last executing test programs: 3m56.434776857s ago: executing program 1 (id=3463): socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e28, 0x0, @mcast2, 0x7}, 0x1c) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x17e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000288480000000000080000000000000000000000000000000000004f0b0158006800000a069078ac1414bbe0000002070326018913c20a010100ac1414bb7f000001ffffffff44445623e0000001000005efac1414bb000000057f00000100000000ac1414bb00000003ac1414bb00000009", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000380)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0xfeffffffffffffff}) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) bind$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20008881, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 3m54.391959029s ago: executing program 1 (id=3471): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = dup2(r1, r0) write$UHID_GET_REPORT_REPLY(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'syzkaller0\x00', @multicast}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYBLOB="c1"], 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) (async) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (async) dup2(r1, r0) (async) write$UHID_GET_REPORT_REPLY(r2, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'syzkaller0\x00', @multicast}) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYBLOB="c1"], 0x0) (async) 3m52.930976757s ago: executing program 1 (id=3476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25030000000500038001000000180001801400020073797a5f74756e000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2000a000}, 0x0) syz_emit_ethernet(0x3b2, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "718c00", 0x37c, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xa, 0x3f, 0x200, 0x6f4, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd66ad0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x3, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x6, "fcd1fe68a300000000780000044e43e740e077e1d16212fb000000000000000000000000000500005e3e8065e49eb17937"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 3m52.667117925s ago: executing program 1 (id=3479): socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x5, 0x0, [{0x3, 0x6, 0x3, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0xfe, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x7f, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0x8, '\x00', 0xfa}, {0x1, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x7}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0xb, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x4000000b, 0x101, 0x1, 0x8, 0x8, 0x5, 0x4}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x13, r3, 0x54c5a000) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9001) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 3m50.275738853s ago: executing program 1 (id=3485): openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1], 0x38}}, 0x8010) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0xb0d5, 0x80, 0x80, 0x12}, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x402d, 0x0, 0x0, 0x1000004}]}, 0x10) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x118, &(0x7f0000000000)=0x1, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x7fff}) io_uring_enter(r3, 0x47bc, 0xff000000, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) 3m49.843448079s ago: executing program 1 (id=3488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) r2 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0xa00) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000000)={0x15, 0x0}) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async, rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) (async, rerun: 32) r6 = socket$kcm(0x29, 0x0, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) (async) sendmmsg$inet(r6, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) (async) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r7, 0x8923, &(0x7f00000000c0)={'wg1\x00', @ifru_names='wg1\x00'}) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c}, 0x94) (async, rerun: 32) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) (async, rerun: 32) mq_open(&(0x7f00000001c0)='-^^\x00', 0x800, 0x40, &(0x7f0000000300)={0x9, 0x662, 0x9, 0x9}) close(r3) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3m48.990105692s ago: executing program 32 (id=3488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) r2 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0xa00) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000000)={0x15, 0x0}) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async, rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) (async, rerun: 32) r6 = socket$kcm(0x29, 0x0, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) (async) sendmmsg$inet(r6, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) (async) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r7, 0x8923, &(0x7f00000000c0)={'wg1\x00', @ifru_names='wg1\x00'}) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c}, 0x94) (async, rerun: 32) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) (async, rerun: 32) mq_open(&(0x7f00000001c0)='-^^\x00', 0x800, 0x40, &(0x7f0000000300)={0x9, 0x662, 0x9, 0x9}) close(r3) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 10.419710559s ago: executing program 5 (id=4395): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x3fff0000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000020303000000000000000020000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000103bbb02e914603d4543821b69b43a9"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 8.960002616s ago: executing program 4 (id=4406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000280)={0x2, 0x3178, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x440, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000440)=[@nested_load_syzos={0x136, 