last executing test programs: 45m52.755806421s ago: executing program 4 (id=177): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf00e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000040)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @local}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000080)=0x8, 0x4) syz_usb_connect(0x0, 0x33, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402010102", @ANYRES64], 0x0) 45m49.912346622s ago: executing program 4 (id=185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000200)) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0xc010) socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x3, 0x0) shutdown(r0, 0x1) 45m49.820906299s ago: executing program 4 (id=187): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 45m48.898056708s ago: executing program 4 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1b5) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) dup2(r2, r0) 45m48.364914857s ago: executing program 4 (id=194): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x882, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x2000000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0xb, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0xfffffffffffffd6b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 45m47.606507886s ago: executing program 4 (id=198): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 45m47.148269213s ago: executing program 32 (id=198): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 45m18.755557432s ago: executing program 0 (id=310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @common=@inet=@multiport={{0x50}, {0x40, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x8, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={r3, 0x2, 0xe3, 0xb}, &(0x7f00000002c0)=0xffffffffffffff5d) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 45m17.53055453s ago: executing program 0 (id=317): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 45m16.635215333s ago: executing program 0 (id=318): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x1}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) 45m14.542721716s ago: executing program 0 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 45m13.349596996s ago: executing program 0 (id=329): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'pim6reg0\x00', 0x2}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x82080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x20000000) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 45m11.045860453s ago: executing program 0 (id=338): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = accept(r0, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, 0x0, 0xc090) 44m55.758496017s ago: executing program 33 (id=338): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = accept(r0, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, 0x0, 0xc090) 33m52.394160024s ago: executing program 1 (id=2141): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x1, 0x7}) pipe2$watch_queue(0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x8084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) sendmsg$NFT_BATCH(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000700)={0x0, 0x14, 0x8c, "c4210fd4881a3f98736bfa105ea5a91a1068f8ab79fd29c437715185e09e3152c22c9e50012a94431041957bd7bd8319befb9868189e59639c624f0e4e31660048079f3955e7b12ae772d38076da440dc433e16b6566135b9808d854ad4305046d34d9b641e1970889f15520db983bbab497a5b9dd37cf51a472d3710994b5bab8d0149157faeaf898dc596a"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xab}, &(0x7f0000000580)={0xc0, 0x5, 0x4, "700e3bb3"}, &(0x7f0000000640)={0x40, 0x5, 0x2, "138b"}}) write$tun(r4, &(0x7f0000000400)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14, 0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x640100fd, @local}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x40, 0x1, 0x0, 0x1c, {[@mptcp=@generic={0xa3, 0x9, "0fe0e8cb896776"}]}}}}}}, 0x42) r6 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r6, &(0x7f0000000840)=[{{&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x85) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='bcache_btree_write\x00', r7, 0x0, 0x3}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001700)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000013c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa1700040000b046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb2dd2edc46f7373cf1c493ada88e02bc62d494a87807d05653ddf59d1b91346130a69994edd4d22dd9c72d1c96621128e3b15925597db62f8e6880e977d8790b744697fd2461c5f81059b9d0a154de40b0ff06eb9f823122f447b90687c61") socket$inet6_mptcp(0xa, 0x1, 0x106) 33m51.542394802s ago: executing program 1 (id=2142): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 33m51.045596241s ago: executing program 1 (id=2143): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x9, 0x2, {0x0, 0xb}, 0x6, 0x6}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = dup(r3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000080)=0x40) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000d02266bc00"]) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)='@', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00030000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 33m46.616480312s ago: executing program 1 (id=2151): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="016f000d01000000f70b14"], 0x36) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x89901) 33m44.459596258s ago: executing program 1 (id=2157): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d"], 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002100)=ANY=[@ANYBLOB="12010200000000000000a8a440000102030109021b0001018140950904006d01070101050905ee827937c33d089e0b117141386b8d1a0102ff030d090d08a894ed3097a625910d73e9c2f09081ad74e46a073be233222d"], &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0xb, &(0x7f0000002400)=@string={0xb, 0x3, "c422d81f7246c032ff"}}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) connect$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "dfa5ef", 0x8, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x6558, 0x8}}}}}}, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) 33m43.983860182s ago: executing program 1 (id=2160): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x4, 0xfff, 0xfffffe0010000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x113c}}, 0x48004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xdaf}}, './file0\x00'}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x4b35, 0x3) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x8, 0xfa00, {0x1, 0x0, 0x2, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$nullb(0xffffffffffffff9c, 0x0, 0x1e1902, 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x80, 0x14, 0x9, 0xf8, 0xfffffffffffffe08, 0x0, 0x0}) 33m42.790636929s ago: executing program 34 (id=2160): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x4, 0xfff, 0xfffffe0010000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x113c}}, 0x48004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xdaf}}, './file0\x00'}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x4b35, 0x3) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x8, 0xfa00, {0x1, 0x0, 0x2, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$nullb(0xffffffffffffff9c, 0x0, 0x1e1902, 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x80, 0x14, 0x9, 0xf8, 0xfffffffffffffe08, 0x0, 0x0}) 5.899148847s ago: executing program 2 (id=7574): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) readv(r0, &(0x7f00000033c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1) 4.984330105s ago: executing program 2 (id=7581): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8880b870dfff) ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000140)={&(0x7f0000000380)=""/237, 0xed}) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000500)={0x0, 0x79af, 0x3180, 0x1, 0x36}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x84400) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x7fff, 0x800) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 3.659204244s ago: executing program 2 (id=7587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x3, 0x3, 0x401}, 0x14}}, 0x4) 3.521076717s ago: executing program 2 (id=7589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 3.383797136s ago: executing program 2 (id=7590): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) 3.023973906s ago: executing program 6 (id=7591): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x90, 0x0, 0x0, @tick=0x80, {0x40}, {0x0, 0x9}, @note={0x9, 0x1, 0x2, 0x40, 0x2}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 2.997185203s ago: executing program 6 (id=7592): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x4, 0x13, 0x0, 0x0, 0x1c, "339f020bbe78b398430e050000007800000003741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "6c1ca43f8539f3d3a89637f0374c72a964a0193b3e8772c9b700000000005a9cd83fdfb006ac00", "24431a1e77a68e174f000000003e0000000020000000000000000f0000f8ff00", [0x1f00000000000000]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x2000) 2.825999074s ago: executing program 7 (id=7593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, 0x0) 2.781148235s ago: executing program 6 (id=7594): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x34325241, 0x5, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x4, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) r4 = socket(0x2, 0x3, 0x6) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES8=r3, @ANYRESOCT=r2, @ANYRES16=r3, @ANYRES64=r2, @ANYRES64=r4, @ANYRES16=r4, @ANYRES8=r2], 0x14}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0xfffffffc, 0x80000, 'syz1\x00'}, 0x5, 0x30, 0x1, r2, 0x0, 0x0, 'syz0\x00', 0x0}) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x5, 0x2002) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) 2.459880114s ago: executing program 7 (id=7596): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0088fb", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.433711869s ago: executing program 2 (id=7597): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000280)='\t') 2.301491542s ago: executing program 3 (id=7598): r0 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) unshare(0x2a020600) fcntl$dupfd(r0, 0x406, r0) 2.151114043s ago: executing program 7 (id=7599): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010820040000000001000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000008000700"], 0x58}}, 0x0) 2.091733957s ago: executing program 3 (id=7600): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8880b870dfff) ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000140)={&(0x7f0000000380)=""/237, 0xed}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000500)={0x0, 0x79af, 0x3180, 0x1, 0x36}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x84400) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x7fff, 0x800) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.078188971s ago: executing program 7 (id=7601): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8880b870dfff) ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000140)={&(0x7f0000000380)=""/237, 0xed}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000500)={0x0, 0x79af, 0x3180, 0x1, 0x36}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x84400) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x7fff, 0x800) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.688864152s ago: executing program 5 (id=7604): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x54) 1.535858186s ago: executing program 5 (id=7605): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a538ae46463208004d"], 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.505434164s ago: executing program 3 (id=7606): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1}) 1.368933676s ago: executing program 5 (id=7607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "87a1b5a001"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 1.275713459s ago: executing program 3 (id=7608): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbd", 0x12) accept4(r3, 0x0, 0x0, 0x800) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.275507229s ago: executing program 5 (id=7609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300200000000000000800000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) 1.033067407s ago: executing program 5 (id=7610): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000410000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000840), &(0x7f0000000340)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 801.677338ms ago: executing program 7 (id=7611): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 711.944224ms ago: executing program 7 (id=7612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x25b5, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xd5b5, 0x5, 0x1, {0x22, 0xefb}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x9, 0xee}}}}}]}}]}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40095505, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 520.318415ms ago: executing program 5 (id=7613): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0xfffffffb, 0x100) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r3 = socket$kcm(0x2, 0x3, 0x84) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0xec24, 0x80, 0x2, 0x40000233}, 0x0, &(0x7f0000000400)=0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000240)) recvmsg(r3, 0x0, 0x40010022) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 190.877749ms ago: executing program 6 (id=7614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044001}, 0x4004004) 86.319885ms ago: executing program 3 (id=7615): fanotify_init(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) 23.881343ms ago: executing program 6 (id=7616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)={0x1c, r1, 0x1, 0x20000002, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 23.652828ms ago: executing program 3 (id=7617): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) 0s ago: executing program 6 (id=7618): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) kernel console output (not intermixed with test programs): st mode [ 2543.977099][T10624] 8021q: adding VLAN 0 to HW filter on device bond17 [ 2544.318178][T10623] bridge4: entered promiscuous mode [ 2544.323896][T10623] bridge4: entered allmulticast mode [ 2544.340576][T24219] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2544.364919][T10623] bond17: (slave bridge4): Enslaving as an active interface with an up link [ 2544.569523][ T2138] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2544.728948][T10647] netlink: 'syz.2.6280': attribute type 1 has an invalid length. [ 2545.005935][T10654] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6282'. [ 2546.097943][T26885] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2546.328213][T26885] usb 6-1: Using ep0 maxpacket: 32 [ 2546.335461][T26885] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 2546.344503][T26885] usb 6-1: config 0 has no interface number 0 [ 2546.353376][T26885] usb 6-1: config 0 interface 12 has no altsetting 0 [ 2546.369589][T26885] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2546.378833][T26885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2546.386872][T26885] usb 6-1: Product: syz [ 2546.391268][T26885] usb 6-1: Manufacturer: syz [ 2546.404527][T26885] usb 6-1: SerialNumber: syz [ 2546.430405][T26885] usb 6-1: config 0 descriptor?? [ 2546.885817][T26885] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2546.893517][T26885] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 2546.911030][T26885] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2546.928172][T26885] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 2546.958081][T26885] usb 6-1: USB disconnect, device number 23 [ 2547.140057][T10668] gretap2: left allmulticast mode [ 2547.393282][T10674] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2548.391748][T10695] ptrace attach of "./syz-executor exec"[7255] was attempted by "./syz-executor exec"[10695] [ 2548.441034][T10695] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2550.120416][T10727] erspan0: entered promiscuous mode [ 2550.126465][T10727] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2550.958327][T10744] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2552.058042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2553.021321][T10776] fuse: Bad value for 'fd' [ 2553.428181][T26885] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2553.719523][T26885] usb 4-1: Using ep0 maxpacket: 32 [ 2554.085538][T26885] usb 4-1: config 5 has an invalid interface number: 34 but max is 0 [ 2554.093957][T26885] usb 4-1: config 5 has no interface number 0 [ 2554.100438][T26885] usb 4-1: config 5 interface 34 has no altsetting 0 [ 2554.250978][T26885] usb 4-1: New USB device found, idVendor=07c4, idProduct=a001, bcdDevice=95.76 [ 2554.269273][T26885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2554.297722][T26885] usb 4-1: Product: syz [ 2554.304793][T26885] usb 4-1: Manufacturer: syz [ 2554.318001][T26885] usb 4-1: SerialNumber: syz [ 2554.589178][T26885] usb 4-1: bad CDC descriptors [ 2554.597197][T26885] ums-datafab 4-1:5.34: USB Mass Storage device detected [ 2554.975407][T26885] ums-datafab 4-1:5.34: This device (07c4,a001,9576 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 2554.975407][T26885] Please send a copy of this message to and [ 2555.275632][T26885] usb 4-1: USB disconnect, device number 52 [ 2556.166509][T10857] input: syz1 as /devices/virtual/input/input180 [ 2556.219769][T10857] netlink: 'syz.6.6344': attribute type 1 has an invalid length. [ 2559.525883][T10907] input: syz1 as /devices/virtual/input/input183 [ 2559.586862][T10907] netlink: 'syz.7.6361': attribute type 1 has an invalid length. [ 2560.295850][T10912] netlink: 'syz.5.6362': attribute type 6 has an invalid length. [ 2560.771669][T10920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2563.383245][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 2563.383289][ T30] audit: type=1326 audit(1759720657.340:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.7.