435][T12974] waltop 0003:172F:0037.0030: item 0 1 0 12 parsing failed [ 1986.977490][T12974] waltop 0003:172F:0037.0030: probe with driver waltop failed with error -22 [ 1987.050804][T29313] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1987.057370][T29313] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1987.119296][T29313] vhci_hcd vhci_hcd.0: Device attached [ 1987.264911][T29310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1987.474054][T29314] vhci_hcd: connection closed [ 1987.474886][T29303] veth0_to_hsr: entered promiscuous mode [ 1987.491001][T29303] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 1987.500574][ T7069] vhci_hcd vhci_hcd.1: stop threads [ 1987.547352][ T7069] vhci_hcd vhci_hcd.1: release socket [ 1987.552957][ T7069] vhci_hcd vhci_hcd.1: disconnect device [ 1988.058572][T29328] trusted_key: encrypted_key: insufficient parameters specified [ 1988.270768][T29326] tipc: Failed to remove unknown binding: 66,1,1/231577305:2493458373/2493458375 [ 1988.299074][T29326] tipc: Failed to remove unknown binding: 66,1,1/231577305:2493458373/2493458375 [ 1988.326492][T29326] tipc: Failed to remove unknown binding: 66,1,1/231577305:2493458373/2493458375 [ 1991.622163][T29370] netdevsim netdevsim0: Direct firmware load for nel/address_bits failed with error -2 [ 1991.679850][T29370] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/address_bits [ 1992.392207][T12974] usb 4-1: USB disconnect, device number 6 [ 1993.021550][T29390] fuse: Bad value for 'rootmode' [ 1993.317251][T27133] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1993.402259][T29402] program syz.4.5304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1993.426510][T29403] trusted_key: encrypted_key: insufficient parameters specified [ 1993.517357][T27133] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1993.528827][T27133] usb 3-1: config 0 has no interfaces? [ 1993.547713][T27133] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1993.595476][T27133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1993.611660][T27133] usb 3-1: config 0 descriptor?? [ 1994.312381][T29406] : renamed from bond0 (while UP) [ 1995.096853][T29419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5306'. [ 1995.114053][T29419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5306'. [ 1995.167739][T29419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5306'. [ 1996.244097][T28039] usb 3-1: USB disconnect, device number 3 [ 1996.273425][T29434] program syz.0.5309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1996.606387][T29439] program syz.2.5310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1996.944933][ T30] audit: type=1326 audit(1769381501.306:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.4.5311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1996.977391][ T30] audit: type=1326 audit(1769381501.336:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.4.5311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1997.019818][ T30] audit: type=1326 audit(1769381501.336:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.4.5311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1997.047359][ T30] audit: type=1326 audit(1769381501.336:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.4.5311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1997.079227][ T30] audit: type=1326 audit(1769381501.336:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.4.5311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1997.117275][ T30] audit: type=1326 audit(1769381501.376:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.4.5311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1997.152950][ T30] audit: type=1326 audit(1769381501.376:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.4.5311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1997.183435][ T30] audit: type=1326 audit(1769381501.376:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.4.5311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1997.220715][ T30] audit: type=1326 audit(1769381501.386:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.4.5311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1997.251087][T29446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5311'. [ 1997.277246][ T30] audit: type=1326 audit(1769381501.386:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29440 comm="syz.4.5311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1997.573958][T29448] vhci_hcd vhci_hcd.0: port 0 already used [ 1997.621096][T29448] netdevsim netdevsim1: Direct firmware load for nel/address_bits failed with error -2 [ 1997.665470][T29448] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/address_bits [ 1999.489265][T29477] program syz.2.5317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1999.747170][T29481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2002.000399][T29508] program syz.2.5323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2003.182468][T29517] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5325'. [ 2003.678038][T29525] vhci_hcd vhci_hcd.0: port 0 already used [ 2003.726629][T29525] netdevsim netdevsim1: Direct firmware load for nel/address_bits failed with error -2 [ 2003.737013][T29525] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/address_bits [ 2003.857393][T29531] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.5327' sets config #0 [ 2003.949261][T29529] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.5327' sets config #1 [ 2004.247814][T29542] trusted_key: encrypted_key: key user:syz not found [ 2005.522059][T29559] xt_bpf: check failed: parse error [ 2005.718105][T29566] trusted_key: encrypted_key: insufficient parameters specified [ 2005.809605][T29568] program syz.4.5334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2007.060685][T29580] : renamed from bond0 (while UP) [ 2009.044922][T29609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2009.096121][T29609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2009.175193][T29614] trusted_key: encrypted_key: insufficient parameters specified [ 2009.404012][T29621] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2009.410572][T29621] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2009.487230][T29621] vhci_hcd vhci_hcd.0: Device attached [ 2009.865624][T29622] vhci_hcd: connection closed [ 2009.866157][ T3481] vhci_hcd vhci_hcd.3: stop threads [ 2009.877276][ T3481] vhci_hcd vhci_hcd.3: release socket [ 2009.887397][ T3481] vhci_hcd vhci_hcd.3: disconnect device [ 2011.915741][T29634] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2012.246122][T29648] program syz.2.5349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2012.687360][T17035] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2012.722831][T29656] trusted_key: encrypted_key: key user:syz not found [ 2012.848235][T17035] usb 1-1: Using ep0 maxpacket: 32 [ 2012.866298][T17035] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 2012.874507][T17035] usb 1-1: config 0 has no interface number 1 [ 2012.883460][T17035] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 2012.895073][T17035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.907863][T17035] usb 1-1: Product: syz [ 2012.915132][T17035] usb 1-1: Manufacturer: syz [ 2012.921795][T17035] usb 1-1: SerialNumber: syz [ 2012.934038][T17035] usb 1-1: config 0 descriptor?? [ 2012.947228][T17035] snd-usb-audio 1-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 2012.962373][T17035] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 