0xe4, {0x3, 0x5, [@nested_load_code={0x12e, 0x6c, {0x0, "65410f0d848ceedefa1ef334fc36f30fd6cab9c10d0000b800000000ba000000000f30b98c040000b80f000000ba000000000f30490fc76c0b18660f2b437b670f1c8379cb9291460f3accf20b66baa000b000ee"}}, @nested_amd_invlpga={0x17d, 0x20, {0x9000, 0xf432}}, @wrmsr={0x65, 0x20, {0x406}}, @uexit={0x0, 0x18, 0x8}]}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8, 0xfffffffffffffffb}}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0x9b12, 0x2}}, @enable_nested={0x12c, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x1000, 0x6c0c}}, @nested_amd_invlpga={0x17d, 0x20, {0x9000, 0x2878}}, @wrmsr={0x65, 0x20, {0x8be, 0x1000}}, @code={0xa, 0x7f, {"0f01c53667410f01c4c7442400f33fae3ac74424028d9f0000c7442406000000000f011424430f23cb66baf80cb83053cc8eef66bafc0c66b8050066efc744240000000000c744240228110000c7442406000000000f011424c48245459f000000006766410f070fc72e0f015807"}}, @nested_create_vm={0x12d, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0xc}, @rdmsr={0x66, 0x18, {0xb47}}, @rdmsr={0x66, 0x18, {0x3a7}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x4, 0x8, 0x1}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x4e, {"2666450fe57a000f3066b8b9008ee80f2094b9850900000f32420fc7b5355b00000f01d16764420f23ab66baf80cb8aea28b80ef66bafc0c66ed0fc729"}}, @nested_amd_stgi={0x17e, 0x10}, @set_irq_handler={0xc8, 0x20, {0x3d, 0x2}}, @in_dx={0x69, 0x20, {0x1fb5, 0xc}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0x1, 0x5, 0x5329}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x80, 0x8}}, @code={0xa, 0x6e, {"b9b0020000b89bf0e35bbac185984c0f300f20c035080000000f22c065470f4f32b8010000000f01c10f2116c4c17b701d0f0000000048b8ff1d0000000000000f23c80f21f8350c0090000f23f86536400f01c9470f01cf660fc776f8"}}, @nested_load_code={0x12e, 0x6c, {0x2, "66ba210066b8008066efb9800000c00f3235002000000f30440f01c9b99b090000b802000000ba000000000f3067450f001473440f01c53e0f0866baf80cb876734b83ef66bafc0c66ed450f0766bad104b000ee"}}], 0x4d3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x53}], 0x1, 0x17, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x80083, 0xffffffffefffff16, 0x3, 0x400000004, 0x1, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.563118474s ago: executing program 3 (id=4410): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/27, 0x1b}, 0x6}], 0x1, 0x400220d0, 0x0) syz_usb_connect$uac3(0x2, 0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000002044060f804000010203010902800003010310c0080b0002012030400904000000010130000a", @ANYRESDEC=0x0], &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) 7.692959576s ago: executing program 4 (id=4412): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neonbs-sync\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ad5696e7000000006dd03292ebcd53eaa7", 0x11) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c) setsockopt$inet6_buf(r1, 0x29, 0x45, &(0x7f0000000180)="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", 0x1000) 7.330656799s ago: executing program 5 (id=4413): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200", 0x59}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x4001, 0x0, 0x10000082}, 0x90) syz_genetlink_get_family_id$ipvs(0x0, r0) 7.068854176s ago: executing program 3 (id=4414): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000440)=""/110, 0x6e}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) sendmmsg(0xffffffffffffffff, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x588}}], 0x1, 0x40000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r6, 0x8) setsockopt$inet_int(r6, 0x0, 0x1, &(0x7f0000000000)=0x8001, 0x4) r7 = socket$inet6(0x10, 0x3, 0x9) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r7, &(0x7f0000000440)="1c000000120005200c100000ec20244b6dae18e9d30049b20002000a", 0x1c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000640)={0xfffffffffffffef8, 0x7, r3, 0x0, 0x10001, 0x0, 0x3, 0x2ebad4, 0x2b4542}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) listen(r8, 0x2) sendto$inet6(r8, &(0x7f0000000200)="b97ec7217b3fe872c4a35a83b5e3bffa4a53987b69fd696d417b582bcf8646f7702940449afcdf12265da2f665df0d003b05701dec202d59ecd70c4e5f7fbfe11c5607f1b83ead407df005799cd9057b7d54fd4bf59617187bbc3f70ce9e047b1cb2c2095c308410cd3e7f80c5cf89ed9607ea7541a72e0c1e5d8306a5c533940347d4f683ce29aea2167228177f7eeca559f5be439e644f9056491d66e557c91ee25f1d6b31f87b413b6dd633451190d705e29d548e59bdceb2", 0xba, 0x40041, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0xa, 0x2b6c65, 0x65d2f}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x65}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r7], 0x0) 6.671471531s ago: executing program 4 (id=4416): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8000, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x2}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c000100030801080200000006001500", @ANYRES32=r1, @ANYRES64=r2, @ANYRES8=r1], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x2b, 0x1, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c002000130001000000000000000000128973f1b7d671d0fa0c59a5f5857000000000000000", @ANYRES32=r4, @ANYBLOB="9f180400000000000c001a800800048004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) setresuid(0x0, 0xee00, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r7, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fbdbdf25010002007767310000000000000000000000000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e00000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x3e44, 0x8, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a6012203010902220001000000000904"], 0x0) 6.547470223s ago: executing program 2 (id=4418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000ffff29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000631803003c0012800b000100697036746e6c00002c000280140003000000000000000300000000000100000114000200fe80"], 