last executing test programs: 8.780547326s ago: executing program 2 (id=1603): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@private, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe4) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r1, &(0x7f0000000540)='./tracing\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000900000030000380140002007369743000"/36], 0x44}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4001e5000000000000095000000000000000000000000f91800000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_fuse_handle_req(r9, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x5, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0x6, 0x7fc, 0x0, 0x0, 0x10, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000040c0)="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", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) 8.432679073s ago: executing program 1 (id=1605): bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xf, 0x4, 0x5, 0x12}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = dup(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r1, 0x80) r4 = dup3(r3, r1, 0x80000) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000540)={0x4, 0x6, 0x0, 0x4, 0x15, "1c702ac6c98ad9decfa06e24b787a55737a502"}) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000000000)) read(r1, &(0x7f00000005c0)=""/228, 0xe4) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000140)={0x0, 0x40, 0x81, 0x7}) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000180)) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000023c0)=0x2) 7.98661776s ago: executing program 1 (id=1607): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000580)={@rand_addr, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r3, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x37}}}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@cipso={0x86, 0x4e, 0x0, [{0x7, 0x5, "56c6b9"}, {0x0, 0x9, "3a1e018e653933"}, {0x7, 0x12, "eac700ef8ad8a6ab8e49ab6e7bb8d649"}, {0x6, 0x6, "5afd5d1b"}, {0x1, 0x4, "9203"}, {0x5, 0xf, "7202223a259ce9849f54198098"}, {0xd5e772d691f93c4f, 0x8, "03d552ec7b24"}, {0x0, 0x7, "71a8d10350"}]}, @timestamp={0x44, 0xc, 0x61, 0x0, 0x3, [0x200, 0x0]}, @cipso={0x86, 0x1a, 0x1, [{0x2, 0x8, "77a5ef04a7f8"}, {0x2, 0x4, "9475"}, {0x0, 0x8, "827ca8b5e8da"}]}, @cipso={0x86, 0x63, 0x3, [{0x0, 0x3, '|'}, {0x5, 0x7, "329e1ac451"}, {0x7, 0x5, "8d80cb"}, {0x6, 0xe, "13f9c1c82e65d3c3b2bbdc9e"}, {0x7, 0x5, "f04196"}, {0x7, 0x5, "c83762"}, {0x1, 0x12, "dbcb792cb2086b6895183ff2aec57f4c"}, {0x0, 0xd, "f4b69f6af0ac215ee92ad8"}, {0x1, 0x11, "d1ad65356d963c34a3974cdaaa421e"}, {0x6, 0x6, "ecc881d3"}]}]}}}], 0xfc}, 0x18000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x48, 0x0, &(0x7f0000000200)=[@exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x3f9, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x41) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000006800010006000000fddbdf2500000300000000000c000200010000000400000008000500", @ANYRES32=0x0, @ANYBLOB="ffaa49bf863efbe6ebf2ac16baf3109e08c7008c6bf90eb25d027a131f4749e22b499ed2a9a18ab4547867805f059220cdc8a0d933ece66c99c55d5cb7eb7424a3d972c14dca42a96c984801a4ea6b271abcf80000000000000035dae4729e70641f55e0"], 0x2c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r7, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 7.86235988s ago: executing program 2 (id=1608): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x402000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040026bd7000fcdbdf250f000000080031000200000008003400000000000500370001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8841}, 0x4008041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r5 = dup(0xffffffffffffffff) r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2e9d, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "6b62a1bffeb0b48bdc84b505933f1279", 0x7}}}, 0x1a) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0xffff26c0, @loopback, 0x28}, {0xa, 0x4e22, 0x5, @mcast1}, 0x0, {[0x8, 0x8, 0x101, 0x8, 0x1, 0x200, 0x8, 0x6]}}, 0x5c) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r10, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r10, 0xda90) r11 = accept4(r10, 0x0, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1700000000c8930000000000000000000000002c74f38348e5fabe60528212b390367d3ae73321f6a9ae0dbfb79d39fc3efac781d77a07adfb7b84266e4b99e3a1e697ce2bda133979ea0e", @ANYRESDEC=r3, @ANYBLOB="0600"/20, @ANYRES32=r9, @ANYRES32=r0, @ANYRES64=0x0, @ANYRESHEX=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r8, @ANYRES32=r7, @ANYRESHEX=r11], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400e9ffb6030000000000008500000083000000bf09000000000000550901000000deff940000000000000001e73406c6107f1304550a0004000000186100000b0000000000000053020000bf91000000000000b7020000000000008500000085000000b700000000000000950000000000"], &(0x7f0000000480)='syzkaller\x00', 0x58a9db0f, 0x24, &(0x7f00000004c0)=""/36, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0xe, 0x3, 0x35}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r12, r5, r2], 0x0, 0x10, 0xfffffffb}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x400}) timer_settime(0x0, 0x0, 0x0, 0x0) 7.119838462s ago: executing program 3 (id=1612): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4$alg(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4"], 0x1c}}, 0x0) 6.906654752s ago: executing program 2 (id=1613): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}, 0x400c0c8) r1 = syz_open_procfs(r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000010c0)=0xfffffffc, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x9c, "8be2fda3de9892a4bcd9041e5893515fa45946638432b3e32577a8fe9a82afbab784dcc9292e2f0b5163dc3bdbfbb45395739f1244dc7a759e20450d310e3d555ed12ddc6dbcc74d08dbf31e76f8e5f980706dfa26c2e50438c8781909e1bf777b1b7229d153d905fc913942819110ef4f164c31734cb1e781ec4a3740590fc98c4521eaa823de3963012a9c710966f9c9f778e7f5004d2145d46245"}, &(0x7f0000000300)=0xa4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r4, 0x3}, 0xc) read$msr(r3, &(0x7f000001cd00)=""/102400, 0x19000) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000e40)={[0xfffffffffffffff9, 0xe34, 0x1, 0xfffffffffffffff8, 0xa, 0xfffffffffffffffb, 0x1000, 0x40100000000000b, 0x40, 0x0, 0x40100000000000, 0xe, 0x8000000000000002, 0x1, 0x1fffffffffffb, 0x4], 0x50000, 0x1c22c5}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.852655755s ago: executing program 1 (id=1614): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4844) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x7ff}) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x40000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0xc5c4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xd, r1}, 0x38) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_setup(0x1, &(0x7f00000004c0)) syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000be4c091edd4c8a85c1ebe11800004bbde1d0e6e077ca00040000000000000c02000000030000000000"], &(0x7f0000000180), 0x35, 0x0, 0x1, 0x401}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 6.070674899s ago: executing program 3 (id=1617): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x32, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x0, 0xa, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r8, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1}, 0xfff}], 0x1, 0x10022, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x10, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4024587b, &(0x7f0000000c00)={{r0, &(0x7f0000000000)=')@^\xe4-!! *\x00', 0x8000, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x1]}, {0x0, 0x0, 0x8, 0x100000000}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x5}, 0x2, &(0x7f0000000bc0)=[{0x2, 0xffffffff, &(0x7f0000000100)='+\x00', &(0x7f0000000140)="9ce6e68b05b26d9a129630eac301044b3376426c78a8041f2f836207424db537ea2a14810c74e18412844ddc68fc2c1aff7b3400e46ccf0de86f240e402de33104728a947d8416bbd0a4bf9d", 0x4c, 0xe}, {0x3, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000200)="6299a2fefd50d3fd3a6c5aeec0941df8527cf8f12f3a4e0325c763093cbfe51f6219c592a0a0afc86e3c063d627566aeea0610135789abc1bf1d4eb02d2ab0f21a6cd59ee7afd7fed03e75a33ecf13eea2239e23080f6dd7d221a96aaedaec03b7775ad2ba7aa0e953695f8e8aa382c015574b49897df552708e1047fc8b78a388380b3664", 0x85}]}) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x10004011) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x8f2) 4.867183329s ago: executing program 2 (id=1619): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x25, 0x9, 0x0, 0x800, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) mount$nfs4(&(0x7f0000000000)='-.%^%\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20c0c24, &(0x7f00000003c0)={[{'/^-(-\'.*\x03!'}, {'9p\x00'}, {'#j'}, {'./binderfs/binder0\x00'}, {}, {'\x00'}], [{@subj_user={'subj_user', 0x3d, '$.#'}}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000001}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@appraise}]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) getgroups(0x2, &(0x7f0000000600)=[0x0, 0x0]) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './bus'}, 0x9) 3.998150241s ago: executing program 3 (id=1621): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = syz_open_procfs(r0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000010c0)=0xfffffffc, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x9c, "8be2fda3de9892a4bcd9041e5893515fa45946638432b3e32577a8fe9a82afbab784dcc9292e2f0b5163dc3bdbfbb45395739f1244dc7a759e20450d310e3d555ed12ddc6dbcc74d08dbf31e76f8e5f980706dfa26c2e50438c8781909e1bf777b1b7229d153d905fc913942819110ef4f164c31734cb1e781ec4a3740590fc98c4521eaa823de3963012a9c710966f9c9f778e7f5004d2145d46245"}, &(0x7f0000000300)=0xa4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r4, 0x3}, 0xc) read$msr(r3, &(0x7f000001cd00)=""/102400, 0x19000) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000e40)={[0xfffffffffffffff9, 0xe34, 0x1, 0xfffffffffffffff8, 0xa, 0xfffffffffffffffb, 0x1000, 0x40100000000000b, 0x40, 0x0, 0x40100000000000, 0xe, 0x8000000000000002, 0x1, 0x1fffffffffffb, 0x4], 0x50000, 0x1c22c5}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.560436994s ago: executing program 2 (id=1622): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}, 0x400c0c8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000010c0)=0xfffffffc, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x9c, "8be2fda3de9892a4bcd9041e5893515fa45946638432b3e32577a8fe9a82afbab784dcc9292e2f0b5163dc3bdbfbb45395739f1244dc7a759e20450d310e3d555ed12ddc6dbcc74d08dbf31e76f8e5f980706dfa26c2e50438c8781909e1bf777b1b7229d153d905fc913942819110ef4f164c31734cb1e781ec4a3740590fc98c4521eaa823de3963012a9c710966f9c9f778e7f5004d2145d46245"}, &(0x7f0000000300)=0xa4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={r2, 0x3}, 0xc) read$msr(r1, &(0x7f000001cd00)=""/102400, 0x19000) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000e40)={[0xfffffffffffffff9, 0xe34, 0x1, 0xfffffffffffffff8, 0xa, 0xfffffffffffffffb, 0x1000, 0x40100000000000b, 0x40, 0x0, 0x40100000000000, 0xe, 0x8000000000000002, 0x1, 0x1fffffffffffb, 0x4], 0x50000, 0x1c22c5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.974626574s ago: executing program 1 (id=1623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, &(0x7f0000000280)={0x0, 0x0, 0x0, @raw}) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000180)=0xd0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000060000000b00000000", @ANYRES32, @ANYRES32=0x0], 0x50) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) write$rfkill(r3, &(0x7f0000000340)={0x4, 0x1, 0x2, 0x1, 0x1}, 0x8) r7 = openat$mice(0xffffff9c, &(0x7f00000000c0), 0x1) ioctl$CDROMREADMODE2(r7, 0x530c, &(0x7f0000000a00)={0x6, 0x7, 0xf7, 0x8, 0x4, 0x5}) r8 = dup(r1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = dup(r10) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, &(0x7f0000000240)={0x7b, 0x8001, 0x2, 0x40}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) sendmsg$inet6(r10, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x8, @local, 0x4}}, 0x4747f2c3, 0x6, 0x6, 0x3, 0xec, 0x825, 0x9}, &(0x7f0000000480)=0x9c) ioctl$VIDIOC_S_FMT(r9, 0xc0cc5605, &(0x7f0000000100)={0x9, @raw_data="78effe71d54a483d6bc8803fefefd1d9e4edeed60c808a47b74048a6458baeb4902583b4f0d050f5689753988ece9d070b747076e2adaae51afd8092eb53fe6ecfd72c7a6a3b0178d9ee9d35b9cf6d2111d8e8cad56bad052d46b26a50fff3fdde0e7b43067393b59fc59ab66c1e00dd7a1cbd977d8f19a793e88e135727ce63c0f92c9792ce0dd6d463d4ad47362d9fce4a890c8b2f441b937fb6eb8584dc5892f256bccc4a8520a99dad4d68cafe4370a9a77e483f18e97d2ab5df9ed5682109cda5d00449aa70"}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0xf7}, @void, @ipv4=@igmp={{0x7, 0x4, 0x3, 0xa, 0x24, 0x65, 0x0, 0xc, 0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @local, {[@generic={0x44, 0x5, "5bd448"}]}}, {0x16, 0xfa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x28) 2.956916668s ago: executing program 0 (id=1624): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x38}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x59, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000090000000000000003000000c24a0001ffffffff850000002a0000009500000000000000f37ef53f987645ff67d58ccefe84345754a8785560184e3e8b25e9c54cbf98cb120326fe6b46bb9e0425478a257521baf00b985475f01666"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = creat(0x0, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f00000001c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x1, 0x0, 0x81d, 0xf1, {{0x42, 0x4, 0x1, 0x9, 0x108, 0x65, 0x0, 0x3, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_addr={0x44, 0x2c, 0xd4, 0x1, 0xb, [{@multicast2, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xfffff800}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x401}, {@broadcast, 0xfffffff0}]}, @cipso={0x86, 0x7a, 0x2, [{0x7, 0x4, "e4d9"}, {0x5, 0x10, "bdee870512d01952779e5ab12783"}, {0x7, 0xd, "b633c5a82851670c5f824d"}, {0x5, 0xa, "8fc621ced69bd372"}, {0x1, 0xb, "cf372495c6a6afd311"}, {0x1, 0x12, "9ee2e2ac0e228d63c48e474de8d2fd41"}, {0x5, 0x9, "9375ca0a5b1139"}, {0x2, 0xe, "2bd9c1e858d7cc8154ccb3ea"}, {0xc6943a1488decff4, 0x8, "619663837f8d"}, {0x1, 0xd, "6c8702bcb7a2796af0823e"}]}, @timestamp_prespec={0x44, 0x14, 0x6c, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010101, 0xf}]}, @noop, @end, @cipso={0x86, 0x36, 0xffffffffffffffff, [{0x0, 0xf, "f25c8b43768a06ca64fd6ac12a"}, {0x1, 0x2}, {0x0, 0x11, "01ec702898677bc833e08f9b60caa9"}, {0x0, 0x2}, {0x7, 0x6, "b41d4ea8"}, {0x4, 0x6, "0795d443"}]}]}}}}}) fstat(r2, &(0x7f00000003c0)) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x4) 2.751810655s ago: executing program 0 (id=1625): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4$alg(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4"], 0x1c}}, 0x0) 2.214586119s ago: executing program 1 (id=1626): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}, 0x400c0c8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000010c0)=0xfffffffc, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x9c, "8be2fda3de9892a4bcd9041e5893515fa45946638432b3e32577a8fe9a82afbab784dcc9292e2f0b5163dc3bdbfbb45395739f1244dc7a759e20450d310e3d555ed12ddc6dbcc74d08dbf31e76f8e5f980706dfa26c2e50438c8781909e1bf777b1b7229d153d905fc913942819110ef4f164c31734cb1e781ec4a3740590fc98c4521eaa823de3963012a9c710966f9c9f778e7f5004d2145d46245"}, &(0x7f0000000300)=0xa4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={r2, 0x3}, 0xc) read$msr(r1, &(0x7f000001cd00)=""/102400, 0x19000) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000e40)={[0xfffffffffffffff9, 0xe34, 0x1, 0xfffffffffffffff8, 0xa, 0xfffffffffffffffb, 0x1000, 0x40100000000000b, 0x40, 0x0, 0x40100000000000, 0xe, 0x8000000000000002, 0x1, 0x1fffffffffffb, 0x4], 0x50000, 0x1c22c5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.262840539s ago: executing program 3 (id=1627): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x3a, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x30, {0x0, 0xa, 0x3, 0x2, [0x7, 0x421, 0xfffffffffffff32e, 0x4, 0xcbcc]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x60) syz_emit_ethernet(0x52, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "90f100", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x1, 0xe}], {{0x8000, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 1.250083489s ago: executing program 3 (id=1628): r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = dup2(r0, r0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d1d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x10}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008841}, 0x8080) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat(r4, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff97ffffe, 0x4031, 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) r7 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) syz_open_dev$usbfs(&(0x7f00000000c0), 0xd, 0x20000) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r8 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 1.221936015s ago: executing