last executing test programs: 16.524795799s ago: executing program 1 (id=916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 15.804109084s ago: executing program 1 (id=919): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000580)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002380)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00030200000002039e3f59c28276b2cab9ad199137eaf2196ed209b41c4d6f7ed75b271b5cfb5187f82c4e4dbc11a56e900008"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13.429994885s ago: executing program 4 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fff8, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}}, 0x4000010) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[], 0xe4) 13.019416679s ago: executing program 4 (id=928): socket$nl_route(0x10, 0x3, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_io_uring_setup(0x1d9f, &(0x7f0000000340)={0x0, 0x63f6, 0x80, 0x5, 0x894}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f00004f3000/0x1000)=nil, 0x1000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 12.46593601s ago: executing program 3 (id=932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x3}, 0x14) 11.895683838s ago: executing program 1 (id=933): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0xffff}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x10000000, 0x3, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x24000850) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 11.23531978s ago: executing program 4 (id=935): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) syz_open_dev$dvb_demux(0x0, 0x2, 0x80800) syz_emit_vhci(0x0, 0x200) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0xff8d}], 0x600, 0x0, 0x0) 10.843174951s ago: executing program 3 (id=936): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x2, 0x63d}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r6, 0x0, 0x0, 0x4000000) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000019080)={0x1, 0x1, 0x1}) syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') 9.076141909s ago: executing program 2 (id=939): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r0, 0xffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0xfffffdef}}, 0x10) recvfrom(r1, 0x0, 0x0, 0x4112, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 8.051801072s ago: executing program 2 (id=940): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000140)="c4", 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x4000400) r8 = open(&(0x7f0000000100)='.\x00', 0x300080, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r8}}, 0x18) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="4000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="211200000000000020a25d39846800128008000100736974001400028006000d000500000008000300ac1414aa"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 7.298718607s ago: executing program 4 (id=942): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, 0x0, 0x44000) close_range(r0, 0xffffffffffffffff, 0x0) 6.335075628s ago: executing program 2 (id=944): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0xff8d}], 0x600, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) dup(0xffffffffffffffff) 6.269709533s ago: executing program 4 (id=945): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0xf, 0x28, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000002c0)={0x40, 0x8, 0x2, "2bec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000300)={0x40, 0x11, 0x2, "b9d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000700)={0x40, 0x9, 0x2, "6ef1"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000180)={0x0, 0xe, 0x5, "1972e7d072"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.267555489s ago: executing program 3 (id=946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x5, 0x0, 0x34cc, 0xfffffffffffff946, 0x8}}]}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff1, 0xb}, {0x5, 0x7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x2a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x10) 6.238380387s ago: executing program 1 (id=947): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.184842647s ago: executing program 0 (id=948): epoll_create1(0x80000) r0 = inotify_init() r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000005001000050000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x7) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ce7000/0x1000)=nil, 0x1000}, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 5.983446138s ago: executing program 3 (id=949): r0 = epoll_create1(0x80000) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x6, 0x6f, 0x2, 0x0, 0x10, "88bd91aa28528000000000007500000400"}) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000001c0)) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x1, 0x2, "e145"}, 0x0}) 5.252924681s ago: executing program 0 (id=950): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 4.717326044s ago: executing program 2 (id=951): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x9}, 0x8e33}], 0x1, 0x92, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000400), 0x2000011a) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007940)=[{{&(0x7f0000001580)=@ieee802154={0x24, @short}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002300)=[{0x0}], 0x1}}], 0x3, 0x810) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x44804) 4.203424401s ago: executing program 0 (id=952): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfffffffffffffff4, 0x101000) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000400)=""/162) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 3.078932364s ago: executing program 2 (id=953): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r3, 0x70f, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x4) 2.702207161s ago: executing program 3 (id=954): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r0 = dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000180)={0x0, 0x2}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0], 0x2c2) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_ENDIAN(0x13, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x6, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000140)) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c031}, 0x40) 2.668124597s ago: executing program 0 (id=955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x13e}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)='#', 0x1}], 0x1}, 0x40010) 2.444401262s ago: executing program 1 (id=956): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000240)={0x2, 0x100, 0x3, {0x4, 0xfffffffe, 0x1000, 0x870}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x1, {0xffffffffffffffff, 0x3, 0x1000000, 0xffffffffffffff7a, 0x3ff, 0x803, {0x6, 0x8000000000000002, 0xfffffffffffffff8, 0xfe2b260, 0x8, 0x800000000000, 0x2, 0x4, 0x3, 0x6000, 0x7, r3, 0x0, 0x1, 0xe4000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup2(r4, r4) write$tun(r5, 0x0, 0x46) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x78, 0xfffffffffffffffc, 0x1, {0x0, 0x7, 0x0, {0x6, 0x5, 0x10001, 0xffffffffffffff6b, 0x401, 0x9, 0x6, 0xc, 0x5, 0x4000, 0x6, 0x0, 0x0, 0x9, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) 2.07676063s ago: executing program 0 (id=957): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x2, 0x63d}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r6, 0x0, 0x0, 0x4000000) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000019080)={0x1, 0x1, 0x1}) syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') 2.004128666s ago: executing program 4 (id=958): socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 1.957638567s ago: executing program 1 (id=959): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) writev(r4, &(0x7f00000192c0)=[{&(0x7f0000019380)="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", 0x3dc}, {&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb42f5316b21c39b07f6f4002375b40b6871f65f7d8dc988437ffab21315c6f4ce5673a7ae29fc2886d176d71b6f861210af114a3d8c8579363cf7a7e0a10759d14f7dd30a7cf6d116ff1ae9d014da95838138469eb6c724abf520758dc0bf0e0d061631b399be0ec39bcb592701428df40874a1811bf684c7f075a6e9dc484aa153c5b92c552a75cfd69e2d7a3bfcc117a5", 0xb3}, {&(0x7f000001a500)="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", 0x124}, {0x0}], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x2, 0x63d}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r5, 0x0, 0x0, 0x4000000) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000019080)={0x1, 0x1, 0x1}) syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') 765.312268ms ago: executing program 2 (id=960): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xc, 0x1, 0x539e09df839dfe94, "d3fa5b89042b7205fe7bafe9e6415dbf6b34944d164ce8cd4e0d4c7b546787a7", 0x3631564e}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000078a000/0x2000)=nil, 0x2000, 0x9) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e0"], 0x58}}, 0x0) 492.634667ms ago: executing program 3 (id=961): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000fec000/0x14000)=nil, 0x4) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = syz_io_uring_setup(0x5c3, &(0x7f0000000140)={0x0, 0x2, 0x1000, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r1, 0x6e2, 0x600, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 0s ago: executing program 0 (id=962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00603c0ff000000000ff840000000800000003125ce882cbf490d908f1523f0000000000", 0x2d}, {&(0x7f0000000640)="a652c4145f", 0x5}], 0x2}, 0x4005) kernel console output (not intermixed with test programs): on byte read [ 263.956358][ T7510] kvm: pic: non byte read [ 263.961056][ T7510] kvm: pic: non byte read [ 263.965638][ T7510] kvm: pic: non byte read [ 263.970181][ T7510] kvm: pic: non byte read [ 263.976400][ T7510] kvm: pic: non byte read [ 265.161023][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 266.984527][ T5921] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 267.014119][ T7530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.319'. [ 267.296601][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 267.340947][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.372254][ T5921] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.395718][ T5921] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 267.433252][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.499025][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 267.575405][ T7542] netlink: 'syz.2.320': attribute type 8 has an invalid length. [ 267.591329][ T29] audit: type=1326 audit(1773296467.053:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 267.628023][ T1110] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.638071][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 267.685113][ T1110] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.708443][ T29] audit: type=1326 audit(1773296467.053:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 267.711723][ T5921] usb 5-1: config 0 descriptor?? [ 267.744368][ T7542] netlink: 'syz.2.320': attribute type 8 has an invalid length. [ 267.867228][ T1110] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.909840][ T1110] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.968918][ T29] audit: type=1326 audit(1773296467.053:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 268.456676][ T29] audit: type=1326 audit(1773296467.053:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 268.586828][ T29] audit: type=1326 audit(1773296467.053:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 268.858590][ T29] audit: type=1326 audit(1773296467.063:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 269.002838][ T29] audit: type=1326 audit(1773296467.063:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 269.109582][ T29] audit: type=1326 audit(1773296467.063:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 269.590031][ T29] audit: type=1326 audit(1773296467.063:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 269.785328][ T29] audit: type=1326 audit(1773296467.063:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 269.839441][ T29] audit: type=1326 audit(1773296467.063:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 269.909711][ T5921] usb 5-1: USB disconnect, device number 8 [ 270.830191][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 271.099422][ T5893] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 271.428364][ T5893] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 271.447767][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.770388][ T5893] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 271.780025][ T5893] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 271.790848][ T5893] usb 5-1: Manufacturer: syz [ 271.804949][ T5893] usb 5-1: config 0 descriptor?? [ 271.819283][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 271.864321][ T5893] igorplugusb 5-1:0.0: incorrect number of endpoints [ 271.899277][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 272.051022][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 272.068984][ T9] usb 4-1: config 0 has no interfaces? [ 272.079254][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 272.088231][ T24] usb 3-1: config 0 has no interfaces? [ 272.096835][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 272.107320][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 272.154404][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 272.162693][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 272.199315][ T24] usb 3-1: Manufacturer: syz [ 272.219026][ T9] usb 4-1: Manufacturer: syz [ 272.224587][ T24] usb 3-1: config 0 descriptor?? [ 272.274540][ T9] usb 4-1: config 0 descriptor?? [ 273.386177][ T7611] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 273.528405][ T9] usb 5-1: USB disconnect, device number 9 [ 274.347118][ T42] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 274.551612][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 274.561416][ T24] usb 3-1: USB disconnect, device number 12 [ 274.575347][ T42] usb 1-1: config 0 has no interfaces? [ 274.585001][ T7612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.696825][ T42] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 274.724879][ T42] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 274.746138][ T42] usb 1-1: Manufacturer: syz [ 274.790867][ T42] usb 1-1: config 0 descriptor?? [ 275.076471][ T7636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.331'. [ 275.626873][ T7642] loop2: detected capacity change from 0 to 7 [ 275.641988][ T7642] Dev loop2: unable to read RDB block 7 [ 275.649407][ T7642] loop2: unable to read partition table [ 275.655412][ T7642] loop2: partition table beyond EOD, truncated [ 275.879271][ T7642] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 276.006340][ T24] usb 4-1: USB disconnect, device number 7 [ 276.507542][ T7653] netlink: 184 bytes leftover after parsing attributes in process `syz.1.334'. [ 276.620901][ T7651] ip6gre1: entered promiscuous mode [ 277.616020][ T9] usb 1-1: USB disconnect, device number 9 [ 279.148461][ T7677] netlink: 108 bytes leftover after parsing attributes in process `syz.1.338'. [ 280.126521][ T7681] netlink: 'syz.3.339': attribute type 27 has an invalid length. [ 280.555748][ T7690] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 280.570464][ T7690] ipip0: left allmulticast mode [ 280.756393][ T7693] netlink: 32 bytes leftover after parsing attributes in process `syz.4.342'. [ 281.602084][ T7701] blktrace: Concurrent blktraces are not allowed on loop4 [ 281.972398][ T7691] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 282.282548][ T7707] syz.1.344 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 283.499516][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 283.499536][ T29] audit: type=1326 audit(1773296483.003:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x0 [ 285.583010][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 285.594635][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 286.369568][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 286.529304][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 286.538785][ T9] usb 2-1: config 0 has no interfaces? [ 286.546824][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 286.602666][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 286.630699][ T9] usb 2-1: Manufacturer: syz [ 286.672328][ T9] usb 2-1: config 0 descriptor?? [ 287.592785][ T7755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.353'. [ 288.166495][ T7768] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.379314][ T42] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 288.637655][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 288.653582][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.673677][ T42] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.693801][ T42] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 288.728386][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.827775][ T42] usb 1-1: config 0 descriptor?? [ 289.340630][ T24] usb 2-1: USB disconnect, device number 12 [ 289.774940][ T7780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.079282][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 291.108872][ T42] usb 1-1: USB disconnect, device number 10 [ 291.515566][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.748574][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 291.792875][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.816896][ T9] usb 4-1: config 0 descriptor?? [ 291.924982][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 292.816572][ T7802] kAFS: unable to lookup cell 'ÿ' [ 293.784727][ T7807] netlink: 64 bytes leftover after parsing attributes in process `syz.2.364'. [ 293.964251][ T7810] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 294.075209][ T7811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.082733][ T7811] IPv6: NLM_F_CREATE should be set when creating new route [ 294.090052][ T7811] IPv6: NLM_F_CREATE should be set when creating new route [ 294.097376][ T7811] IPv6: NLM_F_CREATE should be set when creating new route [ 294.105224][ T7811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.395247][ T5893] usb 4-1: USB disconnect, device number 8 [ 295.306828][ T7823] trusted_key: encrypted_key: insufficient parameters specified [ 295.433844][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 295.778744][ T7830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.057668][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 297.072231][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 297.086155][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 297.098241][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 297.142649][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 297.182215][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 297.212809][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 297.247208][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 298.005694][ T7837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.298251][ T7848] netlink: 'syz.4.372': attribute type 6 has an invalid length. [ 298.307527][ T7848] netlink: 'syz.4.372': attribute type 7 has an invalid length. [ 298.319285][ T7848] netlink: 'syz.4.372': attribute type 8 has an invalid length. [ 298.649285][ T5928] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 298.699234][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 298.809560][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 298.825411][ T5928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.835624][ T5928] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 298.863011][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 298.885318][ T7862] kAFS: unable to lookup cell '(,c¾Ì' [ 298.907919][ T5928] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 298.908588][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 298.964165][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.984954][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.013182][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 299.025658][ T5928] usb 1-1: config 0 descriptor?? [ 299.095757][ T24] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 299.123684][ T24] usb 5-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 299.221175][ T24] usb 5-1: Product: syz [ 299.271903][ T24] usb 5-1: Manufacturer: syz [ 299.287811][ T24] usb 5-1: SerialNumber: syz [ 299.356803][ T24] usb 5-1: config 0 descriptor?? [ 299.385110][ T24] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 299.407422][ T24] kvaser_usb 5-1:0.0: error -EMSGSIZE: Failed to initialize card [ 299.437011][ T24] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 300.871928][ T7877] binder: BINDER_SET_CONTEXT_MGR already set [ 300.878156][ T7877] binder: 7871:7877 ioctl 4018620d 200000000040 returned -16 [ 300.887943][ T7877] binder: 7871:7877 ioctl ae41 0 returned -22 [ 301.289992][ T10] usb 5-1: USB disconnect, device number 10 [ 301.403337][ T7885] __nla_validate_parse: 12 callbacks suppressed [ 301.403353][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 301.438971][ T29] audit: type=1326 audit(1773296500.643:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75db9c799 code=0x7ffc0000 [ 301.553089][ T29] audit: type=1326 audit(1773296500.643:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75db9c799 code=0x7ffc0000 [ 301.887952][ T29] audit: type=1326 audit(1773296500.643:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd75db9c799 code=0x7ffc0000 [ 301.911594][ T29] audit: type=1326 audit(1773296500.643:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75db9c799 code=0x7ffc0000 [ 301.933941][ T29] audit: type=1326 audit(1773296500.643:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd75db9c799 code=0x7ffc0000 [ 301.998700][ T29] audit: type=1326 audit(1773296500.643:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75db9c799 code=0x7ffc0000 [ 302.021691][ T29] audit: type=1326 audit(1773296500.643:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75db9c799 code=0x7ffc0000 [ 302.051918][ T7895] netlink: 'syz.3.379': attribute type 15 has an invalid length. [ 302.240068][ T29] audit: type=1326 audit(1773296500.643:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75db9c799 code=0x7ffc0000 [ 302.282453][ T42] usb 1-1: USB disconnect, device number 11 [ 302.316720][ T29] audit: type=1326 audit(1773296500.643:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd75db9c799 code=0x7ffc0000 [ 302.633259][ T29] audit: type=1326 audit(1773296500.643:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75db9c799 code=0x7ffc0000 [ 302.869465][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 302.904873][ T7903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.380'. [ 303.250983][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 303.288561][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 303.482327][ T10] usb 4-1: config 0 has no interface number 0 [ 303.645251][ T10] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.709921][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 303.739223][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.865626][ T10] usb 4-1: Product: syz [ 303.890264][ T10] usb 4-1: Manufacturer: syz [ 303.894942][ T10] usb 4-1: SerialNumber: syz [ 303.928369][ T10] usb 4-1: config 0 descriptor?? [ 303.952172][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 304.151511][ T10] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 304.171953][ T10] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8 [ 304.371529][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 304.380747][ T7913] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 304.427557][ T7913] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 304.634459][ T7895] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 305.726172][ T7929] netlink: 32 bytes leftover after parsing attributes in process `syz.4.382'. [ 307.048383][ T10] usb 4-1: USB disconnect, device number 9 [ 308.129235][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 308.299245][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 308.317627][ T10] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 308.426861][ T10] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 308.462611][ T10] usb 4-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 308.477529][ T10] usb 4-1: config 127 has no interface number 0 [ 308.610161][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 308.629264][ T5921] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 308.799240][ T10] usb 4-1: config 127 interface 171 has no altsetting 0 [ 308.819183][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 308.844165][ T7978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.883554][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 308.907675][ T9] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 308.927634][ T10] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 308.944750][ T9] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 308.956363][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.999286][ T10] usb 4-1: Product: syz [ 309.006128][ T5921] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 309.040976][ T9] usb 1-1: New USB device found, idVendor=2f86, idProduct=e092, bcdDevice=53.3f [ 309.050600][ T10] usb 4-1: Manufacturer: syz [ 309.059063][ T10] usb 4-1: SerialNumber: syz [ 309.068625][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.101247][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.235887][ T5921] usb 2-1: Product: syz [ 309.243910][ T9] usb 1-1: Product: syz [ 309.363419][ T5921] usb 2-1: Manufacturer: syz [ 309.368262][ T9] usb 1-1: Manufacturer: syz [ 309.392420][ T5921] usb 2-1: SerialNumber: syz [ 309.397199][ T9] usb 1-1: SerialNumber: syz [ 309.443020][ T7953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.501135][ T7953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.523911][ T5921] usb 2-1: config 0 descriptor?? [ 309.569484][ T5921] hub 2-1:0.0: bad descriptor, ignoring hub [ 309.575508][ T5921] hub 2-1:0.0: probe with driver hub failed with error -5 [ 310.168218][ T7991] vivid-004: disconnect [ 310.293539][ T7962] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 310.306006][ T7962] block device autoloading is deprecated and will be removed. [ 310.353629][ T7991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.668108][ T7986] vivid-004: reconnect [ 311.284998][ T5921] usb 2-1: USB disconnect, device number 13 [ 311.937192][ T8005] kvm: user requested TSC rate below hardware speed [ 312.197974][ T8012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.393'. [ 312.264250][ T24] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 312.267314][ T10] usb 4-1: USB disconnect, device number 10 [ 312.509685][ T24] usb 5-1: device descriptor read/64, error -71 [ 312.685032][ T8019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.394'. [ 312.808516][ T8019] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 312.879871][ T24] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 312.902985][ T10] usb 1-1: USB disconnect, device number 12 [ 313.059517][ T24] usb 5-1: device descriptor read/64, error -71 [ 313.251299][ T24] usb usb5-port1: attempt power cycle [ 313.526446][ T8033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.395'. [ 313.541401][ T8033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.563150][ T8033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.579518][ T8033] netlink: 148 bytes leftover after parsing attributes in process `syz.0.395'. [ 313.723985][ T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 314.001108][ T24] usb 5-1: device descriptor read/8, error -71 [ 314.362433][ T24] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 314.440905][ T24] usb 5-1: device descriptor read/8, error -71 [ 314.553620][ T24] usb usb5-port1: unable to enumerate USB device [ 315.264627][ T8052] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 315.289982][ T8052] team0: Device gtp0 is of different type [ 316.211594][ T8062] ipip0: left allmulticast mode [ 317.029840][ T8072] fuse: Bad value for 'fd' [ 317.194366][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.202491][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.391907][ T8097] fuse: Unknown parameter '0x000000000000000c' [ 321.265436][ T8118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.409'. [ 322.919466][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 322.919485][ T29] audit: type=1326 audit(1773296522.423:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1299c799 code=0x7ffc0000 [ 323.001572][ T29] audit: type=1326 audit(1773296522.443:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1299c799 code=0x7ffc0000 [ 323.059220][ T29] audit: type=1326 audit(1773296522.443:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8b1299c799 code=0x7ffc0000 [ 323.292707][ T8136] netlink: 36 bytes leftover after parsing attributes in process `syz.1.413'. [ 323.307543][ T8136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.326553][ T8136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.343346][ T8136] netlink: 148 bytes leftover after parsing attributes in process `syz.1.413'. [ 323.434328][ T29] audit: type=1326 audit(1773296522.443:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1299c799 code=0x7ffc0000 [ 323.637855][ T29] audit: type=1326 audit(1773296522.473:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b1299c799 