last executing test programs: 11.06913803s ago: executing program 0 (id=267): r0 = syz_io_uring_setup(0x837, &(0x7f0000000740)={0x0, 0x2b94, 0x480, 0xa, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000006c0)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0xfffffffffffffe05) (async) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0xfffffffffffffe05) sendto$inet(r3, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_open_dev$vim2m(&(0x7f0000000580), 0x2, 0x2) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x2, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="7af7f2182e96", @private, @empty}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffff00, 0xd, 0x7, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x3ff, 0x6, 0x40, 0x6, 0x0, 0x5, 'team_slave_1\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x6}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix_mp={0x9, 0x3, 0x3234564e, 0x4, 0x9, [{0xec1, 0xa}, {0xffffff01, 0x8fc9}, {0x7f, 0x5}, {0xa78, 0x7}, {0x7, 0x4}, {0x8, 0xffffffff}, {0x1000, 0xc09}, {0x8, 0x6}], 0x6, 0x41, 0x4}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix_mp={0x9, 0x3, 0x3234564e, 0x4, 0x9, [{0xec1, 0xa}, {0xffffff01, 0x8fc9}, {0x7f, 0x5}, {0xa78, 0x7}, {0x7, 0x4}, {0x8, 0xffffffff}, {0x1000, 0xc09}, {0x8, 0x6}], 0x6, 0x41, 0x4}}) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f0000000600), 0x1, 0x4}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000000}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000001050c3, 0x0) r8 = dup(r7) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000a4c0)=[{{0x0, 0x0, &(0x7f0000000600)}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x0) close(0xffffffffffffffff) dup(r9) (async) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) getsockopt$inet_mreqsrc(r8, 0x0, 0x25, &(0x7f0000000640)={@empty, @remote, @dev}, &(0x7f0000000680)=0xc) (async) getsockopt$inet_mreqsrc(r8, 0x0, 0x25, &(0x7f0000000640)={@empty, @remote, @dev}, &(0x7f0000000680)=0xc) write$binfmt_aout(r8, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 9.866762167s ago: executing program 0 (id=271): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x18, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {0x2, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x10, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, 0x0, 0x2000c804) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r11], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60842, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r13, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000380)="66b97c08000066b80900000066ba000000000f300f38cab83597b8f5008ec8b808010f00d8b823008ec00f32f2abdefb6766c7442400112200006766c74424021e8d1eeb6766c744240600000000670f011424660fd36ded", 0x58}], 0x1, 0x8, 0x0, 0x0) 8.20755867s ago: executing program 2 (id=277): fsopen(&(0x7f0000000000)='romfs\x00', 0x0) 8.086257174s ago: executing program 2 (id=278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000012200000000000000000000000a74000000060a090400000000000000000200000048000480ff61adf157cc18c833300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000140001800b0001006578746864720000040002800900010073797a30000000000900020073797a320000000014000000e5f40bc02e726ea5000000000000000a"], 0x9c}}, 0x0) 8.03333127s ago: executing program 2 (id=279): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080200000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.786439841s ago: executing program 2 (id=281): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/84, 0x54}, 0x85ae}], 0x2, 0x60010020, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) fsetxattr$security_capability(r0, &(0x7f0000000080), 0x0, 0x0, 0x1) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x0) syz_clone(0x60108080, &(0x7f0000000040)="2e756f84bbb0c758a813f59a12f8505175954618471b562dddafb1768b600100f802c159cb6fdb5321dc1e5c", 0x2c, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000006c0)="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") ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000340)=0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000040)={0x36, 0x7, 0x4, 0x9, 0x1, 0x80}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002cc0)={{r0}, r2, 0x0, @inherit={0x60, &(0x7f0000000380)={0x0, 0x3, 0x40, 0xfe, {0xa, 0xfff, 0x100000000, 0x4, 0x6}, [0xb1, 0x48, 0xa428]}}, @subvolid=0x1}) fsetxattr(r0, &(0x7f0000000280)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x3) syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a2401000000020102132406040006000000000000000000000000000924030000260000000924050000f8431cfd0924030002030004fc0624050400fd0904010000010200000904010101010200000905010900000000000725014300000009040200000802000009040201"], 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000002480)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f000000000009050300000000000009050c00000002060209050f000000000000090507"], &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) 7.582239848s ago: executing program 1 (id=282): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x8b9) syz_io_uring_setup(0x1ca, &(0x7f00000001c0)={0x0, 0x2093, 0x2, 0x2, 0x2cf}, &(0x7f00000000c0), &(0x7f0000000380)) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8880b8623450) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) 7.506476366s ago: executing program 3 (id=283): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f00000005c0), 0x20800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000600)={0x3, @pix_mp={0x3, 0x0, 0x50323234, 0x0, 0x3, [{0x8101, 0x9fb}, {0x9, 0x2}, {0x6, 0x1}, {0x3, 0xffffd613}, {0x1, 0x8}, {0x7ff, 0x2007}, {0x5, 0x8}, {0x9, 0x2d19}], 0x1, 0x0, 0x0, 0x0, 0x1}}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x4, 0x7, 0x100000000, 0x4571, 0x1]}, &(0x7f00000000c0)=0x78) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98810000", @ANYRES16=r2, @ANYBLOB="20002dbd7000fbdbdf250e00000048000280080001000b0000001400038008000100ff0f0000080001000200000008000200060000000c000380080001007f00000008000200010000000800010001040000040004001c0004800c00078008000200010100000900010073797a3100000000040004802c00038008000100360f00000800010001000000080001000000000008000200c50000000800020008000000240003800800030001000000080003000100000008000300030000000800030003000000300004802c0007800800010002000000080003000000000008000200ffffffff080003000200000008000400010000009c000180080003000600000044000280080003000700000008000200ff7f000008000200080000000800010020000000080002000000010008000100110000000800040005000000080002000900000044000400200001000a004e200000000d0000000000000000000000000000000109000000200002000a004e200000008bfc010000000000000000000000000000050000000800030005000000"], 0x198}, 0x1, 0x0, 0x0, 0x80}, 0x40080) memfd_create(&(0x7f0000000000)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe0]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x050xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x18, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {0x2, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x10, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, 0x0, 0x2000c804) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r11], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60842, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r13, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000380)="66b97c08000066b80900000066ba000000000f300f38cab83597b8f5008ec8b808010f00d8b823008ec00f32f2abdefb6766c7442400112200006766c74424021e8d1eeb6766c744240600000000670f011424660fd36ded", 0x58}], 0x1, 0x8, 0x0, 0x0) 7.103416079s ago: executing program 0 (id=285): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x800000, 'syz0\x00', 0x8000}, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800000000000, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x80000001, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x7ff, 0x3, 0x0, 0x100000021]}) 6.934104884s ago: executing program 0 (id=286): r0 = syz_clone(0x80000000, &(0x7f0000000040), 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)="87f9122a438c9769794fa03155b5c94c1de4590adfd9e68642af6fb119be7c7415e7068fab80457946474c7adc3fb73eca86385c394abc735d7234060227ec10c3330a5c980ebddbe1db4afeed8a1b469178e34fb71b986a0228abcd01f07cfe2ffd3441e7c73b8cd2575f365f41bc56255065e4379bc008b54cc4b2e7d2c02a5190e9be2c686814436bc2b235b86e15d0703ce9b3cedf83588374579bcd19f3849596cc9ea2e424b51d96f1dd91ee183171de81ba33") ptrace(0x10, r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8923, &(0x7f0000000000)={'virt_wifi0\x00', @ifru_ivalue=0x21d}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) 5.95143921s ago: executing program 1 (id=288): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000180)={r3}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x7, 0x8, 0x4, 0x0, 0x6, 0x7, 0xfffffe0000000003, 0xfa11, 0xffffffff}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x5658c2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYRES8=r2], 0x80}}, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0xffffffffffffffeb) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a090400000000000000000200000041000480280001800d00010073796e70726f787900000000140002800500010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=@unlock_all, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r7 = semget$private(0x0, 0x3, 0x12) semtimedop(r7, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000000)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) 5.888440322s ago: executing program 4 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x2}, 0xfffe}], 0x1, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x15, 0x0, 0x0, 0x11}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB=',`\x00\x00', @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x2c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) bind$l2tp(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)="b6947817c66d635e5cbd3612b909b85cb3362d525cc651c86951e65d88a59686caebd08e4cd7", 0x26, 0x20000000, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x854) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f080001400000000024000580090001006d657461000000001400028089fe02400000001a08000140000000090900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) 5.790940429s ago: executing program 0 (id=290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x222000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x14008020) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x5, 0x6, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x8) 5.420704551s ago: executing program 3 (id=291): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080200000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.220750756s ago: executing program 3 (id=292): stat(&(0x7f0000001fc0)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000140)=""/83, 0x53}], 0x2, 0xfffffffd, 0x8003) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x2f85) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffd}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe, r1}, 0x38) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000500190001000000080008000700000008001700ff000000050018"], 0x4c}}, 0x14) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) 5.018261935s ago: executing program 2 (id=293): dup(0xffffffffffffffff) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000580)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000002c0)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000300)={0x0, 0xe, 0x1, "0e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x3, 0x800, 0x1}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000200)) close(r0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000002380)={0x34, &(0x7f0000002180)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) 4.333128026s ago: executing program 4 (id=294): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) write(r1, &(0x7f0000000040)="57abfb935bdcf8bb783a2ec45e59a05ff81c70060fa8c8696a", 0x19) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x8001}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={r2, 0x1}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYRES8=r1], 0x80}}], 0x1, 0x4000004) r3 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r4, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80003, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x0, 0x9661}) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r5, 0xffffffffffffffff, 0x0) 3.903402557s ago: executing program 3 (id=295): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/277, @ANYRES64=r3, @ANYBLOB="00000000000000000000000000000000000000000ca28a6617ccb89a3c78ee0fecc24436c2f026a873", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, 0x0) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f00000004c0)={0x0, 0x1, @raw_data=[0x4, 0x3, 0x2, 0x4, 0xfffeffff, 0x8a, 0x3, 0x0, 0x6, 0x6, 0x4, 0x6, 0x4, 0x20, 0x4, 0x8]}) listen(r5, 0x8) r8 = accept4(r5, 0x0, 0x0, 0x80800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x7f}, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001812", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2.754328525s ago: executing program 1 (id=296): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x800000, 'syz0\x00', 0x8000}, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200000000000000, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x80000001, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x7ff, 0x3, 0x0, 0x100000021]}) 2.52702164s ago: executing program 0 (id=297): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000004000000000000000eb0f000085000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xb, &(0x7f0000000200)=""/11, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a6201000102030109022400010000000009040000020338b20009050e0000000000000905b3"], 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006400602843b0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x80000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0x25000, 0x1000, 0xe, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x2000, 0xb, 0x9, 0x8, 0x2, 0x9, 0xa, 0x5, 0xf, 0x3, 0xc7}, {0xd000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x83}, {0x8000000, 0x3000, 0x8, 0x0, 0x40, 0x4f, 0x2, 0xd, 0x6, 0x3}, {0x2, 0xdddd0000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x1}, {0x6000, 0x1000, 0x10, 0x9d, 0x3, 0xfe, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0x8000000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x100000, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x8500, 0xeeef0000, [0xffffffffffffff47, 0x9, 0x8, 0x6]}) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000300)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) 2.482890669s ago: executing program 1 (id=298): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a00)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="8643e0722ab919982e67f95d5baa5c84b1f889d09e9ecb8f136dfc24c061a7575011c9e0c5bcf4815ae83d35efee99431cbbadbf35f3e384be4f44c3edaaac006fc79103b1ec6b3fff1703268741320019800e2b1b246fa7610b4385d05a999baea83c70aa5d236c9735eb38b48651a8664c67bf2132561399a74b8af556c9e97f31b2800c7cc7a77edd34835329526edacb1c1114f099b4f1b68924b208dfedda439c883be3437bf40d1d5f91fb23ed8d17532139efc8e5d85998dbf49b897623fa107142240dee1ac22eebf5897b1ac03fca9210ce637b8d51f6fcaff3445c4b9d03de1532ef"}], 0x0, &(0x7f0000000580)=[@rights={{0x0, 0x1, 0x1, [r3]}}, @cred={{0x0, 0x1, 0x2, {r1, r0}}}], 