0x5c}, 0x1, 0x0, 0x0, 0xed52d3357a591175}, 0x20008090) 6.427946328s ago: executing program 0 (id=4419): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x4, 0x4, 0x410, 0x218, 0x130, 0x218, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010101, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x4, 0x8, 0xd, 0x8, 0xe8, 0x6, 'wg2\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x11802, 0x6, 0xff0c, 0x0, 0x0, "2e3db46bbd54492c3b8b94a26d2b6f09949a2c5d377e1886c36b8e355354a160d73a311a2ee6b7547689bb9a515857b39523fadabc9d55f111b9f1dbe8567b8a"}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0x64c, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x81, 0xff03}}}, {{@arp={@multicast2, @local, 0x0, 0xff000000, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local, {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0x64010100, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) 6.363721734s ago: executing program 0 (id=4420): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_getres(0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="d800000019008111e0020f060d8107040a60090000020000000055a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002002dc6080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7453801896034277ce06bbace8034cb393a5e83d42365f003724a237ee4b11602b2270000000014d6d9bc8742ee045d10511b53c74a81d530dfe1d9c322fe040000005025acca262f3d40fad75667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccb3", 0xd8}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x12a, 0xfffffffffffffffe}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000017000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000300)="c4210d766f0566ba4200b800000000ef400f09440f195bf66566410f3a15a900000000b00f01f866ba200066b87f0066ef66ba4000edc4427d1752002e410fc730", 0x41}], 0x1, 0x4, &(0x7f00000001c0)=[@cr0={0x0, 0x20}, @vmwrite={0x8, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}], 0x2) mmap$KVM_VCPU(&(0x7f000002b000/0x2000)=nil, 0x0, 0x2, 0x8010, r7, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000001c80)={0x1, [{0x1, 0x0, 0x4, 0x0}, {0x7, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x38b8, 0x8, &(0x7f0000000940)="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"}, {0x2, 0x0, 0xe, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x4, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x2dd, 0x0}, {0x1, 0x0, 0x0, 0x0}]}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000002340)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r8, 0xc01064ac, &(0x7f0000000240)={r9, 0x0, 0x0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x20000001, 0x96, 0x2}, 0x0, r4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x4000000) r10 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r10) 6.276087766s ago: executing program 2 (id=4421): ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) (async) preadv2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000300)=""/67, 0x43}, {&(0x7f0000000480)=""/150, 0x96}, {&(0x7f0000000380)=""/60, 0x3c}, {&(0x7f0000000540)=""/145, 0x91}, {&(0x7f0000000600)=""/65, 0x41}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x7, 0xb, 0x1, 0x2) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="8faaaa95aaaaaaaaaaaaaaaa86dd6001010000641100fe80000000000000000000"], 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004010) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x126, &(0x7f0000001ac0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="0200", @val={@val={0x88a8, 0x7, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0xa, 0x6, "b9bd28", 0xe8, 0x88, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[@routing={0x73, 0x8, 0x2, 0x5, 0x0, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x5e, 0x12, '\x00', [@hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x3ff}, @calipso={0x7, 0x28, {0x1, 0x8, 0xc, 0x9, [0x5, 0x4, 0x2, 0x8]}}, @calipso={0x7, 0x50, {0x3, 0x12, 0xd1, 0x8, [0x6, 0x80, 0x1, 0x7, 0x1, 0x4, 0x80000000, 0x3, 0x8]}}]}]}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x101) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001100)={0x84, &(0x7f00000001c0)={0x0, 0x1, 0x6, "00005c1ce21e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x400, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x4880e) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc9, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x4800) (async) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) 5.931382477s ago: executing program 2 (id=4422): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) gettid() (async) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) sendmsg$kcm(r3, 0x0, 0x0) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000001600)=""/4103, 0x1007, 0x97) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x5, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d6, 0x32}, 0x2, @in6=@remote, 0x0, 0x2, 0x0, 0xb7, 0xb, 0x81}}, 0xe8) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000100008000000000000050d7090224000100000000090400000003010000002100000001220000090581030000000000"], 0x0) 5.685656177s ago: executing program 0 (id=4423): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf0, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x19) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.274829285s ago: executing program 0 (id=4424): syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfffffffffffffff5}, @dev={0xfe, 0x80, '\x00', 0x2f}}}}}}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) 5.043143648s ago: executing program 5 (id=4425): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000001b40)={0x1, [{0x2, 0x0, 0x8000, 0x0}, {0x3, 0x11, 0xfffffffd, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xffffff56, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x20, 0xa1a, &(0x7f0000000480)="f104fe42"}, {0x0, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4000000, 