last executing test programs: 11m14.348385724s ago: executing program 4 (id=2074): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f00000028c0)={&(0x7f0000001440)=@phonet={0x23, 0x1, 0x7, 0x1}, 0x80, &(0x7f0000002840)=[{&(0x7f00000014c0)="a883a8ae9e5c493b8095988c7059c582d11ce925259a7f320cffea460b4577a4dd2caa2a1671a1bce52e228255007a84e49b1af1be57a0bd672c8cd43d8b94cf413d62fd92924c49573afcac2a7f6214f685a65d6c0bc230b0b6c84abf76d9bb07e6d86650e10d1a3c0eb39af636658e7a7735b6181788ba3eb12c6622abae1191789a607fa2f5e8cccc", 0x8a}, {0x0}, {&(0x7f00000015c0)="59fc758c5a7ae9df6598a44a65d4777e812edea6dc39a898badb4bdc7cece0478e8f582e7c7d9883aea6eead5e336a0dc6c11c3893ce68da43cef85c5747d8c1b27e369141734fccda0667c7651312814273daf5b251fc4b8937bbe22006bbbcfdb095a0190f04dbcb5b520c131b3761b8ace032d9a243a8c3aedd319ca530698e7027a0bc26395b3c250b1ffc0cca211e2512d1f7704014e77b52b3199fc3799b4e91fdd2d116ff38f81c79ecf19966abbd0b784217320c507986a0b4ebf48e7bb0d856a417", 0xc6}, {&(0x7f00000016c0)="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", 0xe65}], 0x4}, 0x40000) 11m14.302796449s ago: executing program 4 (id=2075): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002640), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') lseek(r0, 0xffffeffffffffffe, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(r1, &(0x7f0000001d80)=[{0x0}, {&(0x7f0000001e00)='`', 0x1}], 0x2) 11m14.237128154s ago: executing program 4 (id=2076): syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109021b"], 0x0) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) unshare(0x8040400) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2804c3, 0x0) readv(r9, 0x0, 0x0) io_pgetevents(r7, 0x9, 0x0, &(0x7f00000002c0), &(0x7f0000000040), &(0x7f0000000300)={&(0x7f0000000100)={[0x2]}, 0x8}) io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000000c0)="01", 0x1, 0x400000}]) 11m11.668131543s ago: executing program 4 (id=2089): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010380f4090400726638405af79751180000010100000a24010f000302010209"], 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) r3 = syz_usb_connect(0x3, 0x1cb, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902", @ANYRES32=r1, @ANYRES8=r0, @ANYRESDEC=r1, @ANYRESDEC=r2], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r4, 0x3d397000) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000924060500"], 0x0) syz_usb_disconnect(r3) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) syz_usb_control_io(r3, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000001180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r6, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000440)={0x20, 0x8, 0x1, "d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0x17, 0x1, "f5"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x40, 0xf, 0x59, {0x59, 0x2, "85313dd297124124d31dc8e75a1b6adb39d59177ce73c8ead778e93ebee1dc74a361b25e3ae0901439adc93cc0f652693cd4bce9fadab1e90efca887b673686fd6c760a5f501a1d90fd699f6c05b6703407b3e302c9c4f"}}, &(0x7f0000000200)={0x0, 0x3, 0x72, @string={0x72, 0x3, "fede7b81141692ce1d8052f82817fce2ebf9266b95c2462a936fb5534cf487e6cf6438165423062aa0117894fe15b16d1082e56a90178db7a2e88f41a131180570cb9c3dba11820f424a4dd59a24287004d4ea7f1723b91e9346db1fcc8693d4b1989b85e855b03e86ada46d36cda8f3"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000480)={0x20, 0x31, 0xc6, "4a5fde39de5055794e36549b2115fbc3206269c258911686ac5c95edbc0171840c011ddd45af28cebdcb78f440e15cd4181d10d5934f13cc72dfc624d20d021ddaef7620c67cc249f6bea589fac6ca446c3be7c58b638524bc64fabb084d2fead6ab1546b630233797a86e7536f952c398d4bc4b558fc38c56d7b10e699d5606a377c08e216fca496cefcf57185e9793279c6bbb9d5ff4fdee4b58fc8e2942442c2d8ed1440ef214f02861f4c979a5bf9e09b87d108392e1e1cfae1cef94086c4ada7dd3a8f3"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x0, 0x49, {0x47, "e5958c8bde798dc68d9b64bc947e96cd31fad131909d139bc20046fb28c2b8db43cefa08abba600aa67e52802e1f6d0f40d7452a0b18e33a5c17a6ae7b4522c08ce9faade0f3c1"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x10}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x122ee}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}}, 0x20008000) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="2e003772cc9f1ba1f848000000005e140602240000000e0f000000028000001294ef5914cba95a661ac9360af06b51143097401f59cb8daba7f24e838fd84bc4cc659770d2f5d4d59ed9f4df298dd83beaa175caf04e24680bb74a5016e7f95a6d5d2d26e7b179795a7d2eba6bdb5b3b250792365e83c264afcb20d0ae12f852c51c8aecb249c6311efccbcfe2b9fcfac2e2530ab22d1a2e103b6d6da1d0f0aabe14fd35b9d52acc8909fe3375e626eebfe124c8de1440", 0xb7}], 0x1}, 0x90) 11m11.454150443s ago: executing program 4 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$nl_route(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd29, 0x10, {0x2, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) 11m11.091098836s ago: executing program 32 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$nl_route(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd29, 0x10, {0x2, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) 5.928076951s ago: executing program 0 (id=5042): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x6c, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x842e, @mcast1, 0x100}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}}]}]}, 0x6c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x404, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x6c, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x842e, @mcast1, 0x100}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}}]}]}, 0x6c}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x404, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"]) (async) 5.524446423s ago: executing program 0 (id=5047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000001780)={0x1, 0x9, 0x0, 0x7, 0x8, 0x9}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000000100)={0x14f4, 0x8, 0xa, 0x101, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x5}, [@nested={0x1008, 0x46, 0x0, 0x1, [@generic="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", @nested={0x4, 0x1}]}, @generic="c46f69ecb2f308dbe9", @generic="f0c176125d0c12308f06f7df647f3d4955", @typed={0x8, 0x62, 0x0, 0x0, @u32=0x101}, @nested={0xb8, 0x108, 0x0, 0x1, [@generic="98227f8a9b08fe4ebda11af7f55390", @typed={0x8, 0xda, 0x0, 0x0, @fd=r5}, @generic="2b35402d9ae8244c780e54024389375b86f318806d01d51b9180c58a583b8f98bb98fe084248159a02bbfaccb5e2a61e85c91a9c06438a0752d69504e1dd76d00cb4aa46915fabed19ce68f557efeeba18566cf0a4c4cd40df8f5452798b77c0493215bf50ac2e43f2bed5dd38085947645e692a2439cfbcb693db38ec1e56ef6c11950a6a867d9a70a7e22e76", @typed={0x9, 0x4b, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @nested={0x4, 0x96}]}, @generic="d6db67a6c6abf00770603f31d03bfd65f2cfc72f0337e7f248d093cf6dd87bb323e8c73ec8b939520b9f8494072921a9a751bb54a7985ce6ef654b72b0a63ed4783e0b72da8e1a47d1b1ded28ae05c2dbca2533bec2dfe26917a1487f2bb4b14a354e336d33df280db26bea215a79f585a57b0143aaecdcdbdba28215771112eadd324ae5e6e561a64cfbd3cbb0c40b02ed4ae907a5763c8e00896f69f65584818cf08795927aa16c0833e2d137b414ab45cf23bf2bd40aa2b09f7e50a39e4e92fff4d3e84148bb0a8afbb48d5140ab92baeaef1ec1c4c56d9f7c639dca3d52e654804e867d059d1bbdad33b93395883ae73", @nested={0x6c, 0x57, 0x0, 0x1, [@nested={0x4, 0x14}, @generic, @typed={0x5c, 0xbc, 0x0, 0x0, @binary="7ecc0a2490fa86dc2517868f2a3b651384e21f09b88ff351e840ebedafdfe0d7dc6dd38ac01e31068cf69cb6ffeb3d7bc5f4c7881086cf6c6b270fe079c04798e8a7f824cd96f631569fefc24b576f8ac9b484cbf324de8a"}, @typed={0x4, 0x94}, @typed={0x4, 0xda}]}, @generic="be4af237a418484d33eea85e81551a213c96f6c44f525848766b9723ff8e6ea315d4075670876f2bbfb14a3e51f8b7bbb2e66dae1ee1253758e8e6ce530c5510ba8a4df5911e392895459e1b3406d18b31933d763cad10dff84e69dad528ac0186485bffee89ea80b4ef41464906ecaeda023bb458f47a1b6ae33493d3926c72f905371103fc810b19e4e4edfe0c20d964456e1354ba623e12ca677d98369a4b2d5911597626b4de2389fed834720bac7239c67089d7dab69976923a3ac07fa1638a458656794cf96af7bc1d6b41543f68872b9c66a470", @generic="515026de61aca017af19bc6cad77789b2073b68272439fdfc85b77393b891874235fa2e80909674785fed1f701f6dee10535a2bb0dc5fe3d6594b1ff33db49ba14fa7dd573ef757d6922f77a428d37a0c415f00ab3fe9d9cb12c6df7179a6625c4ce2070026f4aa63755ee09cfd41639bfc23b2696152feb90daeb2dd53913d3c0640ffb8fe1120100a89e4c8d899f40e65182ce4c7a987d7ab19ede4c36d824790afacdd1e0d3b88d4d6bb6d2afde506f01c70612a4b44f12c24301711d01e25d9617f2e1cd267636a9738c74dc2fae941d500ba29ad47b68c9b9177f7662c77ec9d8", @generic="56ac7c33f7eaf6a947d866edd26fc704fd4ecea0f2baf3d8820045b40496d9cdf0c1b2c4a632a50c3b2957d98b02b5a0592ad19a118d4f85477c2102040b91e42806d3a996c87b690383a66a851ca17d8e6a5fd1384f20aeff9f590b9824e3e9c691ad25faf89a2dfd9993b4d714ebdbf6df7d8efa5ae82482fda7559c175c3ced014db18c543b5d587cc3c470597e79396ea4f3c4ab8f2d2bd9480e0c57fe5560212235f3347b0927bb3141ba291dcb7808c54ffbf69403f43663e6e0f071614f9fd3ea390d090ce72262cb03b18884c64167ac2f91ee2a97c41fc30d1c16cc2e0144a3e17c"]}, 0x14f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c884) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @random="4ba6224a6818", @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x10, [@private, @broadcast]}, @timestamp={0x44, 0x10, 0xd, 0x2, 0x0, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 5.402470594s ago: executing program 0 (id=5049): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r2, &(0x7f0000000600)=[{&(0x7f0000001840)="d23e534e", 0x4}], 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x1005e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000140), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000002680)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x101812, r4, 0x10000000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffff7fffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@algo_aead={0xc3, 0x12, {{'aegis256-generic\x00'}, 0x3b8, 0xc0, "026b75cdb2341bafe90b259c3c0086386429d212fdf45d8ada724627c789759383176d29c894e46fd35cfc1966f39a7adb0944f494122eafcbd4b37254ea62570eec2f697d8ab5890ff7543e0a8263297dbede994c90ed115740faf3afae72475b43324e72617b047f1f7f68870ef9fdc38316530fe110"}}]}, 0x17c}}, 0x0) sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 4.913470029s ago: executing program 2 (id=5051): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r4 = socket(0x10, 0x80002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1], 0x44}}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="781002000000025f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r6], 0x28}}, 0x0) sendto$inet(r7, &(0x7f00000001c0)="c451083b358304c2122f3e2251f498ffb1409b5e9fb26e9bc4de3361ae938723fc030bbe6573fdefa174e60f", 0x2c, 0x20000014, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x36) 4.256709943s ago: executing program 3 (id=5054): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000050086dd600a843500140600fe8000000000000000000000bbfe8000000000000000000000000000aa", @ANYRES32=0x41424344], 0x0) 3.999539356s ago: executing program 3 (id=5057): ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0505405, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x64}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1, 0x0, 0x0, 0x12}, 0x0) 3.698386898s ago: executing program 0 (id=5058): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa843, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000030b23c5c04dfbff7cab05338c42a4050095d4347f2d3939a2b59700f58b04d03291ce9011c9c7fe2c92c95ceaaa3470ceb009836702ab74c06837000000000000043e4cb1a52506d834d171e22e87428ec03635c5410d7a2ca3a04d43170c4d25"]) io_uring_enter(r4, 0x3901, 0x78f4, 0x25, &(0x7f0000000000)={[0x5]}, 0x8) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) (async) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="318f53361bc76d0f", @ANYRES64=0x3], 0x10) 3.109274113s ago: executing program 5 (id=5059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000001780)={0x1, 0x9, 0x0, 0x7, 0x8, 0x9}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000000100)={0x14f4, 0x8, 0xa, 0x101, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x5}, [@nested={0x1008, 0x46, 0x0, 0x1, [@generic="094ca7b9557793a410716bb3e81cb6b8a1e609df867d833e1a1a6bb884101fd699dbbe6c4e6bcbb70cbaceb02b9fb4f9fcdf4583b9567521bd856d9d808cfaf985e9166b40edde94e5f84d115a27f8113e1a47c95ed73c56956787d2ea0c1a0416b3d4abc53f3cf97d5c1d77c74ed5a9d29417590819ea6d485f04f743d8f492fb04550757e2708966405f73b011c8c3febdd306757ff0d7a8a5ea19aa85b763e946efabd5b9d4eb03de0cdb84c5f2f91231dd4c34a8ab9af4400b62c47b3e1b0887f6804360e016494b485729ee583c9d0b96b2d52a7d4b5022bac3b4d18b6472d749283e457c34267ef0d3bd74be790aa58a6738f1eb9a6033552a0722529c4b7529766c480229e72e7facecdf99ebf70c47a11a0614ae1de82e963c4ab0b7bb9c4b32d93a1b0531e2d85ce953dd1b1cd9f1a5e8c38fdc162fedd3eebb8b3ade9e00a9bb609eb09228b2b45cce6016a7eb6297b312839b7cb50924c0d862f93da00535cb707fcbcf2b929eafcfd9d35fccbcbd46dc2a86fe353b510cab84121d18481391db561f8fd4ca9efd64dcbd58ae4fb572b01f90f4329783a542b347bb6aca812bb07b72ed5b07390de0f8ca782a5c536d28667604455703fdd9bf7b8144df59ebd3627235a470643e1d6297cb371a1984ca6b2fc717d34361e270c23c5baf8a1dff2622eaac02e29e62999b6b0ac3b23cba38c7f758cd949b77c5cbb78762d273d7d8f5584669b6b3548f704853671232230727398a5c90aeb1a39d435784084e5aea407e2a26d046c25292ca3c1f8569ecfd42b9385aeeaed89135a7e8383abbbe63957c06264751a15942d7734908712942fe32a62a62c8d1326a634ea4b80e46b7930de769f241769104df47808bb24faf9ae63be416afcfa673af1d380b2811933640cde567f1c1a480f2639c016a06fd14a4fd724a2bf85e62a76e198fa3504405894243f2aa9d54f26202342959680610da752df24627e40e7e4dd52293aa21e3d222bc1e51d2829210989de873d641abd2399bb43d32b05e9b213e72fbf554d16f268a84552aa56f801061240a0ed7cec8d4c6ac6755c582e25ab5996c11a63ba60334525a8d71d8fc94d3977a1e72cd3564a82e31f16f97f83ed3ab73133a507382e2867f06ee40a8da095a32cba63b6239eddaa2d226c46a14645dcbe52124c0a90b18636c519cda3150702ca759c3c8d2312e6aa43ea4b800eab65173522a2db152164161bd2a76aaf0bebf22f5d47c3c7ea53cf12e4da02b7a5ac5cd55e07cbe98cd6a8ceac24ca0c220ceb7eda9652ea0d3227cfb831ff20c586108b68f3c56b1ce198c0f064e0a06cda126ecc0bb926604ca0d9792936737009ad933d63c6c13ddc120fb43da3b0a1bfebd3120190e73c9c9d6e5a0ab58ab2ec4c9f6d17f9cd8991919f0080cebd6b0221b85490407a930c7097160d94b928dd48580c42acf0dd48d60203ead3fae23c1d287aa81fd07312b1a09f21cdceebf6bdd91a772a6c9e74b94893bce12575876de43016746c64368efc92a9c5765275a58ee90e8651b8c3d3b6d91cf2dc6a11704ad187c8e3ea690283709243d04c347049cb10a3188e482f91486f720131dda589b8cb4894200c7e5fe0181fbb23e19a96373fea20cc4688f84f989bfb1e346c2100e19d7ad46a6fcc191ab84da7edf324c6ab08b75f1757bbfd2f769fa7d81a407e93567b97aa04cf67255f2c2141458bafaa82484a77b5c1176d913f2ea4f4a731a122083c2ac6893aa611346322d92f372edfe76658a6e57d70347591535c1de9bcef1e70391777c9777267a7a0166210e8b47f954ce1bfcd4630d74ebf6db955a3958c154fc726e9f8b826141cee3b65acc3e1c5904aead198bbac46196ad8863e10d5a061afcf2255c0c84534dcab0b327f2cb1c6d0e5e493bfe7c6f363127b664af1283e202be4fec84c732b3bd40541cb1e199340101349ef7d47ee2bad2d116b360bad6f2910dc4cbcb863114a80e0f9610c207b526a7db8b56e50ac0e5c6acec7dae968e53ee0eee1c7dc968e7d1b824ef10b3f8999cc3fbf4062538f6153ce1b9df96b32077d3e1204bf1d4ce349a887dfadb5d776d1c45b18137092d363626cac199aaa9b2a1536eb8b8a42bf0d8aaeeed4f972adf4a243415ea1b3c59a08ed298e285f277c90f9fbb1eec511af180c0008fa07dcaa27df31ba1ed27dda0f24cc46165ae8f3b9b0d0fc529b1d1c74d358374f7b648da959e5fffff04cf684007e52fe94e587236e9892b8c7e08ffb9a774200a04ff1033bda76fd214b4bbd1229225df6f3895cd8c51f5b6f6528672839fe303406b8e9aa889043b68c15224e20cb33ef41d108db73f5c73614477df9aac4e5f2d5f1f1c23426474151055d5d978b1d0e0c2ff41b3b03ef850cd2bc878baea0420221cd49034817781635ff7cb7f39ea02bdd9c7bf3c0bc2e90146c5c53bd9aa3a1897e7fffaa48c6082bedd8844dfda5ef868cf84cb2b9b7c2cd943eb32501ea433725337b47bc8b344c785f094ea1128d66425a313483785ece4157f4714a158e9e0c48d215f25d58781aafa614d8512d3bd649208745be8d002259ac72173db87a32e855d593944c3f24a10e2eb07a1175c20c8ccf2f371f2cddea6915487c1529fcb4c1e4a09274dfae6bc38eb9da27c258aaebe0e91e19ffcb425f1ae21b3d2450ab9822c8a1130ab48c67f1251a2ccedefdc766dbb9534ff6e7de7bb61577fd7d4ee4dece5d64352d2e6b4a841848a6ca46f700c14283d0320f24787101a1bc07bb1e9e266afb57c3d4b5bbda8530da7e40743f2c1cc9d144090ff813a1fa0b4ad46a2f7dd9300b4a6809c2d6bb8fee3636d300e4d9a6f18ce9f90fa05813a84bfb58e8b1061291957f281c1a30cb2228fd0011d62996c68b696a38d83adebd1592cc84b3e4cc2cd9ef515fb35182ccb00107ef52d5a6f0fffa5d6bfc4f22f186ee6c911a2921ef6cce63371cb267ddb11e63d0284291c6de037607916e7ec3c9035b3e72e4c1180a077881646fe8b613f876b0a9c2419cdbbe74cd9696744f919a64fab356e8291487987565cb1ef6e53197eacdd5cd87ee1cc3b77c89a7c628c4fdb75718afe750654acd109b9c9b6c05d19da6bedd6fdf94606bfad4094bd294cdf4321c9e30e26b31727f649b0e84ccca6a0d9b8362800dd2e5efe13e2a74f6d0c7e5a821ec2f74d443d76582f2d6ceda21659220be04f52cffb5bcbd71a06a5d2a5245df045f2475161dbc8807c3770f387dcde8cf19212dc86e1c62987b2c351799ec5f9633336d08e8f4086b39196388a3540938893d9cfc0354db013cbfbb40b55b0184d984485b01ebd5bff9d3a12658ecf6c62e2fe365216fe98d113c66106b6c8f0a25e742271a2ec4c12dfa47eeb6d1a302700e78c2a6f30df4fef61e691df23a6c4c71c34d2eb3c25a88b211aab940570a72c109afa31e4541df4b073b8f0a14e228ec3b84318e0f69d2b5841cee66358dc1b98a834925c599503dea82302b8e8bcba3132a46129661e6ce85a7024c0c59834176239dbc98ebaa2cff831b109637eee80ef8000ca01d184c6dac7148f828c3fdf09a595f62f041cbada87ec9c74ddc604fb107fe5377c8a77b2e7cd616111373ace627bf789fc2d21525a36915aca3cedcf84d9ef6e0d8ef6b613453bda3af433b80bad30f533f9338d151e35f53a082f073a7833311380fb0901a6c5c8e6ed283e8b3258411ab42bc523c6b7e8c45464c0da5fc82128a115e3c39f2231a7390101a51e8ebea53ea7efbc382fe8ce1c16e3c2429bfcdf606e5614eb4f33a56a9ddbf8c51b55948f5533bd3eb3fc3d8d60826521afc0660332b3f8e20c0f2e5aef3cce2b051c87d3de3f701bf8e3f854a3afef321dbd991c6fe945471c86a3a3060a9c0ba52280c4bc948fdfa6520d11bb6dbfebca37e2d4217bd68e8a87444b2af7b81b7c2c8d21603b4b52120488e1ecb0135e5fadef6236944575c3996e24cdc3a85113a361c869bbd3b0b07087c54f61c4ab2ce0d5c8d3c12b126dba5aa76b4bcd97bb96be7a9a75109663fdd28838702e63dd5e61219c49e6382916448dd72a6305504e37b853a02e5f960abb2d3e8a1a53b3d5798aa8b3a20153a87ad631eaa2a1884fd4ecf38e8189988664dd098f91e6a441503c763225fdccb87ca8ecd7180ff3aec7db1479acc4049dcbe9ef4ef9b6201bf2cea2bac18cab15de3cc4b29864ba80d42d643869c0d3af6da37c60debb7717fb2b51caac8a4b1fe4e0e1cd1e1f116dadfa0300c868eee04dc0d8d8f6d8304eaea1df672895504e7e1eabb69fa440e72b9347d96b78dcac1608036d1098121a57e5632f22afaaef1f218920436fb8f4b1ce0b5997fe5d7f53a0567125d1b7310f4923dadf947549a49e27893c8e3ae682a5c104723576eba8da96ec4b98998d1b845562899f18f03db191de052592e17a1bfb233682ad07dd4988e8aa483dcdd9af6a3a6e8fc0a741f5fba00512dcaf029add02ea345c1de568a5b5c3910f96decaa206d4bd63d27a9796153dc1dcd83b84c98c515af206c1acb0274f4c41062fc2e4161f728dea8af4287b8052f73bd01e93c58078756f6a42fc9e116085e222e91028d78cf27ae86fa5227f6c7a1d55a31a0e02dc731a3cfac3a310b91cf1cd1b5117ec189c934beb9cd09d122ec4de03d49ca6db928ddcdfa011d74e64a6eb5e463fbc78870b070645d29815b499ed3625d34a1a93a343c3d07852602d511120b850a1b38401235aabf37dcaf437f6cbddb3ba86e6835a5f0be77407c61cbaa3209792fdbdbb36d3d24e07c8c526af7bc0a1b49ba3a1d12962a43d65d28244b0b04199f91c1b2caa0d3139bdeb9f96436a3dea1f00476c9057c04b32f2b277d55c091557eeb7c450b3734d7f27ce107940b39c38bb365ab308c4781a1f3dfad7cdafc47b71369399d7132ca09b79be82631376b57c4818c87e43ce332771c678d235c6d321f0459b2c9e409ab05ace157892b170125758f2fe360824aeca59ccd6400bce94efc228d1dcb30367e3cce294fedcf0b5687d3b399686be2d219380bd962951f070c9a091387591cf38d45096b0008f28f5af8366248d0f2cb0c53e00d15d953a77832591ee9864ceda4b152180b98f94d2c2fb33a1cbae19a2d9d53306480ad565a10616aa8bb4eff2b0027d8b106fa9d3c43a40e2e71ae21d0c12aae2505f8ac3c25b49a513f55a83514f0a4740f67970bb831c3203f1effbe8b91e4ad16068a4e6941a944f8518745739dacf3e8c4396925b3dff0be60d435266dbc952b429f8e8ec910eea0bfc9959f6fb043272824e801c81815c6a6e742829bcd1a2365dbe3e13688455abe22a0ca47bbc6a23f10658eb51f02f4f308e25711c4c5015438defef083cf8e4fde94e2258279bfdd5559b734f2128f40a97a6b1f9b37069db3f5ca6b6b9e97efafe4027453e0f9fc15bb3c53fa399fb73f122e4786e3cf30a116455a6e691082d8253e04c03add1b0767247c9a2a7b4569cf59c2c0e995523dfbe5fccd1b4fa73f7a6ae72d9e1da97b1444217edf9ef5bda50f6423904987bb1d9090cd8f79bb3d05331e5f4fde302ce8692d49c0640466ba4099fabfbc5f89ccb66769afcf729e5c6c66dd8d1b8e3c204f17b8e9b15a2d31878d16dccfc487a6a64aa45c8d00dbcbe12079064f656fb224a90ce73bc8e404a0a3894fe4f8daff98d4dbb3f470904b79366a7f1a37ec94f96d4b4b6475e5a0068ad911358dab5570b5e9f70571d41076524b8850b4b9e41f7b480561722f7", @nested={0x4, 0x1}]}, @generic="c46f69ecb2f308dbe9", @generic="f0c176125d0c12308f06f7df647f3d4955", @typed={0x8, 0x62, 0x0, 0x0, @u32=0x101}, @nested={0xb8, 0x108, 0x0, 0x1, [@generic="98227f8a9b08fe4ebda11af7f55390", @typed={0x8, 0xda, 0x0, 0x0, @fd=r5}, @generic="2b35402d9ae8244c780e54024389375b86f318806d01d51b9180c58a583b8f98bb98fe084248159a02bbfaccb5e2a61e85c91a9c06438a0752d69504e1dd76d00cb4aa46915fabed19ce68f557efeeba18566cf0a4c4cd40df8f5452798b77c0493215bf50ac2e43f2bed5dd38085947645e692a2439cfbcb693db38ec1e56ef6c11950a6a867d9a70a7e22e76", @typed={0x9, 0x4b, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @nested={0x4, 