program 1 (id=1629): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000004c0)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x3, 0x6, 0x800, 0x6, 0x4, {0x3, 0x0, 0x6, 0x8000000000000000, 0x4, 0x101, 0xcd, 0x3, 0xee, 0xa000, 0x8, 0x0, 0x0, 0x2, 0x3}}}, 0x90) r3 = getegid() fstat(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000980)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x8}, {0x2, 0x6}, {}, {0x2, 0x3}, {0x2, 0x3}], {}, [{0x8, 0x2}, {0x8, 0x4, r3}, {0x8, 0x4, r4}, {0x8, 0x5, r5}], {0x10, 0x1}, {0x20, 0x1}}, 0x8c, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='1\x00', 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='1', 0x1) (fail_nth: 4) 1.196932602s ago: executing program 0 (id=1630): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv6_newnexthop={0x34, 0x68, 0x8, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x1, 0x0, 0x2}, [@NHA_GROUP_TYPE={0x6}, @NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x100000c0}, 0x4000001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001380)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r6 = gettid() timer_create(0x0, 0x0, 0x0) ptrace(0x4208, r6) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x3, 0xfffffffa, 0x1, 0x80000001, 0xd8b, 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) write$binfmt_elf32(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460502028d04000000000000000300060004400000b801000038000000640200000a0400000f00200002000500000000020000000051e57464040000000900000006000000030000000600000008000000a104000051e57464ff000000020000000000400000f8ffffff7f0020000400000100ffff00"/340], 0xa78) close(r4) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) ioctl$FITHAW(r5, 0xc0045878) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r10, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x24048030) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xfe, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 911.209024ms ago: executing program 0 (id=1631): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r0, &(0x7f0000000740)={0x8, {"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", 0x1000}}, 0x1006) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x39425, &(0x7f0000000080)={[{@subsystem='rdma'}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '{$'}}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48020}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r3, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x23}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x80004) 833.926998ms ago: executing program 0 (id=1632): r0 = socket$rxrpc(0x21, 0x2, 0xa) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000c21000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400dd05000008001b0000000000"], 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r4) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r9, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000069243279f92445cab5c9f940b4e32717e9549044fd98eb1ac224c8d9026595abb5802a4f16c4daad6bbb55363339cf55d1335", @ANYRES16=r3, @ANYBLOB="000829bd7000ffdbdf2501000000080002000100000014000c0020010000000000000000000000000001080008000400000008000700", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="080004006401010005000d0002000000"], 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x200840) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 665.934638ms ago: executing program 2 (id=1633): r0 = socket$rxrpc(0x21, 0x2, 0xa) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000c21000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400dd05000008001b0000000000"], 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r4) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r9, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000069243279f92445cab5c9f940b4e32717e9549044fd98eb1ac224c8d9026595abb5802a4f16c4daad6bbb55363339cf55d1335", @ANYRES16=r3, @ANYBLOB="000829bd7000ffdbdf2501000000080002000100000014000c0020010000000000000000000000000001080008000400000008000700", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="080004006401010005000d0002000000"], 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x200840) ioctl$EVIOCGBITKEY(r10, 0x80404521, &(0x7f0000001500)=""/4096) 441.681927ms ago: executing program 3 (id=1634): r0 = socket$rxrpc(0x21, 0x2, 0xa) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000c21000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400dd05000008001b0000000000"], 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r4) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r9, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000069243279f92445cab5c9f940b4e32717e9549044fd98eb1ac224c8d9026595abb5802a4f16c4daad6bbb55363339cf55d1335", @ANYRES16=r3, @ANYBLOB="000829bd7000ffdbdf2501000000080002000100000014000c0020010000000000000000000000000001080008000400000008000700", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="080004006401010005000d0002000000"], 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x200840) ioctl$EVIOCGBITKEY(r10, 0x80404521, &(0x7f0000001500)=""/4096) 0s ago: executing program 0 (id=1635): mount$9p_virtio(&(0x7f0000000000), &(0x7f0000001ac0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000000080)={'trans=virtio,', {[{@afid={'afid', 0x3d, 0x8}}]}}) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) socket$alg(0x26, 0x5, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0)=0x82, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) kernel console output (not intermixed with test programs): 312.705498][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.924883][ T5858] usb 8-1: usb_control_msg returned -32 [ 312.934594][ T5858] usbtmc 8-1:16.0: can't read capabilities [ 312.956591][ T5858] usb 8-1: USB disconnect, device number 46 [ 314.183104][ T9499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1024'. [ 314.428945][ T55] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 314.550489][ T9507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.563978][ T9507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.617673][ T55] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 314.626463][ T55] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.636669][ T55] usb 6-1: config 0 has no interface number 0 [ 314.642387][ T55] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 314.646780][ T55] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 314.656427][ T55] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 314.660307][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.695720][ T55] usb 6-1: config 0 descriptor?? [ 314.704393][ T9500] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 314.728255][ T55] ldusb 6-1:0.55: Interrupt in endpoint not found [ 315.368431][ T9] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 315.522004][ T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 315.525048][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.529420][ T9] usb 7-1: config 0 has no interface number 0 [ 315.531575][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 315.535047][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 315.539100][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 315.542894][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.571006][ T9] usb 7-1: config 0 descriptor?? [ 315.594485][ T9516] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 315.627285][ T9] ldusb 7-1:0.55: Interrupt in endpoint not found [ 316.664247][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.171663][ T8173] usb 6-1: USB disconnect, device number 25 [ 317.243404][ T9539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.247001][ T9539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.323432][ T9543] netlink: 'syz.1.1041': attribute type 1 has an invalid length. [ 317.345344][ T9543] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.357015][ T9543] macvlan3: entered promiscuous mode [ 317.359232][ T9543] macvlan3: entered allmulticast mode [ 317.811242][ T5748] Bluetooth: hci3: unexpected event for opcode 0x202d [ 318.128531][ T24] usb 7-1: USB disconnect, device number 33 [ 319.222067][ T9571] 9p: Bad value for 'version' [ 319.914109][ T9578] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 319.977064][ T9578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.985411][ T9583] macvlan2: entered promiscuous mode [ 319.987586][ T9583] macvlan2: entered allmulticast mode [ 320.045157][ T9578] bond1: (slave ip6gretap1): making interface the new active one [ 320.054535][ T9578] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 320.118319][ T5748] Bluetooth: hci1: unexpected event for opcode 0x202d [ 320.208674][ T5858] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 320.368315][ T5858] usb 8-1: Using ep0 maxpacket: 8 [ 320.372083][ T5858] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 320.375713][ T5858] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 320.398404][ T5858] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 320.401832][ T5858] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 320.406338][ T5858] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 320.418459][ T5858] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.425251][ T5858] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.429646][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.670921][ T5858] usb 8-1: usb_control_msg returned -32 [ 320.674838][ T5858] usbtmc 8-1:16.0: can't read capabilities [ 320.702521][ T5858] usb 8-1: USB disconnect, device number 47 [ 321.102407][ T9602] trusted_key: encrypted_key: keylen parameter is missing [ 322.431477][ T5748] Bluetooth: hci0: unexpected event for opcode 0x202d [ 322.643438][ T9643] 9pnet_virtio: no channels available for device syz [ 325.634268][ T5748] Bluetooth: hci3: unexpected event for opcode 0x202d [ 327.471303][ T1488] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 327.777994][ T5742] Bluetooth: hci1: unexpected event for opcode 0x202d [ 328.078418][ T24] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 328.230692][ T24] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 328.234201][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.238163][ T24] usb 7-1: config 0 has no interface number 0 [ 328.241149][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 328.245518][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 328.249959][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 328.253540][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.260119][ T24] usb 7-1: config 0 descriptor?? [ 328.267550][ T9754] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 328.273436][ T24] ldusb 7-1:0.55: Interrupt in endpoint not found [ 328.901708][ T1488] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 328.904169][ T1488] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.909415][ T1488] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.918287][ T1488] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.919132][ T5748] Bluetooth: hci1: unexpected event for opcode 0x202d [ 328.921839][ T1488] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 328.930127][ T1488] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 328.934582][ T1488] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.959204][ T1488] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.975174][ T1488] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 329.002006][ T1488] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 329.025814][ T1488] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 329.029393][ T1488] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 329.049060][ T1488] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 329.078773][ T1488] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 329.094045][ T1488] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 329.182433][ T1488] usb 6-1: string descriptor 0 read error: -22 [ 329.193591][ T1488] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 329.204174][ T1488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.455481][ T1488] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 329.928883][ T5858] usb 6-1: USB disconnect, device number 26 [ 330.838827][ T9] usb 7-1: USB disconnect, device number 34 [ 331.690734][ T5748] Bluetooth: hci1: unexpected event for opcode 0x202d [ 331.918377][ T55] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 332.078462][ T55] usb 6-1: Using ep0 maxpacket: 32 [ 332.083217][ T55] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 332.087125][ T55] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 332.093142][ T55] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 332.097982][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 332.106721][ T55] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 332.113344][ T55] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 332.132921][ T55] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 332.143470][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.156797][ T55] usb 6-1: config 0 descriptor?? [ 332.385805][ T55] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 333.007620][ T9] usb 6-1: USB disconnect, device number 27 [ 333.017478][ T9] usblp0: removed [ 333.368347][ T24] usb 8-1: new low-speed USB device number 48 using dummy_hcd [ 333.520013][ T24] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 333.523869][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 333.528299][ T24] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.533999][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 333.538882][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 333.558983][ T24] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 333.562604][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 333.566898][ T24] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.572997][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 333.577587][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 333.583474][ T24] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 333.586506][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 333.590987][ T24] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.595606][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 333.600372][ T24] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 333.607657][ T24] usb 8-1: string descriptor 0 read error: -22 [ 333.610818][ T24] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 333.614545][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.632850][ T24] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 333.878285][ T55] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 334.050028][ T55] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 334.053551][ T55] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.057885][ T55] usb 6-1: config 0 has no interface number 0 [ 334.060951][ T55] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 334.065182][ T55] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 334.070004][ T55] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 334.073382][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.078798][ T55] usb 6-1: config 0 descriptor?? [ 334.087169][ T9814] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 334.096030][ T55] ldusb 6-1:0.55: Interrupt in endpoint not found [ 334.768551][ T55] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 334.928309][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 334.932599][ T55] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 334.936187][ T55] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 334.941605][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 334.945925][ T55] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 334.950586][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 334.954725][ T55] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.960927][ T55] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 334.964752][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.177250][ T55] usb 7-1: GET_CAPABILITIES returned 0 [ 335.179917][ T55] usbtmc 7-1:16.0: can't read capabilities [ 335.384307][ T24] usb 7-1: USB disconnect, device number 35 [ 335.882625][ T8173] usb 8-1: USB disconnect, device number 48 [ 336.566588][ T8173] usb 6-1: USB disconnect, device number 28 [ 337.121774][ T9850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1123'. [ 338.258513][ T9] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 338.308812][ T24] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 338.318392][ T1488] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 338.408331][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 338.411854][ T9] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 338.414480][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 338.418560][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 338.421803][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 338.425892][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 