code=0x7ffc0000 [ 323.909646][ T5928] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 323.947928][ T29] audit: type=1326 audit(1773296522.473:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1299c799 code=0x7ffc0000 [ 323.991357][ T29] audit: type=1326 audit(1773296522.473:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1299c799 code=0x7ffc0000 [ 324.048748][ T29] audit: type=1326 audit(1773296522.473:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8b1299c799 code=0x7ffc0000 [ 324.080894][ T29] audit: type=1326 audit(1773296522.473:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1299c799 code=0x7ffc0000 [ 324.159268][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 324.170916][ T29] audit: type=1326 audit(1773296522.473:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1299c799 code=0x7ffc0000 [ 324.207489][ T5928] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 324.223912][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.376297][ T5928] usb 5-1: config 0 descriptor?? [ 324.557872][ T5893] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 324.597679][ T5928] pwc: Logitech QuickCam Zoom USB webcam detected. [ 324.604601][ T5928] pwc: Warning: more than 1 configuration available. [ 324.731587][ T5893] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 324.751777][ T5893] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 324.803649][ T5893] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.817026][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 324.849973][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.985247][ T8142] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 325.038430][ T5893] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.358884][ T10] usb 3-1: USB disconnect, device number 13 [ 326.428351][ T8155] netlink: 44 bytes leftover after parsing attributes in process `syz.3.418'. [ 326.904985][ T8159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.304334][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 327.314515][ T8164] netlink: 1 bytes leftover after parsing attributes in process `syz.0.420'. [ 328.129318][ T5928] pwc: Failed to set LED on/off time (-71) [ 328.159911][ T5928] pwc: send_video_command error -71 [ 328.165166][ T5928] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 328.197703][ T5928] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 328.327932][ T5928] usb 5-1: USB disconnect, device number 15 [ 329.679480][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 329.688563][ T8185] netem: invalid attributes len -7 [ 329.693840][ T8185] netem: change failed [ 331.273056][ T8191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.636625][ T8195] netlink: 36 bytes leftover after parsing attributes in process `syz.4.427'. [ 331.667942][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 331.731178][ T8195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.881461][ T8195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.903163][ T8195] netlink: 148 bytes leftover after parsing attributes in process `syz.4.427'. [ 333.149034][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 333.158142][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 333.383678][ T8206] netlink: 'syz.1.428': attribute type 4 has an invalid length. [ 333.722653][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 333.723290][ T29] audit: type=1326 audit(1773296533.243:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.0.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 333.857497][ T29] audit: type=1326 audit(1773296533.243:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.0.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 334.017935][ T29] audit: type=1326 audit(1773296533.243:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.0.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 334.052093][ T5928] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 334.209364][ T29] audit: type=1326 audit(1773296533.243:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.0.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 334.299189][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 334.378217][ T29] audit: type=1326 audit(1773296533.243:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.0.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 334.412381][ T5928] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 334.463616][ T5928] usb 1-1: config 179 has no interface number 0 [ 334.494188][ T5928] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 334.572896][ T29] audit: type=1326 audit(1773296533.253:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.0.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 334.610536][ T5928] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 334.663924][ T5928] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 334.699460][ T29] audit: type=1326 audit(1773296533.253:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.0.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 334.732659][ T5928] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 334.943018][ T8235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.432'. [ 335.013729][ T5928] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 335.029388][ T29] audit: type=1326 audit(1773296533.253:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.0.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 335.119427][ T5928] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 335.129586][ T29] audit: type=1326 audit(1773296533.253:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.0.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 335.161188][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.249231][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 335.469442][ T8223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.515405][ T29] audit: type=1326 audit(1773296533.253:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.0.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 335.537912][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 335.600622][ T24] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 335.612111][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 335.733328][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 335.971551][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 336.038336][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.207595][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.698667][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 336.757216][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.829530][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 336.872687][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.279797][ T24] usb 4-1: usb_control_msg returned -32 [ 337.300663][ T24] usbtmc 4-1:16.0: can't read capabilities [ 337.690443][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 337.700339][ T8248] usbtmc 4-1:16.0: Unable to send data, error -71 [ 337.712189][ T8248] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 339.323830][ T42] usb 1-1: USB disconnect, device number 13 [ 339.324016][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 339.338578][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 340.059618][ T24] usb 4-1: USB disconnect, device number 11 [ 341.357486][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 342.068939][ T8289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.444'. [ 342.083986][ T8289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.111457][ T8289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.210719][ T8289] netlink: 148 bytes leftover after parsing attributes in process `syz.1.444'. [ 342.860256][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 343.033347][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 343.040754][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 343.070473][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 343.113495][ T10] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 343.154437][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.199188][ T10] usb 1-1: Product: syz [ 343.203549][ T10] usb 1-1: Manufacturer: syz [ 343.208171][ T10] usb 1-1: SerialNumber: syz [ 343.253861][ T10] usb 1-1: config 0 descriptor?? [ 343.419242][ T10] rc_core: IR keymap rc-streamzap not found [ 343.429235][ T10] Registered IR keymap rc-empty [ 343.442140][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 343.510214][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 343.656105][ T10] usb 1-1: USB disconnect, device number 14 [ 344.039207][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 344.123191][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 344.123211][ T29] audit: type=1326 audit(1773296543.643:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.2.450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f614c19c799 code=0x0 [ 344.321478][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 344.331595][ T24] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 344.462677][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.484348][ T24] usb 5-1: config 0 descriptor?? [ 344.530021][ T24] as10x_usb: device has been detected [ 344.544869][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 344.772509][ T24] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 344.784486][ T24] as10x_usb: error during firmware upload part1 [ 344.791947][ T24] Registered device nBox DVB-T Dongle [ 344.894512][ T29] audit: type=1326 audit(1773296544.353:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 344.958208][ T8325] loop6: detected capacity change from 0 to 7 [ 344.991392][ T8325] Dev loop6: unable to read RDB block 7 [ 345.009175][ T8325] loop6: AHDI p2 p3 [ 345.034101][ T8325] loop6: partition table partially beyond EOD, truncated [ 345.249664][ T8325] loop6: p2 size 157513074 extends beyond EOD, truncated [ 345.332333][ T29] audit: type=1326 audit(1773296544.363:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 345.729222][ T29] audit: type=1326 audit(1773296544.363:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 345.799900][ T6551] udevd[6551]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 345.933759][ T29] audit: type=1326 audit(1773296544.363:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 346.066066][ T29] audit: type=1326 audit(1773296544.363:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 346.092773][ T29] audit: type=1326 audit(1773296544.363:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 346.168585][ T29] audit: type=1326 audit(1773296544.363:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 346.251072][ T29] audit: type=1326 audit(1773296544.363:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 346.344048][ T29] audit: type=1326 audit(1773296544.363:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 347.839416][ T5893] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 348.118256][ T8348] netlink: 72 bytes leftover after parsing attributes in process `syz.2.456'. [ 348.173949][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.186489][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.229437][ T42] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 348.385633][ T5928] usb 5-1: USB disconnect, device number 16 [ 348.403381][ T42] usb 1-1: config index 0 descriptor too short (expected 28317, got 36) [ 348.413755][ T42] usb 1-1: config 254 has too many interfaces: 62, using maximum allowed: 32 [ 348.446654][ T5928] Unregistered device nBox DVB-T Dongle [ 348.450644][ T42] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 348.478955][ T5928] as10x_usb: device has been disconnected [ 348.548711][ T42] usb 1-1: config 254 has 0 interfaces, different from the descriptor's value: 62 [ 348.586409][ T42] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 348.614396][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.865656][ T42] usb 1-1: USB disconnect, device number 15 [ 349.857472][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 350.410399][ T9] usb 1-1: config 0 has an invalid interface number: 33 but max is 0 [ 350.418623][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.440831][ T9] usb 1-1: config 0 has no interface number 0 [ 350.447072][ T9] usb 1-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 350.742128][ T9] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 350.762304][ T9] usb 1-1: config 0 interface 33 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 350.849230][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 350.858667][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.880449][ T9] usb 1-1: Product: syz [ 350.884771][ T9] usb 1-1: Manufacturer: syz [ 350.909336][ T9] usb 1-1: SerialNumber: syz [ 350.922112][ T9] usb 1-1: config 0 descriptor?? [ 350.950081][ T8361] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 350.971228][ T9] hdpvr 1-1:0.33: Could not find bulk-in endpoint [ 350.988249][ T9] hdpvr 1-1:0.33: probe with driver hdpvr failed with error -12 [ 351.239019][ T42] usb 1-1: USB disconnect, device number 16 [ 352.571495][ T8399] fuse: Bad value for 'fd' [ 352.583600][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.467'. [ 352.683600][ T8401] autofs4:pid:8401:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65021.1), cmd(0xc018937e) [ 352.729217][ T8401] autofs4:pid:8401:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 352.906457][ T8402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.468'. [ 354.160975][ T8408] kvm: user requested TSC rate below hardware speed [ 354.509281][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 354.543648][ T8414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.471'. [ 354.638099][ T5928] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 354.729219][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 354.803812][ T5928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.816332][ T5928] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 354.825620][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.850871][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.865578][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.914721][ T5928] usb 5-1: config 0 descriptor?? [ 354.993331][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.014115][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.028123][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 355.054109][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.293801][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 355.302896][ T24] usbtmc 4-1:16.0: can't read capabilities [ 355.482622][ T5928] ath6kl: Failed to read usb control message: -71 [ 355.499188][ T5928] ath6kl: Unable to read the bmi data from the device: -71 [ 