0x0, 0x10}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)="70864857d413b78be8837d1decccbd66d76d69a659af745737811432b20c1e262b48d23261ecdcae5493903097fdd25576620a1f61f0d6cea876a2f4c650ac163b7168c46e9fc73c2a374eef161b1f710ff41718c0842ee910ae8ce760f1947d288cb4b00a09b823faf01e864293b43f3fd3"}, {&(0x7f00000006c0)="bdc55ee4a9e6b1b4529060c9e7060ce9c2fe4a2f6630b9e4a7b3a40b98d13372536041d702c4048430f507c48057529c9236a280194b98733f42b9ddaf327e6597a4976c96f1c9e9a7167aa438755ca1684c91e1505933a948b29a138041e5bc4510e6ad45a911cd3edf2081dc85d0cc8f5df223ca6469876a6adadc9d2570a8af434af2847648ec62a1e0849022858041fee8727e49364d3c3f451e372ddccac02085ea969d1f3a710c6f9a4f9a0631e84f9f030e42c5"}], 0x0, &(0x7f00000007c0)=[@rights={{0x0, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x0, 0x1, 0x2, {r1, r0}}}, @rights={{0x0, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x0, 0x24040050}}], 0x40000000000006c, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x8, 0x0, 0x7, 0xdb51, 0x8001, 0x8, 0x1ff, 0x2, 0x0, 0xa, 0x1e, 0x18, 0x7, 0x1d0fa844, 0xf1}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 1.85032919s ago: executing program 4 (id=299): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000390400000000000000000f000000", @ANYRES32=r3, @ANYBLOB="01980600000000002000128008000100677265001400028008000700ac1414020500080005000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000001c0)='\x00\x00\x00\b\x00\x00\x00\x00', 0x8, 0x2404c081, &(0x7f00000009c0)={0x11, 0x88a8, r3, 0x1, 0x2, 0x6, @multicast}, 0x14) 1.754013912s ago: executing program 2 (id=300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map, 0xffffffffffffffff, 0x26, 0x4}, 0x20) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=r0], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000740)={0x20, 0x17, 0x1, "e1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="400b11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) unshare(0x4020480) statx(0xffffffffffffff9c, 0x0, 0x0, 0x100, &(0x7f0000000680)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x96, 0x12}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0x2, r6, 0x2, 0x0) 1.519705535s ago: executing program 3 (id=301): sendmmsg(0xffffffffffffffff, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x1a, 0x2000051b) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000008cb06f57300b52b00000109022d00010000402009040029240300030009210900000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, '$\x00'}]}}, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="0f06b984020000b8db8c4ce1ba40005e000f30ecf3450f1eda420f01bcb3a0b3000066baf80cb8bcaff780ef66bafc0ced6726430f07f3400fc7b3bac92abbc4233d5ea98a00004d000f0096d40000000f00d0", 0x53}], 0xaaaabad, 0x14, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x22201, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') read$eventfd(r4, &(0x7f0000000040), 0x8) writev(r4, &(0x7f0000000580)=[{&(0x7f0000000300)="17721af36354361ca53d332f4b172a85c4931b549b61e71442e4eee13aeba37be798826c1bbf2220dcb9bf8f62cedea77688e05687b8fdfeb8d81fafb003f535937709932d64498cbbac582b0dfcc4f813b41e435fea15ae4e6a5ff25c3ae4e8e26439ed3e7826e1e78e047ce7748ec6d2b5ac0b6418f1f1bf9b6513b0fbaf5e2f931d6b42cd84ac3d31f595bbd344fd30389a91c8dafb6c0f75fd4497bcfd4730eafea7", 0xa4}], 0x1) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0xba8, 0x9, 0x0, 0x0, 0x8, 0x0, 0xffff3c38, 0x2, 0x9, 0x8, 0x1, 0xd3, 0x1, 0x7, 0x2, 0x15, {0x10, 0x10}, 0xee, 0x4}}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'nr0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000480)={'ip_vti0\x00', r7, 0x10, 0x8000, 0x3ff, 0x1000, {{0x1e, 0x4, 0x2, 0x31, 0x78, 0x67, 0x0, 0xb7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @local, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @end, @cipso={0x86, 0x29, 0xffffffffffffffff, [{0x6, 0x9, "17ead1c18c6489"}, {0x2, 0x8, "0b4aef20ef48"}, {0x0, 0x8, "889b8e4b1fdf"}, {0x6, 0x8, "b7b66be89856"}, {0x2, 0x2}]}, @lsrr={0x83, 0x13, 0xc9, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @empty]}, @timestamp_prespec={0x44, 0x14, 0xd4, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x43}, 0xe}, {@rand_addr=0x64010100, 0x1}]}, @ssrr={0x89, 0xb, 0x9e, [@empty, @local]}]}}}}}) r8 = socket(0xa, 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000140)={r10, @in6={{0xa, 0x4e24, 0x2, @empty, 0x400}}, 0xc, 0x4000}, &(0x7f0000000080)=0x90) r11 = dup2(r6, r2) ioctl$KVM_RUN(r6, 0xae80, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r12, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) ioctl$KVM_SET_GUEST_DEBUG_x86(r11, 0x4048ae9b, &(0x7f0000000400)={0x40000, 0x0, {[0xfffffffffffffffc, 0xffff, 0x7, 0x5, 0x7, 0xfffffffffffffffc, 0x6, 0x4]}}) 1.337361312s ago: executing program 4 (id=302): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080200000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.1540662s ago: executing program 1 (id=303): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000002c0)="82d8dc45", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="88", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[], 0xa8}}], 0x2, 0xf000040) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea629495, 0x70bd2f, 0x25dfdbff, {0xa, 0x17, 0x20, 0xff}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x200488c0}, 0x20000840) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103b, 0x401000, 0x103a, 0xfffffffc, 0xff, 0x80400000}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xff}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xd}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) connect$netlink(r3, &(0x7f0000000080)=@unspec, 0xc) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@deltfilter={0x740, 0x2d, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xa}, {0x3, 0x7}, {0xd, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x430, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xce}, @TCA_ROUTE4_ACT={0x424, 0x6, [@m_simple={0x1a0, 0xd, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x6, 0x20000000, 0x5, 0x6}}, @TCA_DEF_DATA={0xd, 0x3, '##^!-}]+\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x2968, 0x0, 0x0, 0xfffffffd}}, @TCA_DEF_DATA={0x6, 0x3, '@\x00'}, @TCA_DEF_DATA={0xf, 0x3, '/dev/i2c-#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x80, 0x8, 0x6, 0xb}}, @TCA_DEF_DATA={0x13, 0x3, 'bridge_slave_1\x00'}]}, {0xed, 0x6, "35f49159c4ad649c10bdcf4dfd55484e1bc0989f9f2befcf2acf39a79bf07f818f8a11740b25836d8b1d3c60122ef61450a98e033c2bd0ad216a8eaa5936acf872ca58b0421f08617fa917c0f01070bad25eeb2ba93fe7f2ba9160f1c4d0dd131765476ac1167e28710ed40ea92e65e48a0189b9c5697dc343707c57920f14666f3299ec23dfe2927e61fa32359c31838cf78d5c25abd4084182057d5bed15b8bb25bbee408174bdd06b674bfe7259eb44db984ef7f4666e2c31bc39be41c962a99ec835be13cf9403d463dd91fef94728daa8a1be5ee58d13269defcef6a6ddccbcc35bf7a0683946"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0xdc, 0x9, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5b}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x8}}]}, {0x98, 0x6, "e77ca60503c648e6d124d6a0423e36e60b7996432c4a80745a813d2f569374636ab29f401594bd5b3db0bc4875a160987824593d93c4c8f1073aac710fccf9a1739f2a3769ae8b541205d6f5f9664be9fdda0273060f75cad88d49bb0eb70d95dbe65f877b8106828889be188ea30ddd03b61df4de5e5c3a6853c9bc75fa4d995701acd847335f3245b44ac9517f6d9c04620a01"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0xfae031071c9d815b, 0x1}}}}, @m_bpf={0x1a4, 0x6, 0x0, 0x0, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x9, 0xf8, 0xc, 0x8000}, {0x5, 0x7, 0x4, 0x476}]}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0x9, 0xf, 0x7, 0x4}, {0x1, 0x8, 0x2, 0x3}, {0x0, 0x7, 0x90, 0x61166500}, {0x400, 0x6, 0x78, 0x3}, {0x2, 0x2b, 0x4, 0x1}, {0x2, 0x40, 0xd, 0x7}, {0x4, 0x8, 0x6, 0xd}, {0xa5, 0x47, 0x9}, {0x2, 0x10, 0xd, 0x2d3108ac}, {0x5, 0xd, 0x9, 0xa}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x0, 0x81, 0xcd, 0x1000}, {0x5, 0x3, 0x0, 0x7}, {0x8, 0xc, 0x4, 0xb6e}, {0x9, 0xba, 0x22, 0x200}, {0xbc8a, 0x3, 0x4a}, {0xab6, 0xe, 0xa, 0x2}, {0x6, 0xf, 0x4, 0x5}, {0x5, 0x7, 0x8, 0xc}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x7f, 0x8, 0x4, 0xf40000}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x400, 0xf7d, 0xffffffffffffffff, 0xc0, 0x401}}]}, {0x72, 0x6, "5aa7c85a1c3534fd063bf4dff0a8ad040108f4270879ccd738adcc7fc3cd2608d789a2b047a2d1902a796c08efdc33ea5a3667956d34cbbfbe76da0d36970833e0788ee85193f3409c75f9c5b73b1160d2c27d2a118cdadd6fca4502273cacf67167e6f252b06f876b33b59d89e6"}, {0xc}, {0xc, 0x8, {0x7, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x6}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2c4, 0x2, [@TCA_CGROUP_ACT={0x2c0, 0x1, [@m_mirred={0xf8, 0xd, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x7}, 0x0, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7, 0x8, 0x7, 0x5}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0x10000000, 0x1418, 0xf}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x27c6, 0x10000000, 0x8, 0x200}, 0x3, r7}}]}, {0x49, 0x6, "245532d529b4d59bd99333ef9945e1e6111ff401574167ada20cbc42ed3b80becc104317a9aa71e948fa7e5184b2a5d5e1ba707b51a97447f440765d9e4c7ae2e61d5dd949"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x12c, 0x16, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0xed, 0x6, "0398ebf2d833702f3fdfd61725d3be86a47d519bcbd0998b21c32cb83edbc11c4440303ec1ca277c84ffdafbba88131310ade56695d3dcc3bcc87924667906075346f6458806ab39427df9a421d4f7d16147c33cc76fb268f8993c867322795493e006a379cc5f79e5b09b081e5b4baec457597bad1dc052c6780d2e650544ebef9dba8e10873ee8f6e55d4f96bdc4780c7d8d2501da4f1bdddfb378314f9d45ab3f9dbb7c24d251c051e08da37029255a5b511401ddb762bb98df4596ab9b83a136e7c5843fcc9355a4c80dfe94d1f924a20f6a15be3920838334b3db12a7e053cbe432127fcc110e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x98, 0x4, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x5, 0x8, 0x3, 0x9}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}]}, {0xd, 0x6, "887f66e72d885e5e4c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x740}}, 0x40004) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r8 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000240)}], 0x1) 890.088043ms ago: executing program 4 (id=304): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) (async) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0xf00, 0x300, 0x690, 0x4b0, 0xbbba, 0x0, 0x4, 0x0, {0x4, 0x6}, {0x2, 0x2}, {0x0, 0x3, 0x20}, {0x1, 0x8, 0x1}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x6, 0x0, 0x102, 0x1, 0x20, 0x1, 0x8}) 413.181245ms ago: executing program 4 (id=305): stat(&(0x7f0000001fc0)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000140)=""/83, 0x53}], 0x2, 0xfffffffd, 0x8003) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet6(0xa, 0x2, 0x2f85) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffd}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe, r1}, 0x38) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000500190001000000080008000700000008001700ff000000050018"], 0x4c}}, 0x14) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) 0s ago: executing program 1 (id=306): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000340)=0x10001, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES64=r0, @ANYRES32=r0, @ANYRES32=r0], 0x48) syz_usb_connect$cdc_ecm(0x5, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010003020000102505a1a440000102030109024c00010109d0050500001202020600840524060000052400030000000f01030000000700070009042413fa042413f7090581034000090200090582022000fe730309050302002ad3566a00000000eaee7f8cf79b3cfd088a32884b434ab8a64f49927035ee4b45fac5c292dafe1688296ef3378a0280a33a3bff29790ad5bba5c4b8f7f42faf74e37ce695d5d5ab1076086ff5e3963a30ca899800"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x8, @private=0xa010102, 0x4e21, 0x4, 'ovf\x00', 0x28, 0x7ff, 0x6c}, 0x2c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 79.870242][ T5808] cgroup: Unknown subsys name 'net' [ 80.012431][ T5808] cgroup: Unknown subsys name 'cpuset' [ 80.021821][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.619910][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.819912][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.832380][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.848121][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.856302][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.863998][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.871583][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.880661][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.887969][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.896230][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.903619][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.912191][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.921398][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.929985][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.935802][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.941075][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.951634][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.960099][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.968675][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.996704][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.006997][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.038109][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.047319][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.060028][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.070335][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.080195][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.660574][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 84.738072][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 84.802072][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 84.980914][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 85.002756][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 85.037951][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.046181][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.053414][ T5835] bridge_slave_0: entered allmulticast mode [ 85.060935][ T5835] bridge_slave_0: entered promiscuous mode [ 85.106541][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.113797][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.121140][ T5835] bridge_slave_1: entered allmulticast mode [ 85.128699][ T5835] bridge_slave_1: entered promiscuous mode [ 85.155927][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.163148][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.170387][ T5839] bridge_slave_0: entered allmulticast mode [ 85.177709][ T5839] bridge_slave_0: entered promiscuous mode [ 85.222704][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.230530][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.237783][ T5834] bridge_slave_0: entered allmulticast mode [ 85.245469][ T5834] bridge_slave_0: entered promiscuous mode [ 85.254543][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.262798][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.270984][ T5834] bridge_slave_1: entered allmulticast mode [ 85.279273][ T5834] bridge_slave_1: entered promiscuous mode [ 85.286446][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.294215][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.301731][ T5839] bridge_slave_1: entered allmulticast mode [ 85.309696][ T5839] bridge_slave_1: entered promiscuous mode [ 85.404589][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.434062][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.457221][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.484379][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.496795][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.506668][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.514653][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.521939][ T5836] bridge_slave_0: entered allmulticast mode [ 85.529411][ T5836] bridge_slave_0: entered promiscuous mode [ 85.558585][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.578082][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.585538][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.593254][ T5836] bridge_slave_1: entered allmulticast mode [ 85.600811][ T5836] bridge_slave_1: entered promiscuous mode [ 85.610031][ T5835] team0: Port device team_slave_0 added [ 85.673457][ T5835] team0: Port device team_slave_1 added [ 85.679417][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.686607][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.694000][ T5837] bridge_slave_0: entered allmulticast mode [ 85.701444][ T5837] bridge_slave_0: entered promiscuous mode [ 85.709506][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.716616][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.723940][ T5837] bridge_slave_1: entered allmulticast mode [ 85.731573][ T5837] bridge_slave_1: entered promiscuous mode [ 85.740855][ T5839] team0: Port device team_slave_0 added [ 85.762052][ T5834] team0: Port device team_slave_0 added [ 85.806259][ T5839] team0: Port device team_slave_1 added [ 85.825789][ T5834] team0: Port device team_slave_1 added [ 85.834453][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.845051][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.852412][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.878693][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.907430][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.919710][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.941995][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.961335][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.968638][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.994998][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.001096][ T5826] Bluetooth: hci0: command tx timeout [ 86.058365][ T5831] Bluetooth: hci2: command tx timeout [ 86.058697][ T5824] Bluetooth: hci3: command tx timeout [ 86.064514][ T5826] Bluetooth: hci1: command tx timeout [ 86.074314][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.082440][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.108752][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.131436][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.140345][ T5826] Bluetooth: hci4: command tx timeout [ 86.140357][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.140384][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.186042][ T5836] team0: Port device team_slave_0 added [ 86.195099][ T5836] team0: Port device team_slave_1 added [ 86.202807][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.210119][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.237144][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.250925][ T5837] team0: Port device team_slave_0 added [ 86.257301][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.264314][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.290309][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.334461][ T5837] team0: Port device team_slave_1 added [ 86.347575][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.354690][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.380858][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.432875][ T5835] hsr_slave_0: entered promiscuous mode [ 86.439633][ T5835] hsr_slave_1: entered promiscuous mode [ 86.447881][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.455108][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.481084][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.562354][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.569573][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.595577][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.632703][ T5839] hsr_slave_0: entered promiscuous mode [ 86.639319][ T5839] hsr_slave_1: entered promiscuous mode [ 86.645711][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 86.651981][ T5839] Cannot create hsr debugfs directory [ 86.670125][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.677143][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.703361][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.720385][ T5834] hsr_slave_0: entered promiscuous mode [ 86.726911][ T5834] hsr_slave_1: entered promiscuous mode [ 86.733349][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 86.739578][ T5834] Cannot create hsr debugfs directory [ 86.775946][ T5836] hsr_slave_0: entered promiscuous mode [ 86.789458][ T5836] hsr_slave_1: entered promiscuous mode [ 86.795794][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 86.802356][ T5836] Cannot create hsr debugfs directory [ 86.980465][ T5837] hsr_slave_0: entered promiscuous mode [ 86.987138][ T5837] hsr_slave_1: entered promiscuous mode [ 86.993856][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 86.999939][ T5837] Cannot create hsr debugfs directory [ 87.532659][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.546347][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.556903][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.568954][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.634715][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.663108][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.695030][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.715099][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.761148][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.777083][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.792183][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.823176][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.905386][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.919825][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.951001][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.963713][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.982184][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.058485][ T5826] Bluetooth: hci0: command tx timeout [ 88.073372][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.084822][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.106984][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.132163][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.139477][ T5826] Bluetooth: hci3: command tx timeout [ 88.139500][ T5824] Bluetooth: hci1: command tx timeout [ 88.146061][ T5831] Bluetooth: hci2: command tx timeout [ 88.161992][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.175459][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.182746][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.219233][ T5826] Bluetooth: hci4: command tx timeout [ 88.231474][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.238687][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.276805][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.374115][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.411706][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.418924][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.435182][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.456925][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.464122][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.514116][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.535236][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.570566][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.594491][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.601687][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.628925][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.636076][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.651653][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.666572][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.725321][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.732512][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.752132][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.764770][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.771971][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.816558][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.823745][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.843966][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.863623][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.870795][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.896720][ T5835] veth0_vlan: entered promiscuous mode [ 88.967602][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.984317][ T5835] veth1_vlan: entered promiscuous mode [ 89.051743][ T5839] veth0_vlan: entered promiscuous mode [ 89.105586][ T5839] veth1_vlan: entered promiscuous mode [ 89.142214][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.165671][ T5834] veth0_vlan: entered promiscuous mode [ 89.182659][ T5834] veth1_vlan: entered promiscuous mode [ 89.201449][ T5835] veth0_macvtap: entered promiscuous mode [ 89.212412][ T5835] veth1_macvtap: entered promiscuous mode [ 89.235534][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.272876][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.294422][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.320146][ T5839] veth0_macvtap: entered promiscuous mode [ 89.339306][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.351612][ T1326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.366299][ T5834] veth0_macvtap: entered promiscuous mode [ 89.381587][ T1326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.390628][ T1326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.400997][ T5839] veth1_macvtap: entered promiscuous mode [ 89.409931][ T5834] veth1_macvtap: entered promiscuous mode [ 89.437368][ T5836] veth0_vlan: entered promiscuous mode [ 89.484867][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.500228][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.508054][ T5836] veth1_vlan: entered promiscuous mode [ 89.521625][ T5837] veth0_vlan: entered promiscuous mode [ 89.541000][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.553988][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.594615][ T5837] veth1_vlan: entered promiscuous mode [ 89.615829][ T1150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.625722][ T1150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.663188][ T1150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.672305][ T1150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.696279][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.705373][ T1150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.714669][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.723685][ T1150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.756410][ T1150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.769885][ T1150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.779404][ T5836] veth0_macvtap: entered promiscuous mode [ 89.803550][ T5836] veth1_macvtap: entered promiscuous mode [ 89.841950][ T5837] veth0_macvtap: entered promiscuous mode [ 89.866241][ T5837] veth1_macvtap: entered promiscuous mode [ 89.893822][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.902895][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.951183][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.964216][ T884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.983542][ T884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.017009][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.032295][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.045118][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.074226][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.113528][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.135841][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.145475][ T5826] Bluetooth: hci0: command tx timeout [ 90.145840][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.160323][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.179834][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.189006][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.195528][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.206460][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.219422][ T5826] Bluetooth: hci3: command tx timeout [ 90.224885][ T5831] Bluetooth: hci2: command tx timeout [ 90.224896][ T5824] Bluetooth: hci1: command tx timeout [ 90.291558][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.307978][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.310816][ T5831] Bluetooth: hci4: command tx timeout [ 90.346197][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.355147][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.367644][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.379074][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.656361][ T5926] bus_add_driver: failed to create module links for raw-gadget.1 [ 90.717474][ T5926] UDC core: USB Raw Gadget: driver registration failed: -2 [ 90.726587][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.768659][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -2 [ 90.793732][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.796259][ T30] audit: type=1326 audit(1772566517.986:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.3.7" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd50f59c799 code=0x0 [ 90.831506][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.864512][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.879575][ T5931] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 90.905247][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.988486][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.017453][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.087362][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.125611][ T5939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.335610][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.368832][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.439022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.578203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.642020][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 91.748701][ T29] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 91.908422][ T29] usb 2-1: Invalid ep0 maxpacket: 32 [ 91.913208][ T9] cfg80211: failed to load regulatory.db [ 92.083056][ T29] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 92.119296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.188812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.218745][ T5831] Bluetooth: hci0: command tx timeout [ 92.248634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.257317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.267638][ T29] usb 2-1: Invalid ep0 maxpacket: 32 [ 92.267727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.284455][ T29] usb usb2-port1: attempt power cycle [ 92.325924][ T5831] Bluetooth: hci3: command tx timeout [ 92.331408][ T5831] Bluetooth: hci1: command tx timeout [ 92.363530][ T5831] Bluetooth: hci2: command tx timeout [ 92.379295][ T5824] Bluetooth: hci4: command tx timeout [ 92.693416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 92.758406][ T29] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 92.790341][ T29] usb 2-1: Invalid ep0 maxpacket: 32 [ 92.838627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.104546][ T29] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 93.165681][ T29] usb 2-1: Invalid ep0 maxpacket: 32 [ 93.171941][ T29] usb usb2-port1: unable to enumerate USB device [ 93.239436][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 93.284323][ T6005] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.301560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.388675][ T9] usb 1-1: device descriptor read/64, error -71 [ 93.638464][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 93.780399][ T9] usb 1-1: device descriptor read/64, error -71 [ 93.889173][ T9] usb usb1-port1: attempt power cycle [ 94.228377][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 94.259913][ T9] usb 1-1: device descriptor read/8, error -71 [ 94.498357][ T5913] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 94.518338][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 94.651729][ T9] usb 1-1: device descriptor read/8, error -71 [ 94.670272][ T6041] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.703805][ T5906] IPVS: starting estimator thread 0... [ 94.737940][ T5913] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 94.747496][ T5913] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 94.763154][ T9] usb usb1-port1: unable to enumerate USB device [ 94.963339][ T5913] usb 4-1: config 0 has no interface number 0 [ 94.971234][ T6045] IPVS: using max 27 ests per chain, 64800 per kthread [ 94.999872][ T5913] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 95.028306][ T5913] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 95.060925][ T5913] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 95.085490][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.144029][ T5913] usb 4-1: config 0 descriptor?? [ 95.354249][ T6061] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.402988][ T5913] usb 4-1: USB disconnect, device number 2 [ 95.657017][ T6078] loop5: detected capacity change from 0 to 7 [ 95.691063][ T30] audit: type=1326 audit(1772566522.876:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 95.726397][ T6078] Dev loop5: unable to read RDB block 7 [ 95.757383][ T6078] loop5: unable to read partition table [ 95.782589][ T6078] loop5: partition table beyond EOD, truncated [ 95.802472][ T30] audit: type=1326 audit(1772566522.876:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 95.882269][ T6077] mmap: syz.2.24 (6077) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.991803][ T6078] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 96.026731][ T30] audit: type=1326 audit(1772566522.876:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 96.091774][ T30] audit: type=1326 audit(1772566522.876:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 96.127886][ T30] audit: type=1326 audit(1772566522.876:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 96.204205][ T30] audit: type=1326 audit(1772566522.876:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 96.229848][ T5878] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.352630][ T30] audit: type=1326 audit(1772566522.876:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 96.386496][ T30] audit: type=1326 audit(1772566522.876:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 96.428422][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 96.440882][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.461548][ T5878] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.482676][ T5878] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 96.493191][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.564365][ T6113] netlink: 36 bytes leftover after parsing attributes in process `syz.0.27'. [ 96.586240][ T30] audit: type=1326 audit(1772566522.876:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 96.609344][ T5878] usb 3-1: Product: syz [ 96.613560][ T5878] usb 3-1: Manufacturer: syz [ 96.618189][ T5878] usb 3-1: SerialNumber: syz [ 96.887976][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.28'. [ 96.974381][ T30] audit: type=1326 audit(1772566522.876:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 97.013463][ T5878] usb 3-1: config 0 descriptor?? [ 97.130304][ T30] audit: type=1326 audit(1772566522.876:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 97.859681][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 97.868957][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.31'. [ 97.878800][ T6134] Zero length message leads to an empty skb [ 98.358673][ T5955] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.628816][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 98.669595][ T5955] usb 4-1: config 0 has no interfaces? [ 98.718008][ T5955] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 98.757691][ T5955] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 98.792170][ T5955] usb 4-1: Manufacturer: syz [ 98.795991][ T9] usb 3-1: USB disconnect, device number 2 [ 98.841313][ T5955] usb 4-1: config 0 descriptor?? [ 99.829605][ T5955] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.010226][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 100.018063][ T5955] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 100.037239][ T6194] fuse: Bad value for 'fd' [ 100.129488][ T5955] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 100.178363][ T5955] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 100.260292][ T5955] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 100.307882][ T5955] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 100.349265][ T5955] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 100.421847][ T5955] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.431645][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 100.463246][ T5955] usb 5-1: SerialNumber: syz [ 100.517926][ T6180] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 100.548583][ T6180] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 100.764361][ T9] usb 5-1: USB disconnect, device number 3 [ 101.086258][ T6223] loop5: detected capacity change from 0 to 7 [ 101.131036][ T6223] Dev loop5: unable to read RDB block 7 [ 101.147455][ T9] usb 4-1: USB disconnect, device number 3 [ 101.167257][ T6223] loop5: unable to read partition table [ 101.236759][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 101.236777][ T30] audit: type=1326 audit(1772566528.426:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 101.269014][ T6223] loop5: partition table beyond EOD, truncated [ 101.277810][ T6223] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 101.403004][ T30] audit: type=1326 audit(1772566528.426:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 101.521672][ T30] audit: type=1326 audit(1772566528.426:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 101.545950][ T30] audit: type=1326 audit(1772566528.426:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 101.570394][ T30] audit: type=1326 audit(1772566528.426:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 101.600044][ T30] audit: type=1326 audit(1772566528.426:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 101.718753][ T30] audit: type=1326 audit(1772566528.426:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 101.718813][ T30] audit: type=1326 audit(1772566528.426:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 101.718864][ T30] audit: type=1326 audit(1772566528.516:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 101.718924][ T30] audit: type=1326 audit(1772566528.516:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ea39c799 code=0x7ffc0000 [ 101.827684][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.983294][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 101.994152][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.994180][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.001944][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 102.001978][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.001992][ T9] usb 3-1: Product: syz [ 102.002003][ T9] usb 3-1: Manufacturer: syz [ 102.002013][ T9] usb 3-1: SerialNumber: syz [ 102.005821][ T9] usb 3-1: config 0 descriptor?? [ 102.238370][ T5913] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.418344][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 102.420606][ T5913] usb 1-1: config 0 has no interfaces? [ 102.429899][ T5913] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 102.429927][ T5913] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 102.429941][ T5913] usb 1-1: Manufacturer: syz [ 102.434075][ T5913] usb 1-1: config 0 descriptor?? [ 103.360103][ T6305] loop5: detected capacity change from 0 to 7 [ 103.379605][ T6305] loop5: p1 < > p4 [ 103.386253][ T6305] loop5: partition table partially beyond EOD, truncated [ 103.624559][ T5877] udevd[5877]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 103.662174][ T6089] udevd[6089]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 104.518374][ T5878] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.678937][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 104.713955][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 104.769183][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.808988][ T5955] usb 1-1: USB disconnect, device number 6 [ 104.831792][ T5878] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 255 [ 104.844678][ T5878] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 104.887620][ T5878] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 104.908809][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.933043][ T5878] usb 2-1: Product: syz [ 104.954434][ T5878] usb 2-1: Manufacturer: syz [ 104.986009][ T5878] usb 2-1: SerialNumber: syz [ 105.042436][ T6325] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 105.133197][ T5913] usb 3-1: USB disconnect, device number 3 [ 105.271827][ T6325] kernel profiling enabled (shift: 9) [ 105.329175][ T5878] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.344658][ T29] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.407029][ T6372] loop5: detected capacity change from 0 to 7 [ 105.450754][ T6372] Dev loop5: unable to read RDB block 7 [ 105.466672][ T6372] loop5: unable to read partition table [ 105.492262][ T6372] loop5: partition table beyond EOD, truncated [ 105.512157][ T6372] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 105.526804][ T29] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 105.568030][ T29] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 105.584168][ T29] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 48 [ 105.603743][ T5878] usb 2-1: USB disconnect, device number 6 [ 105.638910][ T29] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 105.674632][ T29] usb 1-1: config 0 has no interface number 0 [ 105.680963][ T29] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30 [ 105.692729][ T29] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 105.696040][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.726882][ T29] usb 1-1: config 0 interface 255 has no altsetting 0 [ 105.739567][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.779216][ T29] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 105.801383][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.835720][ T29] usb 1-1: config 0 descriptor?? [ 105.860177][ T29] usb-storage 1-1:0.255: USB Mass Storage device detected [ 105.893813][ T29] usb-storage 1-1:0.255: Quirks match for vid 1908 pid 1315: 20000 [ 105.910177][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 105.954217][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 105.988884][ T6418] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 105.996743][ T6418] netlink: 'syz.1.57': attribute type 2 has an invalid length. [ 106.004542][ T6418] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 106.017954][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 106.041761][ T6418] netlink: 'syz.1.57': attribute type 3 has an invalid length. [ 106.071910][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 106.097540][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 106.107531][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.115730][ T9] usb 5-1: Product: syz [ 106.123820][ T9] usb 5-1: Manufacturer: syz [ 106.127978][ T29] usb 1-1: USB disconnect, device number 7 [ 106.128565][ T9] usb 5-1: SerialNumber: syz [ 106.149159][ T9] usb 5-1: config 0 descriptor?? [ 106.159603][ T6384] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.171193][ T9] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 106.431157][ T3095] usb 5-1: USB disconnect, device number 4 [ 106.458598][ T5878] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.666782][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 106.693114][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 106.707963][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 106.738307][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 106.879506][ T5878] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 106.888784][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.900999][ T5878] usb 3-1: Product: syz [ 106.933631][ T5878] usb 3-1: Manufacturer: syz [ 107.028451][ T5878] usb 3-1: SerialNumber: syz [ 107.107896][ T5878] usb 3-1: config 0 descriptor?? [ 107.275242][ T6472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.300145][ T6472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.964546][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.61'. [ 108.249513][ T5878] radioshark 3-1:0.0: Invalid radioSHARK device [ 108.276255][ T5878] radioshark 3-1:0.0: probe with driver radioshark failed with error -22 [ 108.306187][ T5878] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 108.482029][ T6419] netlink: 'syz.2.55': attribute type 2 has an invalid length. [ 109.820302][ T5906] usb 3-1: USB disconnect, device number 4 [ 109.896226][ T6419] @;: entered promiscuous mode [ 110.194058][ T6522] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 110.486671][ T6532] veth1_to_batadv: entered promiscuous mode [ 110.524870][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 110.566425][ T6530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.67'. [ 111.468714][ T5906] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.658795][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.666430][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 111.691372][ T5906] usb 3-1: config 0 has no interfaces? [ 111.698680][ T5906] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 111.708336][ T5906] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 111.716384][ T5906] usb 3-1: Manufacturer: syz [ 111.785404][ T5906] usb 3-1: config 0 descriptor?? [ 111.842362][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 112.397510][ T6587] netlink: 'syz.1.72': attribute type 10 has an invalid length. [ 112.927034][ T6591] fuse: Unknown parameter 'S' [ 113.079018][ T6587] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 113.102797][ T6586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.618380][ T5913] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.791846][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.803870][ T5913] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.840158][ T5913] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 113.880725][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.935720][ T5913] usb 1-1: Product: syz [ 113.951360][ T5913] usb 1-1: Manufacturer: syz [ 113.990195][ T5913] usb 1-1: SerialNumber: syz [ 114.042815][ T5878] usb 3-1: USB disconnect, device number 5 [ 114.242959][ T6599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.255224][ T6619] tc_dump_action: action bad kind [ 114.418934][ T6599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.583661][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 114.600019][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 114.607922][ T9] usb 5-1: can't read configurations, error -71 [ 114.623793][ T5913] pxrc 1-1:1.0: Could not find endpoint [ 114.656209][ T5913] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 114.691460][ T5913] usb 1-1: USB disconnect, device number 8 [ 115.018719][ T6663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.78'. [ 115.422671][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.84'. [ 115.446842][ T6669] kvm: pic: single mode not supported [ 115.446926][ T6669] kvm: pic: level sensitive irq not supported [ 115.463509][ T6669] kvm: pic: level sensitive irq not supported [ 115.540222][ T6669] kvm: pic: single mode not supported [ 115.563526][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 116.160594][ T6704] loop5: detected capacity change from 0 to 7 [ 116.180206][ T6704] loop5: p1 < > p4 [ 116.207384][ T6704] loop5: partition table partially beyond EOD, truncated [ 116.482687][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.87'. [ 117.018720][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.202601][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 117.233484][ T9] usb 5-1: config 0 has no interfaces? [ 117.307382][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 117.340814][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.408460][ T9] usb 5-1: Manufacturer: syz [ 117.669093][ T5913] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 117.736152][ T9] usb 5-1: config 0 descriptor?? [ 117.838328][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 118.178178][ T6780] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 120.061121][ T6805] trusted_key: syz.3.96 sent an empty control message without MSG_MORE. [ 120.215866][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.264348][ T5913] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 120.278042][ T5913] usb 1-1: can't read configurations, error -71 [ 120.417102][ T24] usb 5-1: USB disconnect, device number 7 [ 120.492781][ T6825] loop5: detected capacity change from 0 to 7 [ 120.502315][ T6825] loop5: p1 < > p4 [ 120.506178][ T6825] loop5: partition table partially beyond EOD, truncated [ 120.620397][ T6824] dlm: plock device version mismatch: kernel (1.2.0), user (33555714.2.0) [ 121.130010][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 121.130030][ T30] audit: type=1326 audit(1772566548.326:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 121.418495][ T30] audit: type=1326 audit(1772566548.326:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 121.442005][ T30] audit: type=1326 audit(1772566548.326:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 121.499229][ T6843] netlink: 'syz.3.101': attribute type 2 has an invalid length. [ 121.571429][ T30] audit: type=1326 audit(1772566548.326:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 121.746879][ T30] audit: type=1326 audit(1772566548.376:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 121.819649][ T30] audit: type=1326 audit(1772566548.376:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fce8f39c502 code=0x7ffc0000 [ 121.925998][ T30] audit: type=1326 audit(1772566548.376:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fce8f39c597 code=0x7ffc0000 [ 121.962424][ T30] audit: type=1326 audit(1772566548.376:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fce8f359491 code=0x7ffc0000 [ 122.082043][ T24] IPVS: starting estimator thread 0... [ 122.157727][ T30] audit: type=1326 audit(1772566548.376:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fce8f39d589 code=0x7ffc0000 [ 122.208502][ T6853] IPVS: using max 31 ests per chain, 74400 per kthread [ 122.225712][ T30] audit: type=1326 audit(1772566548.456:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fce8f3594fb code=0x7ffc0000 [ 122.376939][ T6843] !: entered promiscuous mode [ 123.300569][ T6907] syzkaller0: entered promiscuous mode [ 123.306126][ T6907] syzkaller0: entered allmulticast mode [ 123.797782][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'. [ 124.366284][ T6940] loop5: detected capacity change from 0 to 7 [ 124.374517][ T6940] loop5: p1 < > p4 [ 124.438552][ T6940] loop5: partition table partially beyond EOD, truncated [ 124.492765][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.678416][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 124.929595][ T24] usb 2-1: config 0 has no interfaces? [ 125.007709][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 125.068649][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 125.138303][ T24] usb 2-1: Manufacturer: syz [ 125.176145][ T24] usb 2-1: config 0 descriptor?? [ 125.733990][ T10] IPVS: starting estimator thread 0... [ 125.828568][ T7009] IPVS: using max 28 ests per chain, 67200 per kthread [ 126.288469][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 126.467599][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 126.479713][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 126.495568][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 126.528405][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 126.586728][ T24] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 126.617240][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.650616][ T24] usb 1-1: Product: syz [ 126.672844][ T24] usb 1-1: Manufacturer: syz [ 126.697771][ T24] usb 1-1: SerialNumber: syz [ 126.756316][ T24] usb 1-1: config 0 descriptor?? [ 126.904665][ T24] radioshark 1-1:0.0: Invalid radioSHARK device [ 126.925596][ T24] radioshark 1-1:0.0: probe with driver radioshark failed with error -22 [ 126.945135][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 126.974890][ T7037] netlink: 'syz.3.123': attribute type 2 has an invalid length. [ 127.211746][ T7015] netlink: 'syz.0.119': attribute type 2 has an invalid length. [ 127.250080][ T7015] @;: entered promiscuous mode [ 127.853819][ T24] usb 1-1: USB disconnect, device number 11 [ 127.947530][ T3095] usb 2-1: USB disconnect, device number 7 [ 128.443816][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 128.443832][ T30] audit: type=1326 audit(1772566555.626:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77999c799 code=0x7ffc0000 [ 128.620240][ T30] audit: type=1326 audit(1772566555.626:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa77999c799 code=0x7ffc0000 [ 129.091016][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.298324][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 129.298393][ T30] audit: type=1326 audit(1772566555.626:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77999c799 code=0x7ffc0000 [ 129.427026][ T30] audit: type=1326 audit(1772566555.626:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77999c799 code=0x7ffc0000 [ 129.538524][ T30] audit: type=1326 audit(1772566555.706:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77999c799 code=0x7ffc0000 [ 129.561036][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.618868][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.635321][ T7096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.126'. [ 129.800699][ T30] audit: type=1326 audit(1772566555.706:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77999c799 code=0x7ffc0000 [ 129.880400][ T30] audit: type=1326 audit(1772566555.886:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa77999c799 code=0x7ffc0000 [ 129.976708][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 130.003071][ T30] audit: type=1326 audit(1772566555.936:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77999c799 code=0x7ffc0000 [ 130.116628][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.162888][ T24] usb 2-1: Product: syz [ 130.181134][ T24] usb 2-1: Manufacturer: syz [ 130.181146][ T30] audit: type=1326 audit(1772566555.936:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77999c799 code=0x7ffc0000 [ 130.181235][ T30] audit: type=1326 audit(1772566556.146:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa77999c799 code=0x7ffc0000 [ 130.185791][ T24] usb 2-1: SerialNumber: syz [ 130.248354][ T29] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 130.356585][ T24] usb 2-1: config 0 descriptor?? [ 130.479177][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 130.708531][ T5878] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.878322][ T5878] usb 4-1: device descriptor read/64, error -71 [ 131.258390][ T5878] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.418610][ T5878] usb 4-1: device descriptor read/64, error -71 [ 131.565376][ T5878] usb usb4-port1: attempt power cycle [ 131.938368][ T5878] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 131.961490][ T5878] usb 4-1: device descriptor read/8, error -71 [ 132.211287][ T5878] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 132.239453][ T5878] usb 4-1: device descriptor read/8, error -71 [ 132.469097][ T5878] usb usb4-port1: unable to enumerate USB device [ 132.667296][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.675988][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.838892][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.875907][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.887680][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.894952][ T29] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 132.963892][ T10] usb 2-1: USB disconnect, device number 8 [ 133.030239][ T5906] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.057480][ T29] usb 1-1: can't read configurations, error -71 [ 133.278372][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 133.312394][ T5906] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 133.321293][ T5906] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 133.379231][ T5906] usb 3-1: config 127 has no interface number 1 [ 133.388353][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.423985][ T5906] usb 3-1: config 127 interface 171 has no altsetting 0 [ 133.461980][ T5906] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 133.474601][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.486885][ T5906] usb 3-1: Product: syz [ 133.505342][ T5906] usb 3-1: Manufacturer: syz [ 133.524043][ T5906] usb 3-1: SerialNumber: syz [ 133.587784][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 133.624022][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.639317][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.665745][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 133.746427][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 133.803513][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.871287][ T10] usb 2-1: config 0 descriptor?? [ 134.163020][ T7236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'. [ 134.679545][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.687499][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.841615][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0001/input/input6 [ 134.954201][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0001/input/input7 [ 135.389418][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.464812][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.810092][ T10] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.04 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 136.183455][ T10] usb 2-1: USB disconnect, device number 9 [ 136.565834][ T5906] xr_serial 3-1:127.171: xr_serial converter detected [ 136.642205][ T5906] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 136.742492][ T5906] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 136.769705][ T5906] usb 3-1: USB disconnect, device number 6 [ 136.832087][ T5906] xr_serial 3-1:127.171: device disconnected [ 136.885686][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.934645][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.998960][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.035291][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.496194][ T5906] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.509263][ T7336] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 137.522606][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 137.648948][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 137.656694][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 137.674455][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 137.713205][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 137.755532][ T5906] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 137.767402][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.783510][ T5906] usb 3-1: Product: syz [ 137.801356][ T5906] usb 3-1: Manufacturer: syz [ 137.812049][ T5906] usb 3-1: SerialNumber: syz [ 137.847464][ T5906] usb 3-1: config 0 descriptor?? [ 137.868944][ T5906] radioshark 3-1:0.0: Invalid radioSHARK device [ 137.883357][ T5906] radioshark 3-1:0.0: probe with driver radioshark failed with error -22 [ 137.896303][ T5906] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 138.108187][ T7358] loop5: detected capacity change from 0 to 7 [ 138.116352][ T7358] loop5: p1 < > p4 [ 138.120351][ T7358] loop5: partition table partially beyond EOD, truncated [ 138.158352][ T5906] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 138.218294][ T7329] netlink: 'syz.2.144': attribute type 2 has an invalid length. [ 138.348430][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 138.355945][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.365302][ T5906] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 138.377594][ T5906] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.417146][ T5906] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.433134][ T5906] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.474928][ T5892] usb 3-1: USB disconnect, device number 7 [ 138.544512][ T5906] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.588319][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.611283][ T5906] usb 1-1: Product: syz [ 138.615555][ T5906] usb 1-1: Manufacturer: syz [ 138.670946][ T5906] usb 1-1: SerialNumber: syz [ 138.772326][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'. [ 139.048367][ T5878] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.168339][ T5892] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 139.211971][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 139.246785][ T5878] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 139.266215][ T5878] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 139.284853][ T5878] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.330486][ T5878] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 139.346772][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 139.357267][ T7345] netlink: 