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2563.445148][ T30] audit: type=1326 audit(1759720657.340:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.7.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2563.480234][ T30] audit: type=1326 audit(1759720657.370:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.7.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2563.558326][ T30] audit: type=1326 audit(1759720657.370:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.7.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2563.627932][ T30] audit: type=1326 audit(1759720657.370:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.7.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2563.719051][ T30] audit: type=1326 audit(1759720657.370:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.7.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2564.010722][ T30] audit: type=1326 audit(1759720657.370:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.7.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2564.102456][ T30] audit: type=1326 audit(1759720657.370:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.7.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2566.913517][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6411'. [ 2567.278730][T11072] program syz.7.6413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2568.117938][ T30] audit: type=1800 audit(1759720661.920:2663): pid=11082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6415" name="file1" dev="tmpfs" ino=6623 res=0 errno=0 [ 2569.795363][T26885] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2569.918274][T11118] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[11118] [ 2570.176014][T11118] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2570.275946][T26885] usb 6-1: Using ep0 maxpacket: 16 [ 2570.339621][T26885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2570.350157][T26885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2570.361634][T26885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2570.375536][T26885] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2570.567933][T26885] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2570.670038][T26885] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2570.681443][T26885] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2570.730203][T26885] usb 6-1: Manufacturer: syz [ 2570.769080][T26885] usb 6-1: config 0 descriptor?? [ 2571.297411][T26885] rc_core: IR keymap rc-hauppauge not found [ 2571.313600][T26885] Registered IR keymap rc-empty [ 2571.321801][T26885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2571.348271][T26885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2571.373418][T26885] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2571.409037][T26885] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input187 [ 2571.530804][T26885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2571.567312][ C1] rc rc0: IR event FIFO is full! [ 2571.572266][ C1] rc rc0: IR event FIFO is full! [ 2571.577187][ C1] rc rc0: IR event FIFO is full! [ 2571.582102][ C1] rc rc0: IR event FIFO is full! [ 2571.587019][ C1] rc rc0: IR event FIFO is full! [ 2571.592337][ C1] rc rc0: IR event FIFO is full! [ 2571.597266][ C1] rc rc0: IR event FIFO is full! [ 2571.602656][ C1] rc rc0: IR event FIFO is full! [ 2571.607812][ C1] rc rc0: IR event FIFO is full! [ 2571.612755][ C1] rc rc0: IR event FIFO is full! [ 2571.617670][ C1] rc rc0: IR event FIFO is full! [ 2571.622579][ C1] rc rc0: IR event FIFO is full! [ 2571.627497][ C1] rc rc0: IR event FIFO is full! [ 2571.632424][ C1] rc rc0: IR event FIFO is full! [ 2571.637347][ C1] rc rc0: IR event FIFO is full! [ 2571.642270][ C1] rc rc0: IR event FIFO is full! [ 2571.647190][ C1] rc rc0: IR event FIFO is full! [ 2571.652112][ C1] rc rc0: IR event FIFO is full! [ 2571.657030][ C1] rc rc0: IR event FIFO is full! [ 2571.661956][ C1] rc rc0: IR event FIFO is full! [ 2571.667133][ C1] vkms_vblank_simulate: vblank timer overrun [ 2571.673828][ C1] rc rc0: IR event FIFO is full! [ 2571.678797][ C1] rc rc0: IR event FIFO is full! [ 2571.683750][ C1] rc rc0: IR event FIFO is full! [ 2571.688685][ C1] rc rc0: IR event FIFO is full! [ 2571.694034][ C1] rc rc0: IR event FIFO is full! [ 2571.698977][ C1] rc rc0: IR event FIFO is full! [ 2571.703899][ C1] rc rc0: IR event FIFO is full! [ 2571.708829][ C1] rc rc0: IR event FIFO is full! [ 2571.738480][T26885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2571.745855][ T30] audit: type=1800 audit(1759720665.690:2664): pid=11149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6431" name="file1" dev="tmpfs" ino=5920 res=0 errno=0 [ 2571.766583][ C1] vkms_vblank_simulate: vblank timer overrun [ 2571.780778][T26885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2571.808229][T26885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2571.875590][T26885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2571.922923][T26885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2571.948091][T26885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2572.136900][T26885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2572.218540][T26885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2572.261323][T26885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2572.302191][T26885] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2572.317299][T26885] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2572.480475][T26885] usb 6-1: USB disconnect, device number 24 [ 2573.201889][ T30] audit: type=1800 audit(1759720667.040:2665): pid=11167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6436" name="file1" dev="tmpfs" ino=6986 res=0 errno=0 [ 2575.085483][ T30] audit: type=1800 audit(1759720668.930:2666): pid=11211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6450" name="file1" dev="tmpfs" ino=7002 res=0 errno=0 [ 2575.625295][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6457'. [ 2576.124369][T11230] pimreg: tun_chr_ioctl cmd 1074812118 [ 2576.151621][T11232] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6459'. [ 2576.947940][ T2709] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2577.047921][T31087] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2577.097903][ T2709] usb 4-1: Using ep0 maxpacket: 32 [ 2577.104498][ T2709] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2577.114142][ T2709] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2577.124909][ T2709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2577.133905][ T2709] usb 4-1: Product: syz [ 2577.139261][ T2709] usb 4-1: Manufacturer: syz [ 2577.144020][ T2709] usb 4-1: SerialNumber: syz [ 2577.160947][ T2709] usb 4-1: config 0 descriptor?? [ 2577.207958][T31087] usb 6-1: Using ep0 maxpacket: 16 [ 2577.215828][T31087] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2577.226676][T31087] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2577.238254][T31087] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2577.249755][T31087] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2577.272310][T31087] usb 6-1: config 1 interface 1 has no altsetting 0 [ 2577.289802][T31087] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2577.299930][T31087] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2577.308945][T31087] usb 6-1: Product: syz [ 2577.313361][T31087] usb 6-1: Manufacturer: syz [ 2577.318883][T31087] usb 6-1: SerialNumber: syz [ 2577.593040][ T2709] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 2577.828074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2577.993089][ T2709] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 2578.018968][ T2709] usb 4-1: USB disconnect, device number 53 [ 2579.600358][T31087] usb 6-1: USB disconnect, device number 25 [ 2579.669279][T10522] udevd[10522]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2579.710030][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6480'. [ 2580.231115][T31087] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2580.287961][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2580.398252][T31087] usb 4-1: Using ep0 maxpacket: 32 [ 2580.405410][T31087] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2580.413926][T31087] usb 4-1: config 0 has no interface number 0 [ 2580.422597][T31087] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2580.432273][T31087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2580.442312][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2580.455566][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2580.468950][T31087] usb 4-1: Product: syz [ 2580.474099][T31087] usb 4-1: Manufacturer: syz [ 2580.482808][T31087] usb 4-1: SerialNumber: syz [ 2580.489998][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2580.510252][T31087] usb 4-1: config 0 descriptor?? [ 2580.536140][T31087] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2580.545533][ T9] usb 6-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 2580.578113][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2580.601683][ T9] usb 6-1: config 0 descriptor?? [ 2580.769501][T31087] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2580.843227][T31087] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2581.039151][ T9] itetech 0003:048D:8595.0027: item fetching failed at offset 3/7 [ 2581.051389][ T9] itetech 0003:048D:8595.0027: probe with driver itetech failed with error -22 [ 2581.147781][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2581.149349][T26885] usb 4-1: USB disconnect, device number 54 [ 2581.188538][T26885] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2581.262144][T26885] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2581.275540][ T2709] usb 6-1: USB disconnect, device number 26 [ 2581.357588][T26885] quatech2 4-1:0.51: device disconnected [ 2581.514105][T11315] tap0: tun_chr_ioctl cmd 2148553947 [ 2581.696332][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6497'. [ 2581.892028][ T30] audit: type=1326 audit(1759720675.850:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.5.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a0d8eec9 code=0x7ffc0000 [ 2581.925186][ T30] audit: type=1326 audit(1759720675.850:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.5.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a0d8eec9 code=0x7ffc0000 [ 2581.977956][ T30] audit: type=1326 audit(1759720675.850:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.5.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f81a0d8eec9 code=0x7ffc0000 [ 2582.011861][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2582.160350][ T30] audit: type=1326 audit(1759720675.850:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.5.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a0d8eec9 code=0x7ffc0000 [ 2582.208008][ T9] usb 4-1: device descriptor read/64, error -71 [ 2582.214754][ T30] audit: type=1326 audit(1759720675.850:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.5.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81a0d8eec9 code=0x7ffc0000 [ 2582.263622][ T30] audit: type=1326 audit(1759720675.850:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.5.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a0d8eec9 code=0x7ffc0000 [ 2582.286553][ T30] audit: type=1326 audit(1759720675.850:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.5.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f81a0d8eec9 code=0x7ffc0000 [ 2582.316770][ T30] audit: type=1326 audit(1759720675.850:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.5.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a0d8eec9 code=0x7ffc0000 [ 2582.470545][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2582.607907][ T9] usb 4-1: device descriptor read/64, error -71 [ 2582.717942][T26885] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2582.718361][ T9] usb usb4-port1: attempt power cycle [ 2582.871140][T26885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2582.882644][T26885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2582.892428][T26885] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 2582.901667][T26885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2582.912519][T26885] usb 6-1: config 0 descriptor?? [ 2583.068054][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2583.088705][ T9] usb 4-1: device descriptor read/8, error -71 [ 2583.326726][T26885] hid_parser_main: 5 callbacks suppressed [ 2583.326749][T26885] cypress 0003:04B4:DE61.0028: unknown main item tag 0x0 [ 2583.337943][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2583.340051][T26885] cypress 0003:04B4:DE61.0028: unknown main item tag 0x0 [ 2583.354582][T26885] cypress 0003:04B4:DE61.0028: unknown main item tag 0x0 [ 2583.363920][T26885] cypress 0003:04B4:DE61.0028: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.5-1/input0 [ 2583.375514][ T9] usb 4-1: device descriptor read/8, error -71 [ 2583.488532][ T9] usb usb4-port1: unable to enumerate USB device [ 2583.539825][T26885] usb 6-1: USB disconnect, device number 27 [ 2584.799186][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6519'. [ 2584.846249][T11380] vxlan2: entered promiscuous mode [ 2584.851687][T11380] vxlan2: entered allmulticast mode [ 2584.863481][ T7955] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2584.877912][ T7955] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2585.004201][ T7955] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2585.020442][ T7955] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2587.648386][T11439] netlink: 'syz.3.6541': attribute type 1 has an invalid length. [ 2587.656238][T11439] netlink: 'syz.3.6541': attribute type 2 has an invalid length. [ 2590.017707][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6557'. [ 2590.468438][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.476434][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.716972][T11515] kvm: user requested TSC rate below hardware speed [ 2592.088146][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6573'. [ 2592.219610][T11532] netlink: 'syz.5.6570': attribute type 12 has an invalid length. [ 2592.227672][T11532] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.6570'. [ 2594.058128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2594.783819][T11579] netlink: 'syz.2.6590': attribute type 27 has an invalid length. [ 2594.879012][T11580] batadv0 (unregistering): left promiscuous mode [ 2594.885578][T11580] batadv0 (unregistering): left allmulticast mode [ 2594.895757][T11580] team0: Port device batadv0 removed [ 2595.162067][T11582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2596.876850][T11616] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6600'. [ 