355.519174][ T5928] ath6kl: Unable to recv target info: -71 [ 355.646020][ T5928] ath6kl: Failed to init ath6kl core: -71 [ 355.659239][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.669981][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.696901][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 355.708532][ T5928] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 355.859443][ T5928] usb 5-1: USB disconnect, device number 17 [ 357.158538][ T9] usb 4-1: USB disconnect, device number 13 [ 357.501430][ T8435] netlink: 36 bytes leftover after parsing attributes in process `syz.3.476'. [ 357.789186][ T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 357.953448][ T9] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 357.972895][ T9] usb 4-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 358.039212][ T5928] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 358.048383][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 358.067718][ T9] usb 4-1: config 1 has no interface number 0 [ 358.121690][ T9] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.303875][ T8445] binder: BINDER_SET_CONTEXT_MGR already set [ 358.310651][ T8445] binder: 8440:8445 ioctl 4018620d 200000004a80 returned -16 [ 358.325443][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.329406][ T8445] binder: 8440:8445 ioctl c0306201 2000000004c0 returned -14 [ 358.348504][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.373106][ T9] usb 4-1: Product: syz [ 358.423798][ T5928] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 358.468404][ T9] usb 4-1: Manufacturer: syz [ 358.478406][ T5928] usb 2-1: config 0 has no interface number 0 [ 358.492924][ T9] usb 4-1: SerialNumber: syz [ 358.500368][ T5928] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 358.557140][ T9] cdc_wdm 4-1:1.128: probe with driver cdc_wdm failed with error -22 [ 358.570854][ T5928] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 358.588107][ T5928] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 358.597777][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.636936][ T5928] usb 2-1: config 0 descriptor?? [ 358.696098][ T5928] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 358.895857][ T8437] iowarrior 2-1:0.1: Error -90 while submitting URB [ 358.947378][ T5928] usb 2-1: USB disconnect, device number 14 [ 359.762025][ T8453] blkio.reset_stats is deprecated [ 361.688970][ T5928] usb 4-1: USB disconnect, device number 14 [ 361.952830][ T5841] Bluetooth: hci3: Malformed LE Event: 0x0d [ 362.122693][ T8476] QAT: failed to copy from user. [ 362.290236][ T8475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.487'. [ 362.980862][ T5928] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 363.223789][ T5928] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 363.244154][ T5928] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.477402][ T5928] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 363.507144][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.517118][ T5928] usb 5-1: Product: syz [ 363.639593][ T5928] usb 5-1: Manufacturer: syz [ 363.778016][ T5928] usb 5-1: SerialNumber: syz [ 364.019988][ T5928] rtl8150 5-1:1.0: couldn't find required endpoints [ 364.158046][ T5928] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 364.245683][ T5928] usb 5-1: USB disconnect, device number 18 [ 364.672779][ T8506] loop6: detected capacity change from 0 to 524288000 [ 365.249774][ T5928] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 365.568896][ T8519] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 365.584236][ T5928] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 365.596631][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.609198][ T5928] usb 5-1: Product: syz [ 365.613505][ T5928] usb 5-1: Manufacturer: syz [ 365.632619][ T5928] usb 5-1: SerialNumber: syz [ 365.857056][ T5928] usb 5-1: config 0 descriptor?? [ 365.975888][ T5928] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 019 [ 366.593035][ T5928] (null): failure setting delay to 10us [ 366.609951][ T5928] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 366.659287][ T5928] usb 5-1: USB disconnect, device number 19 [ 366.819502][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 367.029509][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 367.071879][ T24] usb 2-1: config 0 has no interfaces? [ 367.092952][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 367.139279][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 367.169174][ T24] usb 2-1: Manufacturer: syz [ 367.191527][ T24] usb 2-1: config 0 descriptor?? [ 367.745603][ T8542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.752902][ T8542] IPv6: NLM_F_CREATE should be set when creating new route [ 367.760191][ T8542] IPv6: NLM_F_CREATE should be set when creating new route [ 367.869477][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 368.059258][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 368.070934][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 368.085489][ T24] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 368.097790][ T24] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 368.107875][ T24] usb 5-1: Product: syz [ 368.115086][ T24] usb 5-1: Manufacturer: syz [ 368.124230][ T24] usb 5-1: SerialNumber: syz [ 368.299431][ T8554] netlink: 32 bytes leftover after parsing attributes in process `syz.2.504'. [ 368.322454][ T24] usb 5-1: config 0 descriptor?? [ 368.424026][ T8537] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 369.568294][ T24] usb 2-1: USB disconnect, device number 15 [ 370.909793][ T5194] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 371.101590][ T5194] usb 1-1: Using ep0 maxpacket: 8 [ 371.113237][ T5194] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 371.123021][ T5194] usb 1-1: config 179 has no interface number 0 [ 371.147886][ T5194] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 371.245609][ T5194] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 371.257536][ T5194] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 371.278402][ T5194] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 371.307943][ T5194] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 371.389450][ T5194] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 371.398555][ T5194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.467068][ T8576] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 371.508092][ T8586] random: crng reseeded on system resumption [ 371.539975][ T5921] usb 5-1: USB disconnect, device number 20 [ 371.860342][ T5921] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 371.889817][ T5194] usb 1-1: USB disconnect, device number 17 [ 371.889873][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 371.904233][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 372.060565][ T8595] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 372.085582][ T8595] team0: Device gtp0 is of different type [ 372.099645][ T5928] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 372.129564][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 372.136398][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 208, changing to 7 [ 372.147825][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 18189, setting to 1024 [ 372.307100][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 372.323037][ T5928] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 372.332033][ T5921] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 372.341521][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.353400][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.364306][ T5921] usb 5-1: Product: syz [ 372.369358][ T5921] usb 5-1: Manufacturer: syz [ 372.375247][ T5928] usb 3-1: config 0 has no interface number 0 [ 372.387248][ T5921] usb 5-1: SerialNumber: syz [ 372.407614][ T5928] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 372.417467][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.432452][ T5928] usb 3-1: Product: syz [ 372.446902][ T5921] usb 5-1: config 0 descriptor?? [ 372.459973][ T5928] usb 3-1: Manufacturer: syz [ 372.485008][ T5928] usb 3-1: SerialNumber: syz [ 372.503343][ T5928] usb 3-1: config 0 descriptor?? [ 372.520051][ T5921] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 372.745048][ T5928] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 372.757184][ T5928] uvcvideo 3-1:0.31: No valid video chain found. [ 372.827537][ T5194] usb 5-1: USB disconnect, device number 21 [ 372.835018][ T1345] usb 5-1: Failed to submit usb control message: -71 [ 372.848347][ T1345] usb 5-1: unable to send the bmi data to the device: -71 [ 372.884358][ T1345] usb 5-1: unable to get target info from device [ 372.903580][ T1345] usb 5-1: could not get target info (-71) [ 372.926794][ T1345] usb 5-1: could not probe fw (-71) [ 372.955123][ T5928] usb 3-1: USB disconnect, device number 14 [ 373.622177][ T8613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.528'. [ 373.685248][ T8620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.731096][ T8613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.742000][ T8613] netlink: 148 bytes leftover after parsing attributes in process `syz.0.528'. [ 374.098652][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 375.332943][ T8635] netlink: 32 bytes leftover after parsing attributes in process `syz.2.537'. [ 375.354467][ T8638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.538'. [ 375.576982][ T8642] geneve2: entered allmulticast mode [ 375.819955][ T8650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.543'. [ 376.062982][ T8659] ucma_write: process 464 (syz.1.547) changed security contexts after opening file descriptor, this is not allowed. [ 376.169194][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 376.181608][ T8664] netlink: 36 bytes leftover after parsing attributes in process `syz.2.548'. [ 376.192521][ T8664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.255504][ T8664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.312816][ T8667] netlink: 148 bytes leftover after parsing attributes in process `syz.2.548'. [ 376.360724][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 376.387677][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.417423][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 376.417437][ T29] audit: type=1326 audit(1773296575.933:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.1.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75db9c799 code=0x7ffc0000 [ 376.456342][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 376.485617][ T9] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 376.525957][ T29] audit: type=1326 audit(1773296575.963:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.1.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd75db5cfce code=0x7ffc0000 [ 376.550066][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.575562][ T9] usb 5-1: config 0 descriptor?? [ 376.582188][ T29] audit: type=1326 audit(1773296575.963:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.1.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75db9c799 code=0x7ffc0000 [ 376.617462][ T29] audit: type=1326 audit(1773296575.963:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.1.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd75db5cfce code=0x7ffc0000 [ 376.672472][ T29] audit: type=1326 audit(1773296575.973:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.1.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd75db5cfce code=0x7ffc0000 [ 376.727389][ T29] audit: type=1326 audit(1773296575.973:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.1.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd75db5cfce code=0x7ffc0000 [ 376.752089][ T29] audit: type=1326 audit(1773296575.993:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.1.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd75db5cfce code=0x7ffc0000 [ 376.777666][ T29] audit: type=1326 audit(1773296576.003:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.1.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd75db5cfce code=0x7ffc0000 [ 376.859040][ T29] audit: type=1326 audit(1773296576.003:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.1.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd75db5cfce code=0x7ffc0000 [ 376.896081][ T29] audit: type=1326 audit(1773296576.003:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.1.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd75db5cfce code=0x7ffc0000 [ 377.022904][ T9] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 377.048188][ T9] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 377.072583][ T9] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 377.087234][ T9] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 377.098010][ T9] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 377.110593][ T8673] netlink: 'syz.0.552': attribute type 6 has an invalid length. [ 377.199206][ T9] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 377.210021][ T9] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 377.229190][ T9] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 377.238432][ T9] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 377.259235][ T9] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 377.300730][ T9] pantherlord 0003:0810:0002.0002: hidraw0: USB HID v0.08 Device [HID 0810:0002] on usb-dummy_hcd.4-1/input0 [ 377.300881][ T9] pantherlord 0003:0810:0002.0002: no output reports found [ 377.321459][ T9] usb 5-1: USB disconnect, device number 22 [ 377.460025][ T8678] fido_id[8678]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 377.939202][ T9] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 378.171597][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 378.194559][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 68, setting to 64 [ 378.239868][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 378.293238][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.322238][ T9] usb 2-1: config 0 descriptor?? [ 378.338151][ T8686] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 378.350571][ T8701] ipvlan2: entered promiscuous mode [ 378.634528][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.641318][ T5921] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 378.652203][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.672121][ T8712] netlink: 36 bytes leftover after parsing attributes in process `syz.0.568'. [ 378.684087][ T8712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.725332][ T8712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.757441][ T8713] netlink: 148 bytes leftover after parsing attributes in process `syz.0.568'. [ 378.778725][ T9] cypress 0003:04B4:DE64.0003: hidraw0: USB HID vff.ff Device [HID 04b4:de64] on