'syz.0.149': attribute type 2 has an invalid length. [ 139.373102][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 139.378912][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 139.392700][ T5892] usb 2-1: config 0 has no interfaces? [ 139.401504][ T5892] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.411178][ T5878] usb 4-1: Product: syz [ 139.416413][ T5892] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.426569][ T5892] usb 2-1: Manufacturer: syz [ 139.427429][ T5878] usb 4-1: Manufacturer: syz [ 139.445430][ T5878] usb 4-1: SerialNumber: syz [ 139.465728][ T5892] usb 2-1: config 0 descriptor?? [ 139.504353][ T5878] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8 [ 139.684854][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.765021][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.782239][ T5878] usb 4-1: USB disconnect, device number 8 [ 139.782310][ C0] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 139.835455][ T5878] appletouch 4-1:1.0: input: appletouch disconnected [ 140.048601][ T5906] usb 1-1: USB disconnect, device number 14 [ 140.286276][ T6411] udevd[6411]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.569372][ T5906] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 140.738673][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 140.767170][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.837767][ T5906] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 140.970550][ T5906] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 141.017273][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.083816][ T5906] usb 1-1: Product: syz [ 141.134950][ T5906] usb 1-1: Manufacturer: syz [ 141.183784][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 141.183802][ T30] audit: type=1326 audit(1772566568.356:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 141.243888][ T5906] usb 1-1: SerialNumber: syz [ 141.284178][ T5906] usb 1-1: config 0 descriptor?? [ 141.367088][ T7514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.159'. [ 141.419736][ T30] audit: type=1326 audit(1772566568.376:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 141.612403][ T7468] netlink: 'syz.0.154': attribute type 2 has an invalid length. [ 141.648359][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.808312][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 141.866489][ T30] audit: type=1326 audit(1772566568.376:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 141.898623][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.909025][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.928693][ T30] audit: type=1326 audit(1772566568.376:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 141.953975][ T30] audit: type=1326 audit(1772566568.376:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 141.977970][ T30] audit: type=1326 audit(1772566568.376:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 142.012312][ T5878] usb 1-1: USB disconnect, device number 15 [ 142.046597][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 142.070951][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.088118][ T24] usb 5-1: Product: syz [ 142.128675][ T24] usb 5-1: Manufacturer: syz [ 142.133345][ T24] usb 5-1: SerialNumber: syz [ 142.143581][ T30] audit: type=1326 audit(1772566568.376:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 142.212617][ T24] usb 5-1: config 0 descriptor?? [ 142.268364][ T30] audit: type=1326 audit(1772566568.376:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 142.317470][ T30] audit: type=1326 audit(1772566568.376:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 142.532746][ T30] audit: type=1326 audit(1772566568.376:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fce8f39c799 code=0x7ffc0000 [ 142.636381][ T5892] usb 2-1: USB disconnect, device number 10 [ 143.938062][ T7552] loop5: detected capacity change from 0 to 7 [ 143.950540][ T7552] Dev loop5: unable to read RDB block 7 [ 143.961895][ T7552] loop5: unable to read partition table [ 143.967783][ T7552] loop5: partition table beyond EOD, truncated [ 143.979374][ T7552] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 144.098390][ T5906] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 144.278142][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.290870][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.301295][ T5906] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 144.310651][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.347798][ T9] usb 5-1: USB disconnect, device number 8 [ 144.356999][ T5906] usb 2-1: config 0 descriptor?? [ 144.458475][ T5878] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 144.569822][ T7592] loop5: detected capacity change from 0 to 7 [ 144.579430][ T7592] loop5: p1 < > p4 [ 144.583315][ T7592] loop5: partition table partially beyond EOD, truncated [ 144.612631][ T5878] usb 3-1: not running at top speed; connect to a high speed hub [ 144.622278][ T5878] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 144.664830][ T5878] usb 3-1: config 1 interface 0 has no altsetting 0 [ 144.806311][ T5878] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.818295][ T5906] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x2 [ 144.821133][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.848320][ T5878] usb 3-1: Product: Ѝ [ 144.855633][ T5906] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 144.859323][ T5878] usb 3-1: Manufacturer: Ⰹ [ 144.912973][ T5878] usb 3-1: SerialNumber: syz [ 144.930469][ T7565] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 145.164343][ T7565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.189028][ T7565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.308331][ T5878] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 145.333009][ T5878] usb 3-1: USB disconnect, device number 8 [ 145.484006][ T5906] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 145.508818][ T5906] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 145.538966][ T5906] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -71 [ 145.571850][ T5906] usb 2-1: USB disconnect, device number 11 [ 145.662622][ T7639] cgroup: fork rejected by pids controller in /syz4 [ 145.831399][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.172'. [ 146.868463][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 147.118373][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 147.136756][ T24] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 147.181187][ T24] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 147.232636][ T24] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 147.273328][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.313845][ T24] usb 2-1: Product: syz [ 147.332018][ T24] usb 2-1: Manufacturer: syz [ 147.338897][ T24] usb 2-1: SerialNumber: syz [ 147.431530][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.440911][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.449303][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.457456][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.465379][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.707106][ T7674] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 147.718358][ T7674] block device autoloading is deprecated and will be removed. [ 147.786675][ T7711] netlink: 104 bytes leftover after parsing attributes in process `syz.2.178'. [ 148.379094][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 148.541576][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 148.560296][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.582786][ T7705] chnl_net:caif_netlink_parms(): no params data found [ 148.620784][ T24] usb 1-1: config 1 has an invalid descriptor of length 133, skipping remainder of the config [ 148.653696][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.757401][ T24] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 148.766778][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.781634][ T24] usb 1-1: Product: syz [ 148.787072][ T24] usb 1-1: Manufacturer: syz [ 148.793594][ T24] usb 1-1: SerialNumber: syz [ 149.230833][ T24] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 149.610097][ T5824] Bluetooth: hci1: command tx timeout [ 149.685214][ T9] usb 2-1: USB disconnect, device number 12 [ 149.710098][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 149.729937][ T24] usb 1-1: USB disconnect, device number 16 [ 149.733218][ T6411] udevd[6411]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.216130][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.233058][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.352996][ T7705] bridge_slave_0: entered allmulticast mode [ 150.394763][ T7705] bridge_slave_0: entered promiscuous mode [ 150.413291][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.438459][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.445916][ T7705] bridge_slave_1: entered allmulticast mode [ 150.468481][ T7705] bridge_slave_1: entered promiscuous mode [ 150.832833][ T7705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.112708][ T7705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.254641][ T7705] team0: Port device team_slave_0 added [ 151.271543][ T7705] team0: Port device team_slave_1 added [ 151.429181][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.453021][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.657385][ T7953] netlink: 'syz.2.189': attribute type 2 has an invalid length. [ 151.674594][ T5824] Bluetooth: hci1: command tx timeout [ 151.748668][ T7705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.761939][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.775050][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.808529][ T7705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.872444][ T7953] !: entered promiscuous mode [ 151.963370][ T7705] hsr_slave_0: entered promiscuous mode [ 151.972524][ T7705] hsr_slave_1: entered promiscuous mode [ 151.979170][ T7705] debugfs: 'hsr0' already exists in 'hsr' [ 152.083273][ T7705] Cannot create hsr debugfs directory [ 152.991743][ T8058] netlink: 'syz.0.190': attribute type 1 has an invalid length. [ 153.198466][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 153.375434][ T8064] syz_tun: entered allmulticast mode [ 153.388667][ T3095] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 153.426295][ T8066] bond1: (slave gretap1): making interface the new active one [ 153.461055][ T8066] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 153.553516][ T3095] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 153.566527][ T3095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.576471][ T3095] usb 2-1: Product: syz [ 153.598544][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 153.618376][ T3095] usb 2-1: Manufacturer: syz [ 153.635768][ T3095] usb 2-1: SerialNumber: syz [ 153.710878][ T7705] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 153.733183][ T7705] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 153.742675][ T5824] Bluetooth: hci1: command tx timeout [ 153.758878][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 153.767690][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 153.782196][ T24] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 153.798411][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.850850][ T24] usb 3-1: Product: syz [ 153.855089][ T24] usb 3-1: Manufacturer: syz [ 153.870625][ T24] usb 3-1: SerialNumber: syz [ 153.895182][ T7705] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 153.944715][ T7705] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.081225][ T8137] netlink: 16146 bytes leftover after parsing attributes in process `syz.0.193'. [ 154.146733][ T3095] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 154.166350][ T3095] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 154.179030][ T24] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 154.186166][ T24] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 154.194239][ T3095] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 154.209647][ T3095] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 154.223941][ T24] usb 3-1: unable to issue vendor read request (ret = -71) [ 154.232921][ T24] usb 3-1: unable to issue vendor read request (ret = -71) [ 154.245371][ T3095] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 154.274347][ T24] usb 3-1: unable to issue vendor read request (ret = -71) [ 154.284932][ T24] usb 3-1: unable to issue vendor read request (ret = -71) [ 154.295369][ T3095] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 154.338622][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 154.392410][ T24] usb 3-1: USB disconnect, device number 9 [ 154.509616][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 154.523789][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.555665][ T9] usb 1-1: config 0 has no interfaces? [ 154.566559][ T7705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.581668][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 154.599549][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.608132][ T9] usb 1-1: Product: syz [ 154.613322][ T9] usb 1-1: Manufacturer: syz [ 154.618071][ T9] usb 1-1: SerialNumber: syz [ 154.642926][ T9] usb 1-1: config 0 descriptor?? [ 154.704459][ T7705] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.737071][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.744248][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.794930][ T6411] udevd[6411]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.849796][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.856988][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.100947][ T7705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.193802][ T7705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.270119][ T7705] veth0_vlan: entered promiscuous mode [ 155.295126][ T7705] veth1_vlan: entered promiscuous mode [ 155.440185][ T7705] veth0_macvtap: entered promiscuous mode [ 155.470018][ T7705] veth1_macvtap: entered promiscuous mode [ 155.524413][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.555935][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.605297][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.617539][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.636851][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.647327][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.799270][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.817196][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.825429][ T5824] Bluetooth: hci1: command tx timeout [ 155.902142][ T884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.923206][ T884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.125622][ T8187] syz_tun: left allmulticast mode [ 156.148965][ T24] usb 2-1: USB disconnect, device number 13 [ 156.525427][ T8269] loop5: detected capacity change from 0 to 7 [ 156.546293][ T8269] Dev loop5: unable to read RDB block 7 [ 156.555595][ T8269] loop5: unable to read partition table [ 156.564004][ T8269] loop5: partition table beyond EOD, truncated [ 156.578988][ T8269] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 157.038367][ T5913] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 157.191800][ T9] usb 1-1: USB disconnect, device number 17 [ 157.201741][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 157.219864][ T5913] usb 2-1: config 0 has no interfaces? [ 