2597.571570][T11630] netlink: 'syz.6.6603': attribute type 4 has an invalid length. [ 2598.215754][T11640] syzkaller1: entered promiscuous mode [ 2598.222856][T11640] syzkaller1: entered allmulticast mode [ 2598.433503][T11647] lo: Caught tx_queue_len zero misconfig [ 2598.449862][T11647] netem: incorrect gi model size [ 2598.455520][T11647] netem: change failed [ 2598.721806][T11663] netlink: 'syz.6.6613': attribute type 12 has an invalid length. [ 2598.731005][T11663] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.6613'. [ 2598.763366][T11664] netlink: 'syz.5.6615': attribute type 27 has an invalid length. [ 2599.412262][T11664] bond17: left promiscuous mode [ 2599.417331][T11664] bridge4: left promiscuous mode [ 2599.423106][T11664] bond17: left allmulticast mode [ 2599.428615][T11664] bridge4: left allmulticast mode [ 2599.698284][T10445] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2599.737270][T11668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2599.744265][ T2709] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2599.763075][T11668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2599.938049][T10445] usb 4-1: Using ep0 maxpacket: 16 [ 2599.949720][T10445] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2599.995758][T10445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.004018][ T2709] usb 6-1: Using ep0 maxpacket: 16 [ 2600.018182][ T2709] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2600.037993][T10445] usb 4-1: Product: syz [ 2600.042186][T10445] usb 4-1: Manufacturer: syz [ 2600.046767][T10445] usb 4-1: SerialNumber: syz [ 2600.056649][ T2709] usb 6-1: config 0 has no interface number 0 [ 2600.073909][ T2709] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2600.141629][T10445] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2600.153124][ T2709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.167343][T10445] r8152-cfgselector 4-1: config 0 descriptor?? [ 2600.190213][ T2709] usb 6-1: Product: syz [ 2600.242660][ T2709] usb 6-1: Manufacturer: syz [ 2600.247335][ T2709] usb 6-1: SerialNumber: syz [ 2600.258010][ T2709] usb 6-1: config 0 descriptor?? [ 2600.289562][ T2709] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2600.601587][ T4615] r8152-cfgselector 4-1: USB disconnect, device number 59 [ 2600.964296][T11683] vimc link validate: Scaler:src:16x16 (0x33424752, 1, 2, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2601.098363][ T2709] gspca_spca1528: reg_w err -110 [ 2601.118776][ T2709] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 2602.046036][ T2709] usb 6-1: USB disconnect, device number 28 [ 2604.018830][T11744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6643'. [ 2604.029575][T11744] bond0: Unable to set down delay as MII monitoring is disabled [ 2604.179150][T11749] netlink: 'syz.5.6641': attribute type 12 has an invalid length. [ 2604.186993][T11749] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.6641'. [ 2607.519480][T11800] netlink: 'syz.5.6658': attribute type 12 has an invalid length. [ 2607.527407][T11800] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.6658'. [ 2608.138800][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6660'. [ 2608.574845][T11816] netlink: 'syz.5.6662': attribute type 27 has an invalid length. [ 2609.057905][ T4616] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2609.207973][ T4616] usb 6-1: Using ep0 maxpacket: 16 [ 2609.215089][ T4616] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2609.224280][ T4616] usb 6-1: config 0 has no interface number 0 [ 2609.234163][ T4616] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2609.244288][ T4616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2609.253041][ T4616] usb 6-1: Product: syz [ 2609.257309][ T4616] usb 6-1: Manufacturer: syz [ 2609.287645][ T4616] usb 6-1: SerialNumber: syz [ 2609.324733][T11818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2609.342981][ T4616] usb 6-1: config 0 descriptor?? [ 2609.345391][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6666'. [ 2609.427628][T11818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2609.446439][ T4616] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2610.178638][ T4616] gspca_spca1528: reg_w err -110 [ 2610.198205][ T4616] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 2610.875467][T11855] netlink: 'syz.3.6672': attribute type 12 has an invalid length. [ 2610.883512][T11855] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.6672'. [ 2611.879095][T10445] usb 6-1: USB disconnect, device number 29 [ 2612.077909][ T4616] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2612.275616][ T4616] usb 4-1: config 0 has no interfaces? [ 2612.288551][ T4616] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2612.297730][ T4616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2612.312870][ T4616] usb 4-1: Product: syz [ 2612.317067][ T4616] usb 4-1: Manufacturer: syz [ 2612.333922][ T4616] usb 4-1: SerialNumber: syz [ 2612.351185][ T4616] usb 4-1: config 0 descriptor?? [ 2612.734784][ T2709] usb 4-1: USB disconnect, device number 60 [ 2613.848140][ T2709] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2614.127961][ T2709] usb 4-1: Using ep0 maxpacket: 32 [ 2614.135265][ T2709] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 2614.335057][ T2709] usb 4-1: config 0 has no interface number 0 [ 2614.398317][ T2709] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2614.545455][ T2709] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2614.557073][ T2709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2614.566094][ T2709] usb 4-1: Product: syz [ 2614.749083][ T2709] usb 4-1: Manufacturer: syz [ 2614.766109][ T2709] usb 4-1: SerialNumber: syz [ 2614.874728][ T2709] usb 4-1: config 0 descriptor?? [ 2614.941079][ T2709] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2614.962055][ T2709] em28xx 4-1:0.132: Video interface 132 found: [ 2615.377996][ T2709] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 2616.171483][T11950] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6705'. [ 2616.588138][ T2709] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 2616.596907][ T2709] em28xx 4-1:0.132: board has no eeprom [ 2616.758290][ T2709] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2616.775330][ T2709] em28xx 4-1:0.132: analog set to bulk mode. [ 2616.792045][T10445] em28xx 4-1:0.132: Registering V4L2 extension [ 2616.813342][ T2709] usb 4-1: USB disconnect, device number 61 [ 2616.851065][ T2709] em28xx 4-1:0.132: Disconnecting em28xx [ 2618.267554][T10445] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 2618.275463][T10445] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 2618.878681][T10445] em28xx 4-1:0.132: No AC97 audio processor [ 2619.053286][T10445] usb 4-1: Decoder not found [ 2619.067250][T10445] em28xx 4-1:0.132: failed to create media graph [ 2619.083657][T10445] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 2619.109436][T10445] em28xx 4-1:0.132: Remote control support is not available for this card. [ 2619.206859][ T2709] em28xx 4-1:0.132: Closing input extension [ 2619.320764][ T2709] em28xx 4-1:0.132: Freeing device [ 2622.427904][ T30] audit: type=1800 audit(1759720716.350:2675): pid=12051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6732" name="file1" dev="tmpfs" ino=6250 res=0 errno=0 [ 2622.818601][T12061] vimc link validate: Scaler:src:16x16 (0x33424752, 1, 2, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2625.338237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2626.148039][ T30] audit: type=1800 audit(1759720719.920:2676): pid=12132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6752" name="file1" dev="tmpfs" ino=7021 res=0 errno=0 [ 2626.440649][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6756'. [ 2627.163892][T12143] vxlan0: entered promiscuous mode [ 2627.253091][ T50] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2627.289874][ T50] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2627.402459][T24219] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2627.412649][T24219] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2628.563891][T12181] netlink: 'syz.5.6765': attribute type 27 has an invalid length. [ 2629.057991][T10445] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2629.143111][T12192] input: syz1 as /devices/virtual/input/input198 [ 2629.156842][T12192] input: failed to attach handler leds to device input198, error: -6 [ 2629.209267][ T2709] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2629.286392][T12182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2629.302541][T10445] usb 6-1: Using ep0 maxpacket: 16 [ 2629.311126][T10445] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2629.320283][T12182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2629.336579][T10445] usb 6-1: config 0 has no interface number 0 [ 2629.407959][ T2709] usb 4-1: Using ep0 maxpacket: 32 [ 2629.519087][ T2709] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 2629.527194][ T2709] usb 4-1: config 0 has no interface number 0 [ 2629.533510][ T2709] usb 4-1: config 0 interface 12 has no altsetting 0 [ 2629.548706][T10445] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2629.558122][T10445] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2629.566259][T10445] usb 6-1: Product: syz [ 2629.571747][ T2709] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2629.581196][ T2709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2629.597911][ T2709] usb 4-1: Product: syz [ 2629.607913][T10445] usb 6-1: Manufacturer: syz [ 2629.612586][ T2709] usb 4-1: Manufacturer: syz [ 2629.617155][ T2709] usb 4-1: SerialNumber: syz [ 2629.623294][T10445] usb 6-1: SerialNumber: syz [ 2629.642801][T10445] usb 6-1: config 0 descriptor?? [ 2629.665009][ T2709] usb 4-1: config 0 descriptor?? [ 2629.688685][T10445] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2630.118391][ T2709] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2630.126121][ T2709] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 2630.136036][ T2709] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2630.157118][ T2709] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 2630.188249][ T2709] usb 4-1: USB disconnect, device number 62 [ 2630.478444][T10445] gspca_spca1528: reg_w err -110 [ 2630.497976][T10445] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 2632.242580][T10445] usb 6-1: USB disconnect, device number 30 [ 2634.077115][T12263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6793'. [ 2636.063316][T12296] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[12296] [ 2636.105016][T12296] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2638.165120][T12336] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2640.747938][ T4616] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2641.208310][ T4616] usb 6-1: Using ep0 maxpacket: 16 [ 2641.238136][ T4616] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2641.253214][ T4616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2641.268192][ T4616] usb 6-1: Product: syz [ 2641.274997][ T4616] usb 6-1: Manufacturer: syz [ 2641.281867][ T4616] usb 6-1: SerialNumber: syz [ 2641.299482][ T4616] r8152-cfgselector 6-1: Unknown version 0x0000 [ 2641.305834][ T4616] r8152-cfgselector 6-1: config 0 descriptor?? [ 2641.751896][ T4616] r8152-cfgselector 6-1: USB disconnect, device number 31 [ 2643.375663][T12452] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2643.963335][T12459] netlink: 'syz.5.6850': attribute type 1 has an invalid length. [ 2644.011468][T12459] 8021q: adding VLAN 0 to HW filter on device bond18 [ 2644.474415][T12471] kvm: pic: non byte write [ 2644.632512][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6857'. [ 2644.694377][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6857'. [ 2645.984385][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6866'. [ 2647.175472][T12549] netlink: 'syz.5.6875': attribute type 16 has an invalid length. [ 2647.183575][T12549] netlink: 'syz.5.6875': attribute type 17 has an invalid length. [ 2647.205966][T12549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2648.022446][T12556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2648.347967][ T4616] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2648.619944][ T4616] usb 6-1: Using ep0 maxpacket: 16 [ 2648.628498][ T4616] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2648.638874][ T4616] usb 6-1: config 0 has no interface number 0 [ 2648.655573][ T4616] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2648.677044][ T4616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2648.705846][ T4616] usb 6-1: Product: syz [ 2648.715143][ T4616] usb 6-1: Manufacturer: syz [ 2648.724452][ T4616] usb 6-1: SerialNumber: syz [ 2648.742111][ T4616] usb 6-1: config 0 descriptor?? [ 2648.756796][ T4616] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2649.501186][ T4616] gspca_spca1528: reg_w err -110 [ 2649.528010][ T4616] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 2649.723925][T12589] ptrace attach of "./syz-executor exec"[7255] was attempted by "./syz-executor exec"[12589] [ 2649.941356][T12589] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2650.460756][ T4616] usb 6-1: USB disconnect, device number 32 [ 2651.820481][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.826849][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.877960][T10445] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2652.027919][T10445] usb 4-1: Using ep0 maxpacket: 8 [ 2652.034746][T10445] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 2652.044186][T10445] usb 4-1: config 0 has no interface number 0 [ 2652.059268][T10445] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2652.148718][T10445] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2652.205013][T10445] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2652.216190][T10445] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2652.231014][T10445] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2652.244178][T10445] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2652.268685][T10445] usb 4-1: config 0 descriptor?? [ 2652.291893][T10445] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2652.314156][T31087] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 2652.352905][T31087] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2652.538281][ T4616] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2652.719604][ T4616] usb 6-1: Using ep0 maxpacket: 32 [ 2652.729500][ T4616] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 2652.737593][ T4616] usb 6-1: config 0 has no interface number 0 [ 2652.753854][ T4616] usb 6-1: config 0 interface 12 has no altsetting 0 [ 2652.765506][ T4616] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2652.774781][ T4616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2652.783074][ T4616] usb 6-1: Product: syz [ 2652.787244][ T4616] usb 6-1: Manufacturer: syz [ 2652.792079][ T4616] usb 6-1: SerialNumber: syz [ 2652.808981][ T4616] usb 6-1: config 0 descriptor?? [ 2653.262877][ T4616] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2653.270499][ T4616] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 2653.273099][T10445] usb 4-1: USB disconnect, device number 63 [ 2653.278925][ T4616] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2653.294720][ T4616] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 2653.318827][ T4616] usb 6-1: USB disconnect, device number 33 [ 2653.333323][T10445] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 2654.129838][T12649] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2654.776697][T12671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6911'. [ 2654.804070][T12671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6911'. [ 2657.324755][T12712] ptrace attach of "./syz-executor exec"[6630] was attempted by "./syz-executor exec"[12712] [ 2657.402507][T12712] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2658.535621][T12726] pic_ioport_write: 2 callbacks suppressed [ 2658.535635][T12726] kvm: pic: single mode not supported [ 2658.541801][T12726] kvm: pic: level sensitive irq not supported [ 2659.328459][T12739] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.6932'. [ 2659.459230][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6931'. [ 2659.679098][T12742] 8021q: adding VLAN 0 to HW filter on device team0 [ 