usb-dummy_hcd.1-1/input0 [ 378.885212][ T5921] usb 4-1: config 0 has an invalid interface number: 13 but max is 0 [ 378.893738][ T5921] usb 4-1: config 0 has no interface number 0 [ 378.907432][ T5921] usb 4-1: config 0 interface 13 has no altsetting 0 [ 378.924261][ T5921] usb 4-1: Dual-Role OTG device on HNP port [ 378.943013][ T5921] usb 4-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice=1e.7a [ 378.970963][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.982515][ T9] usb 2-1: USB disconnect, device number 16 [ 379.017867][ T5921] usb 4-1: Product: syz [ 379.025406][ T5921] usb 4-1: Manufacturer: syz [ 379.031890][ T5921] usb 4-1: SerialNumber: syz [ 379.044560][ T5921] usb 4-1: config 0 descriptor?? [ 379.248136][ T8720] usb usb9: usbfs: process 8720 (syz.4.572) did not claim interface 0 before use [ 379.314524][ T5921] snd-usb-caiaq 4-1:0.13: can't set alt interface. [ 379.330284][ T5921] usb 4-1: unable to init card! (ret=-5) [ 379.336737][ T5921] snd-usb-caiaq 4-1:0.13: probe with driver snd-usb-caiaq failed with error -5 [ 379.360555][ T5921] usb 4-1: USB disconnect, device number 15 [ 379.639249][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 379.810805][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 379.817937][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.832675][ T24] usb 5-1: config 0 has no interfaces? [ 379.846918][ T24] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 379.876651][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.899997][ T24] usb 5-1: Product: syz [ 379.904306][ T24] usb 5-1: Manufacturer: syz [ 379.908932][ T24] usb 5-1: SerialNumber: syz [ 379.942754][ T24] usb 5-1: config 0 descriptor?? [ 379.988214][ T5841] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 380.069272][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 380.161400][ T5893] usb 5-1: USB disconnect, device number 23 [ 380.235707][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 380.247688][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.262485][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 380.272116][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 380.283007][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.291408][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 380.302919][ T9] usb 3-1: config 0 descriptor?? [ 380.329494][ T8751] fuse: Unknown parameter '0xffffffffffffffff' [ 380.368588][ T8750] netlink: 72 bytes leftover after parsing attributes in process `syz.1.583'. [ 380.449189][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 380.456674][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.468326][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.480781][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 380.494138][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 380.503824][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.521187][ T24] usb 4-1: config 0 descriptor?? [ 381.070531][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input11 [ 381.301811][ T24] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 381.345468][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.585'. [ 381.367851][ T24] usb 4-1: USB disconnect, device number 16 [ 381.570468][ T8762] fido_id[8762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 381.596961][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 381.596978][ T29] audit: type=1326 audit(1773296581.113:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 381.669237][ T29] audit: type=1326 audit(1773296581.113:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 381.729401][ T29] audit: type=1326 audit(1773296581.223:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f394795cfce code=0x7ffc0000 [ 381.867905][ T29] audit: type=1326 audit(1773296581.223:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 381.955886][ T29] audit: type=1326 audit(1773296581.223:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 382.062396][ T8774] veth1_to_bond: entered allmulticast mode [ 382.090893][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.587'. [ 382.100307][ T29] audit: type=1326 audit(1773296581.233:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 382.130314][ T29] audit: type=1326 audit(1773296581.233:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394799c799 code=0x7ffc0000 [ 383.055299][ T8789] netlink: 'syz.3.594': attribute type 4 has an invalid length. [ 383.526460][ T8801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.596'. [ 383.569631][ T8794] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 383.587574][ T8803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.607940][ T8803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.619177][ T8803] netlink: 148 bytes leftover after parsing attributes in process `syz.4.596'. [ 383.656687][ T42] usb 3-1: USB disconnect, device number 15 [ 383.919308][ T8807] fuse: Unknown parameter '0xffffffffffffffff' [ 383.935683][ T8807] netlink: 72 bytes leftover after parsing attributes in process `syz.0.597'. [ 384.059633][ T8794] usb 4-1: Using ep0 maxpacket: 16 [ 384.092738][ T8794] usb 4-1: config 0 has no interfaces? [ 384.102329][ T8794] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 384.169039][ T8794] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 384.181474][ T8794] usb 4-1: Manufacturer: syz [ 384.244610][ T8794] usb 4-1: config 0 descriptor?? [ 385.129367][ T5194] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 385.289416][ T5194] usb 3-1: Using ep0 maxpacket: 8 [ 385.320598][ T8773] veth1_to_bond: left allmulticast mode [ 385.355082][ T5194] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 385.535448][ T5194] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 385.545906][ T5194] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 385.554742][ T5194] usb 3-1: Product: syz [ 385.559782][ T5194] usb 3-1: Manufacturer: syz [ 385.610610][ T5194] usb 3-1: SerialNumber: syz [ 385.864288][ T5194] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 385.875495][ T5194] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 385.884727][ T5194] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 385.912747][ T5194] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 386.066073][ T5194] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 386.089903][ T5194] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 386.125104][ T5194] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 386.274866][ T8793] usb 3-1: USB disconnect, device number 16 [ 386.307027][ T8793] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 386.333396][ T8793] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 386.359420][ T8793] visor 3-1:1.0: device disconnected [ 386.491837][ T8834] netlink: 36 bytes leftover after parsing attributes in process `syz.4.607'. [ 386.503333][ T8834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.522756][ T8834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.533264][ T8834] netlink: 148 bytes leftover after parsing attributes in process `syz.4.607'. [ 386.884489][ T8793] usb 4-1: USB disconnect, device number 17 [ 386.949168][ T42] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 387.181976][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 387.206980][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.218964][ T42] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 387.256182][ T42] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 387.267956][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.315282][ T42] usb 1-1: config 0 descriptor?? [ 387.720240][ T8860] fuse: Unknown parameter '0xffffffffffffffff' [ 387.780510][ T8860] netlink: 72 bytes leftover after parsing attributes in process `syz.1.612'. [ 387.808790][ T8857] netlink: 36 bytes leftover after parsing attributes in process `syz.2.611'. [ 387.860504][ T8857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.449763][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 388.491493][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 388.529179][ T8865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.543170][ T8857] netlink: 148 bytes leftover after parsing attributes in process `syz.2.611'. [ 388.572542][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 389.954138][ T8794] usb 1-1: USB disconnect, device number 18 [ 390.691154][ T5194] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 390.982340][ T5194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 391.046705][ T5194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.171870][ T5194] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 391.196409][ T5194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.255886][ T5194] usb 1-1: config 0 descriptor?? [ 391.721211][ T5194] hid_parser_main: 28 callbacks suppressed [ 391.721291][ T5194] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 391.761014][ T5194] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 391.779599][ T5194] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 391.886928][ T5194] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 391.904356][ T5194] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 391.925892][ T5194] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 391.953258][ T5194] isku 0003:1E7D:319C.0005: item fetching failed at offset 6/7 [ 391.972046][ T5194] isku 0003:1E7D:319C.0005: parse failed [ 391.988144][ T5194] isku 0003:1E7D:319C.0005: probe with driver isku failed with error -22 [ 392.044736][ T5194] usb 1-1: USB disconnect, device number 19 [ 392.894279][ T8927] No such timeout policy "syz1" [ 393.326094][ T8933] fuse: Bad value for 'fd' [ 393.420351][ T5940] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 393.643731][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 394.064770][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.109242][ T5940] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.433844][ T5940] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 394.512947][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.592058][ T5940] usb 5-1: config 0 descriptor?? [ 396.409778][ T8794] usb 5-1: USB disconnect, device number 24 [ 396.609532][ T5194] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 396.650691][ T8974] binder: 8966:8974 ioctl c0306201 2000000004c0 returned -14 [ 396.731273][ T8975] No such timeout policy "syz1" [ 396.800039][ T5194] usb 4-1: Using ep0 maxpacket: 32 [ 396.820007][ T5194] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 396.859632][ T5194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.875030][ T5194] usb 4-1: Product: syz [ 396.885362][ T5194] usb 4-1: Manufacturer: syz [ 396.913650][ T5194] usb 4-1: SerialNumber: syz [ 396.922219][ T5194] usb 4-1: config 0 descriptor?? [ 396.948152][ T5194] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 397.089193][ T8794] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 397.251620][ T8794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.266211][ T8794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.279449][ T8794] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.292927][ T8794] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.554589][ T8794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.582696][ T8794] usb 5-1: config 0 descriptor?? [ 397.957814][ T5194] gspca_ov534_9: reg_w failed -71 [ 398.017691][ T8794] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 398.028610][ T8794] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 398.038684][ T8794] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 398.107315][ T8794] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 398.117452][ T8794] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 398.135199][ T8794] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 398.158796][ T8794] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 398.210392][ T8794] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 398.228178][ T8794] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 398.249228][ T5194] gspca_ov534_9: Unknown sensor 0000 [ 398.249327][ T5194] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 398.288832][ T8794] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 398.332518][ T5194] usb 4-1: USB disconnect, device number 18 [ 398.359269][ T8794] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 398.429978][ T8794] usb 5-1: USB disconnect, device number 25 [ 398.503489][ T8990] fido_id[8990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 398.522607][ T8793] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 398.935520][ T8793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.950158][ T8793] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 398.995535][ T8793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 399.008115][ T8793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 399.065104][ T8793] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 399.082216][ T8793] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 399.091611][ T8793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 399.175969][ T8793] usb 1-1: Product: syz [ 399.343719][ T8793] usb 1-1: Manufacturer: syz [ 399.355212][ T8793] usb 1-1: SerialNumber: syz [ 399.370929][ T8793] usb 1-1: config 0 descriptor?? [ 399.686384][ T8793] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 399.695771][ T8793] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 399.883321][ T8793] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 399.915931][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 399.951963][ T8793] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 399.975215][ T8793] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 400.012849][ T8793] usb 1-1: USB disconnect, device number 20 [ 400.209495][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 400.315610][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.326754][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.428449][ T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 400.445971][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.565639][ T24] usb 4-1: config 0 descriptor?? [ 401.262618][ T9029] No such timeout policy "syz1" [ 402.679271][ T8794] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 402.871228][ T8794] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.881569][ T8794] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 402.956743][ T8794] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 402.972803][ T24] usb 4-1: USB disconnect, device number 19 [ 402.983482][ T8794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 402.998000][ T8794] usb 1-1: SerialNumber: syz [ 403.297856][ T8794] usb 1-1: 0:2 : does not exist [ 403.515708][ T8794] usb 1-1: USB disconnect, device number 21 [ 