338.429191][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.433192][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 338.435839][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.438469][ T24] usb 7-1: device descriptor read/64, error -71 [ 338.470980][ T1488] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 338.474784][ T1488] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.479743][ T1488] usb 6-1: config 0 has no interface number 0 [ 338.482416][ T1488] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 338.486465][ T1488] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 338.491378][ T1488] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 338.495330][ T1488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.502226][ T1488] usb 6-1: config 0 descriptor?? [ 338.505647][ T9858] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 338.512314][ T1488] ldusb 6-1:0.55: Interrupt in endpoint not found [ 338.645873][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 338.647668][ T9] usbtmc 8-1:16.0: can't read capabilities [ 338.678994][ T24] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 338.818618][ T24] usb 7-1: device descriptor read/64, error -71 [ 338.853061][ T5858] usb 8-1: USB disconnect, device number 49 [ 338.929108][ T24] usb usb7-port1: attempt power cycle [ 339.268354][ T24] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 339.298859][ T24] usb 7-1: device descriptor read/8, error -71 [ 339.548578][ T24] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 339.568745][ T24] usb 7-1: device descriptor read/8, error -71 [ 339.679268][ T24] usb usb7-port1: unable to enumerate USB device [ 339.706025][ T9874] 9pnet_virtio: no channels available for device syz [ 340.578853][ T5748] Bluetooth: hci1: unexpected event for opcode 0x202d [ 341.021109][ T55] usb 6-1: USB disconnect, device number 29 [ 341.188712][ T9886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1134'. [ 342.487352][ T9909] 9pnet_virtio: no channels available for device syz [ 342.924929][ T9911] 9pnet_virtio: no channels available for device syz [ 343.609178][ T29] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 343.738843][ T29] usb 7-1: device descriptor read/64, error -71 [ 344.020572][ T29] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 344.062683][ T9931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1148'. [ 344.168410][ T29] usb 7-1: device descriptor read/64, error -71 [ 344.280470][ T29] usb usb7-port1: attempt power cycle [ 344.649327][ T29] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 344.670621][ T29] usb 7-1: device descriptor read/8, error -71 [ 344.908549][ T29] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 344.929913][ T29] usb 7-1: device descriptor read/8, error -71 [ 345.049873][ T29] usb usb7-port1: unable to enumerate USB device [ 346.115687][ T9956] 9pnet_virtio: no channels available for device syz [ 346.201379][ T5748] Bluetooth: hci1: unexpected event for opcode 0x202d [ 348.899923][ T9985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.905117][ T9985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.988322][ T8173] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 349.131153][ T5748] Bluetooth: hci2: unexpected event for opcode 0x202d [ 349.138417][ T8173] usb 8-1: Using ep0 maxpacket: 8 [ 349.163958][ T8173] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 349.172074][ T8173] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 349.184812][ T8173] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 349.198370][ T8173] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 349.242845][ T8173] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 349.292079][ T8173] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.307952][ T8173] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 349.316081][ T8173] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.584485][ T8173] usb 8-1: GET_CAPABILITIES returned 0 [ 349.587079][ T8173] usbtmc 8-1:16.0: can't read capabilities [ 349.801866][ T8173] usb 8-1: USB disconnect, device number 50 [ 349.944173][ T9997] trusted_key: encrypted_key: keylen parameter is missing [ 351.577671][T10026] trusted_key: encrypted_key: keylen parameter is missing [ 351.592712][ T5748] Bluetooth: hci2: unexpected event for opcode 0x202d [ 351.635800][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.642293][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.129746][T10052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1187'. [ 353.448312][ T1488] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 354.088057][T10055] trusted_key: encrypted_key: keylen parameter is missing [ 354.158420][ T1488] usb 6-1: Using ep0 maxpacket: 32 [ 354.162023][ T1488] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 354.164912][ T1488] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 354.167775][ T1488] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.171146][ T1488] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 354.174037][ T1488] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 354.177014][ T1488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.182428][ T1488] usb 6-1: config 0 descriptor?? [ 354.400016][T10061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.405397][T10061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.201522][ T5748] Bluetooth: hci3: unexpected event for opcode 0x202d [ 356.243048][T10083] trusted_key: encrypted_key: keylen parameter is missing [ 356.308113][T10085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1199'. [ 356.373506][T10092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.380377][T10092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.413900][ T5849] usb 6-1: USB disconnect, device number 30 [ 357.373696][ T5748] Bluetooth: hci2: unexpected event for opcode 0x202d [ 357.384016][T10107] trusted_key: encrypted_key: keylen parameter is missing [ 358.200890][T10122] 9p: Bad value for 'version' [ 358.858401][ T5849] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 359.008302][ T5849] usb 6-1: Using ep0 maxpacket: 8 [ 359.012520][ T5849] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 359.016074][ T5849] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 359.020468][ T5849] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 359.025029][ T5849] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 359.029789][ T5849] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 359.033940][ T5849] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.040043][ T5849] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.043797][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.254134][ T5849] usb 6-1: GET_CAPABILITIES returned 0 [ 359.259761][ T5849] usbtmc 6-1:16.0: can't read capabilities [ 359.458375][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 359.462595][T10128] usbtmc 6-1:16.0: Unable to send data, error -71 [ 359.466450][ T29] usb 6-1: USB disconnect, device number 31 [ 359.500874][T10140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1216'. [ 360.143344][T10143] trusted_key: encrypted_key: keylen parameter is missing [ 361.351298][T10159] trusted_key: encrypted_key: keylen parameter is missing [ 361.726295][T10164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.737318][T10164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.874967][T10170] trusted_key: encrypted_key: keylen parameter is missing [ 362.228307][ T5858] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 362.319015][T10181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1233'. [ 362.506862][ T5748] Bluetooth: hci0: unexpected event for opcode 0x202d [ 362.824984][T10193] trusted_key: encrypted_key: keylen parameter is missing [ 363.219344][ T24] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 363.388387][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 363.391894][ T24] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 363.394511][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 363.397839][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 363.401135][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 363.404557][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 363.407520][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.411896][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 363.415005][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.454562][ T5858] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 363.457305][ T5858] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.461365][ T5858] usb 6-1: config 0 has no interface number 0 [ 363.463316][ T5858] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 363.466767][ T5858] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 363.478421][ T5858] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 363.481288][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.487048][ T5858] usb 6-1: config 0 descriptor?? [ 363.489389][T10175] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 363.499182][ T5858] ldusb 6-1:0.55: Interrupt in endpoint not found [ 363.657370][ T24] usb 8-1: GET_CAPABILITIES returned 0 [ 363.659845][ T24] usbtmc 8-1:16.0: can't read capabilities [ 363.880258][ C2] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 363.883325][T10199] usbtmc 8-1:16.0: Unable to send data, error -71 [ 363.891335][ T24] usb 8-1: USB disconnect, device number 51 [ 364.990315][ T24] usb 6-1: USB disconnect, device number 32 [ 365.028624][ T41] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 365.178349][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 365.181500][ T41] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 365.184320][ T41] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 365.187056][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.190363][ T41] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 365.193420][ T41] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 365.196378][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.200524][ T41] usb 7-1: config 0 descriptor?? [ 365.238040][T10243] trusted_key: encrypted_key: keylen parameter is missing [ 366.345696][ T5748] Bluetooth: hci2: unexpected event for opcode 0x202d [ 366.841982][T10264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.861631][T10264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.841466][ T1488] usb 7-1: USB disconnect, device number 44 [ 367.879958][T10289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1255'. [ 367.909124][T10291] trusted_key: encrypted_key: keylen parameter is missing [ 368.924393][T10307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.928168][T10307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.236890][T10317] trusted_key: encrypted_key: keylen parameter is missing [ 370.777139][T10360] trusted_key: encrypted_key: keylen parameter is missing [ 371.008447][ T1488] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 371.158337][ T1488] usb 7-1: Using ep0 maxpacket: 32 [ 371.161303][ T1488] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 371.164099][ T1488] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 371.166797][ T1488] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.170059][ T1488] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 371.172832][ T1488] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.175807][ T1488] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 371.179971][ T1488] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 371.182797][ T1488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.186499][ T1488] usb 7-1: config 0 descriptor?? [ 371.755797][T10370] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 372.038004][T10378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1272'. [ 373.209057][ T41] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 373.299067][T10392] trusted_key: encrypted_key: keylen parameter is missing [ 373.433731][ T41] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 374.091088][ T41] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 374.297295][ T41] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.319384][ T41] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 374.320621][ T56] usb 7-1: USB disconnect, device number 45 [ 374.322987][ T41] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 374.330127][ T41] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 374.332799][ T41] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 374.336816][ T41] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.343306][ T41] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 374.346748][ T41] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 374.351159][ T41] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 374.353845][ T41] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 374.357315][ T41] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.361055][ T41] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 374.364629][ T41] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 374.370898][ T41] usb 6-1: string descriptor 0 read error: -22 [ 374.372920][ T41] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 374.375852][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.478541][T10400] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 374.498019][ T41] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 374.590925][ T41] usb 6-1: USB disconnect, device number 33 [ 374.928325][ T8173] usb 8-1: new low-speed USB device number 52 using dummy_hcd [ 375.058314][ T8173] usb 8-1: device descriptor read/64, error -71 [ 375.296505][T10413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1282'. [ 375.300866][ T8173] usb 8-1: new low-speed USB device number 53 using dummy_hcd [ 375.864268][ T8173] usb 8-1: device descriptor read/64, error -71 [ 376.197878][ T8173] usb usb8-port1: attempt power cycle [ 376.315017][T10418] trusted_key: encrypted_key: keylen parameter is missing [ 376.558562][ T8173] usb 8-1: new low-speed USB device number 54 using dummy_hcd [ 376.593289][ T8173] usb 8-1: device descriptor read/8, error -71 [ 376.863214][T10425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.868399][ T8173] usb 8-1: new low-speed USB device number 55 using dummy_hcd [ 376.871684][T10425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.900227][ T8173] usb 8-1: device descriptor read/8, error -71 [ 377.020021][ T8173] usb usb8-port1: unable to enumerate USB device [ 378.105973][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.641384][T10468] trusted_key: encrypted_key: keylen parameter is missing [ 378.828412][ T56] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 378.982193][ T56] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 378.991641][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 378.998888][ T56] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.006812][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 379.013503][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 379.021125][ T56] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 379.024298][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 379.029052][ T56] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.033952][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 379.037426][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 379.042053][ T56] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 379.044553][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 379.047917][ T56] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.052937][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 379.057466][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 379.066059][ T56] usb 6-1: string descriptor 0 read error: -22 [ 379.069882][ T56] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 379.073158][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.084328][ T56] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 379.298561][ T9] usb 6-1: USB disconnect, device number 34 [ 380.578472][ T55] usb 7-1: new low-speed USB device number 46 using dummy_hcd [ 380.718423][ T55] usb 7-1: device descriptor read/64, error -71 [ 380.968472][ T55] usb 7-1: new low-speed USB device number 47 using dummy_hcd [ 381.098625][ T5821] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 381.108371][ T55] usb 7-1: device descriptor read/64, error -71 [ 381.228663][ T55] usb usb7-port1: attempt power cycle [ 381.268767][ T5821] usb 8-1: Using ep0 maxpacket: 32 [ 381.273588][ T5821] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 381.274637][T10497] trusted_key: encrypted_key: keylen parameter is missing [ 381.276945][ T5821] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 381.283252][ T5821] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.287179][ T5821] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 381.290913][ T5821] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 381.294248][ T5821] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 381.299182][ T5821] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 381.306946][ T5821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.315063][ T5821] usb 8-1: config 0 descriptor?? [ 381.994099][ T55] usb 7-1: new low-speed USB device number 48 using dummy_hcd [ 382.039098][ T55] usb 7-1: device descriptor read/8, error -71 [ 382.288444][ T55] usb 7-1: new low-speed USB device number 49 using dummy_hcd [ 382.308987][ T55] usb 7-1: device descriptor read/8, error -71 [ 382.419579][ T55] usb usb7-port1: unable to enumerate USB device [ 382.545868][T10509] 9pnet_virtio: no channels available for device syz [ 384.520432][ T24] usb 8-1: USB disconnect, device number 56 [ 385.358327][ T24] usb 8-1: new low-speed USB device number 57 using dummy_hcd [ 385.448440][ T5821] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 385.526181][ T24] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 385.530018][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.533880][ T24] usb 8-1: config 0 has no interface number 0 [ 385.535886][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 385.539828][ T24] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 385.543740][ T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 385.546624][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.551451][ T24] usb 8-1: config 0 descriptor?? [ 385.554228][T10544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.559290][ T24] ldusb 8-1:0.55: Interrupt in endpoint not found [ 385.610157][ T5821] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 385.614768][ T5821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.619447][ T5821] usb 6-1: config 0 has no interface number 0 [ 385.623260][ T5821] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 385.628075][ T5821] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 385.632663][ T5821] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 385.636397][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.642622][ T5821] usb 6-1: config 0 descriptor?? [ 385.648772][T10549] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 385.654489][ T5821] ldusb 6-1:0.55: Interrupt in endpoint not found [ 385.868405][ T5891] usb 7-1: new low-speed USB device number 50 using dummy_hcd [ 386.049922][ T5891] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 386.052713][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 386.056222][ T5891] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 386.060678][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 386.064879][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 386.070181][ T5891] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 386.073376][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 386.077645][ T5891] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 386.082607][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 386.087625][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 386.093606][ T5891] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 386.096474][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 386.100120][ T5891] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 386.104212][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 386.107630][ T5891] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 386.113973][ T5891] usb 7-1: string descriptor 0 read error: -22 [ 386.116435][ T5891] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 386.119517][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.130960][ T5891] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 386.418577][ T5821] usb 7-1: USB disconnect, device number 50 [ 388.010238][ T24] usb 8-1: USB disconnect, device number 57 [ 388.192197][ T5891] usb 6-1: USB disconnect, device number 35 [ 388.429105][T10614] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 388.571565][ T5748] Bluetooth: hci3: unexpected event for opcode 0x202d [ 390.728471][ T24] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 391.289811][ T24] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 391.293050][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.296285][ T24] usb 7-1: config 0 has no interface number 0 [ 391.298949][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 391.302521][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 391.306008][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 391.309163][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.313287][ T24] usb 7-1: config 0 descriptor?? [ 391.316009][T10637] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 391.320452][ T24] ldusb 7-1:0.55: Interrupt in endpoint not found [ 391.807483][T10663] 9pnet_virtio: no channels available for device syz [ 392.044645][ T5748] Bluetooth: hci1: unexpected event for opcode 0x202d [ 392.766907][T10671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1340'. [ 392.934130][T10674] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 393.166151][T10677] syzkaller0: entered promiscuous mode [ 393.168855][T10677] syzkaller0: entered allmulticast mode [ 393.286411][ T10] usb 7-1: USB disconnect, device number 51 [ 394.305357][T10697] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 394.592843][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.597199][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.638666][T10709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1351'. [ 394.668340][ T8173] usb 8-1: new low-speed USB device number 58 using dummy_hcd [ 394.849665][ T8173] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 394.852458][ T8173] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 394.857148][ T8173] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 394.862855][ T8173] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 394.869692][ T8173] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 394.877104][ T8173] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 394.881369][ T8173] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 394.889339][ T8173] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 394.893730][ T8173] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 394.897235][ T8173] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 394.902895][ T8173] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 394.905453][ T8173] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 394.909160][ T8173] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 394.913659][ T8173] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 394.918824][ T8173] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 394.929669][ T8173] usb 8-1: string descriptor 0 read error: -22 [ 394.931934][ T8173] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 394.934972][ T8173] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.950715][ T8173] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 395.155953][ T8173] usb 8-1: USB disconnect, device number 58 [ 395.810187][T10730] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 395.854761][T10734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.871791][T10734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.062839][T10767] 9pnet_virtio: no channels available for device syz [ 397.120245][T10769] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.217394][T10771] syz.1.1367: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 397.222671][T10771] CPU: 2 UID: 0 PID: 10771 Comm: syz.1.1367 Not tainted syzkaller #0 PREEMPT(full) [ 397.222688][T10771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.222697][T10771] Call Trace: [ 397.222701][T10771] [ 397.222706][T10771] dump_stack_lvl+0x100/0x190 [ 397.222727][T10771] warn_alloc.cold+0x94/0xa8 [ 397.222741][T10771] ? __pfx_warn_alloc+0x10/0x10 [ 397.222757][T10771] ? kasan_save_stack+0x3f/0x50 [ 397.222771][T10771] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 397.222814][T10771] ? vb2_vmalloc_alloc+0xf9/0x410 [ 397.222833][T10771] ? __vb2_queue_alloc+0x8d5/0x1160 [ 397.222848][T10771] ? vb2_core_create_bufs+0x5fa/0xa30 [ 397.222864][T10771] ? vb2_create_bufs+0x40c/0x830 [ 397.222883][T10771] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 397.222896][T10771] ? vidioc_create_bufs+0x7d/0xf0 [ 397.222913][T10771] ? v4l_create_bufs+0x17d/0x270 [ 397.222939][T10771] ? video_usercopy+0x3d3/0x14c0 [ 397.222958][T10771] ? v4l2_ioctl+0x1bd/0x250 [ 397.222978][T10771] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 397.223000][T10771] ? vb2_vmalloc_alloc+0x135/0x410 [ 397.223015][T10771] __vmalloc_node_range_noprof+0x136c/0x1630 [ 397.223044][T10771] ? vb2_vmalloc_alloc+0x135/0x410 [ 397.223065][T10771] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 397.223089][T10771] ? kasan_save_track+0x14/0x30 [ 397.223105][T10771] ? __kasan_kmalloc+0xaa/0xb0 [ 397.223122][T10771] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 397.223137][T10771] ? vb2_vmalloc_alloc+0x135/0x410 [ 397.223153][T10771] vmalloc_user_noprof+0x9e/0xe0 [ 397.223173][T10771] ? vb2_vmalloc_alloc+0x135/0x410 [ 397.223188][T10771] vb2_vmalloc_alloc+0x135/0x410 [ 397.223204][T10771] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 397.223220][T10771] __vb2_queue_alloc+0x8d5/0x1160 [ 397.223245][T10771] vb2_core_create_bufs+0x5fa/0xa30 [ 397.223263][T10771] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 397.223282][T10771] ? lock_acquire+0x1b9/0x370 [ 397.223306][T10771] vb2_create_bufs+0x40c/0x830 [ 397.223331][T10771] ? __pfx_vb2_create_bufs+0x10/0x10 [ 397.223353][T10771] ? v4l_sanitize_colorspace+0x220/0x410 [ 397.223380][T10771] vb2_ioctl_create_bufs+0x244/0x3e0 [ 397.223393][T10771] ? v4l2_compat_get_user+0x883/0x11f0 [ 397.223409][T10771] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 397.223433][T10771] vidioc_create_bufs+0x7d/0xf0 [ 397.223451][T10771] v4l_create_bufs+0x17d/0x270 [ 397.223471][T10771] __video_do_ioctl+0xb2a/0xdf0 [ 397.223493][T10771] ? trace_kmalloc+0xeb/0x110 [ 397.223512][T10771] ? __pfx___video_do_ioctl+0x10/0x10 [ 397.223534][T10771] ? video_usercopy+0x145/0x14c0 [ 397.223557][T10771] video_usercopy+0x3d3/0x14c0 [ 397.223577][T10771] ? __pfx___video_do_ioctl+0x10/0x10 [ 397.223599][T10771] ? __pfx_video_usercopy+0x10/0x10 [ 397.223625][T10771] ? __fget_files+0x215/0x3d0 [ 397.223638][T10771] ? hook_file_ioctl_common+0x140/0x440 [ 397.223668][T10771] v4l2_ioctl+0x1bd/0x250 [ 397.223693][T10771] v4l2_compat_ioctl32+0x20f/0x2d0 [ 397.223711][T10771] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 397.223729][T10771] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 397.223752][T10771] __do_fast_syscall_32+0xe7/0x970 [ 397.223775][T10771] ? lockdep_hardirqs_on+0x78/0x100 [ 397.223795][T10771] do_fast_syscall_32+0x32/0x70 [ 397.223814][T10771] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.223834][T10771] RIP: 0023:0xf7fd8fec [ 397.223853][T10771] Code: Unable to access opcode bytes at 0xf7fd8fc2. [ 397.223860][T10771] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 397.223875][T10771] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000c0f8565c [ 397.223885][T10771] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.223895][T10771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.223904][T10771] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 397.223912][T10771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.223937][T10771] [ 397.223944][T10771] Mem-Info: [ 397.354711][T10771] active_anon:6124 inactive_anon:140 isolated_anon:0 [ 397.354711][T10771] active_file:659 inactive_file:47355 isolated_file:0 [ 397.354711][T10771] unevictable:1768 dirty:277 writeback:0 [ 397.354711][T10771] slab_reclaimable:7925 slab_unreclaimable:52418 [ 397.354711][T10771] mapped:25113 shmem:2259 pagetables:1059 [ 397.354711][T10771] sec_pagetables:304 bounce:0 [ 397.354711][T10771] kernel_misc_reclaimable:0 [ 397.354711][T10771] free:39298 free_pcp:18228 free_cma:0 [ 397.369813][T10771] Node 0 active_anon:16kB inactive_anon:36kB active_file:12kB inactive_file:568kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8832kB pagetables:1532kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 397.381462][T10771] Node 1 active_anon:24480kB inactive_anon:524kB active_file:2624kB inactive_file:188852kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:104520kB dirty:1104kB writeback:0kB shmem:5500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5036kB pagetables:2704kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 397.394139][T10771] Node 0 DMA free:2180kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:20kB free_cma:0kB [ 397.403896][T10771] lowmem_reserve[]: 0 280 280 280 280 [ 397.406555][T10771] Node 0 DMA32 free:15468kB boost:2048kB min:14820kB low:18012kB high:21204kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:36kB active_file:12kB inactive_file:568kB unevictable:3536kB writepending:4kB zspages:0kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:14764kB local_pcp:3520kB free_cma:0kB [ 397.421076][T10771] lowmem_reserve[]: 0 0 0 0 0 [ 397.422816][T10771] Node 1 DMA32 free:139344kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24480kB inactive_anon:524kB active_file:2624kB inactive_file:188852kB unevictable:3536kB writepending:1104kB zspages:1820kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:57700kB local_pcp:5788kB free_cma:0kB [ 397.434457][T10771] lowmem_reserve[]: 0 0 0 0 0 [ 397.436275][T10771] Node 0 DMA: 17*4kB (U) 2*8kB (UM) 1*16kB (U) 13*32kB (UM) 0*64kB 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2180kB [ 397.442433][T10771] Node 0 DMA32: 219*4kB (UE) 86*8kB (UE) 47*16kB (UE) 107*32kB (UE) 32*64kB (UME) 12*128kB (UME) 4*256kB (UME) 4*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 15468kB [ 397.449513][T10771] Node 1 DMA32: 734*4kB (UME) 133*8kB (UME) 186*16kB (UME) 196*32kB (UME) 147*64kB (UME) 121*128kB (UME) 81*256kB (UME) 33*512kB (UME) 14*1024kB (UME) 12*2048kB (UM) 6*4096kB (UM) = 139264kB [ 397.456889][T10771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.465656][T10771] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 397.470273][T10771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.474796][T10771] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 397.478581][T10771] 50677 total pagecache pages [ 397.480756][T10771] 408 pages in swap cache [ 397.483003][T10771] Free swap = 121596kB [ 397.485374][T10771] Total swap = 124996kB [ 397.487622][T10771] 524155 pages RAM [ 397.489280][T10771] 0 pages HighMem/MovableOnly [ 397.491196][T10771] 211540 pages reserved [ 397.493637][T10771] 0 pages cma reserved [ 397.523766][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'. [ 397.564571][T10783] FAULT_INJECTION: forcing a failure. [ 397.564571][T10783] name failslab, interval 1, probability 1, space 0, times 0 [ 397.568832][T10783] CPU: 3 UID: 0 PID: 10783 Comm: syz.3.1370 Not tainted syzkaller #0 PREEMPT(full) [ 397.568848][T10783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.568866][T10783] Call Trace: [ 397.568872][T10783] [ 397.568877][T10783] dump_stack_lvl+0x100/0x190 [ 397.568894][T10783] should_fail_ex.cold+0x5/0xa [ 397.568908][T10783] should_failslab+0xc2/0x120 [ 397.568924][T10783] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 397.568939][T10783] ? __alloc_skb+0x5b7/0x710 [ 397.568956][T10783] ? __alloc_skb+0x140/0x710 [ 397.568973][T10783] __alloc_skb+0x140/0x710 [ 397.568986][T10783] ? __alloc_skb+0x5b7/0x710 [ 397.569000][T10783] ? __pfx___alloc_skb+0x10/0x10 [ 397.569019][T10783] netlink_alloc_large_skb+0x69/0x150 [ 397.569036][T10783] netlink_sendmsg+0x680/0xda0 [ 397.569050][T10783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.569065][T10783] ? apparmor_socket_sendmsg+0x15b/0x270 [ 397.569080][T10783] ____sys_sendmsg+0xa4d/0xbe0 [ 397.569092][T10783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.569106][T10783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.569123][T10783] ___sys_sendmsg+0x190/0x1e0 [ 397.569137][T10783] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.569155][T10783] ? find_held_lock+0x2b/0x80 [ 397.569178][T10783] __sys_sendmsg+0x160/0x210 [ 397.569194][T10783] ? __pfx___sys_sendmsg+0x10/0x10 [ 397.569214][T10783] ? __pfx_ksys_write+0x10/0x10 [ 397.569228][T10783] __do_fast_syscall_32+0xe7/0x970 [ 397.569245][T10783] ? lockdep_hardirqs_on+0x78/0x100 [ 397.569260][T10783] do_fast_syscall_32+0x32/0x70 [ 397.569276][T10783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.569290][T10783] RIP: 0023:0xf7f67fec [ 397.569305][T10783] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 397.569310][T10783] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 397.569321][T10783] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 397.569328][T10783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.569335][T10783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.569341][T10783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.569347][T10783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.569360][T10783] [ 397.735856][T10787] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 398.079079][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 398.092595][T10801] 9pnet_virtio: no channels available for device syz [ 398.992798][ T10] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 399.148352][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 399.153405][ T10] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 399.156954][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 399.161563][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 399.165607][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 399.170217][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 399.174286][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.179414][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 399.183015][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.267693][T10804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1377'. [ 400.103630][ T10] usb 8-1: GET_CAPABILITIES returned 0 [ 400.105352][ T10] usbtmc 8-1:16.0: can't read capabilities [ 400.304877][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 400.309517][T10789] usbtmc 8-1:16.0: Unable to send data, error -71 [ 400.312294][ T10] usb 8-1: USB disconnect, device number 59 [ 400.435735][T10815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1379'. [ 400.439704][T10815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1379'. [ 400.592280][T10811] trusted_key: encrypted_key: insufficient parameters specified [ 400.631769][T10820] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 401.909907][T10839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1388'. [ 403.282990][T10859] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 403.368385][ T5858] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 403.388349][ T10] usb 8-1: new low-speed USB device number 60 using dummy_hcd [ 403.455442][T10862] IPv6: sit1: Disabled Multicast RS [ 403.459457][T10862] sit1: entered allmulticast mode [ 403.472076][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1394'. [ 403.475913][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1394'. [ 403.518368][ T5858] usb 7-1: Using ep0 maxpacket: 8 [ 403.522386][ T5858] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 403.526012][ T5858] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 403.531618][ T5858] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 403.536205][ T5858] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 403.540034][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 403.541567][ T5858] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 403.544683][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 403.552690][ T5858] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.552733][ T5858] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.552753][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.567206][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.572372][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 403.577072][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 403.585171][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 403.588766][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 403.593875][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.599207][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 403.605160][ T42] audit: type=1326 audit(1785666991.471:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.1.1395" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd8fec code=0x0 [ 403.605309][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 403.619909][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 403.623260][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 403.627517][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.632458][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 403.636967][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 403.645700][ T10] usb 8-1: string descriptor 0 read error: -22 [ 403.648457][ T10] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 403.652196][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.664448][ T10] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 403.789552][ T5858] usb 7-1: GET_CAPABILITIES returned 0 [ 403.794012][ T5858] usbtmc 7-1:16.0: can't read capabilities [ 403.923388][ T5821] usb 8-1: USB disconnect, device number 60 [ 403.990262][ T8173] usb 7-1: USB disconnect, device number 52 [ 405.309363][T10877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1398'. [ 405.461135][T10881] FAULT_INJECTION: forcing a failure. [ 405.461135][T10881] name failslab, interval 1, probability 1, space 0, times 0 [ 405.466447][T10881] CPU: 2 UID: 0 PID: 10881 Comm: syz.2.1399 Not tainted syzkaller #0 PREEMPT(full) [ 405.466471][T10881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.466481][T10881] Call Trace: [ 405.466488][T10881] [ 405.466497][T10881] dump_stack_lvl+0x100/0x190 [ 405.466522][T10881] should_fail_ex.cold+0x5/0xa [ 405.466541][T10881] should_failslab+0xc2/0x120 [ 405.466565][T10881] __kmalloc_noprof+0xfc/0x820 [ 405.466586][T10881] ? __pfx_dynamic_dname+0x10/0x10 [ 405.466611][T10881] ? tomoyo_encode2+0xfb/0x3c0 [ 405.466640][T10881] tomoyo_encode2+0xfb/0x3c0 [ 405.466666][T10881] tomoyo_encode+0x29/0x50 [ 405.466689][T10881] tomoyo_realpath_from_path+0x18c/0x690 [ 405.466720][T10881] tomoyo_path_number_perm+0x23c/0x580 [ 405.466764][T10881] ? tomoyo_path_number_perm+0x22e/0x580 [ 405.466788][T10881] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 405.466810][T10881] ? get_pid_task+0x106/0x250 [ 405.466853][T10881] ? find_held_lock+0x2b/0x80 [ 405.466874][T10881] ? __fget_files+0x215/0x3d0 [ 405.466890][T10881] ? hook_file_ioctl_common+0x140/0x440 [ 405.466911][T10881] ? __fget_files+0x215/0x3d0 [ 405.466929][T10881] ? __fget_files+0x21f/0x3d0 [ 405.466948][T10881] security_file_ioctl_compat+0xd3/0x230 [ 405.466972][T10881] __ia32_compat_sys_ioctl+0xc2/0x360 [ 405.467001][T10881] __do_fast_syscall_32+0xe7/0x970 [ 405.467026][T10881] ? lockdep_hardirqs_on+0x78/0x100 [ 405.467049][T10881] do_fast_syscall_32+0x32/0x70 [ 405.467071][T10881] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 405.467092][T10881] RIP: 0023:0xf7f53fec [ 405.467114][T10881] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 405.467121][T10881] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 405.467139][T10881] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b1b [ 405.467150][T10881] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.467159][T10881] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 405.467168][T10881] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 405.467177][T10881] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 405.467197][T10881] [ 405.467218][T10881] ERROR: Out of memory at tomoyo_realpath_from_path. [ 406.469686][T10889] overlayfs: missing 'lowerdir' [ 406.858344][ T5821] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 406.878365][ T5858] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 406.998410][ T9] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 407.029427][ T5821] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.034082][ T5821] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 407.037910][ T5821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.044567][ T5821] usb 8-1: config 0 descriptor?? [ 407.049746][ T5858] usb 7-1: Using ep0 maxpacket: 8 [ 407.065773][ T5858] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 407.076143][ T5858] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 407.091385][ T5858] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 407.106633][ T5858] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 407.122800][ T5858] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 407.138115][ T5858] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.149073][ T5858] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 407.152977][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.400981][ T5858] usb 7-1: GET_CAPABILITIES returned 0 [ 407.403539][ T5858] usbtmc 7-1:16.0: can't read capabilities [ 407.605447][ C2] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 407.609119][T10904] usbtmc 7-1:16.0: Unable to send data, error -71 [ 407.617939][ T5858] usb 7-1: USB disconnect, device number 53 [ 407.669223][ T5821] usbhid 8-1:0.0: can't add hid device: -71 [ 407.678039][ T5821] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 407.689282][ T5821] usb 8-1: USB disconnect, device number 61 [ 407.900434][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 407.903670][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 407.908110][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.912984][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 407.917518][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 407.923372][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 407.926591][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 407.931125][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.935932][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 407.940926][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 407.946811][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 407.952358][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 407.956726][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.967148][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 407.971979][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 407.993041][ T9] usb 6-1: string descriptor 0 read error: -22 [ 407.996784][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 408.000596][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.069983][ T9] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 408.452968][ T9] usb 6-1: USB disconnect, device number 36 [ 408.476790][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1411'. [ 410.822100][T10952] 9pnet_virtio: no channels available for device syz [ 412.731957][T10953] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 412.732017][T10953] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 412.732854][T10953] vhci_hcd vhci_hcd.0: Device attached [ 412.784250][T10976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.784484][T10976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.955746][T10993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1422'. [ 413.029859][ T5858] usb 42-1: SetAddress Request (6) to port 0 [ 413.030028][ T5858] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 413.566951][T10998] 9pnet_virtio: no channels available for device syz [ 413.968419][ T5821] usb 8-1: new low-speed USB device number 62 using dummy_hcd [ 414.145945][ T5821] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.150646][ T5821] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 414.155209][ T5821] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 414.159042][ T5821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.431449][ T5821] usb 8-1: config 0 descriptor?? [ 414.513732][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 414.523250][T10977] vhci_hcd: connection reset by peer [ 414.528410][T10238] vhci_hcd vhci_hcd.2: stop threads [ 414.530904][T10238] vhci_hcd vhci_hcd.2: release socket [ 414.534084][T10238] vhci_hcd vhci_hcd.2: disconnect device [ 414.587705][ T42] audit: type=1326 audit(1785667002.451:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.1.1427" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x0 [ 414.693680][T11013] tipc: Enabling of bearer rejected, failed to enable media [ 414.697749][T11013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1427'. [ 415.577008][T11027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1432'. [ 415.730070][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 415.744396][T11030] x_tables: ip6_tables: set.3 match: invalid size 48 (kernel) != (user) 32 [ 416.574635][T11037] warn_alloc: 1 callbacks suppressed [ 416.574656][T11037] syz.0.1435: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 416.584410][T11037] CPU: 3 UID: 0 PID: 11037 Comm: syz.0.1435 Not tainted syzkaller #0 PREEMPT(full) [ 416.584436][T11037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 416.584447][T11037] Call Trace: [ 416.584454][T11037] [ 416.584463][T11037] dump_stack_lvl+0x100/0x190 [ 416.584491][T11037] warn_alloc.cold+0x94/0xa8 [ 416.584511][T11037] ? __pfx_warn_alloc+0x10/0x10 [ 416.584538][T11037] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 416.584565][T11037] ? __pfx_get_page_from_freelist+0x10/0x10 [ 416.584594][T11037] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 416.584630][T11037] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 416.584655][T11037] ? stack_trace_save+0x8e/0xc0 [ 416.584681][T11037] ? __pfx_stack_trace_save+0x10/0x10 [ 416.584714][T11037] ? kasan_save_track+0x14/0x30 [ 416.584738][T11037] ? __kasan_kmalloc+0xaa/0xb0 [ 416.584758][T11037] ? __kmalloc_noprof+0x322/0x820 [ 416.584779][T11037] ? comedi_isadma_alloc+0xc6/0x620 [ 416.584810][T11037] ? pcl818_attach+0xffa/0x17d0 [ 416.584845][T11037] __alloc_pages_noprof+0xb/0x110 [ 416.584863][T11037] __dma_direct_alloc_pages.isra.0+0x47c/0x8f0 [ 416.584893][T11037] ? __pfx___dma_direct_alloc_pages.isra.0+0x10/0x10 [ 416.584920][T11037] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 416.584948][T11037] dma_direct_alloc+0x8f/0x590 [ 416.584974][T11037] dma_alloc_attrs+0x182/0x3a0 [ 416.584997][T11037] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 416.585018][T11037] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 416.585049][T11037] ? dma_direct_supported+0xca/0x220 [ 416.585075][T11037] comedi_isadma_alloc+0x331/0x620 [ 416.585104][T11037] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 416.585132][T11037] ? request_threaded_irq+0x27b/0x3e0 [ 416.585161][T11037] pcl818_attach+0xffa/0x17d0 [ 416.585191][T11037] comedi_device_attach+0x40e/0x6b0 [ 416.585214][T11037] do_devconfig_ioctl+0x1b3/0x6d0 [ 416.585239][T11037] ? comedi_unlocked_ioctl+0x180/0x3310 [ 416.585259][T11037] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 416.585295][T11037] ? tomoyo_path_number_perm+0x46d/0x580 [ 416.585317][T11037] ? kasan_save_stack+0x3f/0x50 [ 416.585338][T11037] ? kasan_save_stack+0x30/0x50 [ 416.585358][T11037] ? kasan_save_track+0x14/0x30 [ 416.585377][T11037] ? kasan_save_free_info+0x3b/0x70 [ 416.585400][T11037] comedi_unlocked_ioctl+0x860/0x3310 [ 416.585424][T11037] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 416.585479][T11037] ? kasan_quarantine_put+0x104/0x240 [ 416.585501][T11037] ? lockdep_hardirqs_on+0x78/0x100 [ 416.585527][T11037] ? find_held_lock+0x2b/0x80 [ 416.585546][T11037] ? tomoyo_path_number_perm+0x28f/0x580 [ 416.585569][T11037] ? tomoyo_path_number_perm+0x28f/0x580 [ 416.585596][T11037] ? tomoyo_path_number_perm+0x188/0x580 [ 416.585624][T11037] comedi_compat_ioctl+0x438/0xe20 [ 416.585643][T11037] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 416.585668][T11037] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 416.585694][T11037] ? do_vfs_ioctl+0x226/0x13e0 [ 416.585720][T11037] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 416.585751][T11037] ? find_held_lock+0x2b/0x80 [ 416.585773][T11037] ? __fget_files+0x215/0x3d0 [ 416.585788][T11037] ? hook_file_ioctl_common+0x140/0x440 [ 416.585816][T11037] ? __fget_files+0x21f/0x3d0 [ 416.585838][T11037] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 416.585857][T11037] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 416.585885][T11037] __do_fast_syscall_32+0xe7/0x970 [ 416.585915][T11037] do_fast_syscall_32+0x32/0x70 [ 416.585940][T11037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 416.585962][T11037] RIP: 0023:0xf702efec [ 416.585984][T11037] Code: Unable to access opcode bytes at 0xf702efc2. [ 416.585993][T11037] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 416.586011][T11037] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000040946400 [ 416.586023][T11037] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 416.586039][T11037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 416.586049][T11037] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 416.586060][T11037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 416.586081][T11037] [ 416.586193][T11037] Mem-Info: [ 416.702958][ T5821] usb 8-1: USB disconnect, device number 62 [ 416.710792][T11037] active_anon:6100 inactive_anon:143 isolated_anon:0 [ 416.710792][T11037] active_file:661 inactive_file:50212 isolated_file:0 [ 416.710792][T11037] unevictable:1769 dirty:239 writeback:0 [ 416.710792][T11037] slab_reclaimable:7779 slab_unreclaimable:54151 [ 416.710792][T11037] mapped:24110 shmem:2258 pagetables:1098 [ 416.710792][T11037] sec_pagetables:301 bounce:0 [ 416.710792][T11037] kernel_misc_reclaimable:0 [ 416.710792][T11037] free:38105 free_pcp:15 free_cma:0 [ 416.771155][T11037] Node 0 active_anon:4kB inactive_anon:48kB active_file:20kB inactive_file:560kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8832kB pagetables:1532kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 416.785256][T11037] Node 0 DMA free:2180kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:36kB free_cma:0kB [ 416.797772][T11037] lowmem_reserve[]: 0 280 280 280 280 [ 416.799890][T11037] Node 0 DMA: 17*4kB (U) 