2659.709538][T12742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2660.746208][T12758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2662.017907][T31087] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 2662.878379][T31087] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2662.912874][T31087] usb 6-1: config 0 has no interface number 0 [ 2662.927931][T31087] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2662.947868][T31087] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2662.986810][T31087] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2663.007023][T31087] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2663.069060][T31087] usb 6-1: config 0 descriptor?? [ 2663.085440][T12769] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2663.137633][T31087] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2663.361356][T10445] usb 6-1: USB disconnect, device number 34 [ 2663.367341][ C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2666.065601][T12814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2667.798435][T12833] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[12833] [ 2667.887025][T12833] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2668.292978][T12835] misc userio: No port type given on /dev/userio [ 2668.301037][T12835] misc userio: The device must be registered before sending interrupts [ 2670.589885][T12857] kvm: pic: non byte write [ 2670.594400][T12857] kvm: pic: non byte write [ 2670.628163][T12857] kvm: pic: single mode not supported [ 2670.628184][T12857] kvm: pic: level sensitive irq not supported [ 2670.637795][T12857] kvm: pic: single mode not supported [ 2670.644345][T12857] kvm: pic: level sensitive irq not supported [ 2670.931513][T12860] kvm: pic: non byte write [ 2671.594256][T12876] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2671.727035][T12877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2671.994067][T12883] ptrace attach of "./syz-executor exec"[6630] was attempted by "./syz-executor exec"[12883] [ 2672.072406][T12883] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2673.152477][T12782] Set syz1 is full, maxelem 65536 reached [ 2673.329350][T12892] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 2673.578349][T26885] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2673.618040][T31087] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2673.727958][T26885] usb 4-1: Using ep0 maxpacket: 16 [ 2673.734892][T26885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2673.745939][T26885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2673.755709][T26885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2673.768643][T26885] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2673.777676][T26885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2673.787734][T26885] usb 4-1: config 0 descriptor?? [ 2673.798339][T31087] usb 6-1: Using ep0 maxpacket: 32 [ 2673.811996][T31087] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2673.821262][T31087] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2673.829900][T31087] usb 6-1: Product: syz [ 2673.834069][T31087] usb 6-1: Manufacturer: syz [ 2673.838722][T31087] usb 6-1: SerialNumber: syz [ 2673.845670][T31087] usb 6-1: config 0 descriptor?? [ 2673.853615][T31087] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2674.043012][T12896] syz_tun: entered allmulticast mode [ 2674.053334][T12895] syz_tun: left allmulticast mode [ 2674.220049][T26885] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 2674.233791][T26885] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 2674.243842][T26885] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 2674.255167][T26885] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 2674.266795][T26885] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 2674.293324][T26885] input: HID 0955:7214 Haptics as /devices/virtual/input/input202 [ 2674.315431][T26885] shield 0003:0955:7214.002A: Registered Thunderstrike controller [ 2674.323449][T26885] shield 0003:0955:7214.002A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 2674.404851][T12892] random: crng reseeded on system resumption [ 2674.504288][ T2709] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2674.504803][ T4616] usb 4-1: USB disconnect, device number 64 [ 2674.529747][ T2709] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2674.578984][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030843000: rx timeout, send abort [ 2674.661270][ T2709] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2674.882543][ T2709] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2675.087204][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030843000: abort rx timeout. Force session deactivation [ 2675.975701][T31087] gspca_ov534_9: reg_w failed -71 [ 2676.298790][T31087] gspca_ov534_9: Unknown sensor 0000 [ 2676.298891][T31087] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 2676.322919][T31087] usb 6-1: USB disconnect, device number 35 [ 2678.398315][ T2709] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2678.550075][ T2709] usb 6-1: Using ep0 maxpacket: 32 [ 2678.556678][ T2709] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2678.567570][ T2709] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 2678.588172][T10445] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2678.647929][ T2709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2678.665232][ T2709] usb 6-1: config 0 descriptor?? [ 2678.686920][ T2709] dvb-usb: found a 'TeVii S662' in warm state. [ 2678.701088][ T2709] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2678.707330][ T2709] dvb-usb: bulk message failed: -22 (2/0) [ 2678.723883][ T2709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2678.747323][ T2709] dvbdev: DVB: registering new adapter (TeVii S662) [ 2678.754394][ T2709] usb 6-1: media controller created [ 2678.764369][ T2709] dvb-usb: bulk message failed: -22 (6/0) [ 2678.773900][ T2709] dw2102: i2c transfer failed. [ 2678.781900][ T2709] dvb-usb: bulk message failed: -22 (6/0) [ 2678.787687][ T2709] dw2102: i2c transfer failed. [ 2678.792672][T10445] usb 4-1: Using ep0 maxpacket: 16 [ 2678.799235][ T2709] dvb-usb: bulk message failed: -22 (6/0) [ 2678.805415][T10445] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2678.816101][T10445] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2678.826168][ T2709] dw2102: i2c transfer failed. [ 2678.834379][ T2709] dvb-usb: bulk message failed: -22 (6/0) [ 2678.840496][T10445] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2678.853782][ T2709] dw2102: i2c transfer failed. [ 2678.859200][ T2709] dvb-usb: bulk message failed: -22 (6/0) [ 2678.868831][ T2709] dw2102: i2c transfer failed. [ 2678.873941][T10445] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2678.891579][ T2709] dvb-usb: bulk message failed: -22 (6/0) [ 2678.898200][T10445] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2678.909461][ T2709] dw2102: i2c transfer failed. [ 2678.919400][T10445] usb 4-1: Manufacturer: syz [ 2678.926722][ T2709] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2678.940878][T10445] usb 4-1: config 0 descriptor?? [ 2678.946166][T12953] netlink: 'syz.5.6980': attribute type 21 has an invalid length. [ 2678.955459][T12953] dw2102: i2c wr: len=245 is too big! [ 2678.955459][T12953] [ 2679.018536][ T2709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2679.067577][ T2709] dvb-usb: bulk message failed: -22 (3/0) [ 2679.086094][ T2709] dw2102: command 0x0e transfer failed. [ 2679.093455][ T2709] dvb-usb: bulk message failed: -22 (3/0) [ 2679.101515][ T2709] dw2102: command 0x0e transfer failed. [ 2679.420601][ T2709] dvb-usb: bulk message failed: -22 (3/0) [ 2679.426365][ T2709] dw2102: command 0x0e transfer failed. [ 2679.431977][ T2709] dvb-usb: bulk message failed: -22 (3/0) [ 2679.437687][ T2709] dw2102: command 0x0e transfer failed. [ 2679.443960][ T2709] dvb-usb: bulk message failed: -22 (1/0) [ 2679.496002][ T2709] dw2102: command 0x51 transfer failed. [ 2679.504276][ T2709] dvb-usb: bulk message failed: -22 (5/0) [ 2679.510019][ T2709] dw2102: i2c probe for address 0x68 failed. [ 2679.516037][ T2709] dvb-usb: bulk message failed: -22 (5/0) [ 2679.521812][ T2709] dw2102: i2c probe for address 0x69 failed. [ 2679.528596][ T2709] dvb-usb: bulk message failed: -22 (5/0) [ 2679.535113][ T2709] dw2102: i2c probe for address 0x6a failed. [ 2679.541420][ T2709] dw2102: probing for demodulator failed. Is the external power switched on? [ 2679.550334][ T2709] dvb-usb: no frontend was attached by 'TeVii S662' [ 2679.707895][ T2709] rc_core: IR keymap rc-tt-1500 not found [ 2679.713806][ T2709] Registered IR keymap rc-empty [ 2679.780710][ T2709] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 2679.972884][T12971] vimc link validate: Scaler:src:16x16 (0x33424752, 1, 2, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2679.986447][ T2709] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input204 [ 2680.279949][ T2709] dvb-usb: schedule remote query interval to 250 msecs. [ 2680.286930][ T2709] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2680.310119][ T2709] dvb-usb: TeVii S662 successfully initialized and connected. [ 2680.439919][T12978] netlink: 'syz.6.6985': attribute type 1 has an invalid length. [ 2680.548117][T10445] dvb-usb: bulk message failed: -22 (1/0) [ 2680.554182][T10445] dw2102: i2c transfer failed. [ 2680.722818][T12980] bond11: entered promiscuous mode [ 2680.743157][T12980] bond11: entered allmulticast mode [ 2680.789877][T12980] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2680.843196][T10445] dvb-usb: bulk message failed: -22 (1/0) [ 2680.856358][T10445] dw2102: i2c transfer failed. [ 2680.923000][T12981] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2680.931949][T12981] bond12: entered promiscuous mode [ 2680.942356][T12981] bond12: entered allmulticast mode [ 2680.957150][T12981] bond11: (slave bond12): Enslaving as a backup interface with a down link [ 2681.117909][ T2709] dvb-usb: bulk message failed: -22 (1/0) [ 2681.123671][ T2709] dw2102: i2c transfer failed. [ 2681.157498][ T2709] usb 6-1: USB disconnect, device number 36 [ 2681.261364][ T2709] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 2681.450706][T12984] usb usb8: usbfs: process 12984 (syz.5.6986) did not claim interface 0 before use [ 2682.198004][ T4616] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2682.470170][ T4616] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2682.479229][ T4616] usb 6-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 2682.491582][ T4616] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2682.507103][ T4616] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 2682.530540][ T4616] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 2682.660582][ T4616] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2682.674399][ T4616] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2682.738346][ T4616] usb 6-1: Product: syz [ 2682.746250][ T4616] usb 6-1: Manufacturer: syz [ 2682.972480][T12993] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2683.008911][ T4616] cdc_wdm 6-1:1.0: skipping garbage [ 2683.014495][ T4616] cdc_wdm 6-1:1.0: skipping garbage [ 2683.022745][ T4616] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2683.028910][ T4616] cdc_wdm 6-1:1.0: Unknown control protocol [ 2683.217573][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2683.224180][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2683.230457][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2683.237044][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2683.243334][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2683.249929][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2683.256180][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2683.262758][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2683.269252][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2683.275827][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2683.282051][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2683.288633][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2683.294887][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2683.301460][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2683.307698][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2683.314277][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2683.320505][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2683.327076][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2683.333330][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2683.339903][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2683.438304][ T4616] usb 6-1: USB disconnect, device number 37 [ 2683.501031][ T2709] usb 4-1: USB disconnect, device number 65 [ 2683.927064][T13016] tipc: Enabled bearer , priority 0 [ 2683.937215][T13016] syzkaller0: entered promiscuous mode [ 2683.942886][T13016] syzkaller0: entered allmulticast mode [ 2684.417032][T13019] tipc: Resetting bearer [ 2684.498262][T13015] tipc: Resetting bearer [ 2684.541846][T13021] binder: BINDER_SET_CONTEXT_MGR already set [ 2684.568960][T13015] tipc: Disabling bearer [ 2684.627964][T13021] binder: 13020:13021 ioctl 4018620d 200000004a80 returned -16 [ 2685.203558][T31087] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2685.387933][T31087] usb 6-1: Using ep0 maxpacket: 16 [ 2685.395184][T31087] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2685.407952][T31087] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2685.899121][T31087] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2685.909202][T31087] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2685.917207][T31087] usb 6-1: Product: syz [ 2685.963870][T31087] usb 6-1: Manufacturer: syz [ 2686.037504][T31087] usb 6-1: SerialNumber: syz [ 2686.401303][T31087] usb 6-1: 0:2 : does not exist [ 2686.453995][T31087] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2686.777750][T31087] usb 6-1: USB disconnect, device number 38 [ 2686.886725][T10522] udevd[10522]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2687.917605][T13068] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 2687.925156][T13068] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 2688.014329][T13070] tipc: Enabled bearer , priority 0 [ 2688.043300][T13070] syzkaller0: entered promiscuous mode [ 2688.050102][T13070] syzkaller0: entered allmulticast mode [ 2688.127409][T13070] tipc: Resetting bearer [ 2688.183936][T13069] tipc: Resetting bearer [ 2688.247003][T13069] tipc: Disabling bearer [ 2688.599409][T13080] tipc: Enabled bearer , priority 0 [ 2688.611975][T13079] tipc: Enabled bearer , priority 0 [ 2688.629332][T13080] tipc: Resetting bearer [ 2688.636495][T13079] syzkaller0: entered promiscuous mode [ 2688.643128][T13079] syzkaller0: entered allmulticast mode [ 2688.696343][T13079] netlink: 2 bytes leftover after parsing attributes in process `syz.7.7012'. [ 2688.719310][T13079] tipc: Resetting bearer [ 2688.746023][T13084] input: syz1 as /devices/virtual/input/input206 [ 2688.840212][T13077] tipc: Resetting bearer [ 2688.881657][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7013'. [ 2688.905471][T13077] tipc: Disabling bearer [ 2689.368109][T13096] tipc: Enabling of bearer rejected, already enabled [ 2690.547903][T31087] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 2690.717725][T31087] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2690.726532][T31087] usb 4-1: config 0 has no interface number 0 [ 2690.733892][T31087] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2690.793067][T13115] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 2691.003575][T31087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2691.003802][T13115] nvme_fabrics: missing parameter 'transport=%s' [ 2691.035823][T13115] nvme_fabrics: missing parameter 'nqn=%s' [ 2691.084109][T31087] usb 4-1: config 0 descriptor?? [ 2691.093158][T31087] usb 4-1: selecting invalid altsetting 1 [ 2691.105520][T31087] dvb_ttusb_budget: ttusb_init_controller: error [ 2691.117545][T31087] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2691.285930][T31087] DVB: Unable to find symbol cx22700_attach() [ 2691.383073][T31087] DVB: Unable to find symbol tda10046_attach() [ 2691.436195][T31087] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2691.859429][T13127] tipc: Enabling of bearer rejected, failed to enable media [ 2692.166005][T13132] ptrace attach of "./syz-executor