0x96}]}, @generic="d6db67a6c6abf00770603f31d03bfd65f2cfc72f0337e7f248d093cf6dd87bb323e8c73ec8b939520b9f8494072921a9a751bb54a7985ce6ef654b72b0a63ed4783e0b72da8e1a47d1b1ded28ae05c2dbca2533bec2dfe26917a1487f2bb4b14a354e336d33df280db26bea215a79f585a57b0143aaecdcdbdba28215771112eadd324ae5e6e561a64cfbd3cbb0c40b02ed4ae907a5763c8e00896f69f65584818cf08795927aa16c0833e2d137b414ab45cf23bf2bd40aa2b09f7e50a39e4e92fff4d3e84148bb0a8afbb48d5140ab92baeaef1ec1c4c56d9f7c639dca3d52e654804e867d059d1bbdad33b93395883ae73", @nested={0x6c, 0x57, 0x0, 0x1, [@nested={0x4, 0x14}, @generic, @typed={0x5c, 0xbc, 0x0, 0x0, @binary="7ecc0a2490fa86dc2517868f2a3b651384e21f09b88ff351e840ebedafdfe0d7dc6dd38ac01e31068cf69cb6ffeb3d7bc5f4c7881086cf6c6b270fe079c04798e8a7f824cd96f631569fefc24b576f8ac9b484cbf324de8a"}, @typed={0x4, 0x94}, @typed={0x4, 0xda}]}, @generic="be4af237a418484d33eea85e81551a213c96f6c44f525848766b9723ff8e6ea315d4075670876f2bbfb14a3e51f8b7bbb2e66dae1ee1253758e8e6ce530c5510ba8a4df5911e392895459e1b3406d18b31933d763cad10dff84e69dad528ac0186485bffee89ea80b4ef41464906ecaeda023bb458f47a1b6ae33493d3926c72f905371103fc810b19e4e4edfe0c20d964456e1354ba623e12ca677d98369a4b2d5911597626b4de2389fed834720bac7239c67089d7dab69976923a3ac07fa1638a458656794cf96af7bc1d6b41543f68872b9c66a470", @generic="515026de61aca017af19bc6cad77789b2073b68272439fdfc85b77393b891874235fa2e80909674785fed1f701f6dee10535a2bb0dc5fe3d6594b1ff33db49ba14fa7dd573ef757d6922f77a428d37a0c415f00ab3fe9d9cb12c6df7179a6625c4ce2070026f4aa63755ee09cfd41639bfc23b2696152feb90daeb2dd53913d3c0640ffb8fe1120100a89e4c8d899f40e65182ce4c7a987d7ab19ede4c36d824790afacdd1e0d3b88d4d6bb6d2afde506f01c70612a4b44f12c24301711d01e25d9617f2e1cd267636a9738c74dc2fae941d500ba29ad47b68c9b9177f7662c77ec9d8", @generic="56ac7c33f7eaf6a947d866edd26fc704fd4ecea0f2baf3d8820045b40496d9cdf0c1b2c4a632a50c3b2957d98b02b5a0592ad19a118d4f85477c2102040b91e42806d3a996c87b690383a66a851ca17d8e6a5fd1384f20aeff9f590b9824e3e9c691ad25faf89a2dfd9993b4d714ebdbf6df7d8efa5ae82482fda7559c175c3ced014db18c543b5d587cc3c470597e79396ea4f3c4ab8f2d2bd9480e0c57fe5560212235f3347b0927bb3141ba291dcb7808c54ffbf69403f43663e6e0f071614f9fd3ea390d090ce72262cb03b18884c64167ac2f91ee2a97c41fc30d1c16cc2e0144a3e17c"]}, 0x14f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c884) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @random="4ba6224a6818", @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x10, [@private, @broadcast]}, @timestamp={0x44, 0x10, 0xd, 0x2, 0x0, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 3.10832074s ago: executing program 5 (id=5060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40000) uname(0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1c"], 0x118, 0x44000}}], 0x1, 0x30000091) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) set_mempolicy(0x1, &(0x7f0000000080)=0x3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x44}}, 0x0) 3.108098183s ago: executing program 0 (id=5061): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="cb8ed35e56165a14bacb0a8cfc239d12457f69ac95e7fb58d33623959095b24b49d98dfab2f73264a311999bfa24e81477b8cd2f802b1eccda975b60340c7b27b850e435425da9595e93eef38a9c1190d0ec8a0cbfbc5c8b20bd7fc27668abb9ae2e1bd7fd30a15e87c246e04ff66c097ad11154a5c028972c2021e1c97d250a862c26633d14b9c32a23aaa4f7d8c54a328b0e75952df7e6b08b1d5c23e815b88b8aa961ffc4c352fbd7abe3f5ffc62a7a6e2b10ed9325b2720238862818", 0xbe, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000440), 0x203, 0x2) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040050b221800000000000109022400730100000000090400200103000200092100"/55], 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r9, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 3.107801446s ago: executing program 5 (id=5062): r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8907, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@delchain={0x1cc, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0xac, 0x2, [@TCA_ROUTE4_ACT={0xa8, 0x6, [@m_vlan={0xa4, 0x6, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1b6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x2, 0x5, 0x3d0d, 0x6}, 0x2}}]}, {0x51, 0x6, "657c8f856bb2bb5d377d3e798375b1d28aa9ff79c5750c001846426a94e358dab26224b357e0bd9c9b84cfee21ec99f48cf585ab10ae01a9ffc67e6ad19b4103524e4f4a3bf49582d994e907b0"}, {0xc}, {0xc}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xe0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc0, 0x1, [@m_simple={0x30, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x8c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x61, 0x6, "455c01c35a2bca70225b757b65e5e4a3d41b6fb981e9f5ab2f14ad001cda09785441b43636124ee3000e13fa20bea090aab2bdd9895404add20f4fcf1a162cef77fa8839a02231378329689c84c729801c399b2e8e9d7612504fe105d4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r10 = openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) close(r10) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, 0x0, 0x0) r11 = openat$binfmt(0xffffffffffffff9c, r9, 0x2, 0x0) close(r11) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r9, &(0x7f0000000540)={[&(0x7f0000000080)='\\th\x00\x05\x00\x00\x00\x14Z\xdc/\xb6\n\xc6p\x89\x96;\xb7V\xef\xd9,\x11uZ9T\xbfN=x\xb0n\x97\xb2\x19\x91\x83T\x84\xbf\x8f\x9e#\x80\xaeI\x9d\xd7z\x19\bs\x1eY\x01Y\x9f\xf6\xc0\xa7\x04\xe3\x1c\xd1\xde\xbb\xd4\xc6\xa6\xfc<\x80\xf8o\xf5\xa8\xdcw.ME5\xbb\xab\x98\x93\xd1~\x80\xd8o:F\xcaA']}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0x53d, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff2, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000885d}, 0x20000800) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.106662076s ago: executing program 2 (id=5063): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x80004, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) syz_usb_connect(0x0, 0x38, &(0x7f00000001c0)=ANY=[@ANYBLOB="120120021bd459088904b5e02aae0102030109022600010701e0050904000002972218", @ANYRES64=r0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 3.10562246s ago: executing program 5 (id=5064): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r1, 0x1, 0x500) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x8, 0x20000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000140)={0x6, 0x31384142, 0xfffffff8, 0x1ff, 0x1, @discrete={0x7f, 0x3b8a0}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f00000000c0)=0x4, 0xd) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, 0x0, &(0x7f0000000080)=0xfd66) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000100)={'pimreg1\x00', &(0x7f0000000300)=@ethtool_gfeatures={0x3a, 0x6, [{}, {}, {}, {}, {}, {}]}}) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x3f, 0x9, 0x0, 0x800, {0x3}, [@typed={0xc, 0xf0, 0x0, 0x0, @u64=0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/181, 0xb5}, {0x0}], 0x2, 0x7f, 0x2ade) 3.034895189s ago: executing program 3 (id=5066): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xeeee8000, 0x100000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) 2.902311593s ago: executing program 5 (id=5067): r0 = socket(0x8, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001200), 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x5, 0x0, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0xfc, 0x0, 0x0, 0x0, "121f4496bd54e16c"}}, 0x48}}, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000000000090000f0edffff801c", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000080"], 0x48}}, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r1, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @multicast1}}}], 0x20}}], 0x1, 0x0) 2.708404572s ago: executing program 5 (id=5068): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) map_shadow_stack(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="eadceb3129aae48f81ec207c1e285b36da4e0f96a28a54ecde738f100652348bf5e99bad6a4207d7d0fab23ad6cf3d6e4168d628aecc2a7278d19f41a411400fc642373993e5b3b98d1061caa1adffb80815066e2c064ce66778bff732caecba59dc91da6d3da09a9894969825ec7bb576f445cc094e33966a6f4d1b81db2c1fbc89947593757824736fd0a5ba00bb7996802feccb53da2dc59b2632", 0x9c}, {&(0x7f0000000100)="80ed6d065e8e0079211708f287aba4f9a779efed57b39dd767bcd92230cb402b9e386d4c5bdb4257585b4517c4c56990b22592b28ebba643d73b4e6b2122b9e7da19aeef9ed1e73ea5d68dc7ec9244be92205af2504e1a185c70030fc12567d0c46c551e61a6fafe74ea3332ff6e260aad77a56f4b8c5abe8781a130275190d5b0b0aaf5ef9a2ab345614014e5d3701d84df99beb8b3c80f6b1a55d025a6", 0x9e}], 0x2, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x4e2}, @assoc={0x18, 0x117, 0x4, 0x7fd5}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3a}, @iv={0xe0, 0x117, 0x2, 0xca, "899436cd7fb32000bc55d2927700e116cc607829929c019ce692c88988620a8ddd9063e153d8659b1893f583fdaf91910d3dc8c36cb1800bc56a3b12a216b7ea4d42e61c00487c7dc5b72513f558a4dc98296dc515aa0d7aeae15cf92de1803eac004f7846cf2279b99214bdde8e86cf1a75aa49f8c7ded052a46bebe6016eb723ef3e209ffe8bd4dc14d2d2c1f02222b829cc0bcb1c4c9cc85a472b1a33fb743d79b86715519b01803e9731f4a62c4c8b1060d2efb9ec51dee5a3f257ff553ebd762854fac5c52b4228"}], 0x140, 0x800}, 0x10000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x19a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0)={0xffffffffffffffff}, 0x1, {0xa, 0x4e21, 0xa4, @private0, 0x100000}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000380), r1}}, 0x18) r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000500)=""/225, 0xe1}], 0x1}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/64, 0x40}, {&(0x7f0000000700)=""/32, 0x20}, {&(0x7f0000000740)=""/227, 0xe3}, {&(0x7f0000000840)=""/164, 0xa4}, {&(0x7f0000000900)=""/246, 0xf6}, {&(0x7f0000000a00)=""/134, 0x86}], 0x6, &(0x7f0000000b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000003000)=[{&(0x7f0000000c00)=""/202, 0xca}, {&(0x7f0000000d00)=""/233, 0xe9}, {&(0x7f0000000e00)=""/204, 0xcc}, {&(0x7f0000000f00)=""/135, 0x87}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)}, {&(0x7f0000002000)=""/4096, 0x1000}], 0x7, &(0x7f0000003080)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x3, 0x1, &(0x7f0000003240)={r3, r4+60000000}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001fc0), 0x0, 0x2, 0x0) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) syz_usb_control_io$printer(r11, 0x0, 0x0) syz_usb_control_io$printer(r11, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="3446230dda7b72aace"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r12, 0x707, &(0x7f00000001c0)={&(0x7f0000000040)=[{0xb4b1, 0x4200, 0x0, 0x0}], 0x1}) 2.620237983s ago: executing program 1 (id=5070): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000001600010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1400060004000000000000003607000003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.574748833s ago: executing program 3 (id=5071): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2], 0x44}}, 0x0) (fail_nth: 2) 2.445338258s ago: executing program 1 (id=5072): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000001780)={0x1, 0x9, 0x0, 0x7, 0x8, 0x9}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000000100)={0x14f4, 0x8, 0xa, 0x101, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x5}, [@nested={0x1008, 0x46, 0x0, 0x1, [@generic="094ca7b9557793a410716bb3e81cb6b8a1e609df867d833e1a1a6bb884101fd699dbbe6c4e6bcbb70cbaceb02b9fb4f9fcdf4583b9567521bd856d9d808cfaf985e9166b40edde94e5f84d115a27f8113e1a47c95ed73c56956787d2ea0c1a0416b3d4abc53f3cf97d5c1d77c74ed5a9d29417590819ea6d485f04f743d8f492fb04550757e2708966405f73b011c8c3febdd306757ff0d7a8a5ea19aa85b763e946efabd5b9d4eb03de0cdb84c5f2f91231dd4c34a8ab9af4400b62c47b3e1b0887f6804360e016494b485729ee583c9d0b96b2d52a7d4b5022bac3b4d18b6472d749283e457c34267ef0d3bd74be790aa58a6738f1eb9a6033552a0722529c4b7529766c480229e72e7facecdf99ebf70c47a11a0614ae1de82e963c4ab0b7bb9c4b32d93a1b0531e2d85ce953dd1b1cd9f1a5e8c38fdc162fedd3eebb8b3ade9e00a9bb609eb09228b2b45cce6016a7eb6297b312839b7cb50924c0d862f93da00535cb707fcbcf2b929eafcfd9d35fccbcbd46dc2a86fe353b510cab84121d18481391db561f8fd4ca9efd64dcbd58ae4fb572b01f90f4329783a542b347bb6aca812bb07b72ed5b07390de0f8ca782a5c536d28667604455703fdd9bf7b8144df59ebd3627235a470643e1d6297cb371a1984ca6b2fc717d34361e270c23c5baf8a1dff2622eaac02e29e62999b6b0ac3b23cba38c7f758cd949b77c5cbb78762d273d7d8f5584669b6b3548f704853671232230727398a5c90aeb1a39d435784084e5aea407e2a26d046c25292ca3c1f8569ecfd42b9385aeeaed89135a7e8383abbbe63957c06264751a15942d7734908712942fe32a62a62c8d1326a634ea4b80e46b7930de769f241769104df47808bb24faf9ae63be416afcfa673af1d380b2811933640cde567f1c1a480f2639c016a06fd14a4fd724a2bf85e62a76e198fa3504405894243f2aa9d54f26202342959680610da752df24627e40e7e4dd52293aa21e3d222bc1e51d2829210989de873d641abd2399bb43d32b05e9b213e72fbf554d16f268a84552aa56f801061240a0ed7cec8d4c6ac6755c582e25ab5996c11a63ba60334525a8d71d8fc94d3977a1e72cd3564a82e31f16f97f83ed3ab73133a507382e2867f06ee40a8da095a32cba63b6239eddaa2d226c46a14645dcbe52124c0a90b18636c519cda3150702ca759c3c8d2312e6aa43ea4b800eab65173522a2db152164161bd2a76aaf0bebf22f5d47c3c7ea53cf12e4da02b7a5ac5cd55e07cbe98cd6a8ceac24ca0c220ceb7eda9652ea0d3227cfb831ff20c586108b68f3c56b1ce198c0f064e0a06cda126ecc0bb926604ca0d9792936737009ad933d63c6c13ddc120fb43da3b0a1bfebd3120190e73c9c9d6e5a0ab58ab2ec4c9f6d17f9cd8991919f0080cebd6b0221b85490407a930c7097160d94b928dd48580c42acf0dd48d60203ead3fae23c1d287aa81fd07312b1a09f21cdceebf6bdd91a772a6c9e74b94893bce12575876de43016746c64368efc92a9c5765275a58ee90e8651b8c3d3b6d91cf2dc6a11704ad187c8e3ea690283709243d04c347049cb10a3188e482f91486f720131dda589b8cb4894200c7e5fe0181fbb23e19a96373fea20cc4688f84f989bfb1e346c2100e19d7ad46a6fcc191ab84da7edf324c6ab08b75f1757bbfd2f769fa7d81a407e93567b97aa04cf67255f2c2141458bafaa82484a77b5c1176d913f2ea4f4a731a122083c2ac6893aa611346322d92f372edfe76658a6e57d70347591535c1de9bcef1e70391777c9777267a7a0166210e8b47f954ce1bfcd4630d74ebf6db955a3958c154fc726e9f8b826141cee3b65acc3e1c5904aead198bbac46196ad8863e10d5a061afcf2255c0c84534dcab0b327f2cb1c6d0e5e493bfe7c6f363127b664af1283e202be4fec84c732b3bd40541cb1e199340101349ef7d47ee2bad2d116b360bad6f2910dc4cbcb863114a80e0f9610c207b526a7db8b56e50ac0e5c6acec7dae968e53ee0eee1c7dc968e7d1b824ef10b3f8999cc3fbf4062538f6153ce1b9df96b32077d3e1204bf1d4ce349a887dfadb5d776d1c45b18137092d363626cac199aaa9b2a1536eb8b8a42bf0d8aaeeed4f972adf4a243415ea1b3c59a08ed298e285f277c90f9fbb1eec511af180c0008fa07dcaa27df31ba1ed27dda0f24cc46165ae8f3b9b0d0fc529b1d1c74d358374f7b648da959e5fffff04cf684007e52fe94e587236e9892b8c7e08ffb9a774200a04ff1033bda76fd214b4bbd1229225df6f3895cd8c51f5b6f6528672839fe303406b8e9aa889043b68c15224e20cb33ef41d108db73f5c73614477df9aac4e5f2d5f1f1c23426474151055d5d978b1d0e0c2ff41b3b03ef850cd2bc878baea0420221cd49034817781635ff7cb7f39ea02bdd9c7bf3c0bc2e90146c5c53bd9aa3a1897e7fffaa48c6082bedd8844dfda5ef868cf84cb2b9b7c2cd943eb32501ea433725337b47bc8b344c785f094ea1128d66425a313483785ece4157f4714a158e9e0c48d215f25d58781aafa614d8512d3bd649208745be8d002259ac72173db87a32e855d593944c3f24a10e2eb07a1175c20c8ccf2f371f2cddea6915487c1529fcb4c1e4a09274dfae6bc38eb9da27c258aaebe0e91e19ffcb425f1ae21b3d2450ab9822c8a1130ab48c67f1251a2ccedefdc766dbb9534ff6e7de7bb61577fd7d4ee4dece5d64352d2e6b4a841848a6ca46f700c14283d0320f24787101a1bc07bb1e9e266afb57c3d4b5bbda8530da7e40743f2c1cc9d144090ff813a1fa0b4ad46a2f7dd9300b4a6809c2d6bb8fee3636d300e4d9a6f18ce9f90fa05813a84bfb58e8b1061291957f281c1a30cb2228fd0011d62996c68b696a38d83adebd1592cc84b3e4cc2cd9ef515fb35182ccb00107ef52d5a6f0fffa5d6bfc4f22f186ee6c911a2921ef6cce63371cb267ddb11e63d0284291c6de037607916e7ec3c9035b3e72e4c1180a077881646fe8b613f876b0a9c2419cdbbe74cd9696744f919a64fab356e8291487987565cb1ef6e53197eacdd5cd87ee1cc3b77c89a7c628c4fdb75718afe750654acd109b9c9b6c05d19da6bedd6fdf94606bfad4094bd294cdf4321c9e30e26b31727f649b0e84ccca6a0d9b8362800dd2e5efe13e2a74f6d0c7e5a821ec2f74d443d76582f2d6ceda21659220be04f52cffb5bcbd71a06a5d2a5245df045f2475161dbc8807c3770f387dcde8cf19212dc86e1c62987b2c351799ec5f9633336d08e8f4086b39196388a3540938893d9cfc0354db013cbfbb40b55b0184d984485b01ebd5bff9d3a12658ecf6c62e2fe365216fe98d113c66106b6c8f0a25e742271a2ec4c12dfa47eeb6d1a302700e78c2a6f30df4fef61e691df23a6c4c71c34d2eb3c25a88b211aab940570a72c109afa31e4541df4b073b8f0a14e228ec3b84318e0f69d2b5841cee66358dc1b98a834925c599503dea82302b8e8bcba3132a46129661e6ce85a7024c0c59834176239dbc98ebaa2cff831b109637eee80ef8000ca01d184c6dac7148f828c3fdf09a595f62f041cbada87ec9c74ddc604fb107fe5377c8a77b2e7cd616111373ace627bf789fc2d21525a36915aca3cedcf84d9ef6e0d8ef6b613453bda3af433b80bad30f533f9338d151e35f53a082f073a7833311380fb0901a6c5c8e6ed283e8b3258411ab42bc523c6b7e8c45464c0da5fc82128a115e3c39f2231a7390101a51e8ebea53ea7efbc382fe8ce1c16e3c2429bfcdf606e5614eb4f33a56a9ddbf8c51b55948f5533bd3eb3fc3d8d60826521afc0660332b3f8e20c0f2e5aef3cce2b051c87d3de3f701bf8e3f854a3afef321dbd991c6fe945471c86a3a3060a9c0ba52280c4bc948fdfa6520d11bb6dbfebca37e2d4217bd68e8a87444b2af7b81b7c2c8d21603b4b52120488e1ecb0135e5fadef6236944575c3996e24cdc3a85113a361c869bbd3b0b07087c54f61c4ab2ce0d5c8d3c12b126dba5aa76b4bcd97bb96be7a9a75109663fdd28838702e63dd5e61219c49e6382916448dd72a6305504e37b853a02e5f960abb2d3e8a1a53b3d5798aa8b3a20153a87ad631eaa2a1884fd4ecf38e8189988664dd098f91e6a441503c763225fdccb87ca8ecd7180ff3aec7db1479acc4049dcbe9ef4ef9b6201bf2cea2bac18cab15de3cc4b29864ba80d42d643869c0d3af6da37c60debb7717fb2b51caac8a4b1fe4e0e1cd1e1f116dadfa0300c868eee04dc0d8d8f6d8304eaea1df672895504e7e1eabb69fa440e72b9347d96b78dcac1608036d1098121a57e5632f22afaaef1f218920436fb8f4b1ce0b5997fe5d7f53a0567125d1b7310f4923dadf947549a49e27893c8e3ae682a5c104723576eba8da96ec4b98998d1b845562899f18f03db191de052592e17a1bfb233682ad07dd4988e8aa483dcdd9af6a3a6e8fc0a741f5fba00512dcaf029add02ea345c1de568a5b5c3910f96decaa206d4bd63d27a9796153dc1dcd83b84c98c515af206c1acb0274f4c41062fc2e4161f728dea8af4287b8052f73bd01e93c58078756f6a42fc9e116085e222e91028d78cf27ae86fa5227f6c7a1d55a31a0e02dc731a3cfac3a310b91cf1cd1b5117ec189c934beb9cd09d122ec4de03d49ca6db928ddcdfa011d74e64a6eb5e463fbc78870b070645d29815b499ed3625d34a1a93a343c3d07852602d511120b850a1b38401235aabf37dcaf437f6cbddb3ba86e6835a5f0be77407c61cbaa3209792fdbdbb36d3d24e07c8c526af7bc0a1b49ba3a1d12962a43d65d28244b0b04199f91c1b2caa0d3139bdeb9f96436a3dea1f00476c9057c04b32f2b277d55c091557eeb7c450b3734d7f27ce107940b39c38bb365ab308c4781a1f3dfad7cdafc47b71369399d7132ca09b79be82631376b57c4818c87e43ce332771c678d235c6d321f0459b2c9e409ab05ace157892b170125758f2fe360824aeca59ccd6400bce94efc228d1dcb30367e3cce294fedcf0b5687d3b399686be2d219380bd962951f070c9a091387591cf38d45096b0008f28f5af8366248d0f2cb0c53e00d15d953a77832591ee9864ceda4b152180b98f94d2c2fb33a1cbae19a2d9d53306480ad565a10616aa8bb4eff2b0027d8b106fa9d3c43a40e2e71ae21d0c12aae2505f8ac3c25b49a513f55a83514f0a4740f67970bb831c3203f1effbe8b91e4ad16068a4e6941a944f8518745739dacf3e8c4396925b3dff0be60d435266dbc952b429f8e8ec910eea0bfc9959f6fb043272824e801c81815c6a6e742829bcd1a2365dbe3e13688455abe22a0ca47bbc6a23f10658eb51f02f4f308e25711c4c5015438defef083cf8e4fde94e2258279bfdd5559b734f2128f40a97a6b1f9b37069db3f5ca6b6b9e97efafe4027453e0f9fc15bb3c53fa399fb73f122e4786e3cf30a116455a6e691082d8253e04c03add1b0767247c9a2a7b4569cf59c2c0e995523dfbe5fccd1b4fa73f7a6ae72d9e1da97b1444217edf9ef5bda50f6423904987bb1d9090cd8f79bb3d05331e5f4fde302ce8692d49c0640466ba4099fabfbc5f89ccb66769afcf729e5c6c66dd8d1b8e3c204f17b8e9b15a2d31878d16dccfc487a6a64aa45c8d00dbcbe12079064f656fb224a90ce73bc8e404a0a3894fe4f8daff98d4dbb3f470904b79366a7f1a37ec94f96d4b4b6475e5a0068ad911358dab5570b5e9f70571d41076524b8850b4b9e41f7b480561722f7", @nested={0x4, 0x1}]}, @generic="c46f69ecb2f308dbe9", @generic="f0c176125d0c12308f06f7df647f3d4955", @typed={0x8, 0x62, 0x0, 0x0, @u32=0x101}, @nested={0xb8, 0x108, 0x0, 0x1, [@generic="98227f8a9b08fe4ebda11af7f55390", @typed={0x8, 0xda, 0x0, 0x0, @fd=r5}, @generic="2b35402d9ae8244c780e54024389375b86f318806d01d51b9180c58a583b8f98bb98fe084248159a02bbfaccb5e2a61e85c91a9c06438a0752d69504e1dd76d00cb4aa46915fabed19ce68f557efeeba18566cf0a4c4cd40df8f5452798b77c0493215bf50ac2e43f2bed5dd38085947645e692a2439cfbcb693db38ec1e56ef6c11950a6a867d9a70a7e22e76", @typed={0x9, 0x4b, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @nested={0x4, 0x96}]}, @generic="d6db67a6c6abf00770603f31d03bfd65f2cfc72f0337e7f248d093cf6dd87bb323e8c73ec8b939520b9f8494072921a9a751bb54a7985ce6ef654b72b0a63ed4783e0b72da8e1a47d1b1ded28ae05c2dbca2533bec2dfe26917a1487f2bb4b14a354e336d33df280db26bea215a79f585a57b0143aaecdcdbdba28215771112eadd324ae5e6e561a64cfbd3cbb0c40b02ed4ae907a5763c8e00896f69f65584818cf08795927aa16c0833e2d137b414ab45cf23bf2bd40aa2b09f7e50a39e4e92fff4d3e84148bb0a8afbb48d5140ab92baeaef1ec1c4c56d9f7c639dca3d52e654804e867d059d1bbdad33b93395883ae73", @nested={0x6c, 0x57, 0x0, 0x1, [@nested={0x4, 0x14}, @generic, @typed={0x5c, 0xbc, 0x0, 0x0, @binary="7ecc0a2490fa86dc2517868f2a3b651384e21f09b88ff351e840ebedafdfe0d7dc6dd38ac01e31068cf69cb6ffeb3d7bc5f4c7881086cf6c6b270fe079c04798e8a7f824cd96f631569fefc24b576f8ac9b484cbf324de8a"}, @typed={0x4, 0x94}, @typed={0x4, 