2012.971284][T17035] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 2012.984234][T17035] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2013.270440][T29653] netlink: 63 bytes leftover after parsing attributes in process `syz.0.5351'. [ 2013.487642][T29665] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2013.499652][T29665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5362'. [ 2013.577881][T29667] program syz.4.5363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2013.694307][T29671] : renamed from bond0 (while UP) [ 2013.921580][T17035] usb 1-1: USB disconnect, device number 80 [ 2014.759573][T29683] trusted_key: encrypted_key: insufficient parameters specified [ 2016.062432][T29702] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2016.069461][T29702] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2016.191186][T29702] vhci_hcd vhci_hcd.0: Device attached [ 2016.487233][T17035] usb 38-1: SetAddress Request (18) to port 0 [ 2016.493954][T17035] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 2016.607845][T29703] vhci_hcd: connection reset by peer [ 2016.613830][ T7070] vhci_hcd vhci_hcd.2: stop threads [ 2016.620414][ T7070] vhci_hcd vhci_hcd.2: release socket [ 2016.626831][ T7070] vhci_hcd vhci_hcd.2: disconnect device [ 2017.102001][T12974] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 2017.385130][T12974] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2017.398810][T12974] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 2017.429052][T12974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.453646][T12974] usb 1-1: config 0 descriptor?? [ 2017.934929][T12974] waltop 0003:172F:0037.0031: collection stack underflow [ 2017.955662][T12974] waltop 0003:172F:0037.0031: item 0 1 0 12 parsing failed [ 2017.970390][T12974] waltop 0003:172F:0037.0031: probe with driver waltop failed with error -22 [ 2018.195500][T29724] tipc: Enabling of bearer rejected, failed to enable media [ 2019.432817][T29742] input: syz0 as /devices/virtual/input/input126 [ 2019.905666][T28848] usb 1-1: USB disconnect, device number 81 [ 2020.054301][T29754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2020.208123][T29758] program syz.2.5370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2020.487204][T28848] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2020.543025][T29769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5372'. [ 2020.562713][T29767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2020.604475][T29767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2020.657227][T28848] usb 4-1: Using ep0 maxpacket: 32 [ 2020.662520][T29769] hub 9-0:1.0: USB hub found [ 2020.676005][T28848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2020.688576][T29769] hub 9-0:1.0: 1 port detected [ 2020.691835][T28848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2020.716549][T28848] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2020.738029][T28848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2020.755677][T28848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2020.791208][T28848] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2020.801218][T28848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.812864][T28848] usb 4-1: Product: syz [ 2020.822513][T28848] usb 4-1: Manufacturer: syz [ 2020.830672][T28848] usb 4-1: SerialNumber: syz [ 2020.843963][T28848] usb 4-1: config 0 descriptor?? [ 2020.857798][T29757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2020.869328][T28848] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input127 [ 2020.886034][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2021.180432][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2021.274241][T23339] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2021.570929][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2021.631609][T17035] usb 38-1: device descriptor read/8, error -110 [ 2021.702418][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2021.738558][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2021.778341][ T5180] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2022.028005][T17035] usb usb38-port1: attempt power cycle [ 2022.496149][T29784] fuse: Bad value for 'fd' [ 2022.598707][T17035] usb usb38-port1: unable to enumerate USB device [ 2022.679367][T29786] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2022.685921][T29786] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2022.754670][T29786] vhci_hcd vhci_hcd.0: Device attached [ 2023.029308][T28039] usb 38-1: SetAddress Request (22) to port 0 [ 2023.035458][T28039] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 2023.155257][T17035] usb 4-1: USB disconnect, device number 7 [ 2023.225103][T29787] vhci_hcd: connection reset by peer [ 2023.230804][ T77] vhci_hcd vhci_hcd.2: stop threads [ 2023.236039][ T77] vhci_hcd vhci_hcd.2: release socket [ 2023.242211][ T77] vhci_hcd vhci_hcd.2: disconnect device [ 2023.430898][T29795] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5378'. [ 2023.817307][T29799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5379'. [ 2023.892733][T29801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5379'. [ 2023.921907][T29801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5379'. [ 2023.943723][T29801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5379'. [ 2024.185432][T29818] tipc: Enabling of bearer rejected, failed to enable media [ 2024.207394][T29820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5382'. [ 2025.532168][T29827] xt_TCPMSS: Only works on TCP SYN packets [ 2027.469246][T29840] tipc: Resetting bearer [ 2027.807361][T29865] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2027.813917][T29865] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2027.824690][T29865] vhci_hcd vhci_hcd.0: Device attached [ 2027.970470][ T3481] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.979793][ T3481] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.991752][ T3481] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.002492][ T3481] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.169368][T29866] vhci_hcd: connection reset by peer [ 2028.177392][ T3502] vhci_hcd vhci_hcd.2: stop threads [ 2028.182639][ T3502] vhci_hcd vhci_hcd.2: release socket [ 2028.190372][T28039] usb 38-1: device descriptor read/8, error -110 [ 2028.190471][ T3502] vhci_hcd vhci_hcd.2: disconnect device [ 2028.578024][T28039] usb usb38-port1: attempt power cycle [ 2028.668959][T29880] xt_bpf: check failed: parse error [ 2028.834884][T29880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2028.864528][T29885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5392'. [ 2028.946571][T29880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2029.220758][T28039] usb usb38-port1: unable to enumerate USB device [ 2030.495454][T29898] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.5394' sets config #0 [ 2030.623733][T29903] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.5394' sets config #1 [ 2032.024387][T29917] netlink: 'syz.1.5398': attribute type 4 has an invalid length. [ 2032.347947][T29929] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2032.388201][T29929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5411'. [ 2033.045527][T29946] program syz.1.5404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2034.150013][T29954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5417'. [ 2036.368411][T29992] batman_adv: batadv0: Removing interface: netdevsim0 [ 