157.229344][ T5913] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 157.239873][ T5913] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 157.247921][ T5913] usb 2-1: Manufacturer: syz [ 157.355650][ T5913] usb 2-1: config 0 descriptor?? [ 157.928602][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 157.938317][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 158.119115][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 158.210408][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 158.217903][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 158.228428][ T9] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 158.270343][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.292745][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 158.304823][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.345405][ T8368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.210'. [ 158.361759][ T9] usb 3-1: Product: syz [ 158.366090][ T9] usb 3-1: Manufacturer: syz [ 158.373054][ T9] usb 3-1: SerialNumber: syz [ 158.400459][ T9] usb 3-1: config 0 descriptor?? [ 159.419443][ T9] gs_usb 3-1:0.0: Couldn't send data format (err=-110) [ 159.429500][ T9] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 159.648350][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 159.778386][ T29] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 159.796276][ T5906] usb 2-1: USB disconnect, device number 14 [ 159.818855][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 159.834906][ T9] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 159.844550][ T9] usb 5-1: config 0 has no interface number 0 [ 159.851732][ T9] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.879801][ T9] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.890347][ T9] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 159.923340][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.938633][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 159.944601][ T9] usb 5-1: config 0 descriptor?? [ 159.952800][ T29] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.967965][ T29] usb 1-1: config 1 interface 0 has no altsetting 0 [ 159.978044][ T29] usb 1-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.40 [ 159.989506][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.997589][ T29] usb 1-1: Product: ᐉ [ 160.002133][ T29] usb 1-1: Manufacturer: щ [ 160.006704][ T29] usb 1-1: SerialNumber: syz [ 160.033809][ T5913] usb 3-1: USB disconnect, device number 10 [ 160.073138][ T8404] syzkaller0: entered promiscuous mode [ 160.078947][ T8404] syzkaller0: entered allmulticast mode [ 160.401320][ T9] hid (null): invalid report_size 6987 [ 160.423674][ T9] hid (null): invalid report_count 31666 [ 160.432338][ T9] hid (null): unknown global tag 0xe [ 160.437761][ T9] hid (null): nested delimiters [ 160.448402][ T9] hid (null): unknown global tag 0xe [ 160.575328][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 160.584118][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 160.645868][ T24] usb 4-1: can't read configurations, error -71 [ 161.078410][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 161.238402][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 161.250447][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 161.263164][ T24] usb 4-1: can't read configurations, error -61 [ 161.270512][ T24] usb usb4-port1: attempt power cycle [ 161.608373][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 161.629016][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 161.636527][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 161.644956][ T24] usb 4-1: can't read configurations, error -61 [ 161.718332][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 161.778345][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 161.799023][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 161.809386][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 161.817047][ T24] usb 4-1: can't read configurations, error -61 [ 161.825652][ T24] usb usb4-port1: unable to enumerate USB device [ 161.878319][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 161.888954][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 161.900519][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 161.911853][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.920348][ T9] usb 3-1: Product: syz [ 161.924846][ T9] usb 3-1: Manufacturer: syz [ 161.932024][ T9] usb 3-1: SerialNumber: syz [ 162.163300][ T8448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.187081][ T8448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.248648][ T8448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.359529][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.455204][ T29] usbhid 1-1:1.0: can't add hid device: -71 [ 162.463607][ T29] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 162.482064][ T29] usb 1-1: USB disconnect, device number 18 [ 162.505430][ T24] usb 5-1: USB disconnect, device number 9 [ 162.568855][ T8448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.634793][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.721558][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.739298][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 162.748575][ T8487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.222'. [ 162.972024][ T9] usb 3-1: USB disconnect, device number 11 [ 163.007317][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 163.007337][ T30] audit: type=1326 audit(1772566590.196:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 163.157586][ T5924] udevd[5924]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.446788][ T30] audit: type=1326 audit(1772566590.196:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 163.550245][ T5906] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 163.569300][ T30] audit: type=1326 audit(1772566590.256:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 163.674006][ T30] audit: type=1326 audit(1772566590.256:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 163.706819][ T30] audit: type=1326 audit(1772566590.466:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 163.768705][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 163.777772][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.794031][ T5906] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 163.801764][ T30] audit: type=1326 audit(1772566590.466:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 163.953514][ T30] audit: type=1326 audit(1772566590.466:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 163.974665][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.018294][ T29] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 164.038432][ T5906] usb 1-1: config 0 descriptor?? [ 164.101480][ T5906] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 164.126466][ T30] audit: type=1326 audit(1772566590.466:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 164.179577][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 164.230995][ T30] audit: type=1326 audit(1772566590.466:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 164.276501][ T30] audit: type=1326 audit(1772566590.476:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 164.610884][ T3095] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 164.818541][ T3095] usb 2-1: Using ep0 maxpacket: 16 [ 164.829079][ T3095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.882119][ T3095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.896837][ T3095] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 164.908478][ T3095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.921740][ T3095] usb 2-1: config 0 descriptor?? [ 165.160829][ T3095] kye 0003:0458:5016.0004: control desc unexpectedly large [ 165.202046][ T3095] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0004/input/input9 [ 165.346460][ T3095] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0004/input/input10 [ 165.437641][ T3095] kye 0003:0458:5016.0004: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 165.475465][ T8596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.235'. [ 165.528667][ T3095] usb 2-1: USB disconnect, device number 15 [ 165.751536][ T8600] fido_id[8600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 165.970183][ T3095] usb 1-1: USB disconnect, device number 19 [ 166.021271][ T8632] netlink: 'syz.4.238': attribute type 11 has an invalid length. [ 166.206207][ T8640] syz.0.239 uses obsolete (PF_INET,SOCK_PACKET) [ 166.272467][ T8638] vlan2: entered promiscuous mode [ 166.281162][ T8638] macvlan1: entered promiscuous mode [ 166.673756][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 166.697066][ T29] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 166.722241][ T29] usb 3-1: can't read configurations, error -71 [ 167.313626][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 167.338388][ T5892] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 167.585442][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 167.608360][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.680330][ T8690] process 'syz.4.245' launched './file1' with NULL argv: empty string added [ 167.700538][ T5892] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 167.734816][ T5892] usb 2-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 167.767549][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.816904][ T5892] usb 2-1: config 0 descriptor?? [ 167.890814][ T8700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.247'. [ 168.071110][ T29] usb 2-1: USB disconnect, device number 16 [ 169.058500][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 169.058521][ T30] audit: type=1326 audit(1772566596.196:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 169.138042][ T30] audit: type=1326 audit(1772566596.196:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 169.178303][ T5892] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 169.280702][ T8747] capability: warning: `syz.2.253' uses deprecated v2 capabilities in a way that may be insecure [ 169.350809][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 169.359264][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 169.551455][ T30] audit: type=1326 audit(1772566596.196:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 169.578350][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 169.626120][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.632299][ T30] audit: type=1326 audit(1772566596.196:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 169.717028][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 169.802295][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 169.818392][ T29] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 169.829032][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.833211][ T30] audit: type=1326 audit(1772566596.196:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 169.848360][ T9] usb 1-1: Product: syz [ 169.957582][ T9] usb 1-1: Manufacturer: syz [ 169.967811][ T30] audit: type=1326 audit(1772566596.196:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 169.988414][ T9] usb 1-1: SerialNumber: syz [ 169.994116][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 170.022305][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.039462][ T8770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.256'. [ 170.054822][ T29] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.112710][ T9] usb 1-1: config 0 descriptor?? [ 170.135680][ T29] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.148339][ T30] audit: type=1326 audit(1772566596.196:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 170.154099][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 170.215619][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 170.278527][ T29] usb 2-1: SerialNumber: syz [ 170.349554][ T8773] bridge_slave_1 (unregistering): left allmulticast mode [ 170.410030][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 170.464948][ T30] audit: type=1326 audit(1772566596.196:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 170.528423][ T29] cdc_acm 2-1:1.0: skipping garbage [ 170.536731][ T8773] bridge_slave_1 (unregistering): left promiscuous mode [ 170.550276][ T29] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 170.553935][ T30] audit: type=1326 audit(1772566596.196:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 170.620465][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 170.638525][ T29] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 170.645235][ T29] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 170.654323][ T30] audit: type=1326 audit(1772566596.196:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe56719c799 code=0x7ffc0000 [ 170.678604][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 170.699459][ T9] usb 4-1: config 1 has an invalid interface number: 255 but max is 2 [ 170.707711][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.719792][ T9] usb 4-1: config 1 has no interface number 2 [ 170.725992][ T9] usb 4-1: config 1 interface 255 has no altsetting 0 [ 170.732904][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.741241][ T9] usb 4-1: config 1 interface 1 has no altsetting 0 [ 170.786689][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 170.806355][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.921624][ T9] usb 4-1: Product: syz [ 170.948646][ T9] usb 4-1: Manufacturer: syz [ 171.017270][ T9] usb 4-1: SerialNumber: syz [ 171.968098][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.999152][ T8799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.258'. [ 172.363027][ T5892] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 172.400203][ T5892] usb 5-1: can't read configurations, error -71 [ 172.544168][ T5913] usb 1-1: USB disconnect, device number 20 [ 173.492401][ T3095] usb 2-1: USB disconnect, device number 17 [ 174.145788][ T8849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.500324][ T8874] x_tables: duplicate underflow at hook 2 [ 174.541919][ T9] usb 4-1: USB disconnect, device number 13 [ 174.724359][ T6411] udevd[6411]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.964445][ T5892] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 175.148283][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 176.131351][ T8919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.271'. [ 176.528068][ T8928] program syz.3.272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.737805][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 177.274251][ T8956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.278'. [ 177.420671][ T5955] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 177.504987][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 177.600817][ T5955] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 177.621022][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.668750][ T5955] usb 5-1: config 0 descriptor?? [ 177.685119][ T5955] cp210x 5-1:0.0: cp210x converter detected [ 177.769088][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.779176][ T5892] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 177.804013][ T5892] usb 2-1: can't read configurations, error -71 [ 178.092366][ T5955] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 178.138543][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 178.304654][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 178.344359][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 