0xda}]}, @generic="be4af237a418484d33eea85e81551a213c96f6c44f525848766b9723ff8e6ea315d4075670876f2bbfb14a3e51f8b7bbb2e66dae1ee1253758e8e6ce530c5510ba8a4df5911e392895459e1b3406d18b31933d763cad10dff84e69dad528ac0186485bffee89ea80b4ef41464906ecaeda023bb458f47a1b6ae33493d3926c72f905371103fc810b19e4e4edfe0c20d964456e1354ba623e12ca677d98369a4b2d5911597626b4de2389fed834720bac7239c67089d7dab69976923a3ac07fa1638a458656794cf96af7bc1d6b41543f68872b9c66a470", @generic="515026de61aca017af19bc6cad77789b2073b68272439fdfc85b77393b891874235fa2e80909674785fed1f701f6dee10535a2bb0dc5fe3d6594b1ff33db49ba14fa7dd573ef757d6922f77a428d37a0c415f00ab3fe9d9cb12c6df7179a6625c4ce2070026f4aa63755ee09cfd41639bfc23b2696152feb90daeb2dd53913d3c0640ffb8fe1120100a89e4c8d899f40e65182ce4c7a987d7ab19ede4c36d824790afacdd1e0d3b88d4d6bb6d2afde506f01c70612a4b44f12c24301711d01e25d9617f2e1cd267636a9738c74dc2fae941d500ba29ad47b68c9b9177f7662c77ec9d8", @generic="56ac7c33f7eaf6a947d866edd26fc704fd4ecea0f2baf3d8820045b40496d9cdf0c1b2c4a632a50c3b2957d98b02b5a0592ad19a118d4f85477c2102040b91e42806d3a996c87b690383a66a851ca17d8e6a5fd1384f20aeff9f590b9824e3e9c691ad25faf89a2dfd9993b4d714ebdbf6df7d8efa5ae82482fda7559c175c3ced014db18c543b5d587cc3c470597e79396ea4f3c4ab8f2d2bd9480e0c57fe5560212235f3347b0927bb3141ba291dcb7808c54ffbf69403f43663e6e0f071614f9fd3ea390d090ce72262cb03b18884c64167ac2f91ee2a97c41fc30d1c16cc2e0144a3e17c"]}, 0x14f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c884) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @random="4ba6224a6818", @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x10, [@private, @broadcast]}, @timestamp={0x44, 0x10, 0xd, 0x2, 0x0, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 2.430004957s ago: executing program 1 (id=5073): syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000500)={0x3, @raw_data="18a78473b8665d39fe77a98e23bfdcc76bfbb4af70de715d9ec2c1bea0ec2e9707d9afa59ddf43c6a4f4a3a53067e04c5159c9cbb522092d6d712dbb46e61bf1e24950394a1ed9e8a327880d84cb7d25ee22b4247d6f14dfb3b641e2710c935fa981a436b6458e7d60de79b4a5b160089177618134dce29c407b6b62f7272148c9a39969342d92685d77bc60775c0f4d89335fb06ace8d1d01fd6c460214a2a9a86f7e1775c38e5226fe7408042f6c134fc950fec64fea1c65203d73077afa0dc82eb3c9a05b1d58"}) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) syz_open_dev$sg(0x0, 0x0, 0x601) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.912372542s ago: executing program 3 (id=5074): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0xffffffff, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xbc, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}, @exit_looper], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800"], 0x74}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) 1.373738036s ago: executing program 2 (id=5075): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a200700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000044) 1.008571183s ago: executing program 2 (id=5076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75706461746529bb2a08bb036f28206563727970746673"], 0x17, 0x0) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000000180)={0x0, 0x1061, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000140)="ecc5", 0x2}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r5, 0xff08, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000400)={0x8, 0x0, [{0x80000001, 0x405, 0x0, 0x203, 0x7, 0x80000000, 0xc}, {0x6, 0x5, 0x5, 0x745, 0xfa1e, 0xa, 0x1}, {0x40000000, 0x2, 0x4, 0x0, 0xa7, 0x3}, {0x2, 0x2, 0x0, 0x4, 0x53b, 0x2, 0xb}, {0x2, 0x5, 0x2, 0x10000, 0x9, 0x5, 0x10000}, {0x80000001, 0xffff0004, 0x7, 0x10, 0x7, 0x9, 0x6}, {0x6, 0x80, 0x4, 0x1, 0x6, 0x0, 0x9}, {0xa, 0x8, 0x2, 0x80000001, 0x4a4, 0xdd4eccf, 0xfffffbff}]}) 770.195969ms ago: executing program 1 (id=5077): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002b0003"], 0x44}, 0x1, 0xffffffea, 0x0, 0x4004}, 0x0) 553.669631ms ago: executing program 1 (id=5078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x100000000000000, 0x48001}, 0x0) 348.403699ms ago: executing program 1 (id=5079): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{0x2}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe}], 0xffffffffffffdb1}}], 0x48}, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)=@ipv6_deladdr={0x40, 0x15, 0x200, 0x70bd2a, 0x25dfdbfd, {0xa, 0x1, 0x15, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f00000001c0)=@generic={0x1, 0x9, 0x40}) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = dup(r0) socket(0x21, 0x1, 0xf5d) write$UHID_INPUT(r9, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 302.486711ms ago: executing program 2 (id=5080): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x80ffffffffffffff, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 216.405548ms ago: executing program 0 (id=5081): inotify_init1(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c0001000600000000000000"], 0x20}}, 0x40010) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x30d4c0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x317000, 0x1000, 0x3}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = syz_io_uring_setup(0x522e, &(0x7f0000000380)={0x0, 0xdb69, 0x0, 0x0, 0xfffffffb}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240)="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", 0x12d, 0xffffffffffffffff) bind$unix(0xffffffffffffffff, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) io_uring_enter(r5, 0x4a12, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40, &(0x7f00000052c0)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xafbd4243d724e9a4}, 0x0) io_uring_setup(0x631d, &(0x7f00000006c0)={0x0, 0x14b2, 0x10, 0x0, 0xf0}) 8.397845ms ago: executing program 2 (id=5082): socket(0x22, 0x8000c, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) (async) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000040)="bb", 0x1}], 0x1) (async) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000005c0), 0x0, 0x8000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000080045000044000000000021907800000000ffffffffcee5ef4b0dd192837101fa21050090780a0101024a0000000000000000000000ac1e0001ac141401077e8dab7c0d4bc55323c39d1741e6971300e000000200000000ffffffffac14140c0000"], 0x0) (async) r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') statx(r5, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) r6 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "4c5bc609e6c7daac34a4e79577c1a1cd04328de7b14fe42419f034949355897f7192490eb5a18607c9ec1a78dc17b52e840915a8891ad37149c000c20d6c9d8d", 0x37}, 0x48, 0xfffffffffffffffc) (async) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x1, @scatter={0x2, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/167, 0xa7}, {&(0x7f00000004c0)=""/134, 0x86}]}, &(0x7f0000000340)="120183008000", 0x0, 0x3eb, 0x4, 0x1, 0x0}) (async) sendmsg$can_j1939(r5, &(0x7f00000006c0)={&(0x7f0000000280)={0x1d, 0x0, 0x0, {0x2, 0x1, 0x4}, 0x2}, 0x18, &(0x7f00000002c0)={&(0x7f0000000700)="09b71d8d31e615278691c2863a87336815af778f619a64c0d321df532811f092dc669d4f3fb60e406b0438eda48dce7c8822ccd39e2ce77108311121013aac7e0102ac5f85558b9f4e3b47a37112df7753ed1e1155c72fb6a7d93c870c0d3a3ae4164c882ead56", 0x67}, 0x1, 0x0, 0x0, 0x8004}, 0xc800) (async) keyctl$set_timeout(0xf, r6, 0x8100000004) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002200000000000000000000008000100ac1414bb080019"], 0x2c}}, 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES8=r5, @ANYRESDEC, @ANYRES64=r4, @ANYRESHEX=r0], 0x0) (async) keyctl$link(0x8, r6, r6) (async) socket$packet(0x11, 0x3, 0x300) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r9, 0x4014563c, &(0x7f000001f9c0)={0x6, {0x8000, 0x200, 0x1, 0x100}}) 0s ago: executing program 3 (id=5083): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02000019000100000000ffffff8000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c"], 0x23c}}, 0x0) kernel console output (not intermixed with test programs): dDevice=bb.9d [ 1054.991278][T10159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.999910][ T5898] usb 4-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1055.027203][T21336] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1055.057440][T10159] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1055.063567][ T5898] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1055.166369][ T5898] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1055.216388][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1055.305401][ T5898] usb 4-1: SerialNumber: syz [ 1055.368746][T21335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1055.387200][T21335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1055.538519][T21347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.550587][T21347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.612642][T21335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1055.650610][T21335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1055.757766][T21353] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1056.087908][T21358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4670'. [ 1056.116808][T21335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.132708][T21335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.176432][ T5898] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1056.322823][T21363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4671'. [ 1056.404663][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4671'. [ 1056.449013][T21367] tipc: Enabling of bearer rejected, failed to enable media [ 1057.409986][T21391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.477447][T21391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.609018][T21391] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1057.640520][T10159] usb 6-1: USB disconnect, device number 23 [ 1057.802753][T10154] usb 4-1: USB disconnect, device number 18 [ 1057.828475][T10154] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 1057.915722][T21400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.958157][T21400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.061869][T21401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.071080][T21401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.443692][T10154] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1058.813612][T10159] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1059.083908][T10159] usb 3-1: Using ep0 maxpacket: 16 [ 1059.839895][T21439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.849270][T21439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.363599][ T5898] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1060.638290][T10154] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1060.658547][ T5898] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1060.807247][T10154] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1060.821313][T10154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.863657][ T5898] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1060.893574][ T5898] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1060.905153][T10154] usb 6-1: Product: syz [ 1060.927186][T10154] usb 6-1: Manufacturer: syz [ 1060.929324][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.957481][T10154] usb 6-1: SerialNumber: syz [ 1060.977094][T10154] usb 6-1: config 0 descriptor?? [ 1061.185108][T21440] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1061.226248][ T5898] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1061.441550][T10154] usb 6-1: Firmware version (0.0) predates our first public release. [ 1061.450886][T10154] usb 6-1: Please update to version 0.2 or newer [ 1061.987015][T10154] usb 6-1: USB disconnect, device number 24 [ 1062.890769][T10154] usb 4-1: USB disconnect, device number 20 [ 1062.899514][T10159] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1062.988571][T10159] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1063.063135][T10159] usb 3-1: can't read configurations, error -71 [ 1063.282190][T21493] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4697'. [ 1063.832924][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1063.832941][ T30] audit: type=1326 audit(1751602009.787:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.3.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1064.733821][ T30] audit: type=1326 audit(1751602009.827:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.3.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1064.932548][ T30] audit: type=1326 audit(1751602009.827:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.3.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1065.019005][T21507] pim6reg: entered allmulticast mode [ 1065.037586][ T30] audit: type=1326 audit(1751602009.827:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.3.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1065.105098][ T30] audit: type=1326 audit(1751602009.827:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.3.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1065.178731][ T30] audit: type=1326 audit(1751602009.827:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.3.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1065.214164][T21502] pim6reg: left allmulticast mode [ 1065.242101][ T30] audit: type=1326 audit(1751602009.827:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.3.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1065.325045][ T30] audit: type=1326 audit(1751602009.827:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.3.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1065.333139][T21514] loop6: detected capacity change from 0 to 524287999 [ 1065.392641][ T30] audit: type=1326 audit(1751602009.827:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.3.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1065.476758][ T30] audit: type=1326 audit(1751602009.827:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21502 comm="syz.3.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1066.333278][T21529] syz.5.4708 (21529): drop_caches: 2 [ 1066.645924][T21532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.661704][T21532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.209689][T21549] ucma_write: process 1634 (syz.5.4715) changed security contexts after opening file descriptor, this is not allowed. [ 1067.362011][T21558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4717'. [ 1067.476818][T21558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.522160][T21558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.583877][T10159] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1067.772419][T10159] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1067.781636][T10159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.791518][T10159] usb 4-1: Product: syz [ 1067.797888][T10159] usb 4-1: Manufacturer: syz [ 1067.802678][T10159] usb 4-1: SerialNumber: syz [ 1067.823767][T10159] usb 4-1: config 0 descriptor?? [ 1068.044201][T10154] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 1068.223641][T21581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1068.234119][T10154] usb 2-1: Invalid ep0 maxpacket: 32 [ 1068.249005][T10159] usb 4-1: Firmware version (0.0) predates our first public release. [ 1068.269299][T10159] usb 4-1: Please update to version 0.2 or newer [ 1068.373929][T15913] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1068.381730][T10154] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 1068.541458][T10159] usb 4-1: USB disconnect, device number 21 [ 1068.557134][T15913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.568342][T10154] usb 2-1: Invalid ep0 maxpacket: 32 [ 1068.581641][T10154] usb usb2-port1: attempt power cycle [ 1068.587757][T15913] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1068.602299][T15913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.641475][T21589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4724'. [ 1068.730849][T15913] usb 6-1: config 0 descriptor?? [ 1068.787617][T15913] pwc: Askey VC010 type 2 USB webcam detected. [ 1068.933677][T10154] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 1069.074546][T10154] usb 2-1: Invalid ep0 maxpacket: 32 [ 1069.204156][T10154] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 1069.217359][T15913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1069.226542][T10154] usb 2-1: Invalid ep0 maxpacket: 32 [ 1069.241557][T15913] pwc: recv_control_msg error -32 req 02 val 2700 [ 1069.248616][T10154] usb usb2-port1: unable to enumerate USB device [ 1069.266736][T21579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.277531][T15913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1069.285087][T21579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.295394][T15913] pwc: recv_control_msg error -32 req 04 val 1000 [ 1069.303821][T15913] pwc: recv_control_msg error -32 req 04 val 1300 [ 1069.312360][T15913] pwc: recv_control_msg error -32 req 04 val 1400 [ 1069.320641][T15913] pwc: recv_control_msg error -32 req 02 val 2000 [ 1069.335470][T15913] pwc: recv_control_msg error -32 req 02 val 2100 [ 1069.348083][T15913] pwc: recv_control_msg error -32 req 04 val 1500 [ 1069.577880][T15913] pwc: recv_control_msg error -71 req 02 val 2400 [ 1069.578953][T15913] pwc: recv_control_msg error -71 req 02 val 2600 [ 1069.579298][T15913] pwc: recv_control_msg error -71 req 02 val 2900 [ 1069.580275][T15913] pwc: recv_control_msg error -71 req 02 val 2800 [ 1069.580904][T15913] pwc: recv_control_msg error -71 req 04 val 1100 [ 1069.581355][T15913] pwc: recv_control_msg error -71 req 04 val 1200 [ 1069.602778][T15913] pwc: Registered as video103. [ 1069.607300][T15913] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input152 [ 1069.632096][T15913] usb 6-1: USB disconnect, device number 25 [ 1070.023659][T10154] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1070.176775][T10154] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1070.194121][T10154] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.208821][T10154] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1070.218038][T10154] usb 4-1: config 1 has no interface number 0 [ 1070.225019][T10154] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1070.249460][T10154] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1070.272480][T10154] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1070.282847][T10154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.291749][T10154] usb 4-1: Product: syz [ 1070.297222][T10154] usb 4-1: Manufacturer: syz [ 1070.302610][T10154] usb 4-1: SerialNumber: syz [ 1070.841466][T21625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.143887][T21625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.305856][T15806] usb 4-1: USB disconnect, device number 22 [ 1071.799458][T21640] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4740'. [ 1071.994347][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1071.994364][ T30] audit: type=1326 audit(1751602017.947:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21646 comm="syz.3.4743" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e0618e929 code=0x0 [ 1072.036852][T21649] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1072.323618][T10154] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1072.455509][T15806] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1072.503770][T10154] usb 3-1: device descriptor read/64, error -71 [ 1072.540888][T21664] libceph: resolve '4' (ret=-3): failed [ 1072.636940][T15806] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.669221][T15806] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1072.732856][T15806] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1072.743753][T10154] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1072.781994][T15806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.860206][T15806] usb 4-1: Product: syz [ 1072.871840][T15806] usb 4-1: Manufacturer: syz [ 1072.883923][T10154] usb 3-1: device descriptor read/64, error -71 [ 1072.898190][T15806] usb 4-1: SerialNumber: syz [ 1072.994193][T10154] usb usb3-port1: attempt power cycle [ 1073.423046][T10154] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1073.459990][T10154] usb 3-1: device descriptor read/8, error -71 [ 1073.703738][T10154] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1073.735781][T10154] usb 3-1: device descriptor read/8, error -71 [ 1073.854187][T10154] usb usb3-port1: unable to enumerate USB device [ 1074.460100][T21692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1074.530606][T21694] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4757'. [ 1074.543184][T21694] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4757'. [ 1074.554644][T21694] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1074.693302][T21698] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4759'. [ 1075.003606][T10154] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1075.010184][T15806] usb 4-1: 0:2 : does not exist [ 1075.112022][T15806] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1075.364451][T10154] usb 6-1: Using ep0 maxpacket: 32 [ 1075.549356][T10154] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1075.591786][T10154] usb 6-1: config 0 has no interface number 0 [ 1075.609719][T10154] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1075.633134][T15806] usb 4-1: USB disconnect, device number 23 [ 