2037.251744][T30003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5425'. [ 2037.279923][T30003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5425'. [ 2037.299925][T30003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5425'. [ 2037.435944][T30007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.464608][T30007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2037.572798][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.579397][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.559802][T30012] input: syz0 as /devices/virtual/input/input131 [ 2038.705780][T30015] fuse: Unknown parameter 'ìÔ‰ðÉF¡fd' [ 2039.051795][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2039.051807][ T30] audit: type=1804 audit(1769381543.416:1253): pid=30022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5420" name="/newroot/1064/file1" dev="fuse" ino=1 res=1 errno=0 [ 2039.377553][T30032] tun0: tun_chr_ioctl cmd 1074025675 [ 2039.383637][T30032] tun0: persist enabled [ 2039.446483][T30028] tun0: tun_chr_ioctl cmd 1074025675 [ 2039.467458][T30028] tun0: persist disabled [ 2039.561495][T30028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5421'. [ 2039.710495][T30028] netlink: 'syz.2.5421': attribute type 1 has an invalid length. [ 2039.718433][T30028] netlink: 'syz.2.5421': attribute type 2 has an invalid length. [ 2039.765224][T30039] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5423'. [ 2040.628743][T30049] vhci_hcd vhci_hcd.0: port 0 already used [ 2041.298829][T30066] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2041.305384][T30066] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2041.370906][T30066] vhci_hcd vhci_hcd.0: Device attached [ 2041.665167][T28039] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 2041.759929][T30068] vhci_hcd: connection reset by peer [ 2041.787359][ T77] vhci_hcd vhci_hcd.4: stop threads [ 2041.792848][ T77] vhci_hcd vhci_hcd.4: release socket [ 2041.798491][ T77] vhci_hcd vhci_hcd.4: disconnect device [ 2042.507531][T30081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2042.537622][T30081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2043.108592][T30090] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2043.170426][T30092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5434'. [ 2043.243316][T30093] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 2043.974715][T30108] netlink: 'syz.1.5435': attribute type 3 has an invalid length. [ 2044.081115][T30107] netlink: 'syz.0.5437': attribute type 2 has an invalid length. [ 2044.175781][T30107] : entered promiscuous mode [ 2044.232567][T30113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5438'. [ 2044.293134][T30117] GUP no longer grows the stack in syz.0.5437 (30117): 80005000-80008000 (80004000) [ 2044.315822][T30117] CPU: 1 UID: 0 PID: 30117 Comm: syz.0.5437 Tainted: G L syzkaller #0 PREEMPT(full) [ 2044.315853][T30117] Tainted: [L]=SOFTLOCKUP [ 2044.315860][T30117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2044.315872][T30117] Call Trace: [ 2044.315881][T30117] [ 2044.315889][T30117] dump_stack_lvl+0xe8/0x150 [ 2044.315921][T30117] fixup_user_fault+0x637/0x6f0 [ 2044.315953][T30117] fault_in_user_writeable+0x71/0xd0 [ 2044.315973][T30117] futex_lock_pi+0x800/0xb00 [ 2044.316005][T30117] ? __pfx_futex_lock_pi+0x10/0x10 [ 2044.316053][T30117] ? __pfx_futex_wake_mark+0x10/0x10 [ 2044.316090][T30117] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 2044.316122][T30117] do_futex+0x292/0x420 [ 2044.316145][T30117] ? __pfx_do_futex+0x10/0x10 [ 2044.316164][T30117] ? __vm_munmap+0x2e6/0x3d0 [ 2044.316190][T30117] __se_sys_futex_time32+0x3ab/0x440 [ 2044.316217][T30117] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 2044.316237][T30117] ? rcu_is_watching+0x15/0xb0 [ 2044.316262][T30117] ? __ia32_sys_futex_time32+0x21/0xf0 [ 2044.316283][T30117] __do_fast_syscall_32+0x1d2/0x540 [ 2044.316301][T30117] ? lockdep_hardirqs_on+0x7a/0x110 [ 2044.316321][T30117] ? do_fast_syscall_32+0x33/0x70 [ 2044.316339][T30117] ? asm_int80_emulation+0x1a/0x20 [ 2044.316352][T30117] ? do_int80_emulation+0x20e/0x400 [ 2044.316373][T30117] do_fast_syscall_32+0x33/0x70 [ 2044.316391][T30117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2044.316406][T30117] RIP: 0023:0xf73cd539 [ 2044.316420][T30117] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2044.316431][T30117] RSP: 002b:00000000f4b6e50c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 2044.316446][T30117] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d [ 2044.316455][T30117] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 2044.316463][T30117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2044.316471][T30117] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2044.316481][T30117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2044.316501][T30117] [ 2046.767477][T28039] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 2046.975529][T30151] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2046.982069][T30151] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2047.027408][T30151] vhci_hcd vhci_hcd.0: Device attached [ 2047.400474][T30154] vhci_hcd: connection closed [ 2047.400724][ T7064] vhci_hcd vhci_hcd.4: stop threads [ 2047.411161][ T7064] vhci_hcd vhci_hcd.4: release socket [ 2047.416656][ T7064] vhci_hcd vhci_hcd.4: disconnect device [ 2047.757001][T30175] xt_policy: output policy not valid in PREROUTING and INPUT [ 2047.904409][T29749] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2048.157162][T28848] usb usb42-port1: attempt power cycle [ 2048.179914][T29749] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2048.190612][T29749] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2048.230329][T29749] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2048.240042][T29749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2048.259951][T29749] usb 4-1: SerialNumber: syz [ 2048.817935][T28848] usb usb42-port1: unable to enumerate USB device [ 2050.237992][T30204] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5453'. [ 2050.293920][T30204] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5453'. [ 2050.419506][T29749] usb 4-1: 0:2 : does not exist [ 2050.445543][T29749] usb 4-1: USB disconnect, device number 8 [ 2050.478685][T23277] udevd[23277]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2051.958379][T30231] netlink: 'syz.4.5457': attribute type 3 has an invalid length. [ 2052.098374][T28039] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2052.273255][T28039] usb 3-1: config 0 has no interfaces? [ 2052.278888][T28039] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2052.288136][T28039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.323371][T28039] usb 3-1: config 0 descriptor?? [ 2053.085046][T30239] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 2053.091622][T30239] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2053.169786][T30239] vhci_hcd vhci_hcd.0: Device attached [ 2053.177830][T30242] netdevsim netdevsim0: Direct firmware load for nel/address_bits failed with error -2 [ 2053.231330][T30242] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/address_bits [ 2053.407295][T28039] usb 33-1: new low-speed USB device number 7 using vhci_hcd [ 2053.715419][T30240] vhci_hcd: connection reset by peer [ 2053.723267][ T7064] vhci_hcd vhci_hcd.0: stop threads [ 2053.737579][ T7064] vhci_hcd vhci_hcd.0: release socket [ 2053.752145][ T7064] vhci_hcd vhci_hcd.0: disconnect device [ 