2*8kB (UM) 1*16kB (U) 13*32kB (UM) 0*64kB 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2180kB [ 416.804408][T11037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.809000][T11037] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 416.813133][T11037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.817252][T11037] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 416.821682][T11037] 50685 total pagecache pages [ 416.823837][T11037] 408 pages in swap cache [ 416.825765][T11037] Free swap = 121596kB [ 416.827596][T11037] Total swap = 124996kB [ 416.829993][T11037] 524155 pages RAM [ 416.831774][T11037] 0 pages HighMem/MovableOnly [ 416.833855][T11037] 211540 pages reserved [ 416.835772][T11037] 0 pages cma reserved [ 417.217705][T11053] netlink: 'syz.3.1439': attribute type 13 has an invalid length. [ 417.232776][T11049] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 417.238121][T11049] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 417.282397][T11049] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 417.285159][T11049] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 417.302481][T11049] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 417.305244][T11049] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 417.326597][T11049] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 417.329968][T11049] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 417.968766][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 418.005012][T11083] syzkaller0: entered promiscuous mode [ 418.007418][T11083] syzkaller0: entered allmulticast mode [ 418.387349][ T5858] usb 42-1: device descriptor read/8, error -110 [ 419.616644][ T5858] usb usb42-port1: attempt power cycle [ 420.118356][ T41] usb 7-1: new low-speed USB device number 54 using dummy_hcd [ 420.270118][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.278630][ T41] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 420.283667][ T41] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 420.286863][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.291443][ T41] usb 7-1: config 0 descriptor?? [ 420.865286][ T5858] usb usb42-port1: unable to enumerate USB device [ 421.043677][T11141] FAULT_INJECTION: forcing a failure. [ 421.043677][T11141] name failslab, interval 1, probability 1, space 0, times 0 [ 421.049812][T11141] CPU: 3 UID: 0 PID: 11141 Comm: syz.1.1450 Not tainted syzkaller #0 PREEMPT(full) [ 421.049829][T11141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 421.049836][T11141] Call Trace: [ 421.049841][T11141] [ 421.049847][T11141] dump_stack_lvl+0x100/0x190 [ 421.049865][T11141] should_fail_ex.cold+0x5/0xa [ 421.049878][T11141] should_failslab+0xc2/0x120 [ 421.049895][T11141] __kmalloc_cache_noprof+0x91/0x6c0 [ 421.049908][T11141] ? sctp_association_new+0xbb/0x2990 [ 421.049926][T11141] sctp_association_new+0xbb/0x2990 [ 421.049939][T11141] ? sctp_v4_scope+0x171/0x1a0 [ 421.049956][T11141] sctp_connect_new_asoc+0x1a8/0x770 [ 421.049971][T11141] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 421.049987][T11141] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 421.050005][T11141] sctp_sendmsg+0x1743/0x22e0 [ 421.050023][T11141] ? __pfx___might_resched+0x10/0x10 [ 421.050043][T11141] ? __pfx_sctp_sendmsg+0x10/0x10 [ 421.050057][T11141] ? aa_sk_perm+0x309/0xaa0 [ 421.050075][T11141] ? __might_fault+0xc5/0x140 [ 421.050090][T11141] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 421.050103][T11141] ? __pfx_sctp_sendmsg+0x10/0x10 [ 421.050116][T11141] inet_sendmsg+0x11c/0x140 [ 421.050136][T11141] __sys_sendto+0x453/0x4e0 [ 421.050151][T11141] ? __pfx_inet_sendmsg+0x10/0x10 [ 421.050167][T11141] ? __pfx___sys_sendto+0x10/0x10 [ 421.050192][T11141] ? fput+0x79/0x100 [ 421.050205][T11141] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 421.050224][T11141] __ia32_sys_sendto+0xdd/0x1b0 [ 421.050238][T11141] ? __do_fast_syscall_32+0x98/0x970 [ 421.050255][T11141] ? lockdep_hardirqs_on+0x78/0x100 [ 421.050270][T11141] __do_fast_syscall_32+0xe7/0x970 [ 421.050285][T11141] ? lockdep_hardirqs_on+0x78/0x100 [ 421.050301][T11141] do_fast_syscall_32+0x32/0x70 [ 421.050317][T11141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.050331][T11141] RIP: 0023:0xf7fd8fec [ 421.050346][T11141] Code: Unable to access opcode bytes at 0xf7fd8fc2. [ 421.050351][T11141] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 421.050362][T11141] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 421.050369][T11141] RDX: 000000000000fffd RSI: 00000000000000c1 RDI: 0000000080000280 [ 421.050376][T11141] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 421.050382][T11141] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 421.050389][T11141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.050402][T11141] [ 422.419976][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 422.423725][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 422.438502][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 422.597801][T11167] FAULT_INJECTION: forcing a failure. [ 422.597801][T11167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.603233][T11167] CPU: 0 UID: 0 PID: 11167 Comm: syz.0.1459 Not tainted syzkaller #0 PREEMPT(full) [ 422.603273][T11167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 422.603285][T11167] Call Trace: [ 422.603292][T11167] [ 422.603299][T11167] dump_stack_lvl+0x100/0x190 [ 422.603326][T11167] should_fail_ex.cold+0x5/0xa [ 422.603347][T11167] _copy_to_user+0x32/0xd0 [ 422.603375][T11167] simple_read_from_buffer+0xcb/0x170 [ 422.603406][T11167] proc_fail_nth_read+0x1af/0x230 [ 422.603434][T11167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.603460][T11167] ? rw_verify_area+0xce/0x6d0 [ 422.603485][T11167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.603508][T11167] vfs_read+0x1e4/0xb40 [ 422.603528][T11167] ? __pfx_vfs_read+0x10/0x10 [ 422.603542][T11167] ? find_held_lock+0x2b/0x80 [ 422.603565][T11167] ? __fget_files+0x215/0x3d0 [ 422.603584][T11167] ? __fget_files+0x21f/0x3d0 [ 422.603608][T11167] ksys_read+0x12a/0x250 [ 422.603624][T11167] ? __pfx_ksys_read+0x10/0x10 [ 422.603642][T11167] do_int80_emulation+0x14b/0x720 [ 422.603666][T11167] asm_int80_emulation+0x1a/0x20 [ 422.603681][T11167] RIP: 0023:0xf71673eb [ 422.603699][T11167] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 422.603715][T11167] RSP: 002b:00000000f53fc4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 422.603734][T11167] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 00000000f53fc5d0 [ 422.603744][T11167] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 422.603754][T11167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.603764][T11167] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 422.603774][T11167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.603795][T11167] [ 422.831199][ T41] usb 7-1: USB disconnect, device number 54 [ 423.016457][T11180] syzkaller0: entered promiscuous mode [ 423.019117][T11180] syzkaller0: entered allmulticast mode [ 423.040847][T11174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.045526][T11174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.889410][ T1488] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 424.006599][T11204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1469'. [ 424.011590][T11204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1469'. [ 424.040514][ T1488] usb 8-1: Using ep0 maxpacket: 8 [ 424.044575][ T1488] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 424.048153][ T1488] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 424.053422][ T1488] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 424.057639][ T1488] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 424.062747][ T1488] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 424.067063][ T1488] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.073033][ T1488] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 424.076894][ T1488] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.409379][ T1488] usb 8-1: GET_CAPABILITIES returned 0 [ 424.411766][ T1488] usbtmc 8-1:16.0: can't read capabilities [ 424.900709][ C2] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 424.905535][T11194] usbtmc 8-1:16.0: Unable to send data, error -71 [ 424.923431][ T41] usb 8-1: USB disconnect, device number 63 [ 425.514326][T11237] 9pnet_virtio: no channels available for device syz [ 425.560631][ T29] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 425.673227][T11244] FAULT_INJECTION: forcing a failure. [ 425.673227][T11244] name failslab, interval 1, probability 1, space 0, times 0 [ 425.681445][T11244] CPU: 0 UID: 0 PID: 11244 Comm: syz.3.1477 Not tainted syzkaller #0 PREEMPT(full) [ 425.681471][T11244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 425.681481][T11244] Call Trace: [ 425.681487][T11244] [ 425.681495][T11244] dump_stack_lvl+0x100/0x190 [ 425.681522][T11244] should_fail_ex.cold+0x5/0xa [ 425.681543][T11244] should_failslab+0xc2/0x120 [ 425.681566][T11244] kmem_cache_alloc_noprof+0x91/0x6a0 [ 425.681587][T11244] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 425.681614][T11244] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 425.681639][T11244] idr_get_free+0x52e/0xa00 [ 425.681669][T11244] idr_alloc_u32+0x1ac/0x320 [ 425.681694][T11244] ? __pfx_idr_alloc_u32+0x10/0x10 [ 425.681719][T11244] ? tcf_exts_init_ex+0x1b8/0x690 [ 425.681751][T11244] basic_change+0xb8f/0x1200 [ 425.681776][T11244] ? __pfx_basic_change+0x10/0x10 [ 425.681793][T11244] ? __mutex_unlock_slowpath+0x35d/0x930 [ 425.681826][T11244] ? __pfx_basic_change+0x10/0x10 [ 425.681843][T11244] tc_new_tfilter+0x9df/0x24a0 [ 425.681893][T11244] ? __pfx_tc_new_tfilter+0x10/0x10 [ 425.681915][T11244] ? kmem_cache_free+0x127/0x6b0 [ 425.681951][T11244] ? find_held_lock+0x2b/0x80 [ 425.681972][T11244] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 425.682002][T11244] ? __pfx_tc_new_tfilter+0x10/0x10 [ 425.682022][T11244] rtnetlink_rcv_msg+0x95e/0xe90 [ 425.682049][T11244] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 425.682079][T11244] ? ref_tracker_free+0x37e/0x6c0 [ 425.682101][T11244] netlink_rcv_skb+0x159/0x420 [ 425.682120][T11244] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 425.682147][T11244] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 425.682175][T11244] ? netlink_deliver_tap+0x1ae/0xcc0 [ 425.682197][T11244] netlink_unicast+0x585/0x850 [ 425.682221][T11244] ? __pfx_netlink_unicast+0x10/0x10 [ 425.682247][T11244] netlink_sendmsg+0x8b0/0xda0 [ 425.682270][T11244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.682293][T11244] ? apparmor_socket_sendmsg+0x15b/0x270 [ 425.682314][T11244] ____sys_sendmsg+0xa4d/0xbe0 [ 425.682353][T11244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.682375][T11244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.682405][T11244] ___sys_sendmsg+0x190/0x1e0 [ 425.682439][T11244] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.682471][T11244] ? find_held_lock+0x2b/0x80 [ 425.682507][T11244] __sys_sendmsg+0x160/0x210 [ 425.682532][T11244] ? __pfx___sys_sendmsg+0x10/0x10 [ 425.682561][T11244] ? __pfx_ksys_write+0x10/0x10 [ 425.682582][T11244] __do_fast_syscall_32+0xe7/0x970 [ 425.682605][T11244] ? lockdep_hardirqs_on+0x78/0x100 [ 425.682629][T11244] do_fast_syscall_32+0x32/0x70 [ 425.682675][T11244] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 425.682698][T11244] RIP: 0023:0xf7f67fec [ 425.682719][T11244] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 425.682727][T11244] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 425.682745][T11244] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 425.682756][T11244] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 425.682766][T11244] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 425.682776][T11244] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 425.682786][T11244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 425.682809][T11244] [ 425.709720][ T29] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 425.807945][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.811530][ T29] usb 6-1: config 0 has no interface number 0 [ 425.813650][ T29] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 425.817353][ T29] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 425.822581][ T29] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 425.825820][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.839748][ T29] usb 6-1: config 0 descriptor?? [ 425.842341][T11224] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 425.861449][ T29] ldusb 6-1:0.55: Interrupt in endpoint not found [ 425.916661][T11254] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1479'. [ 426.038817][T11263] 9pnet_virtio: no channels available for device syz [ 427.205106][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 427.214936][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 427.232831][T11271] macsec1: entered promiscuous mode [ 427.232943][T11271] dummy0: entered promiscuous mode [ 427.233387][T11271] macsec1: entered allmulticast mode [ 427.233397][T11271] dummy0: entered allmulticast mode [ 428.258800][ T5891] usb 6-1: USB disconnect, device number 37 [ 428.554772][T11310] vlan1: entered allmulticast mode [ 428.556532][T11310] veth0_vlan: entered allmulticast mode [ 428.586451][T11311] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 428.651081][T11316] mmap: syz.1.1491 (11316): VmData 37507072 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 428.839736][T11324] syzkaller0: entered promiscuous mode [ 428.842150][T11324] syzkaller0: entered allmulticast mode [ 428.958419][ T29] usb 8-1: new low-speed USB device number 64 using dummy_hcd [ 428.959792][ T5891] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 428.966505][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1494'. [ 429.057717][T11328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.061780][T11328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.098370][ T5858] usb 7-1: new low-speed USB device number 55 using dummy_hcd [ 429.110003][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 429.113109][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 429.117404][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.122247][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 429.126906][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 429.128335][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 429.134271][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 429.134820][ T5891] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 429.137379][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 429.140260][ T5891] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 429.144501][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.144527][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 429.144546][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 429.149144][ T5891] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 429.154908][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 429.158045][ T5891] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 429.162596][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 429.165567][ T5891] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 429.165583][ T5891] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.165611][ T5891] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.168991][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.172180][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.197824][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 429.202493][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 429.210506][ T29] usb 8-1: string descriptor 0 read error: -22 [ 429.213240][ T29] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 429.216940][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.228520][ T29] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 429.270030][ T5858] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 429.273738][ T5858] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.277314][ T5858] usb 7-1: config 0 has no interface number 0 [ 429.279661][ T5858] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 429.283317][ T5858] usb 7-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.287150][ T5858] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 429.290338][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.295130][ T5858] usb 7-1: config 0 descriptor?? [ 429.298709][ T5858] ldusb 7-1:0.55: Interrupt in endpoint not found [ 429.378789][ T5891] usb 6-1: GET_CAPABILITIES returned 0 [ 429.380704][ T5891] usbtmc 6-1:16.0: can't read capabilities [ 429.580264][ T5891] usb 6-1: USB disconnect, device number 38 [ 429.823151][T11330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.826499][T11330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.835247][ T5891] IPVS: starting estimator thread 0... [ 429.928310][T11331] IPVS: using max 43 ests per chain, 103200 per kthread [ 431.532774][T11365] 9pnet_virtio: no channels available for device syz [ 431.642756][ T8173] usb 8-1: USB disconnect, device number 64 [ 431.779243][ T10] usb 7-1: USB disconnect, device number 55 [ 432.137836][T11373] 9pnet_virtio: no channels available for device syz [ 432.460282][T11369] pci_bus 0000:01: busn_res: [bus 01] is released [ 432.998292][ T41] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 433.168296][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 433.171993][ T41] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 433.175543][ T41] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 433.188338][ T41] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 433.194694][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 433.202408][ T41] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 433.206062][ T41] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 433.212555][ T41] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 433.218458][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.236984][ T41] usb 8-1: config 0 descriptor?? [ 433.455552][ T41] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 435.952933][ T10] usb 8-1: USB disconnect, device number 65 [ 436.433391][ T10] usblp0: removed [ 436.761412][T11425] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 437.528998][T11438] 9pnet_virtio: no channels available for device syz [ 437.618898][ T10] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 437.778462][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 437.787494][ T10] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 437.793695][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 437.797988][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 437.804084][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 437.810373][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 437.816414][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.822730][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 437.826516][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.080273][ T10] usb 8-1: GET_CAPABILITIES returned 0 [ 438.084728][ T10] usbtmc 8-1:16.0: can't read capabilities [ 438.281018][ C3] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 438.284399][T11432] usbtmc 8-1:16.0: Unable to send data, error -71 [ 438.287149][ T5891] usb 8-1: USB disconnect, device number 66 [ 438.956652][T11459] tmpfs: Unknown parameter 'nr_blhcks' [ 439.064672][ T42] audit: type=1800 audit(1785667026.931:5): pid=11459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1523" name="file0" dev="overlay" ino=2301 res=0 errno=0 [ 439.323853][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1524'. [ 439.335087][T11463] FAULT_INJECTION: forcing a failure. [ 439.335087][T11463] name failslab, interval 1, probability 1, space 0, times 0 [ 439.339932][T11463] CPU: 1 UID: 0 PID: 11463 Comm: syz.1.1524 Not tainted syzkaller #0 PREEMPT(full) [ 439.339950][T11463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 439.339957][T11463] Call Trace: [ 439.339962][T11463] [ 439.339980][T11463] dump_stack_lvl+0x100/0x190 [ 439.340000][T11463] should_fail_ex.cold+0x5/0xa [ 439.340013][T11463] should_failslab+0xc2/0x120 [ 439.340030][T11463] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 439.340045][T11463] ? __alloc_skb+0x5b7/0x710 [ 439.340060][T11463] ? __alloc_skb+0x140/0x710 [ 439.340077][T11463] __alloc_skb+0x140/0x710 [ 439.340091][T11463] ? __alloc_skb+0x5b7/0x710 [ 439.340105][T11463] ? __pfx___alloc_skb+0x10/0x10 [ 439.340120][T11463] ? security_socket_getpeersec_dgram+0xe8/0x280 [ 439.340137][T11463] ? security_socket_getpeersec_dgram+0x51/0x280 [ 439.340155][T11463] netlink_alloc_large_skb+0x69/0x150 [ 439.340170][T11463] netlink_sendmsg+0x680/0xda0 [ 439.340185][T11463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.340200][T11463] ? apparmor_socket_sendmsg+0x15b/0x270 [ 439.340215][T11463] ____sys_sendmsg+0xa4d/0xbe0 [ 439.340227][T11463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.340240][T11463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.340264][T11463] ? __css_rstat_updated+0x1ce/0x5a0 [ 439.340285][T11463] ? __lock_acquire+0x49f/0x1a40 [ 439.340306][T11463] ___sys_sendmsg+0x190/0x1e0 [ 439.340319][T11463] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.340332][T11463] ? find_held_lock+0x2b/0x80 [ 439.340351][T11463] ? find_held_lock+0x2b/0x80 [ 439.340372][T11463] __sys_sendmsg+0x160/0x210 [ 439.340389][T11463] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.340412][T11463] ? exit_to_user_mode_loop+0x166/0x6f0 [ 439.340424][T11463] ? rcu_is_watching+0x12/0xc0 [ 439.340440][T11463] __do_fast_syscall_32+0xe7/0x970 [ 439.340460][T11463] ? lockdep_hardirqs_on+0x78/0x100 [ 439.340476][T11463] do_fast_syscall_32+0x32/0x70 [ 439.340491][T11463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.340506][T11463] RIP: 0023:0xf7fd8fec [ 439.340521][T11463] Code: Unable to access opcode bytes at 0xf7fd8fc2. [ 439.340526][T11463] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 439.340538][T11463] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080009b40 [ 439.340545][T11463] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 439.340552][T11463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.340558][T11463] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 439.340565][T11463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.340579][T11463] [ 439.546214][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.867788][T11472] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 440.468329][ T5821] usb 8-1: new low-speed USB device number 67 using dummy_hcd [ 440.692534][ T5821] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 440.737753][ T5821] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.742270][ T5821] usb 8-1: config 0 has no interface number 0 [ 440.744262][ T5821] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 440.747664][ T5821] usb 8-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.754369][ T5821] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 440.757263][ T5821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.763468][ T5821] usb 8-1: config 0 descriptor?? [ 440.769468][ T5821] ldusb 8-1:0.55: Interrupt in endpoint not found [ 441.907371][T11511] ptrace attach of "/syz-executor exec"[11509] was attempted by "/syz-executor exec"[11511] [ 443.179829][ T5821] usb 8-1: USB disconnect, device number 67 [ 443.955386][T11528] 9pnet_virtio: no channels available for device syz [ 445.675285][T11542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1539'. [ 445.699018][T11544] FAULT_INJECTION: forcing a failure. [ 445.699018][T11544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.703681][T11544] CPU: 3 UID: 0 PID: 11544 Comm: syz.3.1540 Not tainted syzkaller #0 PREEMPT(full) [ 445.703697][T11544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 445.703704][T11544] Call Trace: [ 445.703709][T11544] [ 445.703714][T11544] dump_stack_lvl+0x100/0x190 [ 445.703733][T11544] should_fail_ex.cold+0x5/0xa [ 445.703746][T11544] _copy_to_user+0x32/0xd0 [ 445.703768][T11544] ethtool_get_settings+0x3ab/0x590 [ 445.703788][T11544] ? __pfx_ethtool_get_settings+0x10/0x10 [ 445.703806][T11544] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 445.703823][T11544] ? do_fast_syscall_32+0x32/0x70 [ 445.703840][T11544] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.703862][T11544] dev_ethtool+0xc88/0x6bb0 [ 445.703883][T11544] ? tomoyo_path_number_perm+0x46d/0x580 [ 445.703902][T11544] ? __pfx_dev_ethtool+0x10/0x10 [ 445.703917][T11544] ? tomoyo_path_number_perm+0x46d/0x580 [ 445.703931][T11544] ? kasan_save_stack+0x3f/0x50 [ 445.703945][T11544] ? kasan_save_track+0x14/0x30 [ 445.703959][T11544] ? __kasan_slab_free+0x5f/0x80 [ 445.703973][T11544] ? kfree+0x22b/0x6c0 [ 445.703982][T11544] ? tomoyo_path_number_perm+0x46d/0x580 [ 445.703996][T11544] ? security_file_ioctl_compat+0xd3/0x230 [ 445.704010][T11544] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 445.704025][T11544] ? __do_fast_syscall_32+0xe7/0x970 [ 445.704040][T11544] ? do_fast_syscall_32+0x32/0x70 [ 445.704055][T11544] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.704084][T11544] ? kasan_quarantine_put+0x104/0x240 [ 445.704098][T11544] ? lockdep_hardirqs_on+0x78/0x100 [ 445.704115][T11544] ? __lock_acquire+0x49f/0x1a40 [ 445.704139][T11544] ? find_held_lock+0x2b/0x80 [ 445.704153][T11544] ? dev_load+0x8e/0x240 [ 445.704168][T11544] ? dev_load+0x8e/0x240 [ 445.704185][T11544] dev_ioctl+0x63b/0x1070 [ 445.704202][T11544] compat_sock_ioctl+0x4f9/0x760 [ 445.704218][T11544] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 445.704230][T11544] ? hook_file_ioctl_common+0x140/0x440 [ 445.704248][T11544] ? __fget_files+0x21f/0x3d0 [ 445.704261][T11544] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 445.704274][T11544] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 445.704292][T11544] __do_fast_syscall_32+0xe7/0x970 [ 445.704308][T11544] ? lockdep_hardirqs_on+0x78/0x100 [ 445.704323][T11544] do_fast_syscall_32+0x32/0x70 [ 445.704339][T11544] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.704353][T11544] RIP: 0023:0xf7f67fec [ 445.704368][T11544] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 445.704377][T11544] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 445.704389][T11544] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008946 [ 445.704396][T11544] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.704402][T11544] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.704408][T11544] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 445.704415][T11544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.704428][T11544] [ 445.950828][T11549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1543'. [ 446.129245][ T41] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 446.198932][T11558] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 446.208743][T11558] pci 0000:00:04.0: PCI bridge to [bus 01] [ 446.210914][T11558] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 446.213359][T11558] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 446.217424][T11558] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 446.220719][T11558] pci 0000:00:04.0: enabling Extended Tags [ 446.241550][T11558] pci 0000:00:04.0: Adding to iommu group 4 [ 446.264435][T11558] pci 0000:00:04.0: PCI bridge to [bus 01] [ 446.269056][T11558] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 446.275418][T11558] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 446.280294][T11558] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 446.283320][T11558] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 446.286584][T11558] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 446.288341][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 446.289565][T11558] pci 0000:00:04.0: PCI bridge to [bus 01] [ 446.293212][T11558] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 446.294208][ T41] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 446.297317][T11558] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 446.301797][ T41] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 446.305637][T11558] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 446.310188][ T41] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 446.331938][ T41] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 446.338489][ T41] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 446.352528][ T41] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.364310][ T41] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 446.369298][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.392589][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'. [ 446.422755][T11558] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 446.440089][T11558] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 446.450027][T11560] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.767141][ T41] usb 8-1: GET_CAPABILITIES returned 0 [ 446.770281][ T41] usbtmc 8-1:16.0: can't read capabilities [ 446.832110][T11560] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.132324][T11560] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.202921][ T41] usb 8-1: USB disconnect, device number 68 [ 447.343187][T11567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1548'. [ 447.427271][T11560] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.568326][T11442] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 447.673213][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.698657][T10238] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.708408][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.717018][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.778311][T11442] usb 6-1: Using ep0 maxpacket: 32 [ 448.194346][T11442] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 448.198023][T11442] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 448.201708][T11442] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 448.205492][T11442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 448.209573][T11442] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 448.213494][T11442] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 448.218899][T11442] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 448.222695][T11442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.228395][T11442] usb 6-1: config 0 descriptor?? [ 448.614193][T11442] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 448.709006][T11442] usb 6-1: USB disconnect, device number 39 [ 448.719047][T11442] usblp0: removed [ 449.271601][T11595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.482453][T11609] read descriptors [ 450.557854][T11616] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 450.868446][ T55] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 450.937578][ T5749] ffs_data_put(): freeing [ 451.029174][ T55] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 451.862384][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.865212][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.871357][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 451.875686][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.879616][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.888409][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 451.892217][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.898409][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.903145][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 451.907136][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.911256][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.916324][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 451.921329][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.924949][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.929588][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 451.944925][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.949060][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.952864][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 451.956800][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.960813][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.966130][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 451.970201][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.974009][ T55] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.979412][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 451.984196][ T55] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 451.987995][ T55] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 451.991655][ T55] usb 7-1: Product: syz [ 451.993352][ T55] usb 7-1: Manufacturer: syz [ 451.996060][ T55] usb 7-1: SerialNumber: syz [ 452.008064][ T55] usb 7-1: config 0 descriptor?? [ 452.016050][ T55] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 452.976040][T11650] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 453.138273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 453.421388][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1580'. [ 453.618718][ C3] usb 7-1: yurex_control_callback - control failed: -2 [ 453.621354][T11641] FAULT_INJECTION: forcing a failure. [ 453.621354][T11641] name failslab, interval 1, probability 1, space 0, times 0 [ 453.631209][T11641] CPU: 1 UID: 0 PID: 11641 Comm: syz.2.1566 Not tainted syzkaller #0 PREEMPT(full) [ 453.631231][T11641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 453.631244][T11641] Call Trace: [ 453.631255][T11641] [ 453.631260][T11641] dump_stack_lvl+0x100/0x190 [ 453.631340][T11641] should_fail_ex.cold+0x5/0xa [ 453.631359][T11641] should_failslab+0xc2/0x120 [ 453.631380][T11641] __kmalloc_cache_noprof+0x91/0x6c0 [ 453.631398][T11641] ? mark_held_locks+0x40/0x70 [ 453.631433][T11641] ? dummy_urb_enqueue+0xa3/0x880 [ 453.631494][T11641] dummy_urb_enqueue+0xa3/0x880 [ 453.631506][T11641] ? usb_hcd_map_urb_for_dma+0x28a/0x1190 [ 453.631527][T11641] usb_hcd_submit_urb+0x268/0x2150 [ 453.631540][T11641] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 453.631555][T11641] usb_submit_urb+0x827/0x19b0 [ 453.631570][T11641] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 453.631618][T11641] yurex_write+0x413/0x910 [ 453.631643][T11641] ? __pfx_yurex_write+0x10/0x10 [ 453.631659][T11641] ? get_pid_task+0xfc/0x250 [ 453.631679][T11641] ? __pfx_autoremove_wake_function+0x10/0x10 [ 453.631704][T11641] ? bpf_lsm_file_permission+0x9/0x10 [ 453.631721][T11641] ? security_file_permission+0x76/0x210 [ 453.631758][T11641] ? rw_verify_area+0xce/0x6d0 [ 453.631788][T11641] vfs_write+0x2aa/0x1050 [ 453.631799][T11641] ? __pfx_yurex_write+0x10/0x10 [ 453.631817][T11641] ? __pfx_vfs_write+0x10/0x10 [ 453.631826][T11641] ? find_held_lock+0x2b/0x80 [ 453.631839][T11641] ? __fget_files+0x215/0x3d0 [ 453.631849][T11641] ? __fget_files+0x215/0x3d0 [ 453.631862][T11641] ? __fget_files+0x21f/0x3d0 [ 453.631876][T11641] ksys_write+0x12a/0x250 [ 453.631886][T11641] ? __pfx_ksys_write+0x10/0x10 [ 453.631895][T11641] ? ksys_write+0x1ac/0x250 [ 453.631905][T11641] ? __pfx_ksys_write+0x10/0x10 [ 453.631918][T11641] __do_fast_syscall_32+0xe7/0x970 [ 453.631940][T11641] ? lockdep_hardirqs_on+0x78/0x100 [ 453.631956][T11641] do_fast_syscall_32+0x32/0x70 [ 453.631972][T11641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 453.631986][T11641] RIP: 0023:0xf7f53fec [ 453.632001][T11641] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 453.632011][T11641] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 453.632023][T11641] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 453.632030][T11641] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.632036][T11641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.632042][T11641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.632048][T11641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.632062][T11641] [ 453.632099][T11641] yurex 7-1:0.0: yurex_write - failed to send bulk msg, error -12 [ 453.982782][ T1488] usb 7-1: USB disconnect, device number 56 [ 454.363791][ T1488] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 454.817626][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'. [ 455.608304][ T1488] usb 7-1: new low-speed USB device number 57 using dummy_hcd [ 455.785004][T11709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1593'. [ 455.830563][ T1488] usb 7-1: device descriptor read/64, error -71 [ 455.972554][T11704] gfs2: Unknown parameter 'barrier;"Z$?'