1075.672271][T10154] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1075.725650][T15572] udevd[15572]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1075.780941][T10154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.864757][T21712] vlan3: entered promiscuous mode [ 1075.880220][T10154] usb 6-1: Product: syz [ 1075.888009][T10154] usb 6-1: Manufacturer: syz [ 1075.905101][T10154] usb 6-1: SerialNumber: syz [ 1076.032088][T10154] usb 6-1: config 0 descriptor?? [ 1076.222472][T10154] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1076.276759][T10154] em28xx 6-1:0.132: Video interface 132 found: [ 1076.575494][T21721] loop6: detected capacity change from 0 to 524287999 [ 1076.585551][T21721] Buffer I/O error on dev loop6, logical block 0, async page read [ 1076.594037][T21721] Buffer I/O error on dev loop6, logical block 0, async page read [ 1076.602444][T21721] Buffer I/O error on dev loop6, logical block 0, async page read [ 1076.613320][T21721] Buffer I/O error on dev loop6, logical block 0, async page read [ 1076.636904][T21721] Buffer I/O error on dev loop6, logical block 0, async page read [ 1076.645675][T10154] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 1076.654902][T21721] Buffer I/O error on dev loop6, logical block 0, async page read [ 1076.663180][T21721] Buffer I/O error on dev loop6, logical block 0, async page read [ 1076.672853][T21721] Buffer I/O error on dev loop6, logical block 0, async page read [ 1076.687362][T21721] ldm_validate_partition_table(): Disk read failed. [ 1076.714179][T21721] Buffer I/O error on dev loop6, logical block 0, async page read [ 1076.765120][T21721] Buffer I/O error on dev loop6, logical block 0, async page read [ 1076.792051][T21721] Dev loop6: unable to read RDB block 0 [ 1076.825317][T21721] loop6: unable to read partition table [ 1076.868105][T21727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4767'. [ 1076.896887][T21721] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1077.766175][T10154] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1077.788374][T10154] em28xx 6-1:0.132: board has no eeprom [ 1077.805728][T21698] em28xx 6-1:0.132: failed to trigger write to i2c address 0xba (error=-5) [ 1077.828876][T21738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4771'. [ 1077.873752][T10154] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1077.881733][T10154] em28xx 6-1:0.132: analog set to bulk mode. [ 1077.893836][T15913] em28xx 6-1:0.132: Registering V4L2 extension [ 1077.903093][T10154] usb 6-1: USB disconnect, device number 26 [ 1077.925164][T10154] em28xx 6-1:0.132: Disconnecting em28xx [ 1078.153095][T15913] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 1078.166793][T15913] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 1078.180029][T15913] em28xx 6-1:0.132: No AC97 audio processor [ 1078.206364][T15913] usb 6-1: Decoder not found [ 1078.217193][T15913] em28xx 6-1:0.132: failed to create media graph [ 1078.237262][T15913] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 1078.269505][T15913] em28xx 6-1:0.132: Remote control support is not available for this card. [ 1078.309731][T10159] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1078.332207][T10154] em28xx 6-1:0.132: Closing input extension [ 1078.370578][T10154] em28xx 6-1:0.132: Freeing device [ 1078.473859][T10159] usb 2-1: device descriptor read/64, error -71 [ 1078.723715][T10159] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1078.888779][T10159] usb 2-1: device descriptor read/64, error -71 [ 1079.004749][T21768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.014170][T21768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.083294][T10159] usb usb2-port1: attempt power cycle [ 1079.436029][T10159] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1079.492248][T10159] usb 2-1: device descriptor read/8, error -71 [ 1079.693606][T15913] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1079.844244][T10159] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1079.864052][T15913] usb 6-1: Using ep0 maxpacket: 16 [ 1079.926514][T15913] usb 6-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.989817][T10159] usb 2-1: device descriptor read/8, error -71 [ 1080.023776][T15913] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 1080.081014][T15913] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 1080.100045][T15913] usb 6-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1080.113897][T10159] usb usb2-port1: unable to enumerate USB device [ 1080.120990][T15913] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1080.132389][T15913] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1080.331089][T15913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1080.380398][T15913] usb 6-1: SerialNumber: syz [ 1080.407535][T21774] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1080.433929][T21774] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1080.677798][T21774] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1080.687394][T21774] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1080.863670][T10159] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1080.881209][ T30] audit: type=1326 audit(1751602026.837:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21793 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1080.910084][ T30] audit: type=1326 audit(1751602026.837:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21793 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1080.936512][ T30] audit: type=1326 audit(1751602026.867:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21793 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1080.959864][ T30] audit: type=1326 audit(1751602026.867:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21793 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1080.982771][ T30] audit: type=1326 audit(1751602026.867:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21793 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1081.026445][ T30] audit: type=1326 audit(1751602026.867:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21793 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e0618d290 code=0x7ffc0000 [ 1081.068376][T10159] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1081.090421][T10159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.111657][T10159] usb 3-1: Product: syz [ 1081.113726][ T30] audit: type=1326 audit(1751602026.867:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21793 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1081.117890][T21774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.153609][T10159] usb 3-1: Manufacturer: syz [ 1081.160404][T10159] usb 3-1: SerialNumber: syz [ 1081.171648][T10159] usb 3-1: config 0 descriptor?? [ 1081.187817][T21774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.191021][ T30] audit: type=1326 audit(1751602026.867:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21793 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1081.223060][ T30] audit: type=1326 audit(1751602026.867:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21793 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1081.249253][ T30] audit: type=1326 audit(1751602026.867:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21793 comm="syz.3.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1081.601127][T10159] usb 3-1: Firmware version (0.0) predates our first public release. [ 1081.609877][T10159] usb 3-1: Please update to version 0.2 or newer [ 1081.683630][T15806] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1081.843426][T15806] usb 2-1: Using ep0 maxpacket: 8 [ 1081.846229][T10159] usb 3-1: USB disconnect, device number 101 [ 1081.859338][T15806] usb 2-1: config 0 has no interfaces? [ 1081.868208][T15806] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1081.879186][T15806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.907767][T15806] usb 2-1: config 0 descriptor?? [ 1082.069229][T21807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.079326][T21807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.483177][T21809] FAULT_INJECTION: forcing a failure. [ 1082.483177][T21809] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.496259][T21809] CPU: 0 UID: 0 PID: 21809 Comm: syz.2.4792 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 1082.496284][T21809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1082.496295][T21809] Call Trace: [ 1082.496303][T21809] [ 1082.496314][T21809] dump_stack_lvl+0x189/0x250 [ 1082.496343][T21809] ? __pfx____ratelimit+0x10/0x10 [ 1082.496366][T21809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1082.496390][T21809] ? __pfx__printk+0x10/0x10 [ 1082.496415][T21809] ? __pfx___might_resched+0x10/0x10 [ 1082.496436][T21809] ? fs_reclaim_acquire+0x7d/0x100 [ 1082.496461][T21809] should_fail_ex+0x414/0x560 [ 1082.496487][T21809] should_failslab+0xa8/0x100 [ 1082.496508][T21809] __kmalloc_noprof+0xcb/0x4f0 [ 1082.496523][T21809] ? kfree+0x4d/0x440 [ 1082.496543][T21809] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1082.496571][T21809] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1082.496595][T21809] ? tomoyo_domain+0xd9/0x130 [ 1082.496623][T21809] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1082.496642][T21809] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1082.496664][T21809] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1082.496707][T21809] ? __lock_acquire+0xab9/0xd20 [ 1082.496750][T21809] ? __fget_files+0x2a/0x420 [ 1082.496772][T21809] ? __fget_files+0x2a/0x420 [ 1082.496789][T21809] ? __fget_files+0x3a0/0x420 [ 1082.496806][T21809] ? __fget_files+0x2a/0x420 [ 1082.496828][T21809] security_file_ioctl+0xcb/0x2d0 [ 1082.496849][T21809] __se_sys_ioctl+0x47/0x170 [ 1082.496874][T21809] do_syscall_64+0xfa/0x3b0 [ 1082.496896][T21809] ? lockdep_hardirqs_on+0x9c/0x150 [ 1082.496918][T21809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.496935][T21809] ? clear_bhb_loop+0x60/0xb0 [ 1082.496955][T21809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.496972][T21809] RIP: 0033:0x7fda2498e929 [ 1082.496989][T21809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.497003][T21809] RSP: 002b:00007fda25762038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1082.497022][T21809] RAX: ffffffffffffffda RBX: 00007fda24bb5fa0 RCX: 00007fda2498e929 [ 1082.497034][T21809] RDX: 0000200000000040 RSI: 0000000080045017 RDI: 0000000000000003 [ 1082.497046][T21809] RBP: 00007fda25762090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.497057][T21809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.497067][T21809] R13: 0000000000000000 R14: 00007fda24bb5fa0 R15: 00007fda24cdfa28 [ 1082.497096][T21809] [ 1082.497125][T21809] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1082.758983][T15913] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1082.779485][T15913] usb 6-1: USB disconnect, device number 27 [ 1083.003582][T21820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.033980][T21820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.153962][T15913] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1083.273745][ T5898] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1083.335042][T15913] usb 6-1: config 0 has an invalid interface number: 104 but max is 0 [ 1083.345692][T15913] usb 6-1: config 0 has no interface number 0 [ 1083.347665][T15806] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1083.351963][T15913] usb 6-1: config 0 interface 104 has no altsetting 0 [ 1083.377807][T15913] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1083.387828][T15913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.396022][T15913] usb 6-1: Product: syz [ 1083.400432][T15913] usb 6-1: Manufacturer: syz [ 1083.407172][T15913] usb 6-1: SerialNumber: syz [ 1083.424420][T15913] usb 6-1: config 0 descriptor?? [ 1083.440209][ T5898] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1083.440941][T15913] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1083.464445][ T5898] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1083.474854][ T5898] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.40 [ 1083.489570][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.497943][T15806] usb 3-1: device descriptor read/64, error -71 [ 1083.504884][ T5898] usb 4-1: Product: ည [ 1083.509189][ T5898] usb 4-1: Manufacturer: 澟㌊徇䎅璯樴ᬖ詬瞥æï™‡ê»‚ç¦ã»ºï¶ç–³ì¨­ê±§ç€¶â£¦ä¯šç¤é§äªŠêœ‚í‹ë”›ç¶èˆ˜â²¥ïº²é¡Šã¼ é¤¤ëº‚⑒휧싴퀦⠭ﱧළ紸娷螌컫钆䖘璓젡ꦵì°î´”까쓔쪿肞ëšáµ£â£¿é½‡ï‰’齲䗅ﵚ籒箭邚硬糊촌때몙賫è£â¢µë…¼î©±åº½ã¯î‚²ì£©ê´‹é„°à£ïŽ¦çºˆî¹¤ [ 1083.537700][ T5898] usb 4-1: SerialNumber: 㛨ặ岋㷞꘡åšéŒ’ì…鰹ċ쪨巸ì„쮔෉竤㛬膼䨲맿ᨭ胷蒳ⶣꎥᎢ懽꒻ዒ쎅瑘玮周礰ⵈ腂祷娫딉摴㮢淢䃪硫 [ 1083.673898][T21814] netlink: 4344 bytes leftover after parsing attributes in process `syz.5.4794'. [ 1083.700327][T15913] gspca_vc032x: reg_r err -71 [ 1083.708792][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.717246][T21829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4800'. [ 1083.726450][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.731761][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.737506][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.742820][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.754194][T15806] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1083.763559][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.773720][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.779052][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.804786][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.810240][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.815889][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.821223][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.830193][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.847244][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.852598][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.858984][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.867025][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.872354][T15913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1083.879242][T15913] gspca_vc032x: Unknown sensor... [ 1083.887891][T15913] vc032x 6-1:0.104: probe with driver vc032x failed with error -22 [ 1083.900273][T15913] usb 6-1: USB disconnect, device number 28 [ 1083.917677][T15806] usb 3-1: device descriptor read/64, error -71 [ 1083.984376][T21818] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1084.008803][ T5898] usbhid 4-1:1.0: can't add hid device: -71 [ 1084.015477][ T5898] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1084.027142][ T5898] usb 4-1: USB disconnect, device number 24 [ 1084.064569][T15806] usb usb3-port1: attempt power cycle [ 1084.069116][T21835] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.080214][T21835] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.089273][T21835] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.098191][T21835] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.149861][T21835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.158691][T21835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.391716][ T5898] usb 2-1: USB disconnect, device number 121 [ 1084.414503][T15806] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1084.440674][T15806] usb 3-1: device descriptor read/8, error -71 [ 1084.693740][T15806] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1084.714270][T15806] usb 3-1: device descriptor read/8, error -71 [ 1084.773633][ T5898] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1084.825740][T15806] usb usb3-port1: unable to enumerate USB device [ 1084.863667][T15857] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1084.923701][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 1084.935378][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.018086][T15857] usb 4-1: device descriptor read/64, error -71 [ 1085.025451][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.036328][ T5898] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1085.056966][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.077921][ T5898] usb 2-1: config 0 descriptor?? [ 1085.110729][T21857] netlink: 'syz.0.4811': attribute type 10 has an invalid length. [ 1085.145382][T21857] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1085.283636][T15857] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1085.443637][T15857] usb 4-1: device descriptor read/64, error -71 [ 1085.518537][ T5898] savu 0003:1E7D:2D5A.0035: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1085.565180][T15857] usb usb4-port1: attempt power cycle [ 1085.799044][ T5898] usb 2-1: USB disconnect, device number 122 [ 1086.003684][T15857] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1086.024237][T15857] usb 4-1: device descriptor read/8, error -71 [ 1086.283580][T15857] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1086.305785][T15857] usb 4-1: device descriptor read/8, error -71 [ 1086.554118][T15857] usb usb4-port1: unable to enumerate USB device [ 1087.558275][T21885] tipc: Enabling of bearer rejected, failed to enable media [ 1087.639381][T21888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.651668][T21888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.773920][T10159] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1087.943632][T10159] usb 6-1: Using ep0 maxpacket: 32 [ 1087.970716][T10159] usb 6-1: config 0 has an invalid interface number: 33 but max is 0 [ 1087.987347][T10159] usb 6-1: config 0 has no interface number 0 [ 1087.988867][T21901] netlink: 'syz.1.4825': attribute type 11 has an invalid length. [ 1087.994899][T10159] usb 6-1: config 0 interface 33 has no altsetting 0 [ 1088.016954][T10159] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0301, bcdDevice=73.bb [ 1088.028636][T10159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.054364][T10159] usb 6-1: Product: syz [ 1088.058583][T10159] usb 6-1: Manufacturer: syz [ 1088.083186][T10159] usb 6-1: SerialNumber: syz [ 1088.123300][T10159] usb 6-1: config 0 descriptor?? [ 1088.179283][T21905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4827'. [ 1088.188018][T10159] gspca_main: gspca_zc3xx-2.14.0 probing 0ac8:0301 [ 1088.404583][T21905] Invalid logical block size (570425344) [ 1088.663771][T15913] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1088.720927][T21917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.755412][T21917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.833587][T15913] usb 3-1: Using ep0 maxpacket: 8 [ 1088.842094][T15913] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1088.851711][T15913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.863990][T15913] usb 3-1: Product: syz [ 1088.870057][T15913] usb 3-1: Manufacturer: syz [ 1088.877566][T15913] usb 3-1: SerialNumber: syz [ 1088.888961][T15913] usb 3-1: config 0 descriptor?? [ 1088.904171][T15913] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1089.490935][T21935] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1089.763695][T10154] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1089.973607][T10154] usb 2-1: Using ep0 maxpacket: 16 [ 1089.982744][T10154] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1089.991352][T10154] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.006752][T10154] usb 2-1: config 0 has no interface number 0 [ 1090.020461][T10154] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1090.033237][T10154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.048892][T10154] usb 2-1: Product: syz [ 1090.056449][T10154] usb 2-1: Manufacturer: syz [ 1090.063256][T10154] usb 2-1: SerialNumber: syz [ 1090.075767][T10154] usb 2-1: config 0 descriptor?? [ 1090.094100][T10154] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1090.105176][T10154] usb 2-1: No valid video chain found. [ 1090.297718][T10154] usb 2-1: USB disconnect, device number 123 [ 1090.631587][T10159] gspca_zc3xx: reg_r err -71 [ 1091.040699][T15913] gspca_sonixj: reg_w1 err -71 [ 1091.049159][T15913] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1091.053373][T21960] tipc: Enabling of bearer rejected, failed to enable media [ 1091.064226][T15913] usb 3-1: USB disconnect, device number 106 [ 1091.122292][T21962] netlink: 'syz.0.4847': attribute type 10 has an invalid length. [ 1091.223817][T10159] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1091.232563][T10159] gspca_zc3xx 6-1:0.33: probe with driver gspca_zc3xx failed with error -71 [ 1091.241729][T10154] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1091.270703][T10159] usb 6-1: USB disconnect, device number 29 [ 1091.371779][T21973] pim6reg: entered allmulticast mode [ 1091.379119][T21973] macvlan0: entered allmulticast mode [ 1091.384920][T21973] veth1_vlan: entered allmulticast mode [ 1091.442277][T10154] usb 2-1: device descriptor read/64, error -71 [ 1091.767519][T10154] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1091.833877][T10159] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1091.928364][T10154] usb 2-1: device descriptor read/64, error -71 [ 1092.036438][T10159] usb 6-1: Using ep0 maxpacket: 16 [ 1092.143787][T10154] usb usb2-port1: attempt power cycle [ 