exec"[6630] was attempted by "./syz-executor exec"[13132] [ 2693.436281][T13139] tipc: Enabled bearer , priority 0 [ 2693.444059][T13139] syzkaller0: entered promiscuous mode [ 2693.460848][T13139] syzkaller0: entered allmulticast mode [ 2693.521299][T13139] tipc: Resetting bearer [ 2693.548155][T13132] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2693.564632][T13138] tipc: Resetting bearer [ 2693.619111][T13138] tipc: Disabling bearer [ 2693.829295][T31087] usb 4-1: USB disconnect, device number 66 [ 2693.958358][T13147] input: syz1 as /devices/virtual/input/input207 [ 2694.078513][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7029'. [ 2695.067940][ T2709] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2695.217951][ T2709] usb 6-1: Using ep0 maxpacket: 32 [ 2695.231761][ T2709] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 2695.240080][ T2709] usb 6-1: config 0 has no interface number 0 [ 2695.266629][ T2709] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2695.280484][ T2709] usb 6-1: config 0 interface 85 has no altsetting 0 [ 2695.293128][ T2709] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2695.313626][ T2709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2695.327720][ T2709] usb 6-1: Product: syz [ 2695.338213][ T2709] usb 6-1: Manufacturer: syz [ 2695.348245][ T2709] usb 6-1: SerialNumber: syz [ 2695.358262][ T2709] usb 6-1: config 0 descriptor?? [ 2695.863898][ T2709] appletouch 6-1:0.85: Geyser mode initialized. [ 2695.885466][ T2709] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input208 [ 2696.165084][ T4616] usb 6-1: USB disconnect, device number 39 [ 2696.205619][ T4616] appletouch 6-1:0.85: input: appletouch disconnected [ 2696.584163][T13179] kvm_intel: kvm [13178]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 2696.602939][T13179] kvm_intel: kvm [13178]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 2696.614916][T13179] kvm_intel: kvm [13178]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 2696.630734][T13179] kvm_intel: kvm [13178]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 2698.175552][T13211] input: syz1 as /devices/virtual/input/input209 [ 2698.291615][T13211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7044'. [ 2699.458003][ T4616] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2699.609911][ T4616] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2699.633947][ T4616] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2699.670043][ T4616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2699.697696][ T4616] usb 4-1: config 0 descriptor?? [ 2699.717545][ T4616] pwc: Askey VC010 type 2 USB webcam detected. [ 2700.134568][ T4616] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2700.142979][ T4616] pwc: recv_control_msg error -32 req 02 val 2700 [ 2700.154103][ T4616] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2700.167038][ T4616] pwc: recv_control_msg error -32 req 04 val 1000 [ 2700.174370][ T4616] pwc: recv_control_msg error -32 req 04 val 1300 [ 2700.183678][ T4616] pwc: recv_control_msg error -32 req 04 val 1400 [ 2700.194100][ T4616] pwc: recv_control_msg error -32 req 02 val 2000 [ 2700.201613][ T4616] pwc: recv_control_msg error -32 req 02 val 2100 [ 2700.209759][ T4616] pwc: recv_control_msg error -32 req 04 val 1500 [ 2700.217754][ T4616] pwc: recv_control_msg error -32 req 02 val 2500 [ 2700.225297][ T4616] pwc: recv_control_msg error -32 req 02 val 2400 [ 2700.268619][ T4616] pwc: recv_control_msg error -32 req 02 val 2600 [ 2700.278838][ T4616] pwc: recv_control_msg error -32 req 02 val 2900 [ 2700.298799][ T4616] pwc: recv_control_msg error -32 req 02 val 2800 [ 2700.406818][T13229] netlink: 'syz.6.7049': attribute type 12 has an invalid length. [ 2700.415042][T13229] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.7049'. [ 2700.515396][ T4616] pwc: recv_control_msg error -71 req 04 val 1200 [ 2700.535391][ T4616] pwc: Registered as video103. [ 2700.556918][ T4616] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input210 [ 2700.858337][ T4616] usb 4-1: USB disconnect, device number 67 [ 2701.498432][T13237] vimc link validate: Scaler:src:16x16 (0x33424752, 1, 2, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2702.803665][T13199] syz.5.7042 (13199): drop_caches: 1 [ 2702.857027][T13202] syz.5.7042 (13202): drop_caches: 1 [ 2702.982449][T13255] tipc: Enabling of bearer rejected, already enabled [ 2703.238254][ T4616] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2703.579601][ T4616] usb 6-1: Using ep0 maxpacket: 32 [ 2703.612843][ T4616] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2703.622423][ T4616] usb 6-1: config 0 has no interface number 0 [ 2703.641896][ T4616] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2703.651267][ T4616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2703.662591][ T4616] usb 6-1: Product: syz [ 2703.709662][ T4616] usb 6-1: Manufacturer: syz [ 2703.759870][ T4616] usb 6-1: SerialNumber: syz [ 2703.829625][ T4616] usb 6-1: config 0 descriptor?? [ 2704.127648][ T4616] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2704.183335][ T4616] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2704.458936][ T4616] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2704.915203][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2704.923165][ T4616] usb 6-1: USB disconnect, device number 40 [ 2704.949235][ T4616] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2705.013006][ T4616] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2705.030465][ T4616] quatech2 6-1:0.51: device disconnected [ 2705.937906][ T4616] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2706.388087][ T4616] usb 6-1: Using ep0 maxpacket: 32 [ 2706.659543][ T4616] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2707.000366][ T4616] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 2707.124686][ T4616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2707.246179][ T4616] usb 6-1: Product: syz [ 2707.287083][ T4616] usb 6-1: Manufacturer: syz [ 2707.342674][ T4616] usb 6-1: SerialNumber: syz [ 2707.538054][ T4616] usb 6-1: config 0 descriptor?? [ 2709.354952][T10445] usb 6-1: USB disconnect, device number 41 [ 2709.860715][T10445] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2710.415586][T10445] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2710.492829][T10445] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2710.503176][T10445] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2710.519622][T13337] syz_tun: entered promiscuous mode [ 2710.525788][T10445] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2710.575597][T10445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2710.604368][T13337] syz_tun: left promiscuous mode [ 2710.664090][T10445] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2711.184348][T10445] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 2712.906517][ T4616] usb 6-1: USB disconnect, device number 42 [ 2713.262357][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.274871][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.388089][ T4616] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2713.547967][ T4616] usb 6-1: Using ep0 maxpacket: 16 [ 2713.556775][ T4616] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2713.568255][ T4616] usb 6-1: config 0 has no interfaces? [ 2713.579028][ T4616] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 2713.588441][ T4616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2713.600643][ T4616] usb 6-1: config 0 descriptor?? [ 2713.614868][T13370] netlink: 'syz.2.7079': attribute type 1 has an invalid length. [ 2713.895207][T13374] tipc: Enabling of bearer rejected, already enabled [ 2713.995413][T13376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2714.005627][T13376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2714.159868][T13380] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[13380] [ 2714.309815][T13380] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2716.525919][T10445] usb 6-1: USB disconnect, device number 43 [ 2716.905590][T13417] tipc: Enabling of bearer rejected, already enabled [ 2717.402569][T13429] sctp: [Deprecated]: syz.7.7090 (pid 13429) Use of int in maxseg socket option. [ 2717.402569][T13429] Use struct sctp_assoc_value instead [ 2720.426300][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7098'. [ 2720.579699][T13475] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[13475] [ 2720.648654][T13475] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2721.657950][ T4615] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2721.867984][ T4615] usb 6-1: Using ep0 maxpacket: 32 [ 2721.961926][ T4615] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 2722.078702][ T4615] usb 6-1: config 0 has no interface number 0 [ 2722.084868][ T4615] usb 6-1: config 0 interface 12 has no altsetting 0 [ 2722.241817][ T4615] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2722.280545][ T4615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2722.307737][ T4615] usb 6-1: Product: syz [ 2722.365138][ T4615] usb 6-1: Manufacturer: syz [ 2722.417853][ T4615] usb 6-1: SerialNumber: syz [ 2722.433733][ T4615] usb 6-1: config 0 descriptor?? [ 2722.873799][ T4615] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2722.882976][ T4615] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 2722.893668][ T4615] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2722.912378][ T4615] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 2722.939691][ T4615] usb 6-1: USB disconnect, device number 44 [ 2723.184866][T13509] ip6tnl2: entered promiscuous mode [ 2723.190312][T13509] ip6tnl2: entered allmulticast mode [ 2723.842150][T13518] netlink: 'syz.7.7108': attribute type 3 has an invalid length. [ 2723.878234][T13518] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.7108'. [ 2725.170156][T13532] fuse: Unknown parameter 'À' [ 2727.148159][T10445] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2727.309561][T10445] usb 6-1: Using ep0 maxpacket: 16 [ 2727.316458][T10445] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2727.341854][T10445] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2727.377894][T10445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2727.403417][T10445] usb 6-1: config 0 descriptor?? [ 2727.913487][T10445] mcp2221 0003:04D8:00DD.002B: unknown main item tag 0x0 [ 2727.948160][T10445] mcp2221 0003:04D8:00DD.002B: unknown main item tag 0x0 [ 2727.955206][T10445] mcp2221 0003:04D8:00DD.002B: unknown main item tag 0x0 [ 2727.977641][T10445] mcp2221 0003:04D8:00DD.002B: unknown main item tag 0x0 [ 2728.004218][T10445] mcp2221 0003:04D8:00DD.002B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 2728.168164][ C1] usb 6-1: input irq status -75 received [ 2728.380704][T13555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2728.423437][T13555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2728.554866][T13555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2728.590476][T13555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2728.723016][T10445] usb 6-1: USB disconnect, device number 45 [ 2729.206629][T13572] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7120'. [ 2733.567957][ T4616] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2733.697938][ T4616] usb 6-1: device descriptor read/64, error -71 [ 2733.937960][ T4616] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2734.448623][ T4616] usb 6-1: device descriptor read/64, error -71 [ 2734.590269][ T4616] usb usb6-port1: attempt power cycle [ 2734.703510][T13650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2735.298372][ T4616] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2735.318962][ T4616] usb 6-1: device descriptor read/8, error -71 [ 2735.639749][ T4616] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2735.668654][ T4616] usb 6-1: device descriptor read/8, error -71 [ 2735.802496][ T4616] usb usb6-port1: unable to enumerate USB device [ 2737.317960][T10445] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2737.480359][T10445] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2737.491924][T10445] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2737.747742][T10445] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2737.826922][T10445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2737.849492][T13674] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2737.860175][T10445] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2737.910847][T13679] binder: 13678:13679 ioctl c0306201 0 returned -14 [ 2740.944268][T13709] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7148'. [ 2741.091713][T10445] usb 6-1: USB disconnect, device number 50 [ 2741.209620][T13709] 8021q: adding VLAN 0 to HW filter on device team0 [ 2741.256970][T13709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2742.238055][T13727] vimc link validate: Scaler:src:16x16 (0x33424752, 1, 2, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2743.114276][T13742] bond16: entered promiscuous mode [ 2743.121511][T13742] 8021q: adding VLAN 0 to HW filter on device bond16 [ 2744.444811][T13759] tipc: Failed to remove unknown binding: 66,1,1/0:3703639312/3703639314 [ 2744.467334][T13759] tipc: Failed to remove unknown binding: 66,1,1/0:3703639312/3703639314 [ 2744.665484][T13756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2745.767976][T10445] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2745.841800][T13779] netlink: 'syz.2.7159': attribute type 1 has an invalid length. [ 2745.950181][T10445] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2745.962293][T10445] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2745.971608][T10445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2745.994161][T10445] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2746.059867][T10445] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2746.073323][T10522] udevd[10522]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2746.336781][T13784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2746.359833][T13784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2748.425461][ T4615] usb 6-1: USB disconnect, device number 51 [ 2748.521638][ T30] audit: type=1800 audit(1759720842.470:2677): pid=13807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7165" name="nullb0" dev="devtmpfs" ino=4706 res=0 errno=0 [ 2749.112082][T13812] netlink: 'syz.5.7166': attribute type 12 has an invalid length. [ 2749.120069][T13812] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.7166'. [ 2749.797591][T13827] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[13827] [ 2750.273888][T13832] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2750.640205][T13839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7172'. [ 2750.713109][T13839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2751.078269][ T2709] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2751.239564][ T2709] usb 6-1: Using ep0 maxpacket: 16 [ 2751.255557][ T2709] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2751.264231][ T2709] usb 6-1: config 0 has no interface number 0 [ 2751.508166][ T2709] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2751.628139][ T2709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2751.681009][ T2709] usb 6-1: Product: syz [ 2751.685383][ T2709] usb 6-1: Manufacturer: syz [ 2751.693838][ T2709] usb 6-1: SerialNumber: syz [ 2751.772507][ T2709] usb 6-1: config 0 descriptor?? [ 2751.861152][ T2709] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2752.093694][T13857] input: syz1 as /devices/virtual/input/input214 [ 2752.103011][T13857] input: failed to attach handler leds to device input214, error: -6 [ 2752.331511][T13857] ptrace attach of "./syz-executor exec"[13859] was attempted by "./syz-executor exec"[13857] [ 2752.908623][ T2709] gspca_spca1528: reg_w err -110 [ 2752.974608][ T2709] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 2753.602098][ T4615] usb 6-1: USB disconnect, device number 52 [ 2754.024204][T13870] netlink: 'syz.7.7179': attribute type 12 has an invalid length. [ 2754.032201][T13870] netlink: 9472 bytes leftover after parsing attributes in process `syz.7.7179'. [ 2755.136893][T13891] netlink: 'syz.5.7182': attribute type 27 has an invalid length. [ 2755.587936][ T2709] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 2755.901885][ T2709] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2755.918559][ T2709] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2755.965210][ T2709] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 2755.978004][ T2709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2756.016593][ T2709] usb 6-1: Product: syz [ 2756.031802][ T2709] usb 6-1: Manufacturer: syz [ 2756.036502][ T2709] usb 6-1: SerialNumber: syz [ 2756.160979][ T2709] usb 6-1: config 0 descriptor?? [ 2756.437562][ T2709] option 6-1:0.0: GSM modem (1-port) converter detected [ 2756.891200][T13894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2756.932371][T13894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2758.211080][T10445] usb 6-1: USB disconnect, device number 53 [ 2758.229772][T10445] option 6-1:0.0: device disconnected [ 2758.521469][T13928] ptrace attach of "./syz-executor exec"[7255] was attempted by "./syz-executor exec"[13928] [ 2758.569397][T13928] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2761.020745][T13964] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7192'. [ 2762.845237][T13966] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 2763.600748][T14003] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7201'. [ 2764.477770][T14013] ptrace attach of "./syz-executor exec"[6630] was attempted by "./syz-executor exec"[14013] [ 2764.558106][ T4616] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 2764.715716][T14013] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2764.749689][ T4616] usb 4-1: not running at top speed; connect to a high speed hub [ 2764.760065][ T4616] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2764.769518][ T4616] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2764.852762][ T4616] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2764.867967][ T4616] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 2764.881304][ T4616] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2764.897357][ T4616] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2765.042857][ T4616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2765.072211][ T4616] usb 4-1: Product: syz [ 2765.080903][ T4616] usb 4-1: Manufacturer: syz [ 2765.086207][ T4616] usb 4-1: SerialNumber: syz [ 2765.835397][T14008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2765.880416][T14008] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7202'. [ 2765.932723][T14026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2765.988336][T14026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2767.321579][ T4616] usb 4-1: 0:2 : does not exist [ 2767.369330][ T4616] usb 4-1: USB disconnect, device number 68 [ 2768.858648][T14061] tipc: Enabled bearer , priority 10 [ 2769.225704][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7213'. [ 2769.686857][ T30] audit: type=1326 audit(1759720863.580:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863df8eec9 code=0x7ffc0000 [ 2769.928618][ T30] audit: type=1326 audit(1759720863.580:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f863df8eec9 code=0x7ffc0000 [ 2769.956891][ T30] audit: type=1326 audit(1759720863.580:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863df8eec9 code=0x7ffc0000 [ 2769.979439][ C0] vkms_vblank_simulate: vblank timer overrun [ 2770.006131][ T30] audit: type=1326 audit(1759720863.580:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f863df8eec9 code=0x7ffc0000 [ 2770.028527][ C0] vkms_vblank_simulate: vblank timer overrun [ 2770.246513][ T30] audit: type=1326 audit(1759720863.580:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863df8eec9 code=0x7ffc0000 [ 2770.470845][ T30] audit: type=1326 audit(1759720863.580:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f863df8eec9 code=0x7ffc0000 [ 2770.614779][ T30] audit: type=1326 audit(1759720863.580:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863df8eec9 code=0x7ffc0000 [ 2770.730223][ T30] audit: type=1326 audit(1759720863.580:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f863df8eec9 code=0x7ffc0000 [ 2770.930365][ T30] audit: type=1326 audit(1759720863.790:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863df8eec9 code=0x7ffc0000 [ 2771.004071][ T30] audit: type=1326 audit(1759720863.790:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863df8eec9 code=0x7ffc0000 [ 2771.360785][T14086] binder: 14083:14086 ioctl c0306201 200000000080 returned -14 [ 2773.554692][T14113] input: syz1 as /devices/virtual/input/input216 [ 2773.719048][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7221'. [ 2774.534823][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7220'. [ 2774.701974][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.708661][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.197904][ T4615] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2775.428001][ T4615] usb 4-1: device descriptor read/64, error -71 [ 2775.698183][ T4615] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2775.848135][ T4615] usb 4-1: device descriptor read/64, error -71 [ 2775.997355][ T4615] usb usb4-port1: attempt power cycle [ 2776.367959][ T4615] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2776.390601][ T4615] usb 4-1: device descriptor read/8, error -71 [ 2776.638130][ T4615] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2776.886804][ T4615] usb 4-1: device descriptor read/8, error -71 [ 2777.011009][ T4615] usb usb4-port1: unable to enumerate USB device [ 2777.029332][T14134] delete_channel: no stack [ 2778.420753][T14147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2778.982872][T14162] netlink: 'syz.7.7230': attribute type 9 has an invalid length. [ 2778.993332][T14162] netlink: 'syz.7.7230': attribute type 7 has an invalid length. [ 2779.002847][T14162] netlink: 'syz.7.7230': attribute type 8 has an invalid length. [ 2779.219053][T14163] hub 9-0:1.0: USB hub found [ 2779.227982][T14163] hub 9-0:1.0: 1 port detected [ 2779.378148][ T4615] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2779.783457][T14168] netdevsim netdevsim6: Direct firmware load for . [ 2779.783457][T14168] failed with error -2 [ 2779.795037][T14168] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 2779.795037][T14168] [ 2779.970578][ T4615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2779.991161][ T4615] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2780.002593][ T4615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2780.011363][ T4615] usb 6-1: Product: syz [ 2780.015749][ T4615] usb 6-1: Manufacturer: syz [ 2780.021577][ T4615] usb 6-1: SerialNumber: syz [ 2780.039817][ T4615] usb 6-1: config 0 descriptor?? [ 2782.096077][T14191] input: syz1 as /devices/virtual/input/input219 [ 2782.419465][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7237'. [ 2782.793159][ T4615] usb 6-1: USB disconnect, device number 54 [ 2783.114787][T14199] @: renamed from syz_tun (while UP) [ 2783.126467][T14199] fuse: Unknown parameter '0x000000000000000e' [ 2786.356457][T14220] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2786.477248][T14228] vimc link validate: Scaler:src:16x16 (0x33424752, 1, 2, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2787.658069][ T4616] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2787.938230][ T4616] usb 4-1: config 0 has no interfaces? [ 2787.972686][ T4616] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2788.024310][ T4616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2788.050687][ T4616] usb 4-1: Product: syz [ 2788.081616][ T4616] usb 4-1: Manufacturer: syz [ 2788.086303][ T4616] usb 4-1: SerialNumber: syz [ 2788.135866][ T4616] usb 4-1: config 0 descriptor?? [ 2788.405606][T14255] netlink: 'syz.2.7249': attribute type 23 has an invalid length. [ 2789.909231][T14267] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 2789.916455][T14267] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 2790.204605][ T2709] usb 4-1: USB disconnect, device number 73 [ 2790.334734][T14267] team0: Port device netdevsim0 removed [ 2791.038853][T14267] bond5: (slave gretap1): Releasing active interface [ 2791.220650][ T30] audit: type=1800 audit(1759720885.160:2688): pid=14290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7253" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 2791.425548][T14267] bond6: (slave gretap2): Releasing active interface [ 2791.491820][T14267] bond10: (slave veth6): Releasing active interface [ 2791.616647][T14267] bond10: (slave veth6): the permanent HWaddr of slave - 8e:4d:f8:49:52:bc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2791.668469][T14267] bond10: (slave veth8): Releasing active interface [ 2792.885058][T14267] bond11: (slave bond12): Releasing backup interface [ 2792.893741][T14267] bond11: (slave bond12): the permanent HWaddr of slave - ea:62:a1:e7:25:42 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2792.921083][T14267] bond11: (slave gretap3): making interface the new active one [ 2792.949515][T14267] bond11: (slave gretap3): Releasing backup interface [ 2792.982436][T14267] bond17: (slave bridge4): Removing an active aggregator [ 2793.004080][T14267] bond17: (slave bridge4): Releasing backup interface [ 2793.213662][T14309] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0) [ 2793.536048][T14315] fuse: Unknown parameter '000000000000000000000060x0000000000000006' [ 2794.794330][T14329] fuse: Unknown parameter 'À' [ 2798.038772][T14373] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7268'. [ 2798.062669][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7268'. [ 2799.247195][T14382] fuse: Unknown parameter 'mGN‡8o«ad' [ 2799.966514][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7272'. [ 2801.711678][T14415] misc userio: The device must be registered before sending interrupts [ 2803.610341][T14429] netlink: 'syz.7.7277': attribute type 13 has an invalid length. [ 2803.628766][T14429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2804.704493][T14445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2807.619849][T14474] random: crng reseeded on system resumption [ 2808.408951][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7287'. [ 2809.047968][T26885] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2809.287947][T26885] usb 4-1: Using ep0 maxpacket: 16 [ 2809.328084][T26885] usb 4-1: config 0 has no interfaces? [ 2809.343606][T26885] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2809.352753][T26885] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2809.360979][T26885] usb 4-1: Manufacturer: syz [ 2809.371481][T26885] usb 4-1: config 0 descriptor?? [ 2809.809670][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7289'. [ 2809.979315][T14498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2810.281872][T14509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7291'. [ 2810.575021][T14509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2810.907931][ T4616] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2810.955949][T14515] netlink: 'syz.2.7292': attribute type 4 has an invalid length. [ 2810.971755][T14515] netlink: 'syz.2.7292': attribute type 4 has an invalid length. [ 2811.258178][ T4616] usb 6-1: Using ep0 maxpacket: 16 [ 2811.265899][ T4616] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2811.274258][ T4616] usb 6-1: config 0 has no interface number 0 [ 2811.295367][ T4616] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2811.304923][ T4616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2811.327551][ T4616] usb 6-1: Product: syz [ 2811.339403][ T4616] usb 6-1: Manufacturer: syz [ 2811.410235][ T4616] usb 6-1: SerialNumber: syz [ 2811.423517][ T4616] usb 6-1: config 0 descriptor?? [ 2811.433660][ T4616] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2812.148495][ T4616] gspca_spca1528: reg_w err -110 [ 2812.168813][ T4616] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 2812.907907][T26885] usb 4-1: USB disconnect, device number 74 [ 2813.064577][T14535] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7296'. [ 2813.590985][T14535] hub 9-0:1.0: USB hub found [ 2813.597969][T14535] hub 9-0:1.0: 1 port detected [ 2814.135349][T26885] usb 6-1: USB disconnect, device number 55 [ 2815.478831][T14557] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7300'. [ 2816.743199][T14570] netdevsim netdevsim5: Direct firmware load for . [ 2816.743199][T14570] failed with error -2 [ 2816.755033][T14570] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 2816.755033][T14570] [ 2817.375376][T14581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2818.237946][T31087] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2818.431079][T31087] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2818.571963][T31087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2818.604134][T31087] usb 4-1: config 0 descriptor?? [ 2818.754340][ T30] audit: type=1326 audit(1759720912.640:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14589 comm="syz.7.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2818.882550][T14597] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7309'. [ 2818.904414][T14597] hub 9-0:1.0: USB hub found [ 2818.909818][ T30] audit: type=1326 audit(1759720912.640:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14589 comm="syz.7.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2818.932240][ C1] vkms_vblank_simulate: vblank timer overrun [ 2818.942692][T14597] hub 9-0:1.0: 1 port detected [ 2818.955743][T31087] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2819.016024][ T30] audit: type=1326 audit(1759720912.640:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14589 comm="syz.7.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2819.092519][ T30] audit: type=1326 audit(1759720912.640:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14589 comm="syz.7.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2819.114962][ C1] vkms_vblank_simulate: vblank timer overrun [ 2819.200706][ T30] audit: type=1326 audit(1759720912.640:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14589 comm="syz.7.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2819.413407][ T30] audit: type=1326 audit(1759720912.650:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14589 comm="syz.7.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2819.421877][T31087] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 2819.435851][ C1] vkms_vblank_simulate: vblank timer overrun [ 2819.483902][ T30] audit: type=1326 audit(1759720912.650:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14589 comm="syz.7.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2819.492380][T31087] [drm] Initialized udl on minor 2 [ 2819.514829][ C1] vkms_vblank_simulate: vblank timer overrun [ 2819.569343][ T30] audit: type=1326 audit(1759720912.650:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14589 comm="syz.7.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2819.606987][T31087] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 2819.665735][T31087] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2819.682592][ T30] audit: type=1326 audit(1759720912.650:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14589 comm="syz.7.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2819.785734][T14601] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2819.854606][ T30] audit: type=1326 audit(1759720912.650:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14589 comm="syz.7.