2053.848905][T30249] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2053.872891][T30249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5460'. [ 2054.624894][T30255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5462'. [ 2054.684429][T30255] usb usb8: usbfs: process 30255 (syz.3.5462) did not claim interface 0 before use [ 2054.990444][T29749] usb 3-1: USB disconnect, device number 4 [ 2055.783645][T30279] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 2055.790672][T30279] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2055.807386][T30276] input: syz0 as /devices/virtual/input/input132 [ 2055.899583][T30279] vhci_hcd vhci_hcd.0: Device attached [ 2056.321725][T30280] vhci_hcd: connection closed [ 2056.323553][ T3502] vhci_hcd vhci_hcd.0: stop threads [ 2056.338288][ T3502] vhci_hcd vhci_hcd.0: release socket [ 2056.370636][ T3502] vhci_hcd vhci_hcd.0: disconnect device [ 2057.577787][T30313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5470'. [ 2057.587004][T30313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5470'. [ 2057.596420][T30313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5470'. [ 2057.926652][T30319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5472'. [ 2058.009532][T30319] hub 9-0:1.0: USB hub found [ 2058.022674][T30319] hub 9-0:1.0: 1 port detected [ 2058.086122][T30321] netlink: 'syz.1.5473': attribute type 10 has an invalid length. [ 2058.117639][T30321] netlink: 'syz.1.5473': attribute type 10 has an invalid length. [ 2058.147930][T30321] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5473'. [ 2058.522303][T28039] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2059.572963][T30340] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2059.906492][T12973] usb usb34-port1: attempt power cycle [ 2060.251968][T30349] vhci_hcd vhci_hcd.0: port 0 already used [ 2060.296051][T30349] netdevsim netdevsim3: Direct firmware load for nel/address_bits failed with error -2 [ 2060.306229][ T30] audit: type=1326 audit(1769381564.646:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30346 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2060.337947][ T30] audit: type=1326 audit(1769381564.646:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30346 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2060.364438][ T30] audit: type=1326 audit(1769381564.646:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30346 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2060.397506][T30350] fuse: Invalid rootmode [ 2060.405692][T30349] netdevsim netdevsim3: Falling back to sysfs fallback for: nel/address_bits [ 2060.467203][ T30] audit: type=1326 audit(1769381564.646:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30346 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2060.497867][ T30] audit: type=1326 audit(1769381564.646:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30346 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2060.524393][ T30] audit: type=1326 audit(1769381564.726:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30346 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2060.525670][T12973] usb usb34-port1: unable to enumerate USB device [ 2060.577752][ T30] audit: type=1326 audit(1769381564.726:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30346 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2060.610524][ T30] audit: type=1326 audit(1769381564.726:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30346 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2060.653665][ T30] audit: type=1326 audit(1769381564.766:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30346 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2060.697858][ T30] audit: type=1326 audit(1769381564.786:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30346 comm="syz.1.5478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2061.241784][T30363] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2061.293072][T30363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5480'. [ 2061.378630][T30364] trusted_key: encrypted_key: key user:syz not found [ 2062.106983][T30372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5482'. [ 2062.328182][T30382] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2062.334741][T30382] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2062.347828][T30380] usb usb8: usbfs: process 30380 (syz.3.5483) did not claim interface 0 before use [ 2062.357380][T30382] vhci_hcd vhci_hcd.0: Device attached [ 2062.677269][T29749] usb 38-1: SetAddress Request (26) to port 0 [ 2062.683569][T29749] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 2062.708341][T30383] vhci_hcd: connection reset by peer [ 2062.714158][ T7069] vhci_hcd vhci_hcd.2: stop threads [ 2062.719708][ T7069] vhci_hcd vhci_hcd.2: release socket [ 2062.725233][ T7069] vhci_hcd vhci_hcd.2: disconnect device [ 2063.513634][T30389] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2063.687487][T30400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5496'. [ 2063.929662][T30403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5486'. [ 2063.938985][T30403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5486'. [ 2063.948050][T30403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5486'. [ 2065.418867][T30421] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 2065.425407][T30421] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2065.461736][T30424] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5491'. [ 2065.480332][T30421] vhci_hcd vhci_hcd.0: Device attached [ 2065.757252][T28848] usb 34-1: SetAddress Request (26) to port 0 [ 2065.763434][T28848] usb 34-1: new SuperSpeed USB device number 26 using vhci_hcd [ 2065.827755][T30422] vhci_hcd: connection reset by peer [ 2065.833434][ T3481] vhci_hcd vhci_hcd.0: stop threads [ 2065.838730][ T3481] vhci_hcd vhci_hcd.0: release socket [ 2065.844333][ T3481] vhci_hcd vhci_hcd.0: disconnect device [ 2066.371383][T30433] tipc: Failed to remove unknown binding: 66,1,1/1687753676:2550654166/2550654168 [ 2066.518012][T30433] tipc: Failed to remove unknown binding: 66,1,1/1687753676:2550654166/2550654168 [ 2066.527489][T30433] tipc: Failed to remove unknown binding: 66,1,1/1687753676:2550654166/2550654168 [ 2066.767769][T30437] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2066.851802][T30437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5494'. [ 2067.168576][T30451] trusted_key: encrypted_key: key user:syz not found [ 2067.261265][T30453] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5498'. [ 2067.341413][T30450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5497'. [ 2067.758624][T29749] usb 38-1: device descriptor read/8, error -110 [ 2067.938580][T30461] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2067.945224][T30461] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2068.028891][T30461] vhci_hcd vhci_hcd.0: Device attached [ 2068.188098][T29749] usb usb38-port1: attempt power cycle [ 2068.311978][T30462] vhci_hcd: connection closed [ 2068.330589][ T3481] vhci_hcd vhci_hcd.3: stop threads [ 2068.420122][ T3481] vhci_hcd vhci_hcd.3: release socket [ 2068.425783][ T3481] vhci_hcd vhci_hcd.3: disconnect device [ 2069.009009][T29749] usb usb38-port1: unable to enumerate USB device [ 2069.245519][T30475] tipc: Resetting bearer [ 2069.407217][T30485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5503'. [ 2070.804665][T30501] misc userio: No port type given on /dev/userio [ 2070.896678][T28848] usb 34-1: device descriptor read/8, error -110 [ 2071.298104][T28848] usb usb34-port1: attempt power cycle [ 2071.668964][T30510] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2071.675522][T30510] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2071.726057][T30510] vhci_hcd vhci_hcd.0: Device attached [ 2071.858086][T28848] usb usb34-port1: unable to enumerate USB device [ 2072.114572][T30511] vhci_hcd: connection closed [ 2072.114999][ T7069] vhci_hcd vhci_hcd.3: stop threads [ 2072.127593][ T7069] vhci_hcd vhci_hcd.3: release socket [ 2072.133234][ T7069] vhci_hcd vhci_hcd.3: disconnect device [ 2072.156117][T30488] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 2072.860217][T30533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5510'. [ 2073.303959][T30539] trusted_key: encrypted_key: key user:syz not found [ 2073.624327][ T7064] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2073.640219][ T7064] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2073.651317][ T7064] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2073.697489][T30531] tun0: tun_chr_ioctl cmd 1074025675 [ 2073.704070][T30531] tun0: persist enabled [ 2073.708980][T30532] tun0: tun_chr_ioctl cmd 1074025675 [ 2073.715704][T30532] tun0: persist disabled [ 2073.759475][T30533] netlink: 'syz.0.5510': attribute type 1 has an invalid length. [ 2073.770831][T30533] netlink: 'syz.0.5510': attribute type 2 has an invalid length. [ 2074.448206][T30552] vhci_hcd vhci_hcd.0: port 0 already used [ 2074.477382][T30552] netdevsim netdevsim1: Direct firmware load for nel/address_bits failed with error -2 [ 2074.501125][T30552] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/address_bits [ 2074.693283][T30557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5515'. [ 2077.047518][T30591] IPVS: set_ctl: invalid protocol: 0 172.20.20.19:20002 [ 2079.395177][T30621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2079.444469][T30621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.629911][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2080.629925][ T30] audit: type=1326 audit(1769381584.986:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2080.658777][ T30] audit: type=1326 audit(1769381584.986:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2080.685467][ T30] audit: type=1326 audit(1769381584.986:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2080.709131][ T30] audit: type=1326 audit(1769381584.986:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2080.737978][ T30] audit: type=1326 audit(1769381584.986:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2080.773241][ T30] audit: type=1326 audit(1769381584.986:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2080.796056][ T30] audit: type=1326 audit(1769381584.986:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2080.821279][ T30] audit: type=1326 audit(1769381584.986:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2080.847303][ T30] audit: type=1326 audit(1769381584.986:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2080.872395][ T30] audit: type=1326 audit(1769381584.986:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30629 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 2080.904778][T30637] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2080.911322][T30637] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2080.970743][T30637] vhci_hcd vhci_hcd.0: Device attached [ 2081.297925][T30638] vhci_hcd: connection closed [ 2081.299600][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 2081.310303][ T1146] vhci_hcd vhci_hcd.3: release socket [ 2081.316826][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 2081.699261][T12973] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2081.868616][T12973] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2081.880037][T12973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.892049][T12973] usb 1-1: config 0 descriptor?? [ 2081.903574][T12973] cp210x 1-1:0.0: cp210x converter detected [ 2082.135157][T12973] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2082.230479][T30650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5545'. [ 2082.307524][T30655] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5545'. [ 2082.935843][T30660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2082.952635][T30660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2082.993117][T30660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2083.016128][T30660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2083.659960][T30679] trusted_key: encrypted_key: key user:syz not found [ 2084.513165][T12973] usb 1-1: USB disconnect, device number 83 [ 2084.528406][T12973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2084.558517][T12973] cp210x 1-1:0.0: device disconnected [ 2085.430990][T30705] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 2085.437649][T30705] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2085.450301][T30705] vhci_hcd vhci_hcd.0: Device attached [ 2085.727290][T29749] usb 34-1: SetAddress Request (30) to port 0 [ 2085.737177][T29749] usb 34-1: new SuperSpeed USB device number 30 using vhci_hcd [ 2085.747813][T30715] netlink: 'syz.2.5548': attribute type 3 has an invalid length. [ 2085.910282][T30706] vhci_hcd: connection reset by peer [ 2085.917785][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 2085.925825][ T1146] vhci_hcd vhci_hcd.0: release socket [ 2085.932557][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 2086.830979][T30692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2087.159933][T30724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5549'. [ 2087.278185][T30737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5550'. [ 2087.299610][T30734] sctp: [Deprecated]: syz.2.5551 (pid 30734) Use of int in maxseg socket option. [ 2087.299610][T30734] Use struct sctp_assoc_value instead [ 2087.314571][T30737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5550'. [ 2087.363457][T30737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5550'. [ 2089.317467][T28039] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2089.457543][T28039] usb 4-1: device descriptor read/64, error -71 [ 2089.717143][T28039] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2089.867457][T28039] usb 4-1: device descriptor read/64, error -71 [ 2089.997364][T28039] usb usb4-port1: attempt power cycle [ 2090.347289][T28039] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2090.385234][T28039] usb 4-1: device descriptor read/8, error -71 [ 2090.534943][T30778] fuse: Bad value for 'group_id' [ 2090.540141][T30778] fuse: Bad value for 'group_id' [ 2090.632791][T28039] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2090.668390][T28039] usb 4-1: device descriptor read/8, error -71 [ 2090.777531][T28039] usb usb4-port1: unable to enumerate USB device [ 2090.847317][T29749] usb 34-1: device descriptor read/8, error -110 [ 2090.912411][T30784] input: syz0 as /devices/virtual/input/input139 [ 2091.292664][T29749] usb usb34-port1: attempt power cycle [ 2091.384363][T30787] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 2091.390918][T30787] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2091.483988][T30787] vhci_hcd vhci_hcd.0: Device attached [ 2091.637238][T29749] usb 34-1: SetAddress Request (32) to port 0 [ 2091.643410][T29749] usb 34-1: new SuperSpeed USB device number 32 using vhci_hcd [ 2091.937205][T30788] vhci_hcd: connection reset by peer [ 2091.950163][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 2091.955424][ T1146] vhci_hcd