1092.345952][T21974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4851'. [ 1092.420203][T21974] bridge0: entered promiscuous mode [ 1092.428043][T21974] macvlan2: entered promiscuous mode [ 1092.463639][T15913] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1092.503590][ T5898] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1092.563864][T10154] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1092.593726][T15913] usb 3-1: device descriptor read/64, error -71 [ 1092.605017][T10154] usb 2-1: device descriptor read/8, error -71 [ 1092.653606][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 1092.660771][ T5898] usb 4-1: config 0 has an invalid interface number: 33 but max is 0 [ 1092.669536][ T5898] usb 4-1: config 0 has no interface number 0 [ 1092.677125][ T5898] usb 4-1: config 0 interface 33 has no altsetting 0 [ 1092.696276][ T5898] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0301, bcdDevice=73.bb [ 1092.706120][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.714662][ T5898] usb 4-1: Product: syz [ 1092.719085][ T5898] usb 4-1: Manufacturer: syz [ 1092.724082][ T5898] usb 4-1: SerialNumber: syz [ 1092.906476][ T5898] usb 4-1: config 0 descriptor?? [ 1092.913587][T10154] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1092.921372][ T5898] gspca_main: gspca_zc3xx-2.14.0 probing 0ac8:0301 [ 1092.944327][T10154] usb 2-1: device descriptor read/8, error -71 [ 1092.954650][T15913] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1093.073998][T10154] usb usb2-port1: unable to enumerate USB device [ 1093.093618][T15913] usb 3-1: device descriptor read/64, error -71 [ 1093.204024][T15913] usb usb3-port1: attempt power cycle [ 1093.279754][T22000] x_tables: duplicate underflow at hook 3 [ 1093.287946][T22000] @ÿ: renamed from bond_slave_0 (while UP) [ 1093.512495][T22004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4860'. [ 1093.569059][T15913] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1093.605892][T15913] usb 3-1: device descriptor read/8, error -71 [ 1093.844066][T15913] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1093.864275][T15913] usb 3-1: device descriptor read/8, error -71 [ 1093.976902][T15913] usb usb3-port1: unable to enumerate USB device [ 1094.439386][T10159] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1094.448861][T10159] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1094.607297][T10159] usb 6-1: can't read configurations, error -71 [ 1094.635999][T22017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1094.878746][T22021] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4866'. [ 1094.913767][T15913] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1094.946946][T22022] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4866'. [ 1095.077650][T15913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.102375][T15913] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1095.121492][T15913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.180150][T15913] usb 2-1: config 0 descriptor?? [ 1095.192806][T15913] pwc: Askey VC010 type 2 USB webcam detected. [ 1095.195848][ T5898] gspca_zc3xx: reg_r err -71 [ 1095.276091][T22024] netlink: 'syz.2.4867': attribute type 10 has an invalid length. [ 1095.523595][T10154] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1095.593930][T15913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1095.648839][T15913] pwc: recv_control_msg error -32 req 02 val 2700 [ 1095.657280][T15913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1095.666148][T15913] pwc: recv_control_msg error -32 req 04 val 1000 [ 1095.673913][T15913] pwc: recv_control_msg error -32 req 04 val 1300 [ 1095.682499][T15913] pwc: recv_control_msg error -32 req 04 val 1400 [ 1095.689943][T15913] pwc: recv_control_msg error -32 req 02 val 2000 [ 1095.698882][T15913] pwc: recv_control_msg error -32 req 02 val 2100 [ 1095.706300][T15913] pwc: recv_control_msg error -32 req 04 val 1500 [ 1095.713610][T10154] usb 3-1: Using ep0 maxpacket: 32 [ 1095.720143][T10154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1095.730225][T10154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1095.760762][T10154] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 1095.773337][T10154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.793681][ T5898] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1095.801249][T10154] usb 3-1: Product: syz [ 1095.807481][T10154] usb 3-1: Manufacturer: syz [ 1095.808196][ T5898] gspca_zc3xx 4-1:0.33: probe with driver gspca_zc3xx failed with error -71 [ 1095.812128][T10154] usb 3-1: SerialNumber: syz [ 1095.834650][T10154] usb 3-1: config 0 descriptor?? [ 1095.867417][T10154] ati_remote 3-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 1095.884125][ T5898] usb 4-1: USB disconnect, device number 29 [ 1095.946514][T15913] pwc: recv_control_msg error -71 req 02 val 2400 [ 1095.958238][T15913] pwc: recv_control_msg error -71 req 02 val 2600 [ 1095.973023][T15913] pwc: recv_control_msg error -71 req 02 val 2900 [ 1096.015518][T15913] pwc: recv_control_msg error -71 req 02 val 2800 [ 1096.026034][T15913] pwc: recv_control_msg error -71 req 04 val 1100 [ 1096.033107][T15913] pwc: recv_control_msg error -71 req 04 val 1200 [ 1096.043422][T15913] pwc: Registered as video103. [ 1096.072397][T10154] usb 3-1: USB disconnect, device number 111 [ 1096.100810][T15913] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input154 [ 1096.159630][T15913] usb 2-1: USB disconnect, device number 2 [ 1096.264139][T15857] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1096.408546][T22037] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1096.415729][T15857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.420852][T22037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.436994][T15857] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1096.441038][T22037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.449583][T15857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.489810][T15857] usb 6-1: config 0 descriptor?? [ 1097.065566][ T5898] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1097.153046][T15857] usbhid 6-1:0.0: can't add hid device: -71 [ 1097.227403][T22050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.401364][T22050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.411276][T15857] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1097.458045][ T5898] usb 3-1: config 0 has no interfaces? [ 1097.479821][T15857] usb 6-1: USB disconnect, device number 32 [ 1097.560995][ T5898] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1097.627598][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.771419][ T5898] usb 3-1: Product: syz [ 1097.779389][ T5898] usb 3-1: Manufacturer: syz [ 1097.793755][T15913] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1097.811730][ T5898] usb 3-1: SerialNumber: syz [ 1097.893754][ T5898] usb 3-1: config 0 descriptor?? [ 1097.974086][T15913] usb 4-1: Using ep0 maxpacket: 32 [ 1098.233944][ T5898] IPVS: starting estimator thread 0... [ 1098.242591][T15913] usb 4-1: config 0 has no interfaces? [ 1098.260171][T15913] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1098.269464][T15913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.277686][T15913] usb 4-1: Product: syz [ 1098.333628][T22058] IPVS: using max 52 ests per chain, 124800 per kthread [ 1098.451923][T22061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4879'. [ 1098.465608][T22061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4879'. [ 1098.474103][T15857] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1098.525042][T15913] usb 4-1: Manufacturer: syz [ 1098.542512][T15913] usb 4-1: SerialNumber: syz [ 1098.645616][T15857] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.660068][T15857] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1098.669698][T15857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.683083][T15857] usb 6-1: Product: syz [ 1098.689424][T15857] usb 6-1: Manufacturer: syz [ 1099.100038][T15913] usb 4-1: config 0 descriptor?? [ 1099.118103][T22064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4880'. [ 1099.137679][T15857] usb 6-1: SerialNumber: syz [ 1099.168524][T15857] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1099.413678][T15913] usb 4-1: USB disconnect, device number 30 [ 1100.109911][T15913] usb 3-1: USB disconnect, device number 112 [ 1100.141848][T15857] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1100.398506][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 1100.398520][ T30] audit: type=1326 audit(1751602046.357:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c0a32ab19 code=0x7ffc0000 [ 1100.505353][ T30] audit: type=1326 audit(1751602046.357:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0a38e929 code=0x7ffc0000 [ 1100.769634][ T30] audit: type=1326 audit(1751602046.357:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c0a32ab19 code=0x7ffc0000 [ 1100.858299][ T30] audit: type=1326 audit(1751602046.357:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c0a32ab19 code=0x7ffc0000 [ 1100.965620][ T30] audit: type=1326 audit(1751602046.357:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c0a32ab19 code=0x7ffc0000 [ 1101.039511][ T30] audit: type=1326 audit(1751602046.357:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0a38e929 code=0x7ffc0000 [ 1101.069329][ T30] audit: type=1326 audit(1751602046.397:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c0a32ab19 code=0x7ffc0000 [ 1101.101603][ T30] audit: type=1326 audit(1751602046.397:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0a38e929 code=0x7ffc0000 [ 1101.125240][ T30] audit: type=1326 audit(1751602046.397:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c0a32ab19 code=0x7ffc0000 [ 1101.148391][T15913] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1101.160067][ T30] audit: type=1326 audit(1751602046.397:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22084 comm="syz.1.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0a38e929 code=0x7ffc0000 [ 1101.283680][T15913] usb 4-1: device descriptor read/64, error -71 [ 1101.461727][T10154] usb 6-1: USB disconnect, device number 33 [ 1101.483403][T22110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.500119][T22110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.525222][T15913] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1101.673678][T15913] usb 4-1: device descriptor read/64, error -71 [ 1101.788170][T15913] usb usb4-port1: attempt power cycle [ 1102.052013][T22109] fuse: Bad value for 'group_id' [ 1102.063660][ T5898] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1102.162136][T22109] fuse: Bad value for 'group_id' [ 1102.170837][T22109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1102.218167][T15913] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1102.228571][T10154] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1102.264216][T15913] usb 4-1: device descriptor read/8, error -71 [ 1102.316062][ T5898] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1102.339248][ T5898] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1102.372883][ T5898] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1102.448289][T15857] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 1102.450587][T10154] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1102.470951][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.483084][T22117] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1102.495928][T10154] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1102.511301][ T5898] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1102.523749][T15913] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1102.575647][T10154] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1102.585746][T15913] usb 4-1: device descriptor read/8, error -71 [ 1102.612535][T10154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.645830][T15857] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1102.688110][T22120] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1102.695400][T15857] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1102.714179][T15913] usb usb4-port1: unable to enumerate USB device [ 1102.741697][T10154] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1102.795719][T15857] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1102.864239][T15857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.112292][T15857] usb 3-1: usb_control_msg returned -71 [ 1103.118151][T15857] usbtmc 3-1:16.0: can't read capabilities [ 1103.158082][T15857] usb 3-1: USB disconnect, device number 113 [ 1104.425675][T22140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.439071][T22140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.174424][T15857] usb 2-1: USB disconnect, device number 3 [ 1105.683422][T15857] usb 6-1: USB disconnect, device number 34 [ 1106.385038][T22164] fuse: Unknown parameter '60x000000000000000a0x000000000000000300000000000000000000600000000000000000000' [ 1106.451334][T22163] lo: entered promiscuous mode [ 1106.466387][T22163] tunl0: entered promiscuous mode [ 1106.472605][T22163] gre0: entered promiscuous mode [ 1106.485353][T22163] gretap0: entered promiscuous mode [ 1106.491821][T22163] ip_vti0: entered promiscuous mode [ 1106.504677][T22163] ip6_vti0: entered promiscuous mode [ 1106.510853][T22163] sit0: entered promiscuous mode [ 1106.517446][T22163] ip6tnl0: entered promiscuous mode [ 1106.523973][T22163] ip6gre0: entered promiscuous mode [ 1106.535913][T22163] syz_tun: entered promiscuous mode [ 1106.544350][T22163] ip6gretap0: entered promiscuous mode [ 1106.557573][T22163] bridge0: entered promiscuous mode [ 1106.569028][T22163] vcan0: entered promiscuous mode [ 1106.575301][T22163] bond0: entered promiscuous mode [ 1106.580872][T22163] @ÿ: entered promiscuous mode [ 1106.590463][T22163] bond_slave_1: entered promiscuous mode [ 1106.600189][T22163] team0: entered promiscuous mode [ 1106.607690][T22163] team_slave_0: entered promiscuous mode [ 1106.614042][T22163] team_slave_1: entered promiscuous mode [ 1106.645815][T22163] dummy0: entered promiscuous mode [ 1106.672255][T22163] nlmon0: entered promiscuous mode [ 1106.713914][T22163] caif0: entered promiscuous mode [ 1106.719050][T22163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1107.010000][T22174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.019051][T22174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.344181][T22166] fuse: Bad value for 'group_id' [ 1107.349302][T22166] fuse: Bad value for 'group_id' [ 1107.387068][T22166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1107.464955][T22181] geneve2: entered allmulticast mode [ 1107.525182][T15857] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1107.683796][T15857] usb 4-1: Using ep0 maxpacket: 8 [ 1107.691853][T15857] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1107.703596][T10154] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1107.743063][T15857] usb 4-1: config 0 has no interfaces? [ 1107.752798][T15857] usb 4-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 1107.769226][T15857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.778008][T15857] usb 4-1: Product: syz [ 1107.782283][T15857] usb 4-1: Manufacturer: syz [ 1107.950898][T22190] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1108.036765][T15857] usb 4-1: SerialNumber: syz [ 1108.058659][T15857] usb 4-1: config 0 descriptor?? [ 1108.188886][T10154] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1108.199473][T10154] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1108.226349][T10154] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1108.278603][T15857] usb 4-1: USB disconnect, device number 35 [ 1108.290826][T10154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.556083][T10154] usb 3-1: usb_control_msg returned -71 [ 1108.567074][T10154] usbtmc 3-1:16.0: can't read capabilities [ 1108.625611][T10154] usb 3-1: USB disconnect, device number 114 [ 1110.095095][T22207] FAULT_INJECTION: forcing a failure. [ 1110.095095][T22207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.108623][T10154] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1110.163821][T22207] CPU: 1 UID: 0 PID: 22207 Comm: syz.0.4917 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 1110.163848][T22207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1110.163869][T22207] Call Trace: [ 1110.163877][T22207] [ 1110.163885][T22207] dump_stack_lvl+0x189/0x250 [ 1110.163913][T22207] ? __pfx____ratelimit+0x10/0x10 [ 1110.163937][T22207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1110.163958][T22207] ? __pfx__printk+0x10/0x10 [ 1110.163984][T22207] should_fail_ex+0x414/0x560 [ 1110.164008][T22207] _copy_to_user+0x31/0xb0 [ 1110.164026][T22207] simple_read_from_buffer+0xe1/0x170 [ 1110.164047][T22207] proc_fail_nth_read+0x1df/0x250 [ 1110.164068][T22207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1110.164091][T22207] ? rw_verify_area+0x258/0x650 [ 1110.164113][T22207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1110.164133][T22207] vfs_read+0x200/0x980 [ 1110.164162][T22207] ? __pfx___mutex_lock+0x10/0x10 [ 1110.164185][T22207] ? __pfx_vfs_read+0x10/0x10 [ 1110.164208][T22207] ? __fget_files+0x2a/0x420 [ 1110.164223][T22207] ? __fget_files+0x3a0/0x420 [ 1110.164232][T22207] ? __fget_files+0x2a/0x420 [ 1110.164246][T22207] ksys_read+0x145/0x250 [ 1110.164259][T22207] ? __fget_files+0x2a/0x420 [ 1110.164270][T22207] ? __pfx_ksys_read+0x10/0x10 [ 1110.164287][T22207] ? do_syscall_64+0xbe/0x3b0 [ 1110.164304][T22207] do_syscall_64+0xfa/0x3b0 [ 1110.164316][T22207] ? lockdep_hardirqs_on+0x9c/0x150 [ 1110.164329][T22207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.164339][T22207] ? clear_bhb_loop+0x60/0xb0 [ 1110.164350][T22207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.164359][T22207] RIP: 0033:0x7fbecd38d33c [ 1110.164370][T22207] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1110.164378][T22207] RSP: 002b:00007fbece2de030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1110.164389][T22207] RAX: ffffffffffffffda RBX: 00007fbecd5b5fa0 RCX: 00007fbecd38d33c [ 1110.164396][T22207] RDX: 000000000000000f RSI: 00007fbece2de0a0 RDI: 0000000000000005 [ 1110.164402][T22207] RBP: 00007fbece2de090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.164408][T22207] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 1110.164414][T22207] R13: 0000000000000000 R14: 00007fbecd5b5fa0 R15: 00007fbecd6dfa28 [ 1110.164430][T22207] [ 1110.513638][T10154] usb 4-1: Using ep0 maxpacket: 16 [ 1110.714695][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1110.717368][T22211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.774227][T22211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.853117][T22211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.918054][T22211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.031554][T22217] trusted_key: encrypted_key: master key parameter '£ì§CôöŠTÜôõ§²”Žô'¹þHœ<ÈöT¼}ؾ_„6ž¦òÕŒpìÒ`c…¿ç§È>o=h\=ìd%Úm›æi ï>†H‘mé!