ܙDTOZ]GG)߾} [ 455.972554][T11704] ~|O['IaO-ql& [ 455.972554][T11704] ϱp::{nt!%oP`' [ 456.078428][ T1488] usb 7-1: new low-speed USB device number 58 using dummy_hcd [ 456.284391][ T1488] usb 7-1: device descriptor read/64, error -71 [ 456.389204][ T1488] usb usb7-port1: attempt power cycle [ 456.728452][ T1488] usb 7-1: new low-speed USB device number 59 using dummy_hcd [ 456.751719][ T1488] usb 7-1: device descriptor read/8, error -71 [ 457.148657][ T1488] usb 7-1: new low-speed USB device number 60 using dummy_hcd [ 457.349017][ T1488] usb 7-1: device descriptor read/8, error -71 [ 457.472830][ T1488] usb usb7-port1: unable to enumerate USB device [ 457.901220][T11736] 9pnet_virtio: no channels available for device syz [ 458.804573][T11747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1603'. [ 459.983961][T11760] syz.0.1606 (11760): drop_caches: 2 [ 460.052860][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1609'. [ 460.065178][T11768] bond2: entered promiscuous mode [ 460.067366][T11768] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.123393][T11768] ipvlan2: entered allmulticast mode [ 460.125581][T11768] bond2: entered allmulticast mode [ 460.135980][T11768] ipvlan3: entered allmulticast mode [ 461.284546][T11788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1616'. [ 461.460820][ T29] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 461.613087][ T29] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 461.617857][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.623252][ T29] usb 6-1: config 0 has no interface number 0 [ 461.626231][ T29] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 461.631795][ T29] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.640830][ T29] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 461.645739][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.657815][ T29] usb 6-1: config 0 descriptor?? [ 461.669660][ T29] ldusb 6-1:0.55: Interrupt in endpoint not found [ 463.773799][ T5891] usb 6-1: USB disconnect, device number 40 [ 466.413251][T11833] Invalid argument reading file caps for ./file0 [ 466.432665][T11834] 9p: Bad value for 'wfdno' [ 467.339551][T11836] FAULT_INJECTION: forcing a failure. [ 467.339551][T11836] name failslab, interval 1, probability 1, space 0, times 0 [ 467.344704][T11836] CPU: 0 UID: 0 PID: 11836 Comm: syz.1.1629 Not tainted syzkaller #0 PREEMPT(full) [ 467.344728][T11836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 467.344738][T11836] Call Trace: [ 467.344745][T11836] [ 467.344752][T11836] dump_stack_lvl+0x100/0x190 [ 467.344780][T11836] should_fail_ex.cold+0x5/0xa [ 467.344800][T11836] should_failslab+0xc2/0x120 [ 467.344824][T11836] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 467.344849][T11836] ? kvasprintf_const+0x66/0x1a0 [ 467.344870][T11836] kvasprintf+0xbc/0x150 [ 467.344895][T11836] ? __pfx_kvasprintf+0x10/0x10 [ 467.344921][T11836] ? acpi_dev_for_each_child+0x88/0xc0 [ 467.344946][T11836] ? find_held_lock+0x2b/0x80 [ 467.344971][T11836] kvasprintf_const+0x66/0x1a0 [ 467.344988][T11836] kobject_set_name_vargs+0x5a/0x140 [ 467.345009][T11836] dev_set_name+0xc7/0x100 [ 467.345029][T11836] ? __pfx_dev_set_name+0x10/0x10 [ 467.345053][T11836] ? set_primary_fwnode+0x11a/0x2a0 [ 467.345068][T11836] ? pci_dev_assign_slot+0x151/0x1b0 [ 467.345089][T11836] pci_setup_device+0x5f5/0x2500 [ 467.345112][T11836] ? __pfx_pci_setup_device+0x10/0x10 [ 467.345135][T11836] ? kasan_save_track+0x14/0x30 [ 467.345155][T11836] ? __kasan_kmalloc+0xaa/0xb0 [ 467.345176][T11836] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 467.345195][T11836] ? lockdep_init_map_type+0x5c/0x250 [ 467.345211][T11836] ? __raw_spin_lock_init+0x3a/0x110 [ 467.345234][T11836] pci_scan_single_device+0x1ac/0x240 [ 467.345254][T11836] ? __pfx_pci_scan_single_device+0x10/0x10 [ 467.345272][T11836] ? lockdep_hardirqs_on+0x78/0x100 [ 467.345305][T11836] pci_scan_slot+0x1c9/0x7c0 [ 467.345327][T11836] ? __pfx_pci_scan_slot+0x10/0x10 [ 467.345348][T11836] ? rcu_is_watching+0x12/0xc0 [ 467.345384][T11836] pci_scan_child_bus_extend+0x6b/0x7b0 [ 467.345403][T11836] ? pci_find_next_bus+0x60/0xb0 [ 467.345429][T11836] pci_rescan_bus+0x18/0x40 [ 467.345449][T11836] rescan_store+0xfb/0x130 [ 467.345468][T11836] ? __pfx_rescan_store+0x10/0x10 [ 467.345487][T11836] ? sysfs_file_kobj+0xe4/0x290 [ 467.345511][T11836] ? __pfx_rescan_store+0x10/0x10 [ 467.345529][T11836] bus_attr_store+0x74/0xb0 [ 467.345546][T11836] ? __pfx_bus_attr_store+0x10/0x10 [ 467.345562][T11836] sysfs_kf_write+0xf2/0x150 [ 467.345585][T11836] kernfs_fop_write_iter+0x3e0/0x5f0 [ 467.345604][T11836] ? __pfx_sysfs_kf_write+0x10/0x10 [ 467.345628][T11836] vfs_write+0x6ac/0x1050 [ 467.345645][T11836] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 467.345667][T11836] ? __pfx_vfs_write+0x10/0x10 [ 467.345680][T11836] ? find_held_lock+0x2b/0x80 [ 467.345715][T11836] ksys_write+0x12a/0x250 [ 467.345731][T11836] ? __pfx_ksys_write+0x10/0x10 [ 467.345745][T11836] ? ksys_write+0x1ac/0x250 [ 467.345761][T11836] ? __pfx_ksys_write+0x10/0x10 [ 467.345780][T11836] __do_fast_syscall_32+0xe7/0x970 [ 467.345802][T11836] ? lockdep_hardirqs_on+0x78/0x100 [ 467.345825][T11836] do_fast_syscall_32+0x32/0x70 [ 467.345848][T11836] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.345868][T11836] RIP: 0023:0xf7fd8fec [ 467.345889][T11836] Code: Unable to access opcode bytes at 0xf7fd8fc2. [ 467.345896][T11836] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 467.345913][T11836] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800001c0 [ 467.345923][T11836] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.345931][T11836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.345939][T11836] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 467.345946][T11836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.345969][T11836] [ 467.346113][T11836] pci (null): [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 467.470862][T11836] pci (null): BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 467.611167][T11836] pci (null): BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 467.613556][T11836] pci (null): ROM [mem 0xfeae0000-0xfeaeffff pref] [ 467.616879][T11836] ------------[ cut here ]------------ [ 467.619149][T11836] ret < 0 [ 467.619160][T11836] WARNING: drivers/pci/probe.c:2768 at pci_device_add+0x133b/0x1810, CPU#0: syz.1.1629/11836 [ 467.623299][T11836] Modules linked in: [ 467.626608][T11836] CPU: 0 UID: 0 PID: 11836 Comm: syz.1.1629 Not tainted syzkaller #0 PREEMPT(full) [ 467.629643][T11836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 467.632855][T11836] RIP: 0010:pci_device_add+0x133b/0x1810 [ 467.634638][T11836] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 28 f4 ff ff e8 38 3a b0 fc 90 0f 0b 90 90 0f 0b 90 e9 0e f7 ff ff e8 26 3a b0 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 18 3a b0 fc 90 0f 0b 90 e9 11 fa ff ff [ 467.640731][T11836] RSP: 0000:ffffc90003487910 EFLAGS: 00010293 [ 467.642798][T11836] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: ffffffff85596e59 [ 467.645802][T11836] RDX: ffff888000880000 RSI: ffffffff855973da RDI: ffff888000880000 [ 467.648922][T11836] RBP: ffff88801c2e5000 R08: 0000000000000005 R09: 0000000000000000 [ 467.651531][T11836] R10: 00000000ffffffea R11: 0000000000000000 R12: ffff88802110f028 [ 467.653990][T11836] R13: ffff88802110f000 R14: 0000000000000001 R15: ffff888020d16000 [ 467.656477][T11836] FS: 0000000000000000(0000) GS:ffff888096bdf000(0063) knlGS:00000000f5454b40 [ 467.659415][T11836] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 467.661469][T11836] CR2: 00007fbb48b61a90 CR3: 000000007274e000 CR4: 0000000000352ef0 [ 467.663965][T11836] Call Trace: [ 467.665029][T11836] [ 467.665973][T11836] ? __pfx_pci_device_add+0x10/0x10 [ 467.667628][T11836] ? __raw_spin_lock_init+0x3a/0x110 [ 467.669355][T11836] pci_scan_single_device+0x1d0/0x240 [ 467.671040][T11836] ? __pfx_pci_scan_single_device+0x10/0x10 [ 467.672851][T11836] ? lockdep_hardirqs_on+0x78/0x100 [ 467.674492][T11836] pci_scan_slot+0x1c9/0x7c0 [ 467.675955][T11836] ? __pfx_pci_scan_slot+0x10/0x10 [ 467.677568][T11836] ? rcu_is_watching+0x12/0xc0 [ 467.679174][T11836] pci_scan_child_bus_extend+0x6b/0x7b0 [ 467.681012][T11836] ? pci_find_next_bus+0x60/0xb0 [ 467.682608][T11836] pci_rescan_bus+0x18/0x40 [ 467.684046][T11836] rescan_store+0xfb/0x130 [ 467.685460][T11836] ? __pfx_rescan_store+0x10/0x10 [ 467.687064][T11836] ? sysfs_file_kobj+0xe4/0x290 [ 467.688748][T11836] ? __pfx_rescan_store+0x10/0x10 [ 467.690376][T11836] bus_attr_store+0x74/0xb0 [ 467.691842][T11836] ? __pfx_bus_attr_store+0x10/0x10 [ 467.693472][T11836] sysfs_kf_write+0xf2/0x150 [ 467.694946][T11836] kernfs_fop_write_iter+0x3e0/0x5f0 [ 467.696608][T11836] ? __pfx_sysfs_kf_write+0x10/0x10 [ 467.701098][T11836] vfs_write+0x6ac/0x1050 [ 467.702539][T11836] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 467.704283][T11836] ? __pfx_vfs_write+0x10/0x10 [ 467.705897][T11836] ? find_held_lock+0x2b/0x80 [ 467.707411][T11836] ksys_write+0x12a/0x250 [ 467.708864][T11836] ? __pfx_ksys_write+0x10/0x10 [ 467.710324][T11836] ? ksys_write+0x1ac/0x250 [ 467.711825][T11836] ? __pfx_ksys_write+0x10/0x10 [ 467.713345][T11836] __do_fast_syscall_32+0xe7/0x970 [ 467.714986][T11836] ? lockdep_hardirqs_on+0x78/0x100 [ 467.716654][T11836] do_fast_syscall_32+0x32/0x70 [ 467.718307][T11836] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.720363][T11836] RIP: 0023:0xf7fd8fec [ 467.721682][T11836] Code: Unable to access opcode bytes at 0xf7fd8fc2. [ 467.723774][T11836] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 467.726377][T11836] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800001c0 [ 467.729019][T11836] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.731632][T11836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.734602][T11836] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 467.737791][T11836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.741257][T11836] [ 467.742500][T11836] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 467.744870][T11836] CPU: 0 UID: 0 PID: 11836 Comm: syz.1.1629 Not tainted syzkaller #0 PREEMPT(full) [ 467.748032][T11836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 467.751523][T11836] Call Trace: [ 467.752612][T11836] [ 467.753667][T11836] dump_stack_lvl+0x100/0x190 [ 467.755292][T11836] vpanic+0x552/0x970 [ 467.756681][T11836] ? __pfx_vpanic+0x10/0x10 [ 467.758124][T11836] panic+0xd1/0xe0 [ 467.759339][T11836] ? __pfx_panic+0x10/0x10 [ 467.760749][T11836] ? check_panic_on_warn+0x1f/0x90 [ 467.762429][T11836] check_panic_on_warn.cold+0x19/0x34 [ 467.764173][T11836] ? pci_device_add+0x133b/0x1810 [ 467.765754][T11836] __warn.cold+0x191/0x318 [ 467.767216][T11836] __report_bug+0x30f/0x440 [ 467.768687][T11836] ? pci_device_add+0x133b/0x1810 [ 467.770303][T11836] ? __pfx___report_bug+0x10/0x10 [ 467.771913][T11836] ? kasan_quarantine_put+0x104/0x240 [ 467.773589][T11836] ? lockdep_hardirqs_on+0x78/0x100 [ 467.775259][T11836] ? device_add+0x2c0/0x1970 [ 467.776735][T11836] ? pci_device_add+0x133b/0x1810 [ 467.778569][T11836] report_bug+0xb2/0x220 [ 467.780024][T11836] ? pci_device_add+0x133b/0x1810 [ 467.781611][T11836] handle_bug+0x16a/0x2a0 [ 467.783033][T11836] exc_invalid_op+0x17/0x50 [ 467.784480][T11836] asm_exc_invalid_op+0x1a/0x20 [ 467.786006][T11836] RIP: 0010:pci_device_add+0x133b/0x1810 [ 467.787767][T11836] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 28 f4 ff ff e8 38 3a b0 fc 90 0f 0b 90 90 0f 0b 90 e9 0e f7 ff ff e8 26 3a b0 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 18 3a b0 fc 90 0f 0b 90 e9 11 fa ff ff [ 467.793712][T11836] RSP: 0000:ffffc90003487910 EFLAGS: 00010293 [ 467.795612][T11836] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: ffffffff85596e59 [ 467.797973][T11836] RDX: ffff888000880000 RSI: ffffffff855973da RDI: ffff888000880000 [ 467.800404][T11836] RBP: ffff88801c2e5000 R08: 0000000000000005 R09: 0000000000000000 [ 467.802561][T11836] R10: 00000000ffffffea R11: 0000000000000000 R12: ffff88802110f028 [ 467.804955][T11836] R13: ffff88802110f000 R14: 0000000000000001 R15: ffff888020d16000 [ 467.807483][T11836] ? pci_device_add+0xdb9/0x1810 [ 467.809097][T11836] ? pci_device_add+0x133a/0x1810 [ 467.810694][T11836] ? __pfx_pci_device_add+0x10/0x10 [ 467.812313][T11836] ? __raw_spin_lock_init+0x3a/0x110 [ 467.813972][T11836] pci_scan_single_device+0x1d0/0x240 [ 467.815679][T11836] ? __pfx_pci_scan_single_device+0x10/0x10 [ 467.817531][T11836] ? lockdep_hardirqs_on+0x78/0x100 [ 467.819208][T11836] pci_scan_slot+0x1c9/0x7c0 [ 467.820656][T11836] ? __pfx_pci_scan_slot+0x10/0x10 [ 467.822255][T11836] ? rcu_is_watching+0x12/0xc0 [ 467.823784][T11836] pci_scan_child_bus_extend+0x6b/0x7b0 [ 467.825293][T11836] ? pci_find_next_bus+0x60/0xb0 [ 467.826839][T11836] pci_rescan_bus+0x18/0x40 [ 467.828262][T11836] rescan_store+0xfb/0x130 [ 467.829794][T11836] ? __pfx_rescan_store+0x10/0x10 [ 467.831506][T11836] ? sysfs_file_kobj+0xe4/0x290 [ 467.833051][T11836] ? __pfx_rescan_store+0x10/0x10 [ 467.834666][T11836] bus_attr_store+0x74/0xb0 [ 467.836110][T11836] ? __pfx_bus_attr_store+0x10/0x10 [ 467.837754][T11836] sysfs_kf_write+0xf2/0x150 [ 467.839259][T11836] kernfs_fop_write_iter+0x3e0/0x5f0 [ 467.840951][T11836] ? __pfx_sysfs_kf_write+0x10/0x10 [ 467.842631][T11836] vfs_write+0x6ac/0x1050 [ 467.844004][T11836] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 467.845918][T11836] ? __pfx_vfs_write+0x10/0x10 [ 467.847431][T11836] ? find_held_lock+0x2b/0x80 [ 467.848960][T11836] ksys_write+0x12a/0x250 [ 467.850325][T11836] ? __pfx_ksys_write+0x10/0x10 [ 467.852263][T11836] ? ksys_write+0x1ac/0x250 [ 467.854127][T11836] ? __pfx_ksys_write+0x10/0x10 [ 467.855979][T11836] __do_fast_syscall_32+0xe7/0x970 [ 467.858011][T11836] ? lockdep_hardirqs_on+0x78/0x100 [ 467.859963][T11836] do_fast_syscall_32+0x32/0x70 [ 467.861792][T11836] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.864342][T11836] RIP: 0023:0xf7fd8fec [ 467.865662][T11836] Code: Unable to access opcode bytes at 0xf7fd8fc2. [ 467.867645][T11836] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 467.870246][T11836] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800001c0 [ 467.873240][T11836] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.875782][T11836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.878272][T11836] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 467.880755][T11836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.883517][T11836] [ 467.885332][T11836] Kernel Offset: disabled [ 467.886713][T11836] Rebooting in 86400 seconds..