178.363507][ T5955] usb 5-1: cp210x converter now attached to ttyUSB0 [ 178.383965][ T9043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.284'. [ 178.958281][ T24] usb 3-1: config 0 has no interface number 0 [ 178.964461][ T24] usb 3-1: config 0 interface 12 has no altsetting 0 [ 178.976086][ T5955] usb 5-1: USB disconnect, device number 12 [ 179.011305][ T5955] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 179.031964][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 179.064014][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.082396][ T24] usb 3-1: Product: syz [ 179.086610][ T24] usb 3-1: Manufacturer: syz [ 179.100678][ T24] usb 3-1: SerialNumber: syz [ 179.134661][ T24] usb 3-1: config 0 descriptor?? [ 179.360317][ T5955] cp210x 5-1:0.0: device disconnected [ 179.542329][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.618253][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.654364][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.697151][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.729047][ T24] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 179.747544][ T24] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 179.768428][ T24] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 179.789594][ T24] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 179.831219][ T24] usb 3-1: USB disconnect, device number 14 [ 179.847385][ T5892] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 180.022615][ T5892] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 180.031863][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.062607][ T5892] usb 2-1: Product: syz [ 180.066827][ T5892] usb 2-1: Manufacturer: syz [ 180.088243][ T5892] usb 2-1: SerialNumber: syz [ 180.123213][ T5892] usb 2-1: config 0 descriptor?? [ 180.327469][ T9130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.289'. [ 180.498435][ T5913] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 180.658607][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 180.678365][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 180.754569][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.786900][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 180.804629][ T5913] usb 4-1: can't read configurations, error -71 [ 180.978750][ T9138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.987759][ T9138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.001022][ T10] usb 3-1: device descriptor read/64, error -71 [ 181.248341][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 181.428366][ T5892] usb 2-1: Firmware version (0.0) predates our first public release. [ 181.441867][ T5892] usb 2-1: Please update to version 0.2 or newer [ 181.478292][ T10] usb 3-1: device descriptor read/64, error -71 [ 181.658798][ T10] usb usb3-port1: attempt power cycle [ 182.330281][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 182.359466][ T10] usb 3-1: device descriptor read/8, error -71 [ 182.562436][ T3095] usb 2-1: USB disconnect, device number 20 [ 182.710394][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 182.908178][ T10] usb 3-1: device descriptor read/8, error -71 [ 183.053226][ T10] usb usb3-port1: unable to enumerate USB device [ 183.498637][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 183.661293][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 183.674080][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 183.739544][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 183.823595][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 183.875286][ T10] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 183.890237][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.918705][ T10] usb 1-1: Product: syz [ 183.936539][ T10] usb 1-1: Manufacturer: syz [ 183.946557][ T10] usb 1-1: SerialNumber: syz [ 184.012394][ T10] usb 1-1: config 0 descriptor?? [ 184.112977][ T10] radioshark 1-1:0.0: Invalid radioSHARK device [ 184.145002][ T10] radioshark 1-1:0.0: probe with driver radioshark failed with error -22 [ 184.195803][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 184.228477][ T5906] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 184.262779][ T9188] netlink: 'syz.0.297': attribute type 2 has an invalid length. [ 184.374156][ T3095] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 184.534100][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.543694][ T3095] usb 4-1: Using ep0 maxpacket: 8 [ 184.570784][ T5955] usb 1-1: USB disconnect, device number 21 [ 184.578792][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.578838][ T5906] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 184.578861][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.584431][ T5906] usb 3-1: config 0 descriptor?? [ 184.603347][ T3095] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.603391][ T3095] usb 4-1: too many endpoints for config 0 interface 0 altsetting 41: 36, using maximum allowed: 30 [ 184.603429][ T3095] usb 4-1: config 0 interface 0 altsetting 41 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.603457][ T3095] usb 4-1: config 0 interface 0 altsetting 41 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.603479][ T3095] usb 4-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 184.603504][ T3095] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.604988][ T3095] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice=b5.00 [ 184.605032][ T3095] usb 4-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0 [ 184.605053][ T3095] usb 4-1: Manufacturer: syz [ 184.609510][ T3095] usb 4-1: config 0 descriptor?? [ 184.708572][ T29] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 184.849768][ T5906] usbhid 3-1:0.0: can't add hid device: -71 [ 184.875561][ T29] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 184.903411][ T29] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 184.916148][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.918550][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.932777][ T29] usb 2-1: Product: syz [ 184.932822][ T29] usb 2-1: Manufacturer: syz [ 184.932838][ T29] usb 2-1: SerialNumber: syz [ 185.024961][ T3095] itetech 0003:06CB:73F5.0005: unbalanced collection at end of report description [ 185.043087][ T3095] itetech 0003:06CB:73F5.0005: probe with driver itetech failed with error -22 [ 185.082373][ T29] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 185.087632][ T5906] usb 3-1: USB disconnect, device number 19 [ 185.349280][ T3095] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 185.395432][ T29] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 185.421393][ T9217] x_tables: duplicate underflow at hook 4 [ 185.436945][ T29] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 185.446814][ T29] usb 2-1: media controller created [ 185.508751][ T3095] usb 5-1: Using ep0 maxpacket: 8 [ 185.517754][ T9261] ------------[ cut here ]------------ [ 185.524401][ T9261] usb 2-1: BOGUS control dir, pipe 80001580 doesn't match bRequestType c0 [ 185.533349][ T9261] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.4.305/9261 [ 185.543925][ T9261] Modules linked in: [ 185.548073][ T9261] CPU: 1 UID: 0 PID: 9261 Comm: syz.4.305 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.551115][ T5906] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 185.559257][ T9261] Tainted: [L]=SOFTLOCKUP [ 185.571073][ T9261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 185.581763][ T9261] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 185.587454][ T9261] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 185.607567][ T9261] RSP: 0018:ffffc9000619f688 EFLAGS: 00010246 [ 185.613765][ T9261] RAX: 0000000000000000 RBX: ffff888034fb2000 RCX: 0000000080001580 [ 185.621865][ T9261] RDX: ffff8880344c39c0 RSI: ffffffff8c7ef400 RDI: ffffffff901ec3b0 [ 185.629967][ T9261] RBP: 1ffff110064a52ec R08: 00000000000000c0 R09: 0000000000000000 [ 185.638021][ T9261] R10: ffffc9000619f780 R11: fffff52000c33efc R12: ffff88807b7ec100 [ 185.646160][ T9261] R13: ffff888032529760 R14: 0000000080001580 R15: ffff8880344c39c0 [ 185.654271][ T9261] FS: 00007f1b4b7846c0(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 185.663486][ T9261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.671411][ T9261] CR2: 0000200000000000 CR3: 000000007f088000 CR4: 00000000003526f0 [ 185.679553][ T9261] Call Trace: [ 185.683108][ T9261] [ 185.686093][ T9261] ? __init_swait_queue_head+0xa9/0x150 [ 185.692097][ T9261] usb_start_wait_urb+0x12b/0x510 [ 185.697237][ T9261] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 185.702987][ T9261] usb_control_msg+0x232/0x3e0 [ 185.707895][ T9261] gl861_ctrl_msg+0x207/0x420 [ 185.712760][ T9261] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 185.718029][ T9261] ? do_syscall_64+0xf80/0xf80 [ 185.722977][ T9261] ? lockdep_hardirqs_on+0x7a/0x110 [ 185.728285][ T9261] ? irqentry_exit+0x59e/0x620 [ 185.733125][ T9261] gl861_i2c_master_xfer+0x439/0x6a0 [ 185.738740][ T9261] __i2c_transfer+0x79a/0x2020 [ 185.743613][ T9261] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 185.749629][ T9261] ? i2c_transfer+0xc8/0x2d0 [ 185.754301][ T9261] i2c_transfer+0x1cc/0x2d0 [ 185.758956][ T9261] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 185.764673][ T9261] ? __asan_memset+0x22/0x50 [ 185.769400][ T9261] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 185.775646][ T9261] ? i2cdev_read+0xe8/0x250 [ 185.780331][ T9261] i2cdev_read+0x10d/0x250 [ 185.784827][ T9261] vfs_readv+0x587/0x840 [ 185.789334][ T9261] ? __pfx_i2cdev_read+0x10/0x10 [ 185.794475][ T9261] ? __pfx_vfs_readv+0x10/0x10 [ 185.799346][ T9261] ? __fget_files+0x2a/0x420 [ 185.803985][ T9261] ? __fget_files+0x3a0/0x420 [ 185.808829][ T9261] ? __fget_files+0x2a/0x420 [ 185.813469][ T9261] __x64_sys_preadv+0x19f/0x2a0 [ 185.818476][ T9261] ? __pfx___x64_sys_preadv+0x10/0x10 [ 185.823925][ T9261] do_syscall_64+0x14d/0xf80 [ 185.828610][ T9261] ? trace_irq_disable+0x3b/0x150 [ 185.833675][ T9261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.839925][ T9261] ? clear_bhb_loop+0x40/0x90 [ 185.844643][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.850593][ T9261] RIP: 0033:0x7f1b4a99c799 [ 185.855053][ T9261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.874789][ T9261] RSP: 002b:00007f1b4b784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 185.883312][ T9261] RAX: ffffffffffffffda RBX: 00007f1b4ac15fa0 RCX: 00007f1b4a99c799 [ 185.891646][ T9261] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000004 [ 185.899999][ T9261] RBP: 00007f1b4aa32bd9 R08: 0000000000008003 R09: 0000000000000000 [ 185.908072][ T9261] R10: 00000000fffffffd R11: 0000000000000246 R12: 0000000000000000 [ 185.916201][ T9261] R13: 00007f1b4ac16038 R14: 00007f1b4ac15fa0 R15: 00007f1b4ad3fa48 [ 185.924339][ T9261] [ 185.927428][ T9261] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 185.934755][ T9261] CPU: 1 UID: 0 PID: 9261 Comm: syz.4.305 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.945550][ T9261] Tainted: [L]=SOFTLOCKUP [ 185.949895][ T9261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 185.959970][ T9261] Call Trace: [ 185.963271][ T9261] [ 185.966219][ T9261] vpanic+0x56c/0xa60 [ 185.970233][ T9261] ? __pfx__printk+0x10/0x10 [ 185.974843][ T9261] ? __pfx_vpanic+0x10/0x10 [ 185.979373][ T9261] ? is_bpf_text_address+0x292/0x2b0 [ 185.984686][ T9261] ? is_bpf_text_address+0x26/0x2b0 [ 185.989926][ T9261] panic+0xc5/0xd0 [ 185.993680][ T9261] ? __pfx_panic+0x10/0x10 [ 185.998148][ T9261] __warn+0x315/0x4f0 [ 186.002161][ T9261] ? usb_submit_urb+0x1052/0x18b0 [ 186.007214][ T9261] ? usb_submit_urb+0x1052/0x18b0 [ 186.012266][ T9261] __report_bug+0x29a/0x540 [ 186.016810][ T9261] ? usb_submit_urb+0x1052/0x18b0 [ 186.021860][ T9261] ? __pfx___report_bug+0x10/0x10 [ 186.027022][ T9261] ? lockdep_hardirqs_on+0x7a/0x110 [ 186.032289][ T9261] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 186.038144][ T9261] report_bug_entry+0x19a/0x290 [ 186.043052][ T9261] ? usb_submit_urb+0x1114/0x18b0 [ 186.048112][ T9261] ? usb_submit_urb+0x1119/0x18b0 [ 186.053176][ T9261] handle_bug+0xce/0x200 [ 186.057445][ T9261] exc_invalid_op+0x1a/0x50 [ 186.061988][ T9261] asm_exc_invalid_op+0x1a/0x20 [ 186.066864][ T9261] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 186.072535][ T9261] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 186.092170][ T9261] RSP: 0018:ffffc9000619f688 EFLAGS: 00010246 [ 186.098275][ T9261] RAX: 0000000000000000 RBX: ffff888034fb2000 RCX: 0000000080001580 [ 186.106281][ T9261] RDX: ffff8880344c39c0 RSI: ffffffff8c7ef400 RDI: ffffffff901ec3b0 [ 186.114291][ T9261] RBP: 1ffff110064a52ec R08: 00000000000000c0 R09: 0000000000000000 [ 186.122312][ T9261] R10: ffffc9000619f780 R11: fffff52000c33efc R12: ffff88807b7ec100 [ 186.130307][ T9261] R13: ffff888032529760 R14: 0000000080001580 R15: ffff8880344c39c0 [ 186.138321][ T9261] ? usb_submit_urb+0x10a3/0x18b0 [ 186.143392][ T9261] ? __init_swait_queue_head+0xa9/0x150 [ 186.148997][ T9261] usb_start_wait_urb+0x12b/0x510 [ 186.154093][ T9261] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 186.159712][ T9261] usb_control_msg+0x232/0x3e0 [ 186.164516][ T9261] gl861_ctrl_msg+0x207/0x420 [ 186.169223][ T9261] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 186.174441][ T9261] ? do_syscall_64+0xf80/0xf80 [ 186.179229][ T9261] ? lockdep_hardirqs_on+0x7a/0x110 [ 186.184462][ T9261] ? irqentry_exit+0x59e/0x620 [ 186.189431][ T9261] gl861_i2c_master_xfer+0x439/0x6a0 [ 186.194755][ T9261] __i2c_transfer+0x79a/0x2020 [ 186.199557][ T9261] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 186.205404][ T9261] ? i2c_transfer+0xc8/0x2d0 [ 186.210026][ T9261] i2c_transfer+0x1cc/0x2d0 [ 186.214560][ T9261] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 186.220221][ T9261] ? __asan_memset+0x22/0x50 [ 186.224870][ T9261] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 186.231053][ T9261] ? i2cdev_read+0xe8/0x250 [ 186.235593][ T9261] i2cdev_read+0x10d/0x250 [ 186.240055][ T9261] vfs_readv+0x587/0x840 [ 186.244345][ T9261] ? __pfx_i2cdev_read+0x10/0x10 [ 186.249328][ T9261] ? __pfx_vfs_readv+0x10/0x10 [ 186.254137][ T9261] ? __fget_files+0x2a/0x420 [ 186.258765][ T9261] ? __fget_files+0x3a0/0x420 [ 186.263479][ T9261] ? __fget_files+0x2a/0x420 [ 186.268127][ T9261] __x64_sys_preadv+0x19f/0x2a0 [ 186.273017][ T9261] ? __pfx___x64_sys_preadv+0x10/0x10 [ 186.278426][ T9261] do_syscall_64+0x14d/0xf80 [ 186.283041][ T9261] ? trace_irq_disable+0x3b/0x150 [ 186.288103][ T9261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.294193][ T9261] ? clear_bhb_loop+0x40/0x90 [ 186.298900][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.304818][ T9261] RIP: 0033:0x7f1b4a99c799 [ 186.309283][ T9261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.328913][ T9261] RSP: 002b:00007f1b4b784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 186.337445][ T9261] RAX: ffffffffffffffda RBX: 00007f1b4ac15fa0 RCX: 00007f1b4a99c799 [ 186.345439][ T9261] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000004 [ 186.353427][ T9261] RBP: 00007f1b4aa32bd9 R08: 0000000000008003 R09: 0000000000000000 [ 186.361422][ T9261] R10: 00000000fffffffd R11: 0000000000000246 R12: 0000000000000000 [ 186.369411][ T9261] R13: 00007f1b4ac16038 R14: 00007f1b4ac15fa0 R15: 00007f1b4ad3fa48 [ 186.377417][ T9261] [ 186.381063][ T9261] Kernel Offset: disabled [ 186.385425][ T9261] Rebooting in 86400 seconds..