Ô6VgV€¹7þµGÒ¶™C$EûŒŸzC' is invalid [ 1111.883193][T22231] fuse: Bad value for 'group_id' [ 1111.888590][T22231] fuse: Bad value for 'group_id' [ 1111.933646][T15913] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1111.946623][T22231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1111.967537][T22231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.976507][T22231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.107513][T15913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.117945][T15913] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1112.166542][T15913] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1112.177293][T15913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1112.195076][T15913] usb 3-1: SerialNumber: syz [ 1112.437235][T15913] usb 3-1: 0:2 : does not exist [ 1112.475457][T15913] usb 3-1: USB disconnect, device number 115 [ 1112.532463][T22236] team0: Device gtp0 is of different type [ 1112.538490][T15572] udevd[15572]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1112.732811][T22235] team0: Device gtp0 is of different type [ 1113.059416][T22239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.069342][T22239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.201927][T10154] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1113.249288][T10154] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1113.266111][T10154] usb 4-1: can't read configurations, error -71 [ 1113.373924][T15913] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1113.484677][T22258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4934'. [ 1113.506771][T22258] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4934'. [ 1113.549132][T15913] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1113.557495][T10159] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1113.567734][T15913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.588375][T15913] usb 2-1: config 0 has no interface number 0 [ 1113.601041][T15913] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1113.643221][T15913] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1113.660188][T15913] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1113.670099][T15913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.678424][T15913] usb 2-1: Product: syz [ 1113.682950][T15913] usb 2-1: Manufacturer: syz [ 1113.687915][T15913] usb 2-1: SerialNumber: syz [ 1113.696486][T15913] usb 2-1: config 0 descriptor?? [ 1113.713837][T10159] usb 3-1: Using ep0 maxpacket: 16 [ 1113.721071][T10159] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1113.729808][T10159] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.741234][T10159] usb 3-1: config 0 has no interface number 0 [ 1113.758997][T10159] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1113.771738][T10159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.783811][T10159] usb 3-1: Product: syz [ 1113.788130][T10159] usb 3-1: Manufacturer: syz [ 1113.793020][T10159] usb 3-1: SerialNumber: syz [ 1113.829146][T10159] usb 3-1: config 0 descriptor?? [ 1113.872671][T10159] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 1113.879273][T10159] usb 3-1: No valid video chain found. [ 1113.908996][T22244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.921643][T22244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.922221][T22263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.996392][T22263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.216333][T15857] usb 3-1: USB disconnect, device number 116 [ 1114.245157][T15913] usb 2-1: USB disconnect, device number 4 [ 1114.438235][T22269] netlink: 'syz.5.4937': attribute type 23 has an invalid length. [ 1114.875721][T22271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1115.168167][T15913] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1115.207290][T15857] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1115.385723][T15857] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1115.402591][T15857] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1115.403968][T15913] usb 2-1: Using ep0 maxpacket: 32 [ 1115.447559][T15913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1115.458427][T15913] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 1115.469380][T15857] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1115.469400][T15913] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.492875][T15913] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1115.502547][T15913] usb 2-1: config 128 has no interface number 0 [ 1115.509967][T15913] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1115.522000][T15913] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1115.535331][T15913] usb 2-1: config 128 interface 127 has no altsetting 0 [ 1115.552204][T15857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.554774][T15913] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1115.573433][T15913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.583380][T15913] usb 2-1: Product: syz [ 1115.588028][T15913] usb 2-1: Manufacturer: syz [ 1115.592947][T15913] usb 2-1: SerialNumber: syz [ 1115.792326][T15857] usb 6-1: usb_control_msg returned -71 [ 1115.793832][T10154] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1115.820142][T15857] usbtmc 6-1:16.0: can't read capabilities [ 1115.849244][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.856543][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.894096][T15857] usb 6-1: USB disconnect, device number 35 [ 1115.943622][T10154] usb 4-1: device descriptor read/64, error -71 [ 1116.204119][T10154] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1116.383667][T10154] usb 4-1: device descriptor read/64, error -71 [ 1116.495011][T10154] usb usb4-port1: attempt power cycle [ 1116.543862][T15857] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1116.719832][T15857] usb 3-1: Using ep0 maxpacket: 8 [ 1116.736175][T15857] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1116.753234][T15857] usb 3-1: config 0 has no interfaces? [ 1116.762269][T15857] usb 3-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 1116.771910][T15857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.783734][T15857] usb 3-1: Product: syz [ 1116.788016][T15857] usb 3-1: Manufacturer: syz [ 1116.793410][T15857] usb 3-1: SerialNumber: syz [ 1116.803046][T15857] usb 3-1: config 0 descriptor?? [ 1116.833935][T10154] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1116.865847][T10154] usb 4-1: device descriptor read/8, error -71 [ 1116.993789][ T5898] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1117.006200][T22304] FAULT_INJECTION: forcing a failure. [ 1117.006200][T22304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1117.026740][T15857] usb 3-1: USB disconnect, device number 117 [ 1117.034559][T22304] CPU: 1 UID: 0 PID: 22304 Comm: syz.0.4950 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 1117.034585][T22304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1117.034596][T22304] Call Trace: [ 1117.034604][T22304] [ 1117.034612][T22304] dump_stack_lvl+0x189/0x250 [ 1117.034641][T22304] ? __pfx____ratelimit+0x10/0x10 [ 1117.034665][T22304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1117.034689][T22304] ? __pfx__printk+0x10/0x10 [ 1117.034707][T22304] ? __might_fault+0xb0/0x130 [ 1117.034734][T22304] should_fail_ex+0x414/0x560 [ 1117.034759][T22304] _copy_from_user+0x2d/0xb0 [ 1117.034776][T22304] ___sys_sendmsg+0x158/0x2a0 [ 1117.034799][T22304] ? __pfx____sys_sendmsg+0x10/0x10 [ 1117.034851][T22304] ? __fget_files+0x2a/0x420 [ 1117.034869][T22304] ? __fget_files+0x3a0/0x420 [ 1117.034896][T22304] __x64_sys_sendmsg+0x19b/0x260 [ 1117.034939][T22304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1117.034968][T22304] ? __pfx_ksys_write+0x10/0x10 [ 1117.034981][T22304] ? rcu_is_watching+0x15/0xb0 [ 1117.035009][T22304] ? do_syscall_64+0xbe/0x3b0 [ 1117.035035][T22304] do_syscall_64+0xfa/0x3b0 [ 1117.035056][T22304] ? lockdep_hardirqs_on+0x9c/0x150 [ 1117.035086][T22304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.035103][T22304] ? clear_bhb_loop+0x60/0xb0 [ 1117.035124][T22304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.035140][T22304] RIP: 0033:0x7fbecd38e929 [ 1117.035156][T22304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.035172][T22304] RSP: 002b:00007fbece2de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1117.035190][T22304] RAX: ffffffffffffffda RBX: 00007fbecd5b5fa0 RCX: 00007fbecd38e929 [ 1117.035202][T22304] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1117.035214][T22304] RBP: 00007fbece2de090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.035225][T22304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.035235][T22304] R13: 0000000000000000 R14: 00007fbecd5b5fa0 R15: 00007fbecd6dfa28 [ 1117.035262][T22304] [ 1117.103728][T10154] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1117.204353][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 1117.225917][T10154] usb 4-1: device descriptor read/8, error -71 [ 1117.237363][ T5898] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1117.287137][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.298107][ T5898] usb 6-1: Product: syz [ 1117.302364][ T5898] usb 6-1: Manufacturer: syz [ 1117.307695][ T5898] usb 6-1: SerialNumber: syz [ 1117.330280][ T5898] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1117.338731][ T5898] r8152-cfgselector 6-1: config 0 descriptor?? [ 1117.350930][T10154] usb usb4-port1: unable to enumerate USB device [ 1117.669207][T22311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4952'. [ 1117.679174][T22311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4952'. [ 1117.806388][T10154] r8152-cfgselector 6-1: USB disconnect, device number 36 [ 1117.963419][T15913] usb 2-1: USB disconnect, device number 5 [ 1118.018914][T15572] udevd[15572]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.183909][ T5898] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1118.313911][ T5898] usb 3-1: device descriptor read/64, error -71 [ 1118.564084][ T5898] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1118.703958][ T5898] usb 3-1: device descriptor read/64, error -71 [ 1118.791166][T22324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4958'. [ 1118.832411][T22326] fuse: Bad value for 'fd' [ 1118.855094][ T5898] usb usb3-port1: attempt power cycle [ 1118.995601][T22320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1119.204446][ T5898] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1119.278004][T15913] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1119.304434][ T5898] usb 3-1: device descriptor read/8, error -71 [ 1119.323446][T22318] syz.1.4955: vmalloc error: size 2621440, failed to allocated page array size 5120, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1119.385082][T22318] CPU: 0 UID: 0 PID: 22318 Comm: syz.1.4955 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 1119.385107][T22318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1119.385117][T22318] Call Trace: [ 1119.385124][T22318] [ 1119.385132][T22318] dump_stack_lvl+0x189/0x250 [ 1119.385158][T22318] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1119.385180][T22318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1119.385203][T22318] ? __pfx__printk+0x10/0x10 [ 1119.385222][T22318] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1119.385239][T22318] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1119.385260][T22318] warn_alloc+0x214/0x310 [ 1119.385284][T22318] ? __pfx_warn_alloc+0x10/0x10 [ 1119.385312][T22318] ? __get_vm_area_node+0x28f/0x300 [ 1119.385328][T22318] ? do_replace_finish+0x73/0x1930 [ 1119.385353][T22318] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1119.385399][T22318] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1119.385418][T22318] ? do_replace_finish+0x73/0x1930 [ 1119.385441][T22318] ? __get_vm_area_node+0x28f/0x300 [ 1119.385460][T22318] ? do_replace_finish+0x73/0x1930 [ 1119.385481][T22318] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 1119.385498][T22318] ? do_replace_finish+0x73/0x1930 [ 1119.385516][T22318] ? __vmap_pages_range_noflush+0xdb5/0xe10 [ 1119.385562][T22318] ? __kasan_unpoison_vmalloc+0x51/0x80 [ 1119.385594][T22318] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1119.385622][T22318] ? do_replace_finish+0x73/0x1930 [ 1119.385644][T22318] vmalloc_noprof+0xb2/0xf0 [ 1119.385663][T22318] ? do_replace_finish+0x73/0x1930 [ 1119.385687][T22318] do_replace_finish+0x73/0x1930 [ 1119.385712][T22318] ? __might_fault+0xb0/0x130 [ 1119.385751][T22318] do_replace+0x324/0x430 [ 1119.385776][T22318] ? __pfx_do_replace+0x10/0x10 [ 1119.385809][T22318] ? bpf_lsm_capable+0x9/0x20 [ 1119.385825][T22318] ? security_capable+0x7e/0x2e0 [ 1119.385854][T22318] do_ebt_set_ctl+0x1e3/0xb60 [ 1119.385926][T22318] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1119.385952][T22318] ? rcu_is_watching+0x15/0xb0 [ 1119.385981][T22318] ? nf_setsockopt+0x221/0x290 [ 1119.385999][T22318] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1119.386026][T22318] ? __pfx___mutex_lock+0x10/0x10 [ 1119.386048][T22318] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1119.386070][T22318] ? aa_sk_perm+0x81e/0x950 [ 1119.386094][T22318] ? __pfx_aa_sk_perm+0x10/0x10 [ 1119.386116][T22318] nf_setsockopt+0x26c/0x290 [ 1119.386135][T22318] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1119.386161][T22318] do_sock_setsockopt+0x25a/0x3e0 [ 1119.386183][T22318] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1119.386206][T22318] ? __fget_files+0x2a/0x420 [ 1119.386232][T22318] __x64_sys_setsockopt+0x18b/0x220 [ 1119.386258][T22318] do_syscall_64+0xfa/0x3b0 [ 1119.386281][T22318] ? lockdep_hardirqs_on+0x9c/0x150 [ 1119.386303][T22318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.386320][T22318] ? clear_bhb_loop+0x60/0xb0 [ 1119.386341][T22318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.386358][T22318] RIP: 0033:0x7f4c0a38e929 [ 1119.386376][T22318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1119.386392][T22318] RSP: 002b:00007f4c0b2e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1119.386412][T22318] RAX: ffffffffffffffda RBX: 00007f4c0a5b5fa0 RCX: 00007f4c0a38e929 [ 1119.386425][T22318] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 1119.386437][T22318] RBP: 00007f4c0a410b39 R08: 0000000000000108 R09: 0000000000000000 [ 1119.386448][T22318] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 1119.386459][T22318] R13: 0000000000000000 R14: 00007f4c0a5b5fa0 R15: 00007f4c0a6dfa28 [ 1119.386489][T22318] [ 1119.387329][T22318] Mem-Info: [ 1119.764279][T22318] active_anon:12495 inactive_anon:0 isolated_anon:0 [ 1119.764279][T22318] active_file:21834 inactive_file:40337 isolated_file:0 [ 1119.764279][T22318] unevictable:768 dirty:204 writeback:0 [ 1119.764279][T22318] slab_reclaimable:6070 slab_unreclaimable:106523 [ 1119.764279][T22318] mapped:42740 shmem:6299 pagetables:1767 [ 1119.764279][T22318] sec_pagetables:0 bounce:0 [ 1119.764279][T22318] kernel_misc_reclaimable:0 [ 1119.764279][T22318] free:1228700 free_pcp:21313 free_cma:0 [ 1119.861253][ T5898] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1119.888682][T15913] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1119.898762][T15913] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1119.932279][T22318] Node 0 active_anon:50508kB inactive_anon:0kB active_file:87336kB inactive_file:161144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:171008kB dirty:816kB writeback:0kB shmem:23660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12784kB pagetables:6932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1119.986006][ T5898] usb 3-1: device descriptor read/8, error -71 [ 1120.106141][T15913] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1120.111760][T22318] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1120.115602][T15913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.146748][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.147329][ T5898] usb usb3-port1: unable to enumerate USB device [ 1120.204606][T22318] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1120.303607][T22318] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1120.309684][T22318] Node 0 DMA32 free:1017176kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52804kB inactive_anon:0kB active_file:87336kB inactive_file:159324kB unevictable:1536kB writepending:820kB present:3129332kB managed:2560988kB mlocked:0kB bounce:0kB free_pcp:43604kB local_pcp:16048kB free_cma:0kB [ 1120.413883][T22318] lowmem_reserve[]: 0 0 1 1 1 [ 1120.418868][T22318] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1120.448154][T22318] lowmem_reserve[]: 0 0 0 0 0 [ 1120.456362][T22318] Node 1 Normal free:3882172kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:37772kB local_pcp:6988kB free_cma:0kB [ 1120.492261][T15913] usb 6-1: usb_control_msg returned -71 [ 1120.500413][T22318] lowmem_reserve[]: 0 0 0 0 0 [ 1120.504603][T15913] usbtmc 6-1:16.0: can't read capabilities [ 1120.506614][T22318] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1120.528899][T22318] Node 0 DMA32: 4*4kB (UE) 109*8kB (E) 264*16kB (UME) 115*32kB (UME) 146*64kB (UME) 123*128kB (ME) 35*256kB (UME) 91*512kB (UME) 76*1024kB (UM) 7*2048kB (ME) 204*4096kB (UM) = 1017176kB [ 1120.549708][T22318] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 1120.597617][T22318] Node 1 Normal: 213*4kB (UM) 65*8kB (UME) 46*16kB (UME) 256*32kB (UME) 112*64kB (UME) 31*128kB (UME) 9*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 3*2048kB (U) 939*4096kB (UM) = 3882172kB [ 1120.611480][T15913] usb 6-1: USB disconnect, device number 37 [ 1120.707479][T22318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1120.733736][T22318] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1120.749324][T22318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1120.769583][T22318] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1120.779353][T22318] 68467 total pagecache pages [ 1120.789355][T22318] 0 pages in swap cache [ 1120.793810][T22318] Free swap = 124996kB [ 1120.799035][T22318] Total swap = 124996kB [ 1120.803433][T22318] 2097051 pages RAM [ 1120.809473][T22318] 0 pages HighMem/MovableOnly [ 1120.816691][T22318] 424698 pages reserved [ 1120.820860][T22318] 0 pages cma reserved [ 1121.443639][ T5898] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1121.693710][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 1121.707682][ T5898] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1121.764518][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.773041][ T5898] usb 4-1: Product: syz [ 1121.782579][ T5898] usb 4-1: Manufacturer: syz [ 1121.790952][ T5898] usb 4-1: SerialNumber: syz [ 1121.810835][ T5898] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1121.817800][ T5898] r8152-cfgselector 4-1: config 0 descriptor?? [ 1121.923815][T15857] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1122.084542][T15857] usb 6-1: Using ep0 maxpacket: 16 [ 1122.091145][T15857] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.104113][T15857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1122.150663][T15857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1122.171018][T15857] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1122.193630][T15857] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1122.236847][ T5898] r8152-cfgselector 4-1: USB disconnect, device number 42 [ 1122.295913][T15857] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1122.309547][T15857] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1122.318828][T15857] usb 6-1: Manufacturer: syz [ 1122.425938][T15857] usb 6-1: config 0 descriptor?? [ 1122.592747][T22362] FAULT_INJECTION: forcing a failure. [ 1122.592747][T22362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.617256][T22362] CPU: 0 UID: 0 PID: 22362 Comm: syz.0.4970 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 1122.617283][T22362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1122.617294][T22362] Call Trace: [ 1122.617302][T22362] [ 1122.617311][T22362] dump_stack_lvl+0x189/0x250 [ 1122.617339][T22362] ? __pfx____ratelimit+0x10/0x10 [ 1122.617355][T22362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1122.617369][T22362] ? __pfx__printk+0x10/0x10 [ 1122.617379][T22362] ? __might_fault+0xb0/0x130 [ 1122.617394][T22362] should_fail_ex+0x414/0x560 [ 1122.617416][T22362] _copy_from_user+0x2d/0xb0 [ 1122.617434][T22362] ___sys_recvmsg+0x12e/0x510 [ 1122.617460][T22362] ? __pfx____sys_recvmsg+0x10/0x10 [ 1122.617500][T22362] ? __might_fault+0xb0/0x130 [ 1122.617510][T22362] do_recvmmsg+0x307/0x770 [ 1122.617526][T22362] ? __pfx_do_recvmmsg+0x10/0x10 [ 1122.617544][T22362] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1122.617583][T22362] __x64_sys_recvmmsg+0x190/0x240 [ 1122.617607][T22362] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1122.617624][T22362] ? rcu_is_watching+0x15/0xb0 [ 1122.617646][T22362] ? do_syscall_64+0xbe/0x3b0 [ 1122.617662][T22362] do_syscall_64+0xfa/0x3b0 [ 1122.617675][T22362] ? lockdep_hardirqs_on+0x9c/0x150 [ 1122.617687][T22362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.617698][T22362] ? clear_bhb_loop+0x60/0xb0 [ 1122.617717][T22362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.617734][T22362] RIP: 0033:0x7fbecd38e929 [ 1122.617750][T22362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.617765][T22362] RSP: 002b:00007fbece2de038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1122.617784][T22362] RAX: ffffffffffffffda RBX: 00007fbecd5b5fa0 RCX: 00007fbecd38e929 [ 1122.617793][T22362] RDX: 015cbc1ab4c0933f RSI: 0000200000001980 RDI: 0000000000000003 [ 1122.617799][T22362] RBP: 00007fbece2de090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.617805][T22362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1122.617811][T22362] R13: 0000000000000000 R14: 00007fbecd5b5fa0 R15: 00007fbecd6dfa28 [ 1122.617826][T22362] [ 1122.836324][ C0] vkms_vblank_simulate: vblank timer overrun [ 1123.163677][T15857] rc_core: IR keymap rc-hauppauge not found [ 1123.173812][T15857] Registered IR keymap rc-empty [ 1123.188184][T15857] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1123.223639][T15857] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1123.268022][T15857] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1123.280102][ T5898] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1123.306175][T15857] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input158 [ 1123.350002][T15857] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1123.386981][T15857] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1123.414058][T15857] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1123.434396][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 1123.440364][T15857] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1123.458068][ T5898] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1123.474234][T15857] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1123.481752][ T5898] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1123.513990][T15857] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1123.524612][ T5898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1123.560689][ T5898] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1123.572352][T15857] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1123.595624][ T5898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1123.605785][T15857] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1123.623988][T15857] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1123.655712][ T5898] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1123.683704][ T5898] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1123.693101][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.701365][T15857] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1123.728177][T15857] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1123.742352][ T5898] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 1123.766180][T15857] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1123.813904][T15857] usb 6-1: USB disconnect, device number 38 [ 1123.963145][T10159] usb 2-1: USB disconnect, device number 6 [ 1124.187260][T22394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4979'. [ 1124.243687][T15857] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1124.393599][T15857] usb 6-1: device descriptor read/64, error -71 [ 1124.491690][T22398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.521813][T22398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.571270][T22392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1124.644352][T15857] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1124.673210][T22401] FAULT_INJECTION: forcing a failure. [ 1124.673210][T22401] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.689390][T22401] CPU: 1 UID: 0 PID: 22401 Comm: syz.3.4981 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 1124.689410][T22401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1124.689416][T22401] Call Trace: [ 1124.689422][T22401] [ 1124.689427][T22401] dump_stack_lvl+0x189/0x250 [ 1124.689447][T22401] ? __pfx____ratelimit+0x10/0x10 [ 1124.689462][T22401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1124.689476][T22401] ? __pfx__printk+0x10/0x10 [ 1124.689495][T22401] should_fail_ex+0x414/0x560 [ 1124.689510][T22401] should_failslab+0xa8/0x100 [ 1124.689522][T22401] __kmalloc_cache_noprof+0x70/0x3d0 [ 1124.689532][T22401] ? sctp_add_bind_addr+0x8c/0x370 [ 1124.689544][T22401] sctp_add_bind_addr+0x8c/0x370 [ 1124.689556][T22401] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1124.689573][T22401] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1124.689593][T22401] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1124.689609][T22401] ? sctp_v6_is_any+0x64/0x80 [ 1124.689621][T22401] ? sctp_copy_one_addr+0x93/0x360 [ 1124.689637][T22401] sctp_bind_addr_copy+0xb3/0x3c0 [ 1124.689652][T22401] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1124.689667][T22401] sctp_connect_new_asoc+0x2e0/0x690 [ 1124.689681][T22401] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1124.689692][T22401] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1124.689710][T22401] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1124.689725][T22401] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1124.689737][T22401] sctp_sendmsg+0x155c/0x2810 [ 1124.689755][T22401] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1124.689767][T22401] ? aa_sk_perm+0x81e/0x950 [ 1124.689781][T22401] ? __pfx_aa_sk_perm+0x10/0x10 [ 1124.689793][T22401] ? sock_rps_record_flow+0x19/0x410 [ 1124.689809][T22401] ? inet_sendmsg+0x2f4/0x370 [ 1124.689825][T22401] __sock_sendmsg+0x19c/0x270 [ 1124.689841][T22401] ____sys_sendmsg+0x52d/0x830 [ 1124.689856][T22401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1124.689872][T22401] ? import_iovec+0x74/0xa0 [ 1124.689883][T22401] ___sys_sendmsg+0x21f/0x2a0 [ 1124.689896][T22401] ? __pfx____sys_sendmsg+0x10/0x10 [ 1124.689927][T22401] ? __fget_files+0x2a/0x420 [ 1124.689938][T22401] ? __fget_files+0x3a0/0x420 [ 1124.689953][T22401] __sys_sendmmsg+0x227/0x430 [ 1124.689967][T22401] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1124.689977][T22401] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1124.690006][T22401] ? ksys_write+0x22a/0x250 [ 1124.690017][T22401] ? __pfx_ksys_write+0x10/0x10 [ 1124.690029][T22401] __x64_sys_sendmmsg+0xa0/0xc0 [ 1124.690041][T22401] do_syscall_64+0xfa/0x3b0 [ 1124.690055][T22401] ? lockdep_hardirqs_on+0x9c/0x150 [ 1124.690068][T22401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.690077][T22401] ? clear_bhb_loop+0x60/0xb0 [ 1124.690089][T22401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.690098][T22401] RIP: 0033:0x7f3e0618e929 [ 1124.690108][T22401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1124.690117][T22401] RSP: 002b:00007f3e03ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1124.690128][T22401] RAX: ffffffffffffffda RBX: 00007f3e063b5fa0 RCX: 00007f3e0618e929 [ 1124.690135][T22401] RDX: 0000000000000001 RSI: 0000200000003e00 RDI: 0000000000000004 [ 1124.690141][T22401] RBP: 00007f3e03ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.690147][T22401] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000002 [ 1124.690153][T22401] R13: 0000000000000000 R14: 00007f3e063b5fa0 R15: 00007f3e064dfa28 [ 1124.690169][T22401] [ 1124.904652][T15913] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1124.963673][T15857] usb 6-1: device descriptor read/64, error -71 [ 1125.154148][T15857] usb usb6-port1: attempt power cycle [ 1125.236004][T15913] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1125.273686][T15913] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1125.324115][T15913] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1125.333203][T15913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.543694][T15857] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1125.554720][T10154] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1125.566495][T15857] usb 6-1: device descriptor read/8, error -71 [ 1125.580651][T15913] usb 2-1: usb_control_msg returned -71 [ 1125.586443][T15913] usbtmc 2-1:16.0: can't read capabilities [ 1125.615199][T15913] usb 2-1: USB disconnect, device number 7 [ 1125.661367][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 1125.661470][ T30] audit: type=1326 audit(1751602071.617:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecd38e929 code=0x7ffc0000 [ 1125.716950][T22413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.726218][T10154] usb 4-1: Using ep0 maxpacket: 16 [ 1125.727112][T22413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.887850][T22413] netlink: 4392 bytes leftover after parsing attributes in process `syz.0.4986'. [ 1125.920512][T15857] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1125.921034][ T30] audit: type=1326 audit(1751602071.657:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecd38e929 code=0x7ffc0000 [ 1125.961465][T15857] usb 6-1: device descriptor read/8, error -71 [ 1126.075610][T15857] usb usb6-port1: unable to enumerate USB device [ 1126.450010][ T30] audit: type=1326 audit(1751602071.657:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fbecd38e929 code=0x7ffc0000 [ 1126.568654][ T30] audit: type=1326 audit(1751602071.657:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecd38e929 code=0x7ffc0000 [ 1126.728637][ T30] audit: type=1326 audit(1751602071.657:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecd38e929 code=0x7ffc0000 [ 1126.764259][ T30] audit: type=1326 audit(1751602071.657:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fbecd38e929 code=0x7ffc0000 [ 1127.086951][ T30] audit: type=1326 audit(1751602071.657:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecd38e929 code=0x7ffc0000 [ 1127.116387][T22428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1127.153814][T22429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4992'. [ 1127.216142][ T30] audit: type=1326 audit(1751602071.657:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecd38e929 code=0x7ffc0000 [ 1127.382920][ T30] audit: type=1326 audit(1751602071.657:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbecd38e929 code=0x7ffc0000 [ 1127.443984][ T30] audit: type=1326 audit(1751602071.657:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.0.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecd38e929 code=0x7ffc0000 [ 1127.530724][T22437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1127.580320][T22435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.615858][T22435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.338055][T22452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.382869][T22452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.694432][T10154] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1128.702940][T10154] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1128.711162][T10154] usb 4-1: can't read configurations, error -71 [ 1128.878079][T22460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5004'. [ 1129.062234][T22462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5004'. [ 1129.176698][T22458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1129.343811][T10154] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1129.403650][T15857] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1129.494726][ T5898] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1129.593716][T10154] usb 4-1: Using ep0 maxpacket: 8 [ 1129.602724][T10154] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1129.612036][T10154] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1129.631359][T10154] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1129.675480][T10154] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1129.681364][T15857] usb 2-1: config 0 has an invalid interface number: 104 but max is 0 [ 1129.701530][T15857] usb 2-1: config 0 has no interface number 0 [ 1129.703740][T10154] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1129.718478][T10154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.728629][T10154] usb 4-1: Product: syz [ 1129.733648][T10154] usb 4-1: Manufacturer: syz [ 1129.735624][ T5898] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1129.738339][T10154] usb 4-1: SerialNumber: syz [ 1129.760907][T22465] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1129.768500][T15857] usb 2-1: config 0 interface 104 has no altsetting 0 [ 1129.786469][ T5898] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1129.814458][ T5898] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1129.823811][T15857] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1129.838472][T15857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.846963][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.855444][T15857] usb 2-1: Product: syz [ 1129.867571][T15857] usb 2-1: Manufacturer: syz [ 1129.885207][T15857] usb 2-1: SerialNumber: syz [ 1129.952561][T15857] usb 2-1: config 0 descriptor?? [ 1129.976310][T15857] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1130.215876][ T5898] usb 3-1: usb_control_msg returned -71 [ 1130.378108][ T5898] usbtmc 3-1:16.0: can't read capabilities [ 1130.384642][T22467] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.5006'. [ 1130.422251][T15857] gspca_vc032x: reg_r err -71 [ 1130.434263][ T5898] usb 3-1: USB disconnect, device number 122 [ 1130.516932][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.528286][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.549979][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.559664][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.578495][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.584486][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.591355][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.600002][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.605844][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.611354][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.623216][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.630188][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.639858][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.645561][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.651098][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.659460][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.665213][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.720285][T15857] gspca_vc032x: I2c Bus Busy Wait 00 [ 1130.726808][T15857] gspca_vc032x: Unknown sensor... [ 1130.744451][T15857] vc032x 2-1:0.104: probe with driver vc032x failed with error -22 [ 1130.764077][T15857] usb 2-1: USB disconnect, device number 8 [ 1130.897203][T10154] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input159 [ 1130.934496][ T5185] bcm5974 4-1:1.0: could not read from device [ 1130.957423][ T5185] bcm5974 4-1:1.0: could not read from device [ 1130.974943][ T5185] bcm5974 4-1:1.0: could not read from device [ 1130.988363][T10154] usb 4-1: USB disconnect, device number 44 [ 1131.000860][ T5185] bcm5974 4-1:1.0: could not read from device [ 1131.309535][T22488] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1131.319259][T22488] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1131.381796][T22492] openvswitch: netlink: Tunnel attr 16130 out of range max 16 [ 1131.453783][T22492] fuse: Bad value for 'rootmode' [ 1131.483972][T22494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.492567][T10154] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 1131.500676][T15913] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1131.516520][T22488] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1131.531008][T22494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.549892][T22488] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1131.581236][T22494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5012'. [ 1131.643567][T15913] usb 2-1: device descriptor read/64, error -71 [ 1131.678691][T10154] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1131.689965][T10154] usb 4-1: config 0 has no interface number 0 [ 1131.706933][T10154] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1131.734307][T22488] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1131.743371][T10154] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1131.743623][T22488] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1131.790045][T10154] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1131.831358][T10154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.873418][T10154] usb 4-1: config 0 descriptor?? [ 1131.900179][T22484] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1131.904172][T15913] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1131.929349][T10154] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1132.053738][T15913] usb 2-1: device descriptor read/64, error -71 [ 1132.125185][T15857] usb 4-1: USB disconnect, device number 45 [ 1132.166530][T15913] usb usb2-port1: attempt power cycle [ 1132.513575][T15913] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1132.535057][T15913] usb 2-1: device descriptor read/8, error -71 [ 1132.774622][T15913] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1132.849305][T15913] usb 2-1: device descriptor read/8, error -71 [ 1132.891253][T22508] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1132.979662][T15913] usb usb2-port1: unable to enumerate USB device [ 1133.123735][T10154] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 1133.263578][T15857] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1133.283904][T10154] usb 4-1: Invalid ep0 maxpacket: 64 [ 1133.311885][T22517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1133.413613][T10154] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 1133.419332][T15857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.439010][T15857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.448871][T15857] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1133.458268][T15857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.468139][T15857] usb 3-1: config 0 descriptor?? [ 1133.563609][T10154] usb 4-1: Invalid ep0 maxpacket: 64 [ 1133.569032][T15913] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1133.577653][T10154] usb usb4-port1: attempt power cycle [ 1133.735411][T15913] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1133.745381][T15913] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1133.758596][T15913] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1133.767797][T15913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.918228][T15857] cm6533_jd 0003:0D8C:0022.0036: unknown main item tag 0x0 [ 1133.925779][T15857] cm6533_jd 0003:0D8C:0022.0036: unknown main item tag 0x0 [ 1133.934138][T10154] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 1133.938546][T15857] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0036/input/input160 [ 1133.983334][T15857] cm6533_jd 0003:0D8C:0022.0036: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1133.999431][T10154] usb 4-1: Invalid ep0 maxpacket: 64 [ 1134.015166][T15913] usb 6-1: usb_control_msg returned -71 [ 1134.029129][T15913] usbtmc 6-1:16.0: can't read capabilities [ 1134.058808][T15913] usb 6-1: USB disconnect, device number 43 [ 1134.173599][T10154] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 1134.197125][T10154] usb 4-1: Invalid ep0 maxpacket: 64 [ 1134.202792][T10154] usb usb4-port1: unable to enumerate USB device [ 1134.896538][T22540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.913351][T22540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.930566][T22540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.963169][T22540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.123628][T15913] usb 3-1: reset high-speed USB device number 123 using dummy_hcd [ 1135.964996][T22552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.008270][T22552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.352116][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 1136.352127][ T30] audit: type=1326 audit(1751602082.307:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.3.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1136.393404][ T30] audit: type=1326 audit(1751602082.347:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.3.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1136.423632][ T30] audit: type=1326 audit(1751602082.347:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.3.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1136.448830][ T30] audit: type=1326 audit(1751602082.347:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.3.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1136.475839][ T30] audit: type=1326 audit(1751602082.347:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.3.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1136.503611][ T30] audit: type=1326 audit(1751602082.347:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.3.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1136.528681][ T30] audit: type=1326 audit(1751602082.347:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.3.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1136.558914][ T30] audit: type=1326 audit(1751602082.347:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.3.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1136.593358][ T30] audit: type=1326 audit(1751602082.347:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.3.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1136.628618][ T30] audit: type=1326 audit(1751602082.347:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.3.