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2820.004100][ T4615] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2820.004452][T26885] usb 4-1: USB disconnect, device number 75 [ 2820.013866][ T4615] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2821.287956][ T4615] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2821.450645][ T4615] usb 4-1: Using ep0 maxpacket: 8 [ 2821.640016][ T4615] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2821.665606][T14628] ptrace attach of "./syz-executor exec"[23126] was attempted by "./syz-executor exec"[14628] [ 2821.684697][ T4615] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2821.774295][ T4615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 2821.800611][T14628] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2821.857859][ T4615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 2821.880241][ T4615] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2821.919071][ T4615] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2821.936128][ T4615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2821.998978][ T4615] usb 4-1: Product: syz [ 2822.038951][ T4615] usb 4-1: Manufacturer: syz [ 2822.043907][ T4615] usb 4-1: SerialNumber: syz [ 2822.117701][ T4615] usb 4-1: config 0 descriptor?? [ 2822.814968][T14635] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7313'. [ 2823.319338][T14635] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 2824.184044][T14645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2825.466373][T14662] input: syz1 as /devices/virtual/input/input228 [ 2825.487895][ T4615] rc_core: IR keymap rc-imon-rsc not found [ 2825.493888][ T4615] Registered IR keymap rc-empty [ 2825.525859][ T4615] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2825.593932][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7322'. [ 2825.719944][ T4615] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input227 [ 2825.923081][ T4615] usb 4-1: USB disconnect, device number 76 [ 2826.068055][T26885] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2826.198408][T14674] netlink: 'syz.6.7323': attribute type 10 has an invalid length. [ 2826.245645][T14674] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7323'. [ 2826.269413][T14674] team0: entered promiscuous mode [ 2826.275924][T14674] team_slave_0: entered promiscuous mode [ 2826.326603][T14674] team_slave_1: entered promiscuous mode [ 2826.365329][T14674] batadv2: entered promiscuous mode [ 2826.386558][T14674] team0: entered allmulticast mode [ 2826.488114][T26885] usb 6-1: Using ep0 maxpacket: 8 [ 2826.498891][T26885] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2826.509135][T26885] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2826.518983][T26885] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2826.539705][T26885] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2826.686166][T14674] team_slave_0: entered allmulticast mode [ 2826.728432][T14674] team_slave_1: entered allmulticast mode [ 2826.734194][T14674] batadv2: entered allmulticast mode [ 2826.741416][T26885] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2826.751686][T26885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2826.835433][T14674] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2826.854042][T26885] usb 6-1: Product: syz [ 2826.874036][T26885] usb 6-1: Manufacturer: syz [ 2826.882521][T26885] usb 6-1: SerialNumber: syz [ 2827.028790][T14664] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2827.054023][T26885] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 2827.182229][T26885] usbtest 6-1:1.0: Linux user mode ISO test driver [ 2827.246082][T14686] hub 9-0:1.0: USB hub found [ 2827.253167][T14686] hub 9-0:1.0: 1 port detected [ 2827.336366][T26885] usbtest 6-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 2828.793764][T14701] delete_channel: no stack [ 2828.806524][ T4615] usb 6-1: USB disconnect, device number 56 [ 2829.114923][T14708] netlink: 'syz.5.7330': attribute type 12 has an invalid length. [ 2829.126684][T14708] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.7330'. [ 2830.517966][T14725] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7333'. [ 2832.091442][T14738] input: syz1 as /devices/virtual/input/input229 [ 2832.179631][T14738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7336'. [ 2833.159506][T14743] netdevsim netdevsim3: Direct firmware load for x failed with error -2 [ 2833.167935][T14743] netdevsim netdevsim3: Falling back to sysfs fallback for: x [ 2833.491804][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 2833.491817][ T30] audit: type=1326 audit(1759720927.450:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.5.7339" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81a0d8eec9 code=0x0 [ 2834.088726][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7339'. [ 2834.340558][ T30] audit: type=1326 audit(1759720928.280:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.2.7341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72ff8eec9 code=0x7ffc0000 [ 2834.363683][ T30] audit: type=1326 audit(1759720928.280:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.2.7341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa72ff8eec9 code=0x7ffc0000 [ 2834.395163][ T30] audit: type=1326 audit(1759720928.280:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.2.7341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72ff8eec9 code=0x7ffc0000 [ 2834.557905][ T30] audit: type=1326 audit(1759720928.280:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.2.7341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa72ff8eec9 code=0x7ffc0000 [ 2834.588342][ T30] audit: type=1326 audit(1759720928.280:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.2.7341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72ff8eec9 code=0x7ffc0000 [ 2834.618061][ T30] audit: type=1326 audit(1759720928.280:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.2.7341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa72ff8eec9 code=0x7ffc0000 [ 2834.640790][ T30] audit: type=1326 audit(1759720928.290:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.2.7341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72ff8eec9 code=0x7ffc0000 [ 2834.663894][ T30] audit: type=1326 audit(1759720928.290:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.2.7341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72ff8eec9 code=0x7ffc0000 [ 2834.713684][ T30] audit: type=1326 audit(1759720928.290:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.2.7341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa72ff8eec9 code=0x7ffc0000 [ 2836.142377][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.149500][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.647894][T14779] netlink: 'syz.3.7345': attribute type 12 has an invalid length. [ 2836.655941][T14779] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.7345'. [ 2839.573782][T14810] PKCS7: Unknown OID: [5] (bad) [ 2839.578999][T14810] PKCS7: Only support pkcs7_signedData type [ 2841.020136][T14816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7354'. [ 2841.791695][T14783] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7346'. [ 2842.772227][T14824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7356'. [ 2842.899956][T14824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2842.923967][T14821] overlayfs: missing 'lowerdir' [ 2843.308210][T31087] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2843.458146][T31087] usb 6-1: Using ep0 maxpacket: 16 [ 2843.467785][T31087] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2843.485287][T31087] usb 6-1: config 0 has no interface number 0 [ 2843.502648][T31087] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2843.512262][T31087] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2843.520630][T31087] usb 6-1: Product: syz [ 2843.524980][T31087] usb 6-1: Manufacturer: syz [ 2843.530219][T31087] usb 6-1: SerialNumber: syz [ 2843.582036][T31087] usb 6-1: config 0 descriptor?? [ 2843.600841][T31087] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2844.281238][T14848] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2844.497672][T31087] gspca_spca1528: reg_w err -110 [ 2844.528149][T31087] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 2845.153209][T14854] input: syz1 as /devices/virtual/input/input230 [ 2845.264414][T14854] netlink: 'syz.3.7362': attribute type 1 has an invalid length. [ 2846.369001][T31087] usb 6-1: USB disconnect, device number 57 [ 2846.731159][T14865] netlink: 'syz.3.7364': attribute type 3 has an invalid length. [ 2846.740942][T14865] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7364'. [ 2848.142263][T14881] binder: 14876:14881 ioctl c0306201 200000000100 returned -11 [ 2848.677761][T14889] netlink: 'syz.6.7368': attribute type 12 has an invalid length. [ 2848.685695][T14889] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.7368'. [ 2850.404895][T14905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7372'. [ 2851.717919][T31087] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2851.878063][T31087] usb 6-1: Using ep0 maxpacket: 32 [ 2851.885732][T31087] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2851.906169][T31087] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2851.941890][T31087] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2851.962418][T31087] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2851.990224][T31087] usb 6-1: config 0 descriptor?? [ 2852.006759][T31087] hub 6-1:0.0: bad descriptor, ignoring hub [ 2852.018550][T31087] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2852.029174][T31087] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2853.347315][T14939] usb usb8: usbfs: process 14939 (syz.7.7386) did not claim interface 0 before use [ 2853.434534][T14943] netlink: 'syz.6.7383': attribute type 12 has an invalid length. [ 2853.442500][T14943] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.7383'. [ 2854.328224][T26885] usb 6-1: USB disconnect, device number 58 [ 2855.534170][T14982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7399'. [ 2855.605417][T14982] erspan0: left promiscuous mode [ 2855.620309][T14982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2855.877986][T26885] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2856.028137][T26885] usb 4-1: Using ep0 maxpacket: 16 [ 2856.034842][T26885] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2856.043393][T26885] usb 4-1: config 0 has no interface number 0 [ 2856.052484][T26885] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2856.061983][T26885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2856.070349][T26885] usb 4-1: Product: syz [ 2856.074537][T26885] usb 4-1: Manufacturer: syz [ 2856.079288][T26885] usb 4-1: SerialNumber: syz [ 2856.086005][T26885] usb 4-1: config 0 descriptor?? [ 2856.094275][T26885] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2856.428991][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7400'. [ 2856.798104][T26885] gspca_spca1528: reg_w err -110 [ 2856.818132][T26885] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 2857.661621][T14967] delete_channel: no stack [ 2858.490824][T31087] usb 4-1: USB disconnect, device number 77 [ 2858.808319][T26885] usb 6-1: new low-speed USB device number 59 using dummy_hcd [ 2859.001709][T26885] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2859.042042][T26885] usb 6-1: config 0 has no interface number 0 [ 2859.057933][T26885] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2859.078625][T26885] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2859.103983][T26885] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2859.133517][T26885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2859.160549][T26885] usb 6-1: config 0 descriptor?? [ 2859.188242][T15020] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2859.211930][T26885] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2859.302533][T15046] netlink: 'syz.2.7423': attribute type 13 has an invalid length. [ 2859.310526][T15046] netlink: 'syz.2.7423': attribute type 17 has an invalid length. [ 2859.321893][T15048] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 2859.419696][ T4615] usb 6-1: USB disconnect, device number 59 [ 2859.425702][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2859.467922][T31087] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2859.618715][T31087] usb 4-1: Using ep0 maxpacket: 32 [ 2859.714894][T31087] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 2859.723071][T31087] usb 4-1: config 0 has no interface number 0 [ 2859.729234][T31087] usb 4-1: config 0 interface 12 has no altsetting 0 [ 2859.756534][T31087] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2859.768493][T15073] netlink: 'syz.2.7435': attribute type 12 has an invalid length. [ 2859.776312][T15073] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.7435'. [ 2859.788713][T31087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2859.796734][T31087] usb 4-1: Product: syz [ 2859.802766][T31087] usb 4-1: Manufacturer: syz [ 2859.809724][T31087] usb 4-1: SerialNumber: syz [ 2859.823023][T31087] usb 4-1: config 0 descriptor?? [ 2860.298369][T31087] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2860.306058][T31087] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 2860.319214][T31087] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2860.339989][T31087] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 2860.376448][T31087] usb 4-1: USB disconnect, device number 78 [ 2861.400136][T15104] netlink: 'syz.3.7447': attribute type 12 has an invalid length. [ 2861.408428][T15104] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.7447'. [ 2861.454239][T15106] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7446'. [ 2861.540213][T15106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2862.307929][T31087] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2862.467948][T31087] usb 6-1: Using ep0 maxpacket: 16 [ 2862.476646][T31087] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2862.486625][T31087] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2862.501694][T31087] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 2862.586663][T31087] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2862.595834][T31087] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2862.648033][T31087] usb 6-1: Product: syz [ 2862.652333][T31087] usb 6-1: Manufacturer: syz [ 2862.717951][T31087] usb 6-1: SerialNumber: syz [ 2862.760074][T31087] usb 6-1: config 0 descriptor?? [ 2862.770836][T15115] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2862.798690][T31087] mcba_usb 6-1:0.0 can0: failed tx_urb -90 [ 2862.812033][T31087] mcba_usb 6-1:0.0 can0: Failed to send cmd (169) [ 2862.826631][T31087] mcba_usb 6-1:0.0 can0: failed tx_urb -90 [ 2862.835753][T31087] mcba_usb 6-1:0.0 can0: Failed to send cmd (169) [ 2862.862243][T31087] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 2863.066227][T15115] bridge0: port 2(macsec0) entered blocking state [ 2863.074467][T15115] bridge0: port 2(macsec0) entered disabled state [ 2863.083897][T15115] macsec0: entered allmulticast mode [ 2863.098099][T15115] macsec0: entered promiscuous mode [ 2864.003502][T15140] ucma_write: process 6795 (syz.2.7466) changed security contexts after opening file descriptor, this is not allowed. [ 2864.206763][T15148] tipc: Enabling of bearer rejected, already enabled [ 2864.506628][T15151] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7457'. [ 2865.007252][T26885] usb 6-1: USB disconnect, device number 60 [ 2865.015328][T26885] mcba_usb 6-1:0.0 can0: device disconnected [ 2865.648397][T26885] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2865.807897][T26885] usb 6-1: Using ep0 maxpacket: 16 [ 2865.814660][T26885] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 2865.842757][T26885] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 2865.862251][T26885] usb 6-1: config 166 has no interface number 0 [ 2865.875427][T26885] usb 6-1: config 166 has no interface number 1 [ 2865.896721][T26885] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2865.941200][T26885] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2865.985731][T26885] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 2866.133523][T15197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7472'. [ 2866.283947][T26885] usb 6-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2866.480727][T26885] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 2866.503722][T15197] team0: left promiscuous mode [ 2866.508654][T15197] team_slave_0: left promiscuous mode [ 2866.514725][T15197] team_slave_1: left promiscuous mode [ 2866.521275][T15197] batadv2: left promiscuous mode [ 2866.526967][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7473'. [ 2866.563461][T15197] team0: left allmulticast mode [ 2866.569225][T15197] team_slave_0: left allmulticast mode [ 2866.574712][T15197] team_slave_1: left allmulticast mode [ 2866.581719][T15197] batadv2: left allmulticast mode [ 2866.592919][T15197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2866.608679][T26885] usb 6-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2866.654168][T26885] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2866.679498][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7473'. [ 2866.698617][T26885] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2866.723411][T26885] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 2866.766904][T26885] usb 6-1: config 166 interface 177 has no altsetting 0 [ 2866.778750][T26885] usb 