403.638130][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.729820][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 403.895813][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 404.479663][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 404.506565][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 404.531116][ T29] audit: type=1326 audit(1773296604.053:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.4.692" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3128b9c799 code=0x0 [ 404.539420][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 404.682222][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.721480][ T24] usb 4-1: config 0 descriptor?? [ 405.039194][ T8794] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 405.231698][ T8794] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 405.263432][ T8794] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.300235][ T8794] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.328889][ T8794] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 405.349357][ T8794] usb 1-1: config 0 interface 0 has no altsetting 0 [ 405.359594][ T8794] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 405.379129][ T8794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.390920][ T8794] usb 1-1: config 0 descriptor?? [ 405.634147][ T5194] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 405.823744][ T24] corsair-cpro 0003:1B1C:0C10.0007: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 405.847563][ T5194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.859655][ T5194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.891962][ T5194] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 405.895357][ T8794] hid-alps 0003:044E:120C.0008: unbalanced delimiter at end of report description [ 405.919012][ T8794] hid-alps 0003:044E:120C.0008: parse failed [ 405.925752][ T8794] hid-alps 0003:044E:120C.0008: probe with driver hid-alps failed with error -22 [ 405.958007][ T5194] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.029494][ T5194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.039973][ T42] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 406.064047][ T5914] usb 1-1: USB disconnect, device number 22 [ 406.104345][ T5194] usb 5-1: config 0 descriptor?? [ 406.210732][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 406.219871][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.230738][ T42] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 406.243484][ T24] corsair-cpro 0003:1B1C:0C10.0007: probe with driver corsair-cpro failed with error -110 [ 406.254869][ T42] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 406.264591][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.287372][ T24] usb 4-1: USB disconnect, device number 20 [ 406.305665][ T42] usb 2-1: config 0 descriptor?? [ 406.553552][ T5194] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 406.599335][ T5194] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 406.639798][ T8794] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 406.811413][ T8794] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 406.825590][ T8793] usb 5-1: USB disconnect, device number 26 [ 406.835676][ T8794] usb 3-1: config 0 interface 0 has no altsetting 0 [ 406.857345][ T8794] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 406.869035][ T8794] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 406.877445][ T8794] usb 3-1: Product: syz [ 406.883061][ T8794] usb 3-1: Manufacturer: syz [ 406.897379][ T8794] usb 3-1: SerialNumber: syz [ 406.931958][ T8794] usb 3-1: config 0 descriptor?? [ 406.942740][ T8794] usb 3-1: selecting invalid altsetting 0 [ 407.162032][ T8794] usb 3-1: USB disconnect, device number 17 [ 407.430738][ T9123] netlink: 'syz.3.704': attribute type 21 has an invalid length. [ 407.453158][ T9123] netlink: 'syz.3.704': attribute type 6 has an invalid length. [ 407.479484][ T9123] netlink: 132 bytes leftover after parsing attributes in process `syz.3.704'. [ 408.516573][ T5194] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 408.683808][ T5194] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 408.693834][ T5194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.714482][ T5194] usb 4-1: Product: syz [ 408.723326][ T5194] usb 4-1: Manufacturer: syz [ 408.742490][ T5194] usb 4-1: SerialNumber: syz [ 409.056909][ T5194] rtl8150 4-1:1.0: couldn't reset the device [ 409.073266][ T5194] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 409.111217][ T5194] usb 4-1: USB disconnect, device number 21 [ 409.281825][ T24] usb 2-1: USB disconnect, device number 17 [ 410.088123][ T9177] fuse: Bad value for 'fd' [ 410.169185][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 410.471414][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 410.479709][ T24] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 410.692853][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.720565][ T24] usb 2-1: config 0 descriptor?? [ 410.815599][ T24] as10x_usb: device has been detected [ 410.843759][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 410.894305][ T24] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 410.936434][ T24] as10x_usb: error during firmware upload part1 [ 410.955067][ T24] Registered device nBox DVB-T Dongle [ 411.613372][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 411.781167][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.792309][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.821851][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.859644][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.882241][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.934128][ T24] usb 4-1: config 0 descriptor?? [ 412.021915][ T5940] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 412.199566][ T5940] usb 1-1: Using ep0 maxpacket: 8 [ 412.223046][ T5940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.233884][ T5940] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 412.243374][ T5940] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 412.252972][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.296376][ T5940] usb 1-1: config 0 descriptor?? [ 412.433069][ T24] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 412.565265][ T5940] usb 4-1: USB disconnect, device number 22 [ 412.657863][ T9202] fido_id[9202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 413.026108][ T24] usb 2-1: USB disconnect, device number 18 [ 413.061737][ T24] Unregistered device nBox DVB-T Dongle [ 413.070106][ T24] as10x_usb: device has been disconnected [ 414.625962][ T9248] netlink: 36 bytes leftover after parsing attributes in process `syz.2.746'. [ 414.662783][ T5940] usb 1-1: USB disconnect, device number 23 [ 414.776739][ T9248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.877413][ T9250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.090006][ T9248] netlink: 148 bytes leftover after parsing attributes in process `syz.2.746'. [ 415.749759][ T42] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 415.909343][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 415.922419][ T42] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 415.939145][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.954811][ T42] usb 1-1: Product: syz [ 415.965371][ T42] usb 1-1: Manufacturer: syz [ 415.973823][ T42] usb 1-1: SerialNumber: syz [ 415.985016][ T42] usb 1-1: config 0 descriptor?? [ 416.402685][ T42] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 416.423924][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 416.462073][ T42] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 416.483882][ T42] usb 1-1: media controller created [ 416.523493][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.727972][ T9281] kvm: kvm [9278]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 416.774492][ T9281] kvm: kvm [9278]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 416.815907][ T9281] kvm: kvm [9278]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 416.850504][ T9281] kvm: kvm [9278]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 416.859983][ T9281] kvm: kvm [9278]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 417.112216][ T9261] dtv5100: wlen = 0, aborting. [ 417.117355][ T42] zl10353_read_register: readreg error (reg=127, ret==0) [ 417.174043][ T42] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 417.200436][ T42] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 417.220618][ T42] usb 1-1: USB disconnect, device number 24 [ 417.282679][ T42] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 417.634554][ T29] audit: type=1326 audit(1773296617.153:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614c19c799 code=0x7ffc0000 [ 417.923167][ T29] audit: type=1326 audit(1773296617.183:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614c19c799 code=0x7ffc0000 [ 418.217650][ T29] audit: type=1326 audit(1773296617.183:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f614c19c799 code=0x7ffc0000 [ 418.317277][ T9314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.768'. [ 418.412986][ T9316] input: syz0 as /devices/virtual/input/input13 [ 418.444130][ T9317] netlink: 148 bytes leftover after parsing attributes in process `syz.1.768'. [ 418.489232][ T5940] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 418.496888][ T29] audit: type=1326 audit(1773296617.183:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614c19c799 code=0x7ffc0000 [ 418.605905][ T29] audit: type=1326 audit(1773296617.183:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614c19c799 code=0x7ffc0000 [ 418.669191][ T29] audit: type=1326 audit(1773296617.183:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f614c19c799 code=0x7ffc0000 [ 418.691749][ T29] audit: type=1326 audit(1773296617.183:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614c19c799 code=0x7ffc0000 [ 418.715201][ T29] audit: type=1326 audit(1773296617.193:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614c19c799 code=0x7ffc0000 [ 418.740415][ T29] audit: type=1326 audit(1773296617.193:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f614c19c799 code=0x7ffc0000 [ 418.767663][ T29] audit: type=1326 audit(1773296617.193:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614c19c799 code=0x7ffc0000 [ 418.792196][ T5940] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 418.802241][ T9314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.815035][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.845698][ T5940] usb 5-1: Product: syz [ 418.877079][ T5940] usb 5-1: Manufacturer: syz [ 418.909314][ T5940] usb 5-1: SerialNumber: syz [ 418.941862][ T5940] usb 5-1: config 0 descriptor?? [ 419.043825][ T9325] netlink: 'syz.0.771': attribute type 1 has an invalid length. [ 419.162779][ T9325] bond2: entered promiscuous mode [ 419.188805][ T9325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 419.323390][ T9327] 8021q: adding VLAN 0 to HW filter on device bond3 [ 419.364295][ T9327] bond2: (slave bond3): making interface the new active one [ 419.393713][ T9327] bond3: entered promiscuous mode [ 419.420230][ T9327] bond2: (slave bond3): Enslaving as an active interface with an up link [ 419.769250][ T8794] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 419.945774][ T8794] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 419.979198][ T8794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.999220][ T5940] usb 5-1: Firmware version (0.0) predates our first public release. [ 420.007443][ T5940] usb 5-1: Please update to version 0.2 or newer [ 420.029131][ T8794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.039009][ T8794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 420.092654][ T8794] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 420.102522][ T8794] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 420.111169][ T8794] usb 4-1: Manufacturer: syz [ 420.120447][ T8794] usb 4-1: config 0 descriptor?? [ 420.132143][ T5940] usb 5-1: USB disconnect, device number 27 [ 420.149290][ T796] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 420.335807][ T796] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 420.347138][ T796] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 420.358648][ T796] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 420.375501][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.412288][ T9341] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 420.431761][ T796] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 420.537276][ T8794] hid_parser_main: 5 callbacks suppressed [ 420.537300][ T8794] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 420.624414][ T8794] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 420.711460][ T796] usb 1-1: USB disconnect, device number 25 [ 420.965831][ T9364] xt_TCPMSS: Only works on TCP SYN packets [ 421.066502][ T9367] netlink: 27 bytes leftover after parsing attributes in process `syz.2.784'. [ 421.449180][ T796] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 421.616985][ T796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 421.747779][ T796] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 421.774143][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.796334][ T796] usb 3-1: Product: syz [ 421.806642][ T796] usb 3-1: Manufacturer: syz [ 421.818003][ T796] usb 3-1: SerialNumber: syz [ 421.828761][ T9373] loop3: detected capacity change from 0 to 7 [ 421.839220][ T9373] Dev loop3: unable to read RDB block 7 [ 421.857115][ T9373] loop3: unable to read partition table [ 421.864311][ T9373] loop3: partition table beyond EOD, truncated [ 421.885739][ T9373] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 422.447690][ T9392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.795'. [ 422.619268][ T8794] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 422.646334][ T42] usb 4-1: USB disconnect, device number 23 [ 422.794193][ T8794] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 422.814916][ T8794] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 422.826503][ T8794] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 422.836546][ T8794] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 422.853171][ T8794] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 422.871749][ T8794] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 422.888323][ T8794] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 422.904172][ T8794] usb 2-1: Product: syz [ 422.914250][ T8794] usb 2-1: Manufacturer: syz [ 422.938230][ T8794] cdc_wdm 2-1:1.0: skipping garbage [ 422.946075][ T8794] cdc_wdm 2-1:1.0: skipping garbage [ 422.955695][ T8794] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 422.961888][ T8794] cdc_wdm 2-1:1.0: Unknown control protocol [ 423.069824][ T796] usb 3-1: current rate 47898 is different from the runtime rate 48000 [ 423.285045][ T796] usb 3-1: USB disconnect, device number 18 [ 423.356840][ T6089] udevd[6089]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.600841][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 423.804778][ T24] usb 2-1: USB disconnect, device number 19 [ 425.139209][ T42] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 425.299263][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 425.309474][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 425.323874][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 425.336402][ T42] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 425.382401][ T42] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 425.418473][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.464691][ T42] usb 2-1: Product: syz [ 425.481983][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.497556][ T42] usb 2-1: Manufacturer: syz [ 425.518144][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.534325][ T42] usb 2-1: SerialNumber: syz [ 425.549024][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 425.586793][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 425.633592][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.721114][ T24] usb 5-1: config 0 descriptor?? [ 425.829416][ T42] usb 2-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 425.848237][ T42] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 425.877282][ T42] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 425.927748][ T42] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 425.942716][ T42] usb 2-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 425.951815][ T42] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 425.959009][ T42] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.063487][ T9456] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4290396940 (8580793880 ns) > initial count (7730345080 ns). Using initial count to start timer. [ 426.086847][ T9456] kvm: kvm [9455]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 426.101196][ T9456] kvm: kvm [9455]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 426.102197][ T42] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 426.223774][ T42] usb 2-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 426.241598][ T42] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 426.254313][ T42] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.266672][ T24] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 426.476119][ T42] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 426.514698][ T42] usb 2-1: USB disconnect, device number 20 [ 426.605204][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.774653][ T9475] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 428.412091][ T42] usb 5-1: USB disconnect, device number 28 [ 428.512961][ T9495] netlink: 60 bytes leftover after parsing attributes in process `syz.3.830'. [ 428.527838][ T9495] unsupported nlmsg_type 40 [ 429.679407][ T42] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 429.830135][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 429.838720][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.871448][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.881515][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 429.918931][ T42] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 429.931240][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.942252][ T42] usb 2-1: config 0 descriptor?? [ 429.960245][ T42] hub 2-1:0.0: USB hub found [ 430.095098][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.106497][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 430.125306][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.196507][ T42] hub 2-1:0.0: 1 port detected [ 430.205893][ T24] usb 4-1: config 0 descriptor?? [ 430.449330][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 430.458438][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 430.485320][ T24] usb 4-1: USB disconnect, device number 24 [ 430.791103][ T5194] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 430.820991][ T9533] netlink: 'syz.2.844': attribute type 3 has an invalid length. [ 430.828780][ T9533] netlink: 'syz.2.844': attribute type 3 has an invalid length. [ 430.865453][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.844'. [ 430.950024][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 430.979177][ T5194] usb 5-1: Using ep0 maxpacket: 32 [ 430.990297][ T5194] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 431.009208][ T5194] usb 5-1: config 0 has no interface number 0 [ 431.017635][ T5194] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 431.032053][ T5194] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 431.041384][ T42] hub 2-1:0.0: activate --> -90 [ 431.049174][ T5194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.059639][ T5194] usb 5-1: Product: syz [ 431.064999][ T5194] usb 5-1: Manufacturer: syz [ 431.072109][ T5194] usb 5-1: SerialNumber: syz [ 431.084463][ T5194] usb 5-1: config 0 descriptor?? [ 431.093187][ T9530] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 431.121793][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.133351][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 431.146965][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 431.156813][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.169706][ T24] usb 4-1: config 0 descriptor?? [ 431.242824][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 431.250578][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 431.261855][ T796] usb 2-1: USB disconnect, device number 21 [ 431.313796][ T9530] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 431.653959][ T24] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 431.863083][ C0] plantronics 0003:047F:FFFF.000D: hid_field_extract() called with n (132) > 32! (kworker/u8:13) [ 432.066649][ T5940] usb 4-1: USB disconnect, device number 25 [ 432.318493][ T9547] fuse: Bad value for 'fd' [ 432.779145][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'. [ 433.199244][ T796] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 433.251701][ T5194] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 433.262079][ T5194] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 433.280944][ T5194] asix 5-1:0.188: probe with driver asix failed with error -71 [ 433.371379][ T5194] usb 5-1: USB disconnect, device number 29 [ 433.380000][ T796] usb 2-1: Using ep0 maxpacket: 32 [ 433.387267][ T796] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 433.395773][ T796] usb 2-1: config 0 has no interface number 0 [ 433.402035][ T796] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 433.431762][ T796] usb 2-1: config 0 interface 196 has no altsetting 0 [ 433.441667][ T796] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 433.453487][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.468129][ T796] usb 2-1: Product: syz [ 433.473570][ T796] usb 2-1: Manufacturer: syz [ 433.478416][ T796] usb 2-1: SerialNumber: syz [ 433.489879][ T796] usb 2-1: config 0 descriptor?? [ 433.495578][ T9553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 434.875020][ T9580] syzkaller1: entered promiscuous mode [ 434.892004][ T9580] syzkaller1: entered allmulticast mode [ 435.282927][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 435.609169][ T8794] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 435.779249][ T8794] usb 4-1: Using ep0 maxpacket: 16 [ 435.786609][ T8794] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.797055][ T8794] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.811988][ T8794] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 435.822523][ T8794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.830705][ T8794] usb 4-1: Product: syz [ 435.834997][ T8794] usb 4-1: Manufacturer: syz [ 435.839753][ T8794] usb 4-1: SerialNumber: syz [ 436.111677][ T796] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 436.138008][ T8794] usb 4-1: 0:2 : does not exist [ 436.147604][ T796] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 436.172006][ T8794] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 436.206696][ T796] usb 2-1: USB disconnect, device number 22 [ 436.324284][ T8794] usb 4-1: USB disconnect, device number 26 [ 436.434888][ T9597] udevd[9597]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.499627][ T9601] fuse: Bad value for 'fd' [ 439.070253][ T9630] af_packet: tpacket_rcv: packet too big, clamped from 1476 to 4294967272. macoff=96 [ 439.680334][ T9649] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 439.689153][ T9649] bridge1: entered promiscuous mode [ 439.694399][ T9649] bridge1: entered allmulticast mode [ 439.760051][ T9647] netlink: 36 bytes leftover after parsing attributes in process `syz.2.876'. [ 439.791061][ T9647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.831822][ T9647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.843233][ T9647] netlink: 148 bytes leftover after parsing attributes in process `syz.2.876'. [ 440.008407][ T796] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 440.081387][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.089755][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.124839][ T796] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 440.224476][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.880'. [ 440.258815][ T9663] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 440.589169][ T796] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 440.829128][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 440.838195][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.909206][ T796] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 440.963653][ T796] usb 5-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 441.002854][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.024751][ T796] usb 5-1: config 0 descriptor?? [ 441.253620][ T9676] fuse: Bad value for 'fd' [ 441.281579][ T796] usb 5-1: string descriptor 0 read error: -71 [ 441.329709][ T796] usb 5-1: USB disconnect, device number 30 [ 442.006189][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 442.164629][ T9679] team0: Port device team_slave_0 removed [ 443.347454][ T9707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.891'. [ 443.420636][ T9707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.617713][ T9707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.667284][ T9714] netlink: 148 bytes leftover after parsing attributes in process `syz.1.891'. [ 444.117465][ T9719] netlink: 'syz.3.894': attribute type 4 has an invalid length. [ 444.849204][ T5194] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 445.031631][ T5194] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.062505][ T5194] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 445.082785][ T5194] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 445.122183][ T5194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.168333][ T5194] usb 2-1: config 0 descriptor?? [ 445.663976][ T5194] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 445.709939][ T5194] dvb-usb: bulk message failed: -22 (3/0) [ 445.731374][ T5194] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 445.768461][ T5194] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 445.899176][ T5194] usb 2-1: media controller created [ 445.907115][ T5194] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.971723][ T5194] dvb-usb: bulk message failed: -22 (6/0) [ 445.979613][ T5194] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 446.008896][ T5194] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 446.019554][ T8793] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 446.072882][ T5194] dvb-usb: schedule remote query interval to 150 msecs. [ 446.109106][ T5194] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 446.128819][ T5194] usb 2-1: USB disconnect, device number 23 [ 446.201317][ T8793] usb 5-1: Using ep0 maxpacket: 16 [ 446.206699][ T5194] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 446.216294][ T8793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 446.240645][ T8793] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 446.250041][ T8793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.258108][ T8793] usb 5-1: Product: syz [ 446.298889][ T8793] usb 5-1: Manufacturer: syz [ 446.307162][ T8793] usb 5-1: SerialNumber: syz [ 446.330118][ T8793] usb 5-1: config 0 descriptor?? [ 446.342748][ T8793] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 446.365916][ T8793] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 446.409280][ T8794] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 446.582812][ T8794] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 446.636335][ T8794] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 446.648792][ T8794] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 446.659037][ T8794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.691134][ T9735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 446.705527][ T8794] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.145703][ T8793] em28xx 5-1:0.0: chip ID is em2765 [ 447.690737][ T5194] usb 1-1: USB disconnect, device number 26 [ 447.777516][ T8793] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 447.807225][ T8793] em28xx 5-1:0.0: board has no eeprom [ 448.659973][ T9764] No such timeout policy "syz1" [ 448.710676][ T9765] xt_TCPMSS: Only works on TCP SYN packets [ 448.955737][ T9733] em28xx 5-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 449.009383][ T8793] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 449.027087][ T8793] em28xx 5-1:0.0: dvb set to bulk mode. [ 449.085989][ T796] em28xx 5-1:0.0: Binding DVB extension [ 449.285099][ T8793] usb 5-1: USB disconnect, device number 31 [ 449.294673][ T796] em28xx 5-1:0.0: Registering input extension [ 449.357519][ T9776] netlink: 'syz.0.908': attribute type 1 has an invalid length. [ 449.374503][ T8793] em28xx 5-1:0.0: Disconnecting em28xx [ 449.398045][ T8793] em28xx 5-1:0.0: Closing input extension [ 449.615753][ T8793] em28xx 5-1:0.0: Freeing device [ 449.646545][ T9778] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 449.718524][ T9778] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 449.740402][ T9778] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 449.955581][ T9785] fuse: Bad value for 'fd' [ 451.005898][ T9757] syz.1.903 (9757): drop_caches: 2 [ 451.489537][ T9809] netlink: 36 bytes leftover after parsing attributes in process `syz.4.917'. [ 451.593268][ T9807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.660660][ T9811] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 451.739318][ T9807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.754321][ T9808] netlink: 148 bytes leftover after parsing attributes in process `syz.4.917'. [ 452.150159][ T8793] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 452.219152][ T796] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 452.342219][ T8793] usb 4-1: Using ep0 maxpacket: 32 [ 452.361349][ T8793] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 452.377384][ T8793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.394170][ T796] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 452.406728][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.422876][ T796] usb 2-1: Product: syz [ 452.428114][ T8793] usb 4-1: config 0 descriptor?? [ 452.437278][ T796] usb 2-1: Manufacturer: syz [ 452.445257][ T796] usb 2-1: SerialNumber: syz [ 452.453593][ T8793] gspca_main: sunplus-2.14.0 probing 041e:400b [ 453.088244][ T796] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 453.103910][ T796] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 453.187450][ T9827] No such timeout policy "syz1" [ 453.520038][ T8793] gspca_sunplus: reg_r err -71 [ 453.525229][ T8793] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 453.538976][ T8793] usb 4-1: USB disconnect, device number 27 [ 454.320928][ T9840] tipc: Started in network mode [ 454.329678][ T9840] tipc: Node identity a64504c05e76, cluster identity 4711 [ 454.337413][ T9840] tipc: Enabled bearer , priority 0 [ 454.360268][ T9840] syzkaller0: entered promiscuous mode [ 454.367068][ T9840] syzkaller0: entered allmulticast mode [ 454.395293][ T9840] tipc: Resetting bearer [ 454.421168][ T9839] tipc: Resetting bearer [ 454.477132][ T9839] tipc: Disabling bearer [ 454.654888][ T796] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 454.676552][ T796] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 454.708457][ T796] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 454.730579][ T796] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 454.743171][ T9848] syzkaller0: entered promiscuous mode [ 454.748655][ T9848] syzkaller0: entered allmulticast mode [ 454.763486][ T796] usb 2-1: USB disconnect, device number 24 [ 454.856224][ T9848] tipc: Started in network mode [ 454.862003][ T9848] tipc: Node identity 9e5e6dd04b78, cluster identity 4711 [ 454.875930][ T9848] tipc: Enabled bearer , priority 0 [ 454.885559][ T9847] tipc: Resetting bearer [ 454.905296][ T9847] tipc: Disabling bearer [ 455.171648][ T9861] syzkaller0: entered promiscuous mode [ 455.207042][ T9861] syzkaller0: entered allmulticast mode [ 456.210698][ T9864] syzkaller0: entered promiscuous mode [ 456.216267][ T9864] syzkaller0: entered allmulticast mode [ 456.564844][ T9875] fuse: Bad value for 'fd' [ 459.861740][ T9901] No such timeout policy "syz1" [ 461.398468][ T9908] binder: 9907:9908 ioctl c0306201 200000004a40 returned -22 [ 461.540738][ T9912] syzkaller0: entered promiscuous mode [ 461.546285][ T9912] syzkaller0: entered allmulticast mode [ 461.709224][ T8794] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 461.779649][ T5194] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 461.861796][ T8794] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 461.871129][ T8794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.882952][ T8794] usb 5-1: config 0 descriptor?? [ 461.963791][ T5194] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 461.983707][ T5194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.996112][ T5194] usb 2-1: Product: syz [ 461.999401][ T796] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 462.029710][ T5194] usb 2-1: Manufacturer: syz [ 462.034462][ T5194] usb 2-1: SerialNumber: syz [ 462.211402][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.222037][ T796] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 462.235843][ T796] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 462.245367][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.258104][ T796] usb 4-1: config 0 descriptor?? [ 462.277291][ T796] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 462.488836][ T5194] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 462.519226][ T5194] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 463.747082][ T5194] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 463.759309][ T796] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 463.929265][ T796] usb 1-1: Using ep0 maxpacket: 8 [ 463.940556][ T796] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 463.950931][ T796] usb 1-1: config 179 has no interface number 0 [ 463.957320][ T796] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 463.969174][ T796] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 463.982822][ T796] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 463.995804][ T796] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 464.007849][ T796] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 464.021757][ T796] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 464.030931][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.046440][ T9938] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 464.286369][ T5914] usb 1-1: USB disconnect, device number 27 [ 464.286439][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 464.300677][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 464.600979][ T5194] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 464.618919][ T5194] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 464.632818][ T5194] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 464.645027][ T5194] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 464.659827][ T5194] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 464.678146][ T5194] usb 2-1: USB disconnect, device number 25 [ 464.899170][ T796] usb 4-1: USB disconnect, device number 28 [ 464.960282][ T8794] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -22 [ 465.006927][ T8794] usb 5-1: USB disconnect, device number 32 [ 465.081653][ T9946] syzkaller0: entered promiscuous mode [ 465.087382][ T9946] syzkaller0: entered allmulticast mode [ 467.215009][ T9972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.960'. [ 467.381050][ T9974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.961'. [ 467.409770][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'. [ 467.923423][ T9974] bridge0: entered promiscuous mode [ 467.950091][ T9974] ip6gretap0: entered promiscuous mode [ 468.019755][ T796] [ 468.022139][ T796] ============================================ [ 468.028308][ T796] WARNING: possible recursive locking detected [ 468.034548][ T796] syzkaller #0 Tainted: G L [ 468.040526][ T796] -------------------------------------------- [ 468.046695][ T796] kworker/0:2/796 is trying to acquire lock: [ 468.052690][ T796] ffff888059ad8f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 468.061863][ T796] [ 468.061863][ T796] but task is already holding lock: [ 468.069328][ T796] ffff88823bf28f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 468.078401][ T796] [ 468.078401][ T796] other info that might help us debug this: [ 468.086468][ T796] Possible unsafe locking scenario: [ 468.086468][ T796] [ 468.093970][ T796] CPU0 [ 468.097259][ T796] ---- [ 468.100546][ T796] lock(&hsr->seqnr_lock); [ 468.105065][ T796] lock(&hsr->seqnr_lock); [ 468.109577][ T796] [ 468.109577][ T796] *** DEADLOCK *** [ 468.109577][ T796] [ 468.117743][ T796] May be due to missing lock nesting notation [ 468.117743][ T796] [ 468.126059][ T796] 13 locks held by kworker/0:2/796: [ 468.131254][ T796] #0: ffff888031a9d548 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 468.142046][ T796] #1: ffffc90004067c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 468.155223][ T796] #2: ffff88803123d538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 468.164519][ T796] #3: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 468.173774][ T796] #4: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 468.182956][ T796] #5: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 468.193037][ T796] #6: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 468.202201][ T796] #7: ffff88823bf28f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 468.211736][ T796] #8: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 468.221318][ T796] #9: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 468.231280][ T796] #10: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1930 [ 468.240673][ T796] #11: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 468.250707][ T796] #12: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 468.259986][ T796] [ 468.259986][ T796] stack backtrace: [ 468.265898][ T796] CPU: 0 UID: 0 PID: 796 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.265919][ T796] Tainted: [L]=SOFTLOCKUP [ 468.265924][ T796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 468.265935][ T796] Workqueue: mld mld_ifc_work [ 468.265962][ T796] Call Trace: [ 468.265970][ T796] [ 468.265987][ T796] dump_stack_lvl+0xe8/0x150 [ 468.266105][ T796] print_deadlock_bug+0x279/0x290 [ 468.266133][ T796] __lock_acquire+0x253f/0x2cf0 [ 468.266156][ T796] ? __lock_acquire+0x6b5/0x2cf0 [ 468.266195][ T796] ? unwind_next_frame+0xa5/0x23c0 [ 468.266216][ T796] ? unwind_next_frame+0x1aaf/0x23c0 [ 468.266240][ T796] lock_acquire+0xf0/0x2e0 [ 468.266257][ T796] ? hsr_dev_xmit+0x237/0x360 [ 468.266277][ T796] ? hsr_dev_xmit+0x237/0x360 [ 468.266293][ T796] _raw_spin_lock_bh+0x36/0x50 [ 468.266399][ T796] ? hsr_dev_xmit+0x237/0x360 [ 468.266416][ T796] hsr_dev_xmit+0x237/0x360 [ 468.266432][ T796] ? hsr_dev_xmit+0x2d/0x360 [ 468.266449][ T796] dev_hard_start_xmit+0x2d8/0x870 [ 468.266470][ T796] __dev_queue_xmit+0x16d1/0x3890 [ 468.266489][ T796] ? __dev_queue_xmit+0x277/0x3890 [ 468.266504][ T796] ? lockdep_hardirqs_on+0x7a/0x110 [ 468.266559][ T796] ? ebt_do_table+0x2665/0x2830 [ 468.266612][ T796] ? __local_bh_enable_ip+0xd0/0x130 [ 468.266632][ T796] ? ebt_do_table+0x2665/0x2830 [ 468.266652][ T796] ? __pfx___dev_queue_xmit+0x10/0x10 [ 468.266682][ T796] ? br_nf_post_routing+0x219/0xfe0 [ 468.266702][ T796] br_dev_queue_push_xmit+0x370/0x4a0 [ 468.266735][ T796] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 468.266750][ T796] NF_HOOK+0x360/0x3f0 [ 468.266766][ T796] ? NF_HOOK+0xa2/0x3f0 [ 468.266779][ T796] ? __pfx_NF_HOOK+0x10/0x10 [ 468.266792][ T796] ? ret_from_fork+0x51e/0xb90 [ 468.266811][ T796] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 468.266831][ T796] br_forward_finish+0xd3/0x130 [ 468.266845][ T796] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 468.266860][ T796] ? __pfx_br_forward_finish+0x10/0x10 [ 468.266875][ T796] NF_HOOK+0x360/0x3f0 [ 468.266890][ T796] ? NF_HOOK+0xa2/0x3f0 [ 468.266903][ T796] ? __pfx_NF_HOOK+0x10/0x10 [ 468.266918][ T796] ? __pfx_br_forward_finish+0x10/0x10 [ 468.266934][ T796] ? br_handle_vlan+0x3e7/0x530 [ 468.266985][ T796] __br_forward+0x397/0x540 [ 468.266999][ T796] ? __pfx_br_forward_finish+0x10/0x10 [ 468.267015][ T796] br_flood+0x6ee/0xb80 [ 468.267034][ T796] ? br_dev_xmit+0x193/0x1930 [ 468.267053][ T796] br_dev_xmit+0x1292/0x1930 [ 468.267072][ T796] ? br_dev_xmit+0x193/0x1930 [ 468.267093][ T796] ? __pfx_br_dev_xmit+0x10/0x10 [ 468.267111][ T796] ? __skb_get_hash_net+0x13f/0x2e0 [ 468.267142][ T796] ? __pfx___skb_get_hash_net+0x10/0x10 [ 468.267157][ T796] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 468.267173][ T796] ? skb_network_protocol+0x23d/0x3f0 [ 468.267188][ T796] ? __pfx_passthru_features_check+0x10/0x10 [ 468.267205][ T796] dev_hard_start_xmit+0x2d8/0x870 [ 468.267225][ T796] __dev_queue_xmit+0x16d1/0x3890 [ 468.267255][ T796] ? __dev_queue_xmit+0x277/0x3890 [ 468.267272][ T796] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 468.267305][ T796] ? __pfx___dev_queue_xmit+0x10/0x10 [ 468.267320][ T796] ? __asan_memcpy+0x40/0x70 [ 468.267336][ T796] ? __pskb_copy_fclone+0x9c8/0xff0 [ 468.267402][ T796] ? __asan_memcpy+0x40/0x70 [ 468.267416][ T796] ? __pskb_copy_fclone+0x9c8/0xff0 [ 468.267432][ T796] ? hsr_create_tagged_frame+0x500/0xe10 [ 468.267453][ T796] ? __asan_memmove+0x40/0x70 [ 468.267467][ T796] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 468.267486][ T796] ? hsr_addr_subst_dest+0x30d/0xa90 [ 468.267507][ T796] hsr_forward_skb+0x157b/0x2860 [ 468.267527][ T796] ? ret_from_fork_asm+0x1a/0x30 [ 468.267552][ T796] ? hsr_forward_skb+0xb3/0x2860 [ 468.267572][ T796] ? __pfx_hsr_forward_skb+0x10/0x10 [ 468.267591][ T796] ? do_raw_spin_lock+0x12b/0x2f0 [ 468.267607][ T796] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 468.267623][ T796] ? hsr_dev_xmit+0x237/0x360 [ 468.267640][ T796] hsr_dev_xmit+0x242/0x360 [ 468.267660][ T796] ? hsr_dev_xmit+0x2d/0x360 [ 468.267678][ T796] dev_hard_start_xmit+0x2d8/0x870 [ 468.267698][ T796] __dev_queue_xmit+0x16d1/0x3890 [ 468.267716][ T796] ? __dev_queue_xmit+0x277/0x3890 [ 468.267732][ T796] ? ___neigh_create+0x1c5f/0x2280 [ 468.267765][ T796] ? __local_bh_enable_ip+0xd0/0x130 [ 468.267785][ T796] ? __pfx___dev_queue_xmit+0x10/0x10 [ 468.267800][ T796] ? neigh_connected_output+0x1ea/0x460 [ 468.267821][ T796] ? eth_header+0x11b/0x200 [ 468.267885][ T796] ? __asan_memcpy+0x40/0x70 [ 468.267898][ T796] ? eth_header+0x11b/0x200 [ 468.267919][ T796] ? __pfx_eth_header+0x10/0x10 [ 468.267941][ T796] ? neigh_connected_output+0x3b6/0x460 [ 468.267965][ T796] ? ip6_output+0x126/0x550 [ 468.267983][ T796] ip6_output+0x340/0x550 [ 468.268003][ T796] ? __pfx_ip6_output+0x10/0x10 [ 468.268021][ T796] NF_HOOK+0x177/0x4f0 [ 468.268042][ T796] ? __pfx_NF_HOOK+0x10/0x10 [ 468.268062][ T796] ? __pfx_dst_output+0x10/0x10 [ 468.268081][ T796] ? lockdep_hardirqs_on+0x7a/0x110 [ 468.268103][ T796] ? __local_bh_enable_ip+0xd0/0x130 [ 468.268121][ T796] ? icmp6_dst_alloc+0x3a6/0x440 [ 468.268204][ T796] mld_sendpack+0x8b4/0xe40 [ 468.268246][ T796] ? look_up_lock_class+0x57/0x110 [ 468.268273][ T796] ? mld_sendpack+0x213/0xe40 [ 468.268294][ T796] ? __pfx_mld_sendpack+0x10/0x10 [ 468.268321][ T796] mld_ifc_work+0x835/0xe70 [ 468.268342][ T796] ? process_scheduled_works+0xa25/0x1830 [ 468.268362][ T796] process_scheduled_works+0xb02/0x1830 [ 468.268389][ T796] ? __pfx_process_scheduled_works+0x10/0x10 [ 468.268411][ T796] ? assign_work+0x3d5/0x5e0 [ 468.268430][ T796] worker_thread+0xa50/0xfc0 [ 468.268458][ T796] kthread+0x388/0x470 [ 468.268472][ T796] ? __pfx_worker_thread+0x10/0x10 [ 468.268490][ T796] ? __pfx_kthread+0x10/0x10 [ 468.268504][ T796] ret_from_fork+0x51e/0xb90 [ 468.268523][ T796] ? __pfx_ret_from_fork+0x10/0x10 [ 468.268541][ T796] ? __switch_to+0xc7d/0x1450 [ 468.268569][ T796] ? __pfx_kthread+0x10/0x10 [ 468.268582][ T796] ret_from_fork_asm+0x1a/0x30 [ 468.268610][ T796] [ 468.865670][ T9976] syzkaller0: entered promiscuous mode [ 468.871424][ T9976] syzkaller0: entered allmulticast mode