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0618e929 code=0x7ffc0000 [ 1136.651586][T10159] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1136.975691][T10159] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 1136.987409][T10159] usb 4-1: config 0 has no interface number 0 [ 1137.047263][T10159] usb 4-1: config 0 interface 104 has no altsetting 0 [ 1137.208727][T10159] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1137.390517][T10159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.427212][T10154] usb 3-1: USB disconnect, device number 123 [ 1137.572645][T10159] usb 4-1: Product: syz [ 1137.667698][T10159] usb 4-1: Manufacturer: syz [ 1137.728090][T10159] usb 4-1: SerialNumber: syz [ 1137.775161][T10159] usb 4-1: config 0 descriptor?? [ 1137.843031][T10159] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1137.896173][T22577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.947241][T22577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.971533][T22581] tipc: Enabling of bearer rejected, failed to enable media [ 1138.100460][T22558] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.5030'. [ 1138.134557][T10159] gspca_vc032x: reg_r err -71 [ 1138.139290][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.198275][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.218511][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.249053][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.273900][T22584] netlink: 'syz.2.5038': attribute type 10 has an invalid length. [ 1138.289288][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.314173][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.324671][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.348535][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.364844][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.380655][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.403540][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.419391][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.435936][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.446060][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.459800][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.470283][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.481058][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.521890][T10159] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.562569][T10159] gspca_vc032x: Unknown sensor... [ 1138.601123][T10159] vc032x 4-1:0.104: probe with driver vc032x failed with error -22 [ 1138.606755][T22574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1138.620967][T10159] usb 4-1: USB disconnect, device number 50 [ 1138.823873][T22595] ptrace attach of "./syz-executor exec"[14799] was attempted by "./syz-executor exec"[22595] [ 1138.874074][ T5898] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1139.080501][ T5898] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1139.130417][T22599] vlan2: entered promiscuous mode [ 1139.135590][T22599] erspan0: entered promiscuous mode [ 1139.176073][ T5898] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1139.193971][T10154] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1139.211640][ T5898] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1139.241406][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.373692][T10154] usb 4-1: Using ep0 maxpacket: 8 [ 1139.385439][T10154] usb 4-1: config 6 has an invalid interface number: 51 but max is 1 [ 1139.555818][T10154] usb 4-1: config 6 has no interface number 1 [ 1139.624288][T10154] usb 4-1: config 6 interface 0 has no altsetting 0 [ 1139.626945][ T5898] usb 6-1: usb_control_msg returned -71 [ 1139.630927][T10154] usb 4-1: config 6 interface 51 has no altsetting 0 [ 1139.647467][ T5898] usbtmc 6-1:16.0: can't read capabilities [ 1139.659260][T10154] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1139.687882][ T5898] usb 6-1: USB disconnect, device number 44 [ 1140.163559][T10154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.266313][T10154] usb 4-1: Product: syz [ 1140.270493][T10154] usb 4-1: Manufacturer: syz [ 1140.392015][T10154] usb 4-1: SerialNumber: syz [ 1140.706740][T10154] xr_serial 4-1:6.51: xr_serial converter detected [ 1140.748727][T10154] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1140.783604][T10154] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1140.841758][T10154] usb 4-1: USB disconnect, device number 51 [ 1140.882417][T10154] xr_serial 4-1:6.0: device disconnected [ 1141.051171][T22607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.075606][T22607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.109179][T22607] tipc: Enabling of bearer rejected, failed to enable media [ 1141.181550][T22607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.232302][T22607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.413797][ T5898] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1141.532238][T22620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5048'. [ 1141.583863][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 1141.613136][ T5898] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1141.628009][ T5898] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.660368][ T5898] usb 6-1: config 7 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1141.697230][ T5898] usb 6-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 1141.706804][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.714922][ T5898] usb 6-1: Product: syz [ 1141.723538][ T5898] usb 6-1: Manufacturer: syz [ 1141.729900][ T5898] usb 6-1: SerialNumber: syz [ 1141.823824][T10154] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1141.980971][ T5898] usb 6-1: USB disconnect, device number 45 [ 1142.033571][T10154] usb 2-1: Using ep0 maxpacket: 8 [ 1142.041804][T10154] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1142.062661][T10154] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1142.076601][T10154] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1142.143782][T10154] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1142.155056][T10154] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1142.194138][T10154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.202295][T10154] usb 2-1: Product: syz [ 1142.216212][T10154] usb 2-1: Manufacturer: syz [ 1142.221316][T10154] usb 2-1: SerialNumber: syz [ 1142.293626][T10159] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1142.329006][T22627] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1142.523744][T10159] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1142.552043][T10159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.591191][T10159] usb 3-1: config 0 descriptor?? [ 1142.824640][T10159] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1142.968620][T22644] fuse: Unknown parameter '$' [ 1143.035309][T10159] [drm:udl_init] *ERROR* Selecting channel failed [ 1143.048964][T22644] xt_hashlimit: max too large, truncated to 1048576 [ 1143.088067][T22644] xt_bpf: check failed: parse error [ 1143.107787][T10159] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1143.155065][T10159] [drm] Initialized udl on minor 2 [ 1143.186134][T10159] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1143.216614][T10159] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1143.232948][T15913] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1143.244918][T15913] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1143.253988][T10159] usb 3-1: USB disconnect, device number 124 [ 1143.513963][T10154] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input161 [ 1143.529227][ T5185] bcm5974 2-1:1.0: could not read from device [ 1143.578204][ T5185] bcm5974 2-1:1.0: could not read from device [ 1143.599727][T10154] usb 2-1: USB disconnect, device number 13 [ 1143.620277][ T5185] bcm5974 2-1:1.0: could not read from device [ 1143.769111][T10565] udevd[10565]: Error opening device "/dev/input/event4": No such file or directory [ 1143.792987][T10565] udevd[10565]: Unable to EVIOCGABS device "/dev/input/event4" [ 1143.803140][T22663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5064'. [ 1143.853625][T10565] udevd[10565]: Unable to EVIOCGABS device "/dev/input/event4" [ 1143.863903][T10565] udevd[10565]: Unable to EVIOCGABS device "/dev/input/event4" [ 1143.878456][T10565] udevd[10565]: Unable to EVIOCGABS device "/dev/input/event4" [ 1143.897823][T10565] udevd[10565]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1143.991148][ T5200] udevd[5200]: worker [10565] terminated by signal 6 (Aborted) [ 1143.995272][T22657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.003617][ T5200] udevd[5200]: worker [10565] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input161/event4' [ 1144.025488][T10159] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1144.067089][T22657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.207103][T10159] usb 3-1: Using ep0 maxpacket: 8 [ 1144.215822][T10159] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1144.228513][T10159] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.255405][T10159] usb 3-1: config 7 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1144.271856][T10159] usb 3-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 1144.282452][T10159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.293211][T10159] usb 3-1: Product: syz [ 1144.302968][T10159] usb 3-1: Manufacturer: syz [ 1144.311200][T10159] usb 3-1: SerialNumber: syz [ 1144.337813][T22684] FAULT_INJECTION: forcing a failure. [ 1144.337813][T22684] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.351471][T22684] CPU: 0 UID: 0 PID: 22684 Comm: syz.3.5071 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 1144.351500][T22684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1144.351512][T22684] Call Trace: [ 1144.351520][T22684] [ 1144.351528][T22684] dump_stack_lvl+0x189/0x250 [ 1144.351558][T22684] ? __pfx____ratelimit+0x10/0x10 [ 1144.351582][T22684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1144.351606][T22684] ? __pfx__printk+0x10/0x10 [ 1144.351630][T22684] ? __pfx___might_resched+0x10/0x10 [ 1144.351659][T22684] should_fail_ex+0x414/0x560 [ 1144.351684][T22684] should_failslab+0xa8/0x100 [ 1144.351704][T22684] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1144.351723][T22684] ? __alloc_skb+0x112/0x2d0 [ 1144.351746][T22684] __alloc_skb+0x112/0x2d0 [ 1144.351768][T22684] netlink_sendmsg+0x5c6/0xb30 [ 1144.351796][T22684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1144.351819][T22684] ? aa_sock_msg_perm+0x94/0x160 [ 1144.351841][T22684] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1144.351861][T22684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1144.351881][T22684] __sock_sendmsg+0x219/0x270 [ 1144.351908][T22684] ____sys_sendmsg+0x505/0x830 [ 1144.351934][T22684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1144.351963][T22684] ? import_iovec+0x74/0xa0 [ 1144.351983][T22684] ___sys_sendmsg+0x21f/0x2a0 [ 1144.352006][T22684] ? __pfx____sys_sendmsg+0x10/0x10 [ 1144.352054][T22684] ? __fget_files+0x2a/0x420 [ 1144.352071][T22684] ? __fget_files+0x3a0/0x420 [ 1144.352103][T22684] __x64_sys_sendmsg+0x19b/0x260 [ 1144.352126][T22684] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1144.352154][T22684] ? __pfx_ksys_write+0x10/0x10 [ 1144.352166][T22684] ? rcu_is_watching+0x15/0xb0 [ 1144.352193][T22684] ? do_syscall_64+0xbe/0x3b0 [ 1144.352218][T22684] do_syscall_64+0xfa/0x3b0 [ 1144.352239][T22684] ? lockdep_hardirqs_on+0x9c/0x150 [ 1144.352260][T22684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.352275][T22684] ? clear_bhb_loop+0x60/0xb0 [ 1144.352294][T22684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.352309][T22684] RIP: 0033:0x7f3e0618e929 [ 1144.352324][T22684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1144.352338][T22684] RSP: 002b:00007f3e03ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1144.352355][T22684] RAX: ffffffffffffffda RBX: 00007f3e063b5fa0 RCX: 00007f3e0618e929 [ 1144.352367][T22684] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 1144.352378][T22684] RBP: 00007f3e03ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.352389][T22684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.352399][T22684] R13: 0000000000000000 R14: 00007f3e063b5fa0 R15: 00007f3e064dfa28 [ 1144.352425][T22684] [ 1144.661384][T10154] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1144.938195][T10159] usb 3-1: USB disconnect, device number 125 [ 1144.964621][T10154] usb 6-1: Using ep0 maxpacket: 16 [ 1144.977264][T10154] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1144.996511][T10154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.010456][T10154] usb 6-1: Product: syz [ 1145.016050][T10154] usb 6-1: Manufacturer: syz [ 1145.025035][T10154] usb 6-1: SerialNumber: syz [ 1145.036308][T10154] usb 6-1: config 0 descriptor?? [ 1145.213810][T22695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5074'. [ 1145.412896][T22698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.428023][T22698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.615047][T22700] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5075'. [ 1145.643598][T10154] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1145.698637][T10154] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1145.760622][T10154] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1145.786336][T10154] usb 6-1: media controller created [ 1145.850146][T22698] dtv5100: wlen = 0, aborting. [ 1145.954583][T10154] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1146.044879][T22703] trusted_key: encrypted_key: master key parameter is missing [ 1146.197979][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5077'. [ 1146.636667][T10154] zl10353_read_register: readreg error (reg=127, ret==0) [ 1146.661610][T10154] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1146.689115][T10154] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1146.760916][T22713] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1146.973751][T22719] ------------[ cut here ]------------ [ 1146.979290][T22719] usb 6-1: BOGUS control dir, pipe 80002e80 doesn't match bRequestType c0 [ 1147.024205][T22719] WARNING: CPU: 0 PID: 22719 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 1147.034432][T22719] Modules linked in: [ 1147.039157][T22719] CPU: 0 UID: 0 PID: 22719 Comm: syz.2.5082 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 1147.051658][T22719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1147.061901][T22719] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 1147.067689][T22719] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 40 2b 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 64 ce 62 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 1147.087681][T22719] RSP: 0018:ffffc900039175f0 EFLAGS: 00010246 [ 1147.094555][T22719] RAX: e0374dd52eecb800 RBX: ffff8880296e1a00 RCX: ffff88801c705a00 [ 1147.102555][T22719] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1147.111032][T22719] RBP: 1ffff11005113210 R08: 0000000000000003 R09: 0000000000000004 [ 1147.119340][T22719] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: ffff888028899080 [ 1147.127830][T22719] R13: dffffc0000000000 R14: 0000000080002e80 R15: ffff88802ea90980 [ 1147.135882][T22719] FS: 00007fda257416c0(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 1147.145164][T22719] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1147.151863][T22719] CR2: 000000110c2f8ccc CR3: 000000003230c000 CR4: 00000000003526f0 [ 1147.159940][T22719] Call Trace: [ 1147.163416][T22719] [ 1147.166408][T22719] usb_start_wait_urb+0x114/0x4c0 [ 1147.171470][T22719] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1147.177135][T22719] usb_control_msg+0x232/0x3e0 [ 1147.181938][T22719] dtv5100_i2c_msg+0x250/0x330 [ 1147.186769][T22719] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1147.191744][T22719] __i2c_transfer+0x871/0x2170 [ 1147.196896][T22719] ? lockdep_hardirqs_on+0x9c/0x150 [ 1147.202233][T22719] ? __pfx___i2c_transfer+0x10/0x10 [ 1147.207530][T22719] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1147.212928][T22719] ? i2c_transfer+0x120/0x3a0 [ 1147.217753][T22719] i2c_transfer+0x25b/0x3a0 [ 1147.222278][T22719] ? __pfx_i2c_transfer+0x10/0x10 [ 1147.227343][T22719] ? __might_fault+0xb0/0x130 [ 1147.232040][T22719] i2c_transfer_buffer_flags+0x105/0x190 [ 1147.237720][T22719] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1147.244022][T22719] ? _copy_from_user+0x94/0xb0 [ 1147.248834][T22719] i2cdev_write+0x112/0x1b0 [ 1147.253370][T22719] vfs_writev+0x4b3/0x960 [ 1147.257792][T22719] ? __pfx_i2cdev_write+0x10/0x10 [ 1147.262860][T22719] ? __pfx_vfs_writev+0x10/0x10 [ 1147.267792][T22719] ? __fget_files+0x2a/0x420 [ 1147.272410][T22719] ? __fget_files+0x3a0/0x420 [ 1147.277208][T22719] ? __fget_files+0x2a/0x420 [ 1147.281828][T22719] do_writev+0x14d/0x2d0 [ 1147.286161][T22719] ? __pfx_do_writev+0x10/0x10 [ 1147.290986][T22719] ? rcu_is_watching+0x15/0xb0 [ 1147.296000][T22719] ? do_syscall_64+0xbe/0x3b0 [ 1147.300719][T22719] do_syscall_64+0xfa/0x3b0 [ 1147.305345][T22719] ? lockdep_hardirqs_on+0x9c/0x150 [ 1147.310577][T22719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.317429][T22719] ? clear_bhb_loop+0x60/0xb0 [ 1147.322143][T22719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.328111][T22719] RIP: 0033:0x7fda2498e929 [ 1147.332553][T22719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1147.352319][T22719] RSP: 002b:00007fda25741038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1147.360901][T22719] RAX: ffffffffffffffda RBX: 00007fda24bb6080 RCX: 00007fda2498e929 [ 1147.368944][T22719] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004 [ 1147.377024][T22719] RBP: 00007fda24a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1147.385095][T22719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.393080][T22719] R13: 0000000000000000 R14: 00007fda24bb6080 R15: 00007fda24cdfa28 [ 1147.401139][T22719] [ 1147.404256][T22719] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1147.411554][T22719] CPU: 0 UID: 0 PID: 22719 Comm: syz.2.5082 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 1147.423636][T22719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1147.433705][T22719] Call Trace: [ 1147.437006][T22719] [ 1147.439970][T22719] dump_stack_lvl+0x99/0x250 [ 1147.444589][T22719] ? __asan_memcpy+0x40/0x70 [ 1147.449204][T22719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1147.454427][T22719] ? __pfx__printk+0x10/0x10 [ 1147.459064][T22719] panic+0x2db/0x790 [ 1147.463093][T22719] ? __pfx_panic+0x10/0x10 [ 1147.467565][T22719] __warn+0x31b/0x4b0 [ 1147.471568][T22719] ? usb_submit_urb+0x115d/0x1890 [ 1147.476617][T22719] ? usb_submit_urb+0x115d/0x1890 [ 1147.481667][T22719] report_bug+0x2be/0x4f0 [ 1147.486021][T22719] ? usb_submit_urb+0x115d/0x1890 [ 1147.491073][T22719] ? usb_submit_urb+0x115d/0x1890 [ 1147.496138][T22719] ? usb_submit_urb+0x115f/0x1890 [ 1147.501179][T22719] handle_bug+0x84/0x160 [ 1147.505431][T22719] exc_invalid_op+0x1a/0x50 [ 1147.510016][T22719] asm_exc_invalid_op+0x1a/0x20 [ 1147.514859][T22719] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 1147.520489][T22719] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 40 2b 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 64 ce 62 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 1147.540178][T22719] RSP: 0018:ffffc900039175f0 EFLAGS: 00010246 [ 1147.546241][T22719] RAX: e0374dd52eecb800 RBX: ffff8880296e1a00 RCX: ffff88801c705a00 [ 1147.554204][T22719] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1147.562161][T22719] RBP: 1ffff11005113210 R08: 0000000000000003 R09: 0000000000000004 [ 1147.570209][T22719] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: ffff888028899080 [ 1147.578171][T22719] R13: dffffc0000000000 R14: 0000000080002e80 R15: ffff88802ea90980 [ 1147.586158][T22719] usb_start_wait_urb+0x114/0x4c0 [ 1147.591186][T22719] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1147.596825][T22719] usb_control_msg+0x232/0x3e0 [ 1147.601590][T22719] dtv5100_i2c_msg+0x250/0x330 [ 1147.606348][T22719] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1147.611196][T22719] __i2c_transfer+0x871/0x2170 [ 1147.615954][T22719] ? lockdep_hardirqs_on+0x9c/0x150 [ 1147.621154][T22719] ? __pfx___i2c_transfer+0x10/0x10 [ 1147.626343][T22719] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1147.631704][T22719] ? i2c_transfer+0x120/0x3a0 [ 1147.636375][T22719] i2c_transfer+0x25b/0x3a0 [ 1147.640871][T22719] ? __pfx_i2c_transfer+0x10/0x10 [ 1147.645885][T22719] ? __might_fault+0xb0/0x130 [ 1147.650558][T22719] i2c_transfer_buffer_flags+0x105/0x190 [ 1147.656185][T22719] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1147.662335][T22719] ? _copy_from_user+0x94/0xb0 [ 1147.667088][T22719] i2cdev_write+0x112/0x1b0 [ 1147.671584][T22719] vfs_writev+0x4b3/0x960 [ 1147.675911][T22719] ? __pfx_i2cdev_write+0x10/0x10 [ 1147.680931][T22719] ? __pfx_vfs_writev+0x10/0x10 [ 1147.685781][T22719] ? __fget_files+0x2a/0x420 [ 1147.690363][T22719] ? __fget_files+0x3a0/0x420 [ 1147.695030][T22719] ? __fget_files+0x2a/0x420 [ 1147.699618][T22719] do_writev+0x14d/0x2d0 [ 1147.703856][T22719] ? __pfx_do_writev+0x10/0x10 [ 1147.708625][T22719] ? rcu_is_watching+0x15/0xb0 [ 1147.713389][T22719] ? do_syscall_64+0xbe/0x3b0 [ 1147.718071][T22719] do_syscall_64+0xfa/0x3b0 [ 1147.722579][T22719] ? lockdep_hardirqs_on+0x9c/0x150 [ 1147.727771][T22719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.733832][T22719] ? clear_bhb_loop+0x60/0xb0 [ 1147.738602][T22719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.744486][T22719] RIP: 0033:0x7fda2498e929 [ 1147.748891][T22719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1147.768494][T22719] RSP: 002b:00007fda25741038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1147.776903][T22719] RAX: ffffffffffffffda RBX: 00007fda24bb6080 RCX: 00007fda2498e929 [ 1147.784865][T22719] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004 [ 1147.792837][T22719] RBP: 00007fda24a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1147.800803][T22719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.808782][T22719] R13: 0000000000000000 R14: 00007fda24bb6080 R15: 00007fda24cdfa28 [ 1147.816847][T22719] [ 1147.820208][T22719] Kernel Offset: disabled [ 1147.824534][T22719] Rebooting in 86400 seconds..