6-1: config 166 interface 34 has no altsetting 0 [ 2866.821389][T26885] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 2866.840985][T26885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2866.877875][T26885] usb 6-1: Product: syz [ 2866.889066][T26885] usb 6-1: Manufacturer: syz [ 2866.899297][T26885] usb 6-1: SerialNumber: syz [ 2867.135468][T26885] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 2867.393897][T26885] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 2867.473793][T26885] ums-realtek 6-1:166.34: probe with driver ums-realtek failed with error -5 [ 2867.484957][T26885] uvcvideo 6-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 2867.527381][T26885] uvcvideo 6-1:166.34: No valid video chain found. [ 2867.663740][T26885] usb 6-1: USB disconnect, device number 61 [ 2867.772019][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7489'. [ 2867.851724][T15237] netlink: 'syz.5.7479': attribute type 4 has an invalid length. [ 2867.943457][T15241] netlink: 'syz.5.7479': attribute type 4 has an invalid length. [ 2869.397227][T15274] netlink: zone id is out of range [ 2869.426804][T15274] netlink: del zone limit has 4 unknown bytes [ 2869.749121][T15288] netlink: 'syz.3.7500': attribute type 29 has an invalid length. [ 2870.211559][T15302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7505'. [ 2870.349127][T15307] netlink: 'syz.7.7506': attribute type 12 has an invalid length. [ 2870.357307][T15307] netlink: 9472 bytes leftover after parsing attributes in process `syz.7.7506'. [ 2870.435401][T15302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2870.777101][T26885] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2870.925074][T15310] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7507'. [ 2870.935332][T15311] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7507'. [ 2871.022990][T26885] usb 4-1: Using ep0 maxpacket: 16 [ 2871.058937][T26885] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2871.255033][T26885] usb 4-1: config 0 has no interface number 0 [ 2871.287837][T26885] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2871.312226][T26885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2871.346981][T26885] usb 4-1: Product: syz [ 2871.382393][T26885] usb 4-1: Manufacturer: syz [ 2871.392018][T26885] usb 4-1: SerialNumber: syz [ 2871.411508][T26885] usb 4-1: config 0 descriptor?? [ 2871.437579][T26885] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2872.147923][T26885] gspca_spca1528: reg_w err -110 [ 2872.168017][T26885] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 2872.801911][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2872.801928][ T30] audit: type=1326 audit(1759720966.760:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.7.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2872.906998][ T30] audit: type=1326 audit(1759720966.790:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.7.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2872.951970][ T30] audit: type=1326 audit(1759720966.790:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.7.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2873.079290][ T30] audit: type=1326 audit(1759720966.790:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.7.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2873.126275][ T30] audit: type=1326 audit(1759720966.790:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.7.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2873.290819][T15360] netlink: 'syz.7.7525': attribute type 12 has an invalid length. [ 2873.299038][T15360] netlink: 9472 bytes leftover after parsing attributes in process `syz.7.7525'. [ 2873.962664][ T30] audit: type=1326 audit(1759720966.790:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.7.7522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc351f8eec9 code=0x7ffc0000 [ 2874.302314][T26885] usb 4-1: USB disconnect, device number 79 [ 2875.145941][T15391] input: syz1 as /devices/virtual/input/input232 [ 2875.234047][T15391] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7535'. [ 2875.513812][T15404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7541'. [ 2875.971228][T15404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2877.640962][T15427] ptrace attach of "./syz-executor exec"[23126] was attempted by "./syz-executor exec"[15427] [ 2877.699895][T15427] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2878.489248][T15437] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2879.443451][T15474] trusted_key: encrypted_key: insufficient parameters specified [ 2880.818087][T31087] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 2880.978643][T31087] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 2880.987988][T31087] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 2880.996010][T31087] usb 4-1: config 0 has no interface number 0 [ 2881.003383][T31087] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 2881.011454][T31087] usb 4-1: config 0 has no interface number 0 [ 2881.017947][T26885] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 2881.019417][T31087] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 2881.033544][T31087] usb 4-1: config 0 has no interface number 0 [ 2881.041204][T31087] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 2881.049321][T31087] usb 4-1: config 0 has no interface number 0 [ 2881.056384][T31087] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 2881.064444][T31087] usb 4-1: config 0 has no interface number 0 [ 2881.071487][T31087] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 2881.079586][T31087] usb 4-1: config 0 has no interface number 0 [ 2881.086585][T31087] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 2881.094645][T31087] usb 4-1: config 0 has no interface number 0 [ 2881.102455][T31087] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 2881.110490][T31087] usb 4-1: config 0 has no interface number 0 [ 2881.117505][T31087] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 2881.126651][T31087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=34 [ 2881.134758][T31087] usb 4-1: SerialNumber: syz [ 2881.141179][T31087] usb 4-1: config 0 descriptor?? [ 2881.148909][T31087] hub 4-1:0.3: Invalid hub with more than one config or interface [ 2881.156735][T31087] hub 4-1:0.3: probe with driver hub failed with error -22 [ 2881.165303][T31087] sierra 4-1:0.3: Sierra USB modem converter detected [ 2881.179674][T26885] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2881.187968][T26885] usb 6-1: config 0 has no interface number 0 [ 2881.194074][T26885] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2881.206027][T26885] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2881.217184][T26885] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2881.226710][T26885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2881.237245][T26885] usb 6-1: config 0 descriptor?? [ 2881.243400][T15504] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2881.254761][T26885] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2881.359565][T31087] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 2881.373330][T31087] usb 4-1: USB disconnect, device number 80 [ 2881.389143][T31087] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 2881.401974][T31087] sierra 4-1:0.3: device disconnected [ 2881.454847][T26885] usb 6-1: USB disconnect, device number 62 [ 2881.455017][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2881.957607][T15512] netlink: 'syz.3.7582': attribute type 1 has an invalid length. [ 2881.965659][T15512] netlink: 'syz.3.7582': attribute type 2 has an invalid length. [ 2882.441284][T15521] trusted_key: encrypted_key: insufficient parameters specified [ 2883.245242][T15533] vimc link validate: Scaler:src:16x16 (0x33424752, 1, 2, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2885.245340][T15587] netlink: 'syz.3.7608': attribute type 4 has an invalid length. [ 2885.345796][T15588] netlink: 'syz.3.7608': attribute type 4 has an invalid length. [ 2886.178030][T31087] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2886.328091][T31087] usb 6-1: Using ep0 maxpacket: 32 [ 2886.345519][T31087] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 2886.357927][T31087] usb 6-1: config 0 has no interface number 0 [ 2886.369669][T31087] usb 6-1: config 0 interface 12 has no altsetting 0 [ 2886.381721][T31087] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2886.391628][T31087] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2886.400415][T31087] usb 6-1: Product: syz [ 2886.400443][T15605] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] SMP KASAN PTI [ 2886.404733][T31087] usb 6-1: Manufacturer: syz [ 2886.416443][T15605] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 2886.416473][T15605] CPU: 1 UID: 0 PID: 15605 Comm: syz.3.7617 Not tainted syzkaller #0 PREEMPT(full) [ 2886.416495][T15605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2886.416509][T15605] RIP: 0010:skb_segment+0x2ace/0x3f90 [ 2886.416533][T15605] Code: 00 00 00 8b 6c 24 58 81 7c 24 14 ff ff 00 00 0f 85 12 e1 ff ff e8 52 d1 9d f8 48 8b 44 24 20 48 8d 58 70 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 14 09 00 00 8b 1b e9 17 e1 ff ff e8 29 [ 2886.416553][T15605] RSP: 0018:ffffc9000f94e2d0 EFLAGS: 00010202 [ 2886.416579][T15605] RAX: 000000000000000e RBX: 0000000000000070 RCX: 0000000000080000 [ 2886.416593][T15605] RDX: ffffc90005004000 RSI: 0000000000018601 RDI: 0000000000018602 [ 2886.416613][T15605] RBP: 0000000000000004 R08: ffff88802d853c80 R09: 0000000000000002 [ 2886.416626][T15605] R10: 000000000000a888 R11: 0000000000000002 R12: ffff888020312de0 [ 2886.416640][T15605] R13: 00000000fffffff8 R14: 0000000000000000 R15: dffffc0000000000 [ 2886.416653][T15605] FS: 00007f863ed3e6c0(0000) GS:ffff888126478000(0000) knlGS:0000000000000000 [ 2886.421503][T31087] usb 6-1: SerialNumber: syz [ 2886.429621][T15605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2886.429640][T15605] CR2: 0000200000200000 CR3: 0000000056444000 CR4: 00000000003526f0 [ 2886.429658][T15605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000508c [ 2886.446645][T31087] usb 6-1: config 0 descriptor?? [ 2886.449130][T15605] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2886.449147][T15605] Call Trace: [ 2886.449156][T15605] [ 2886.449172][T15605] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2886.449210][T15605] tcp_gso_segment+0x423/0x1a40 [ 2886.449236][T15605] ? __pfx_tcp_wfree+0x10/0x10 [ 2886.590309][T15605] ipv6_gso_segment+0xb75/0x21a0 [ 2886.595336][T15605] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 2886.600693][T15605] ? do_raw_spin_lock+0x121/0x290 [ 2886.605712][T15605] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 2886.611084][T15605] skb_mac_gso_segment+0x31c/0x640 [ 2886.616183][T15605] ? skb_mac_gso_segment+0x17e/0x640 [ 2886.621455][T15605] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 2886.627098][T15605] __skb_gso_segment+0x376/0x540 [ 2886.632055][T15605] validate_xmit_skb+0x8de/0x1270 [ 2886.637087][T15605] ? nf_tcp_log_invalid+0x20e/0x250 [ 2886.642296][T15605] ? __pfx_validate_xmit_skb+0x10/0x10 [ 2886.647749][T15605] validate_xmit_skb_list+0x84/0x120 [ 2886.653053][T15605] sch_direct_xmit+0xd3/0x4b0 [ 2886.657760][T15605] ? __pfx_sch_direct_xmit+0x10/0x10 [ 2886.663067][T15605] ? prio_dequeue+0x3b4/0x610 [ 2886.667761][T15605] __qdisc_run+0xb16/0x15f0 [ 2886.672288][T15605] __dev_queue_xmit+0x1056/0x3b50 [ 2886.677334][T15605] ? __dev_queue_xmit+0x27b/0x3b50 [ 2886.682448][T15605] ? nf_conntrack_in+0x133a/0x15c0 [ 2886.687566][T15605] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2886.692941][T15605] ? __lock_acquire+0xab9/0xd20 [ 2886.697809][T15605] ? ip6_finish_output2+0xd4c/0x1480 [ 2886.703100][T15605] ip6_finish_output2+0xf70/0x1480 [ 2886.708220][T15605] ? __pfx_ip6_finish_output2+0x10/0x10 [ 2886.713759][T15605] ? ip6_mtu+0x7d/0x490 [ 2886.717909][T15605] ? ip6_mtu+0x38c/0x490 [ 2886.722149][T15605] ? ip6_finish_output+0x220/0x4e0 [ 2886.727253][T15605] ? ip6_output+0x126/0x550 [ 2886.731761][T15605] ip6_output+0x340/0x550 [ 2886.736090][T15605] ip6_xmit+0x11b5/0x1970 [ 2886.740449][T15605] ? ip6_xmit+0x291/0x1970 [ 2886.744874][T15605] ? __pfx_ip6_xmit+0x10/0x10 [ 2886.749575][T15605] ? inet6_csk_xmit+0x1d4/0x780 [ 2886.754429][T15605] inet6_csk_xmit+0x4db/0x780 [ 2886.759111][T15605] ? inet6_csk_xmit+0x1d4/0x780 [ 2886.763980][T15605] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 2886.769252][T15605] ? csum_ipv6_magic+0x1ea/0x2f0 [ 2886.774177][T15605] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 2886.779387][T15605] __tcp_transmit_skb+0x2092/0x3aa0 [ 2886.784621][T15605] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 2886.790173][T15605] ? tcp_small_queue_check+0x1c1/0x3b0 [ 2886.795642][T15605] tcp_write_xmit+0x19c1/0x69a0 [ 2886.800489][T15605] __tcp_push_pending_frames+0x97/0x360 [ 2886.806049][T15605] tcp_rcv_established+0x13c8/0x2670 [ 2886.811340][T15605] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2886.816991][T15605] ? ip6_dst_check+0x5e3/0x7e0 [ 2886.821746][T15605] ? __pfx_ip6_dst_check+0x10/0x10 [ 2886.826872][T15605] tcp_v6_do_rcv+0xa9d/0x13f0 [ 2886.831560][T15605] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 2886.836686][T15605] __release_sock+0x1b8/0x3a0 [ 2886.841363][T15605] __sk_flush_backlog+0x36/0xc0 [ 2886.846226][T15605] tcp_sendmsg_locked+0x4303/0x5540 [ 2886.851453][T15605] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 2886.857005][T15605] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2886.862371][T15605] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2886.867735][T15605] tcp_sendmsg+0x2f/0x50 [ 2886.872052][T15605] __sock_sendmsg+0xe5/0x270 [ 2886.876651][T15605] __sys_sendto+0x3bd/0x520 [ 2886.881143][T15605] ? __pfx___sys_sendto+0x10/0x10 [ 2886.886157][T15605] ? do_futex+0x333/0x420 [ 2886.890499][T15605] ? rcu_is_watching+0x15/0xb0 [ 2886.895260][T15605] __x64_sys_sendto+0xde/0x100 [ 2886.900030][T15605] do_syscall_64+0xfa/0x3b0 [ 2886.904531][T15605] ? lockdep_hardirqs_on+0x9c/0x150 [ 2886.909730][T15605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2886.915790][T15605] ? clear_bhb_loop+0x60/0xb0 [ 2886.920450][T15605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2886.926337][T15605] RIP: 0033:0x7f863df8eec9 [ 2886.930751][T15605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2886.950345][T15605] RSP: 002b:00007f863ed3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2886.958768][T15605] RAX: ffffffffffffffda RBX: 00007f863e1e5fa0 RCX: 00007f863df8eec9 [ 2886.966760][T15605] RDX: ffffffffffffff1d RSI: 00002000000000c0 RDI: 0000000000000003 [ 2886.974740][T15605] RBP: 00007f863e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 2886.982715][T15605] R10: 0000000000000850 R11: 0000000000000246 R12: 0000000000000000 [ 2886.990686][T15605] R13: 00007f863e1e6038 R14: 00007f863e1e5fa0 R15: 00007f863e30fa28 [ 2886.998662][T15605] [ 2887.001703][T15605] Modules linked in: [ 2887.005773][T15605] ---[ end trace 0000000000000000 ]--- [ 2887.011262][T15605] RIP: 0010:skb_segment+0x2ace/0x3f90 [ 2887.016653][T15605] Code: 00 00 00 8b 6c 24 58 81 7c 24 14 ff ff 00 00 0f 85 12 e1 ff ff e8 52 d1 9d f8 48 8b 44 24 20 48 8d 58 70 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 14 09 00 00 8b 1b e9 17 e1 ff ff e8 29 [ 2887.036319][T15605] RSP: 0018:ffffc9000f94e2d0 EFLAGS: 00010202 [ 2887.042413][T15605] RAX: 000000000000000e RBX: 0000000000000070 RCX: 0000000000080000 [ 2887.050450][T15605] RDX: ffffc90005004000 RSI: 0000000000018601 RDI: 0000000000018602 [ 2887.058469][T15605] RBP: 0000000000000004 R08: ffff88802d853c80 R09: 0000000000000002 [ 2887.066452][T15605] R10: 000000000000a888 R11: 0000000000000002 R12: ffff888020312de0 [ 2887.074474][T15605] R13: 00000000fffffff8 R14: 0000000000000000 R15: dffffc0000000000 [ 2887.082485][T15605] FS: 00007f863ed3e6c0(0000) GS:ffff888126478000(0000) knlGS:0000000000000000 [ 2887.091453][T15605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2887.098064][T15605] CR2: 0000200000200000 CR3: 0000000056444000 CR4: 00000000003526f0 [ 2887.106067][T15605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000508c [ 2887.114090][T15605] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2887.122090][T15605] Kernel panic - not syncing: Fatal exception in interrupt [ 2887.129659][T15605] Kernel Offset: disabled [ 2887.133978][T15605] Rebooting in 86400 seconds..