vhci_hcd.0: release socket [ 2091.977429][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 2092.270320][T30800] syzkaller1: entered promiscuous mode [ 2092.276368][T30800] syzkaller1: entered allmulticast mode [ 2092.291883][T30800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5576'. [ 2092.305911][T30798] misc userio: No port type given on /dev/userio [ 2092.507863][T30804] netlink: 'syz.3.5566': attribute type 4 has an invalid length. [ 2092.515647][T30804] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5566'. [ 2092.760786][T30805] delete_channel: no stack [ 2093.397422][T30825] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2093.403980][T30825] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2093.433466][T30825] vhci_hcd vhci_hcd.0: Device attached [ 2093.440517][T30824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5570'. [ 2093.707146][T28848] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 2096.709781][T29749] usb 34-1: device descriptor read/8, error -110 [ 2097.108002][T29749] usb usb34-port1: unable to enumerate USB device [ 2097.157352][ T9937] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2097.317128][ T9937] usb 3-1: Using ep0 maxpacket: 8 [ 2097.324436][ T9937] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2097.336533][ T9937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.355650][ T9937] usb 3-1: config 0 has no interface number 0 [ 2097.379931][ T9937] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2097.398948][ T9937] usb 3-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 2097.408394][ T9937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.435108][ T9937] usb 3-1: config 0 descriptor?? [ 2097.448039][ T9937] usb 3-1: bad CDC descriptors [ 2097.459327][ T9937] cdc_acm 3-1:0.1: Zero length descriptor references [ 2097.469710][ T9937] cdc_acm 3-1:0.1: probe with driver cdc_acm failed with error -22 [ 2097.956375][T30896] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 2097.963270][T30896] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2098.078147][T30896] vhci_hcd vhci_hcd.0: Device attached [ 2098.283980][T30897] vhci_hcd: connection closed [ 2098.284178][ T3502] vhci_hcd vhci_hcd.1: stop threads [ 2098.294819][ T3502] vhci_hcd vhci_hcd.1: release socket [ 2098.300763][ T3502] vhci_hcd vhci_hcd.1: disconnect device [ 2098.526018][T30905] vhci_hcd vhci_hcd.0: port 0 already used [ 2098.887672][T30912] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 2099.010977][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.019319][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.956344][T28039] usb 3-1: USB disconnect, device number 5 [ 2100.329079][T30932] vhci_hcd vhci_hcd.0: port 0 already used [ 2100.900189][T30930] tipc: Failed to remove unknown binding: 66,1,1/2825501065:1986204151/1986204153 [ 2100.989615][T30930] tipc: Failed to remove unknown binding: 66,1,1/2825501065:1986204151/1986204153 [ 2101.018442][T30930] tipc: Failed to remove unknown binding: 66,1,1/2825501065:1986204151/1986204153 [ 2102.187570][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2102.187595][ T30] audit: type=1326 audit(1769381606.556:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.4.5591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2102.224608][ T30] audit: type=1326 audit(1769381606.586:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.4.5591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2102.306774][ T30] audit: type=1326 audit(1769381606.666:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.4.5591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2102.334361][T30962] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2102.344674][ T30] audit: type=1326 audit(1769381606.666:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.4.5591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2102.367845][ T30] audit: type=1326 audit(1769381606.666:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.4.5591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2102.436048][T30962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5596'. [ 2102.713591][T30966] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2102.720185][T30966] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2102.740458][T30966] vhci_hcd vhci_hcd.0: Device attached [ 2102.829015][ T30] audit: type=1326 audit(1769381607.186:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.4.5591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2102.900803][ T30] audit: type=1326 audit(1769381607.186:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.4.5591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2102.923611][ T30] audit: type=1326 audit(1769381607.186:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.4.5591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2102.955978][ T30] audit: type=1326 audit(1769381607.186:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.4.5591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2102.982170][ T30] audit: type=1326 audit(1769381607.186:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.4.5591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2103.047317][ T9937] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 2103.528165][T30983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2103.652130][T30983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2105.177975][T30995] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2105.184537][T30995] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2105.212412][T30995] vhci_hcd vhci_hcd.0: Device attached [ 2105.470055][T31003] netdevsim netdevsim0: Direct firmware load for nel/address_bits failed with error -2 [ 2105.485674][T31003] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/address_bits [ 2105.498908][T30997] vhci_hcd: connection closed [ 2105.499823][ T1146] vhci_hcd vhci_hcd.2: stop threads [ 2105.521015][ T1146] vhci_hcd vhci_hcd.2: release socket [ 2105.539851][ T1146] vhci_hcd vhci_hcd.2: disconnect device [ 2106.710284][T31025] tipc: Resetting bearer [ 2106.747216][T31025] tipc: Resetting bearer [ 2106.792196][T31025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2106.862369][T31032] program syz.2.5611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2107.229557][T31022] tipc: Failed to remove unknown binding: 66,1,1/3436366636:3771910005/3771910007 [ 2107.287849][T31022] tipc: Failed to remove unknown binding: 66,1,1/3436366636:3771910005/3771910007 [ 2107.310631][T31022] tipc: Failed to remove unknown binding: 66,1,1/3436366636:3771910005/3771910007 [ 2108.391072][T31045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5613'. [ 2110.247182][T29749] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2110.427626][T29749] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2110.441155][T29749] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2110.460931][T29749] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2110.472442][T29749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2110.485809][T29749] usb 3-1: SerialNumber: syz [ 2110.731483][T31066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2110.778390][T31066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2110.864920][T31066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2110.886214][T31066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2110.948276][T31066] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5618'. [ 2111.905367][T31082] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2111.911926][T31082] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2111.928033][T31082] vhci_hcd vhci_hcd.0: Device attached [ 2112.170956][T31083] vhci_hcd: connection closed [ 2112.171249][ T3502] vhci_hcd vhci_hcd.4: stop threads [ 2112.188348][ T3502] vhci_hcd vhci_hcd.4: release socket [ 2112.197322][ T3502] vhci_hcd vhci_hcd.4: disconnect device [ 2112.550655][T31091] netdevsim netdevsim3: Direct firmware load for nel/address_bits failed with error -2 [ 2112.594824][T31091] netdevsim netdevsim3: Falling back to sysfs fallback for: nel/address_bits [ 2112.732558][T29749] usb 3-1: 0:2 : does not exist [ 2112.753710][T29749] usb 3-1: USB disconnect, device number 6 [ 2113.087495][ T31] INFO: task kworker/1:1:16956 blocked for more than 143 seconds. [ 2113.095611][ T31] Tainted: G L syzkaller #0 [ 2113.113132][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2113.122076][ T31] task:kworker/1:1 state:D stack:19544 pid:16956 tgid:16956 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2113.149344][ T31] Workqueue: usb_hub_wq hub_event [ 2113.156854][ T31] Call Trace: [ 2113.164787][ T31] [ 2113.171662][ T31] __schedule+0x14ef/0x4fb0 [ 2113.186829][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 2113.192144][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 2113.199167][ T31] ? __pfx___schedule+0x10/0x10 [ 2113.220112][ T31] ? schedule+0x90/0x360 [ 2113.227611][ T31] schedule+0x164/0x360 [ 2113.231887][ T31] schedule_preempt_disabled+0x13/0x30 [ 2113.241988][ T31] __mutex_lock+0x7fe/0x1300 [ 2113.246634][ T31] ? __mutex_lock+0x5ac/0x1300 [ 2113.251718][ T31] ? hub_event+0x21a2/0x4f30 [ 2113.261841][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2113.268236][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2113.274324][ T31] hub_event+0x21a2/0x4f30 [ 2113.284443][ T31] ? __perf_event_task_sched_in+0xf2/0x1800 [ 2113.290733][ T31] ? __pfx_hub_event+0x10/0x10 [ 2113.295553][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2113.303595][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2113.309766][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2113.316923][ T31] process_scheduled_works+0xaec/0x17a0 [ 2113.323587][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2113.334688][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 2113.342478][ T31] ? assign_work+0x3d3/0x440 [ 2113.347392][ T31] worker_thread+0x89f/0xd90 [ 2113.353584][ T31] ? __kthread_parkme+0x7a/0x1f0 [ 2113.358706][ T31] kthread+0x726/0x8b0 [ 2113.363604][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2113.368861][ T31] ? __pfx_kthread+0x10/0x10 [ 2113.373630][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2113.381343][ T31] ? __pfx_kthread+0x10/0x10 [ 2113.387295][ T31] ret_from_fork+0x51b/0xa40 [ 2113.392058][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2113.397270][ T31] ? __switch_to+0xc82/0x1410 [ 2113.403105][ T31] ? __pfx_kthread+0x10/0x10 [ 2113.409718][ T31] ret_from_fork_asm+0x1a/0x30 [ 2113.417217][ T31] [ 2113.427408][ T31] [ 2113.427408][ T31] Showing all locks held in the system: [ 2113.436127][ T31] 1 lock held by khungtaskd/31: [ 2113.442948][ T31] #0: ffffffff8e35a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2113.453126][ T31] 4 locks held by klogd/5184: [ 2113.458475][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 2113.470647][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2113.481759][ T31] #2: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2113.492864][ T31] #3: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 2113.507129][ T31] 2 locks held by getty/5584: [ 2113.513867][ T31] #0: ffff888034a280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2113.528920][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 2113.541562][ T31] 2 locks held by kworker/u8:15/7069: [ 2113.547367][ T31] #0: ffff88801c3ef148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2113.578833][ T31] #1: ffffc9000b32fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2113.605332][ T31] 5 locks held by kworker/0:3/9937: [ 2113.611979][ T31] #0: ffff8880206b3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2113.626490][ T31] #1: ffffc90003affbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2113.645542][ T31] #2: ffff888029697198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2113.659429][ T31] #3: ffff8881457c2518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2113.672961][ T31] #4: ffff8881427af268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2113.687193][ T31] 5 locks held by kworker/0:8/12968: [ 2113.693397][ T31] #0: ffff8880206b3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2113.712993][ T31] #1: ffffc9000b0cfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2113.735427][ T31] #2: ffff88814574c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2113.749777][ T31] #3: ffff88814574f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2113.762476][ T31] #4: ffff888144f91168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2113.777497][ T31] 5 locks held by kworker/1:10/12973: [ 2113.782904][ T31] #0: ffff8880206b3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2113.799703][ T31] #1: ffffc9000b08fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2113.848355][ T31] #2: ffff8881457a0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2113.865245][ T31] #3: ffff8881457a3518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2113.905949][ T31] #4: ffff8881427af268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2113.920279][ T31] 5 locks held by kworker/1:1/16956: [ 2113.948278][ T31] #0: ffff8880206b3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2113.966984][ T31] #1: ffffc9000ee5fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2113.988295][ T31] #2: ffff888145772198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2114.001518][ T31] #3: ffff888145775518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2114.011952][ T31] #4: ffff888144f91168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2114.029437][ T31] 5 locks held by kworker/0:1/21830: [ 2114.034761][ T31] #0: ffff8880206b3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2114.046427][ T31] #1: ffffc9001ab3fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2114.061433][ T31] #2: ffff8881457af198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2114.072464][ T31] #3: ffff888145b42518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2114.085738][ T31] #4: ffff88802966a868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2114.107517][ T31] 5 locks held by kworker/0:2/27133: [ 2114.115820][ T31] #0: ffff8880206b3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2114.129129][ T31] #1: ffffc9000b7c7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2114.142377][ T31] #2: ffff888145b55198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2114.152511][ T31] #3: ffff888145b60518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2114.164158][ T31] #4: ffff88802966a868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2114.174175][ T31] 5 locks held by kworker/0:4/28848: [ 2114.180495][ T31] #0: ffff8880206b3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2114.193957][ T31] #1: ffffc90003d0fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2114.209499][ T31] #2: ffff88802989c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2114.221132][ T31] #3: ffff88802989f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2114.232512][ T31] #4: ffff888144fea368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2114.242594][ T31] 5 locks held by kworker/0:6/30179: [ 2114.248170][ T31] #0: ffff8880206b3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2114.259838][ T31] #1: ffffc90004407bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2114.272960][ T31] #2: ffff888145bca198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2114.285718][ T31] #3: ffff888145bcd518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2114.296121][ T31] #4: ffff888144fea368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2114.306103][ T31] 1 lock held by syz.3.5621/31090: [ 2114.311474][ T31] 1 lock held by syz.2.5623/31097: [ 2114.316664][ T31] [ 2114.334738][ T31] ============================================= [ 2114.334738][ T31] [ 2114.343957][ T31] NMI backtrace for cpu 0 [ 2114.343979][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2114.344000][ T31] Tainted: [L]=SOFTLOCKUP [ 2114.344006][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2114.344014][ T31] Call Trace: [ 2114.344021][ T31] [ 2114.344028][ T31] dump_stack_lvl+0xe8/0x150 [ 2114.344055][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2114.344165][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2114.344184][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2114.344205][ T31] sys_info+0x135/0x170 [ 2114.344221][ T31] watchdog+0xf90/0xfe0 [ 2114.344246][ T31] ? watchdog+0x209/0xfe0 [ 2114.344270][ T31] kthread+0x726/0x8b0 [ 2114.344293][ T31] ? __pfx_watchdog+0x10/0x10 [ 2114.344319][ T31] ? __pfx_kthread+0x10/0x10 [ 2114.344340][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2114.344359][ T31] ? __pfx_kthread+0x10/0x10 [ 2114.344377][ T31] ret_from_fork+0x51b/0xa40 [ 2114.344394][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2114.344410][ T31] ? __switch_to+0xc82/0x1410 [ 2114.344433][ T31] ? __pfx_kthread+0x10/0x10 [ 2114.344451][ T31] ret_from_fork_asm+0x1a/0x30 [ 2114.344483][ T31] [ 2114.344492][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2114.351650][T31099] tipc: Failed to remove unknown binding: 66,1,1/231577305:460102784/460102786 [ 2114.359996][ C1] NMI backtrace for cpu 1 [ 2114.360013][ C1] CPU: 1 UID: 0 PID: 31099 Comm: syz.2.5623 Tainted: G L syzkaller #0 PREEMPT(full) [ 2114.360036][ C1] Tainted: [L]=SOFTLOCKUP [ 2114.360041][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2114.360052][ C1] RIP: 0010:delay_tsc+0x71/0xc0 [ 2114.360081][ C1] Code: 00 00 e8 e2 7c 1a f6 65 8b 05 cb 50 58 07 85 c0 74 1c f3 90 bf 01 00 00 00 e8 2b 7b 1a f6 e8 b6 79 01 00 39 c5 75 0e 0f 01 f9 <66> 90 eb bd e8 e6 59 bc f5 eb dd 4c 29 fb e8 9c 79 01 00 89 c5 0f [ 2114.360095][ C1] RSP: 0018:ffffc90004c1f550 EFLAGS: 00000046 [ 2114.360110][ C1] RAX: 00000000a3358ff8 RBX: 0000000000000899 RCX: 0000000000000001 [ 2114.360121][ C1] RDX: 000000000000043d RSI: ffffffff8be73860 RDI: ffffffff8be73820 [ 2114.360132][ C1] RBP: 0000000000000001 R08: ffff8880227e8237 R09: 1ffff110044fd046 [ 2114.360144][ C1] R10: dffffc0000000000 R11: ffffffff8b774f10 R12: 1ffffffff34206a6 [ 2114.360156][ C1] R13: 00000000ffffffff R14: 0000043da3358e02 R15: 0000000000000178 [ 2114.360167][ C1] FS: 0000000000000000(0000) GS:ffff888125a26000(0063) knlGS:00000000f4f71b40 [ 2114.360181][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2114.360192][ C1] CR2: 0000000030effff8 CR3: 0000000048224000 CR4: 00000000003526f0 [ 2114.360205][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2114.360215][ C1] DR3: 00000000be70000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2114.360225][ C1] Call Trace: [ 2114.360232][ C1] [ 2114.360240][ C1] wait_for_lsr+0x160/0x2f0 [ 2114.360368][ C1] serial8250_console_write+0x1348/0x1ba0 [ 2114.360424][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 2114.360447][ C1] ? console_flush_all+0x123/0xb20 [ 2114.360472][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 2114.360494][ C1] ? console_flush_all+0x123/0xb20 [ 2114.360514][ C1] console_flush_all+0x718/0xb20 [ 2114.360535][ C1] ? console_flush_all+0x123/0xb20 [ 2114.360558][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 2114.360580][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 2114.360604][ C1] console_unlock+0xd1/0x1c0 [ 2114.360621][ C1] ? vprintk_emit+0x2cf/0x560 [ 2114.360639][ C1] ? __pfx_console_unlock+0x10/0x10 [ 2114.360657][ C1] ? vprintk_emit+0x290/0x560 [ 2114.360675][ C1] ? vprintk_emit+0x455/0x560 [ 2114.360690][ C1] ? vprintk_emit+0x2cf/0x560 [ 2114.360707][ C1] ? vprintk_emit+0x2cf/0x560 [ 2114.360725][ C1] vprintk_emit+0x485/0x560 [ 2114.360744][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 2114.360767][ C1] _printk+0xdd/0x130 [ 2114.360794][ C1] ? __pfx__printk+0x10/0x10 [ 2114.360817][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 2114.360835][ C1] tipc_nametbl_remove_publ+0x804/0x1b30 [ 2114.360889][ C1] ? tipc_nametbl_withdraw+0x7c/0x280 [ 2114.360906][ C1] tipc_nametbl_withdraw+0x8d/0x280 [ 2114.360923][ C1] tipc_sk_withdraw+0x301/0x650 [ 2114.360968][ C1] ? __pfx_tipc_sk_withdraw+0x10/0x10 [ 2114.360986][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 2114.361004][ C1] tipc_sk_bind+0x234/0x300 [ 2114.361018][ C1] ? tipc_bind+0x6c/0x260 [ 2114.361035][ C1] __sys_bind+0x2e3/0x410 [ 2114.361064][ C1] ? __pfx___sys_bind+0x10/0x10 [ 2114.361088][ C1] ? rcu_is_watching+0x15/0xb0 [ 2114.361111][ C1] __ia32_sys_bind+0x7a/0x90 [ 2114.361131][ C1] __do_fast_syscall_32+0x1d2/0x540 [ 2114.361145][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 2114.361165][ C1] ? do_fast_syscall_32+0x33/0x70 [ 2114.361186][ C1] ? asm_int80_emulation+0x1a/0x20 [ 2114.361201][ C1] ? do_int80_emulation+0x20e/0x400 [ 2114.361225][ C1] do_fast_syscall_32+0x33/0x70 [ 2114.361246][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2114.361264][ C1] RIP: 0023:0xf7f12539 [ 2114.361278][ C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2114.361292][ C1] RSP: 002b:00000000f4f7150c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 2114.361306][ C1] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 2114.361317][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2114.361326][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2114.361335][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2114.361345][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2114.361362][ C1] [ 2114.362485][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2114.362503][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2114.362526][ T31] Tainted: [L]=SOFTLOCKUP [ 2114.362532][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2114.362543][ T31] Call Trace: [ 2114.362550][ T31] [ 2114.362558][ T31] vpanic+0x1e0/0x670 [ 2114.362581][ T31] panic+0xc5/0xd0 [ 2114.362599][ T31] ? __pfx_panic+0x10/0x10 [ 2114.362618][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2114.362639][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2114.362661][ T31] watchdog+0xfda/0xfe0 [ 2114.362686][ T31] ? watchdog+0x209/0xfe0 [ 2114.362711][ T31] kthread+0x726/0x8b0 [ 2114.362734][ T31] ? __pfx_watchdog+0x10/0x10 [ 2114.362753][ T31] ? __pfx_kthread+0x10/0x10 [ 2114.362775][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2114.362794][ T31] ? __pfx_kthread+0x10/0x10 [ 2114.362814][ T31] ret_from_fork+0x51b/0xa40 [ 2114.362834][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2114.362849][ T31] ? __switch_to+0xc82/0x1410 [ 2114.362874][ T31] ? __pfx_kthread+0x10/0x10 [ 2114.362894][ T31] ret_from_fork_asm+0x1a/0x30 [ 2114.362927][ T31] [ 2114.364596][ T31] Kernel Offset: disabled