0x0}, {0x3, 0x8, 0x8, &(0x7f0000000780)="11"}, {0x1, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x18, 0x0}, {0x0, 0x0, 0x8000004, 0x0}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x141400) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000140)=0x12) r5 = socket$inet6(0xa, 0x2, 0x6) connect$inet6(r5, &(0x7f0000000140)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000008c0), 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e21, 0x800, @empty, 0x4000003}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) close(r5) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="4005db87869a1d02c9dd24e0"], 0x0, 0x0}) syz_open_dev$vbi(0x0, 0x3, 0x2) r7 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x8080000, 0x2000, &(0x7f000035b000/0x2000)=nil}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x4000010, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) 4.782013136s ago: executing program 2 (id=4426): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) mknod(&(0x7f0000000bc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xaa00, 0x881b) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0xa, {0x2, 0x4e20, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="182000000000001001000a01"], 0x18}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x56, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) r3 = syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0xa, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0xc2, 0x2, 0x2, 0x6, 0x0, 0xfd, {{0xa, 0x24, 0x6, 0x0, 0x0, "dcd98bef23"}, {0x5, 0x24, 0x0, 0xf44e}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x9, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0x5296, 0x3a8, 0x9, 0xb4, 0x5, 0x60}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x101, 0x5, 0x40, 0xfff, 0xf}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x7, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0xff, 0x80}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x6, 0x8, 0x6, 0x40, 0x7}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x5, [{0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="7603c4ab26b30300000000000000cd551e77085d29b086a44059b25bab23dee55996738121bdd006243c95728c2e7cc2537c6e94fa280256ea6c128b2906492824ff243db83fa4a4bb60a894a31a1aea534827f2f96ef653164aebdbe3edd689044d756c6d62b52d9e759486020426701d4da0ec757f"]}, {0x34, &(0x7f0000000280)=@string={0x34, 0x3, "fe60c12a84e490779a2d97ab30d0ef8ed57347d2b79be963712e8a7b441f16056d9432d8bf11d16c6642b268bc214fcf323e"}}, {0x8d, &(0x7f00000005c0)=ANY=[@ANYBLOB="8d03daea96c193a3f5b28df7c14a338abbe8168610e674a74a25979f5da318159f29ba2f1fa8d1027f19331524a56530dbba93d230afc88a67297fe22045b0ad045eb34d361e45e5f4de5577793f06861226e20bef893633a364a6eab3d5afcb7283fdd112331d228695015656e482d5052fe5c22aab46f773530dc5f5a4b5acc100"/143]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c0a}}]}) syz_usb_control_io$cdc_ecm(r3, 0xfffffffffffffffd, &(0x7f0000000580)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="400ca1000000fdd7537adc8a0c936def717a35f7679e2a428b7838aa023c9c72db0633a927aa71b633e1dfa48fad292fe063176a408e62ee97ceb5df941ec0c51a7246efd350fb5117ff59b4ff0be5c0c66178285e8f7bc0599cc48ddc4425a0fc2288fa740fb2df81ded15e5e2e81f42b09369befdcd67bf20036f4f378cdc92a24175439a9abaab79eff81b42e58a1aaa5d6a18eba70ff39a1bb6a3e46245df3d47d23c5acf5"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x40800) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 4.624457751s ago: executing program 0 (id=4427): syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x6, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=@deltclass={0x190, 0x29, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0x3}, {0x0, 0x8}, {0x5, 0xd}}, [@c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}]}}, @c_atm={{0x8}, {0x28, 0x2, [@TCA_ATM_HDR={0x22, 0x3, "f99a6544b7a02a9a26227df060ddef5afd487aa25fd612b70975739a27fa"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x1}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x10}}}, @c_cbq={{0x8}, {0xac, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x3}, 0x200, 0x80000000}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x0, 0xe, 0xf8, 0x3, 0x1}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x8, 0x1, 0x1, 0x7fff, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x2, 0x5, 0x2, 0x8, 0x72}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xd, 0x1, 0x11, 0x1, 0xa3, 0x9, 0xd8629fd, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x2, 0x1, 0x6, 0x0, 0x3376}}, @TCA_CBQ_WRROPT={0x61, 0x2, {0xf7, 0x8, 0x80, 0x81, 0x95a, 0x5}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0xc}, 0x748, 0x200}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x8}, 0x5, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x0, 0x9, 0x44, 0x10000}}]}}, @c_atm={{0x8}, {0x3c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xb}}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_HDR={0xb, 0x3, "ecdb27abc34060"}, @TCA_ATM_HDR={0xc, 0x3, "9ab81ce2e0507fec"}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8, 0x1, r0}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff46040000000000007b0a00fe000000006e0480ffffff0000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x42042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d03, 0x2000000, 0x1}]}) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000008"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) sendmsg$nl_xfrm(r9, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB="34000000120001"], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) ioctl$F2FS_IOC_GET_PIN_FILE(r9, 0x8004f50e, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) 3.681355771s ago: executing program 3 (id=4428): ioprio_get$pid(0x1, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0x73}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x0, @fd=r0, 0x8000000000, 0x0, 0x0, 0x4, 0x0, {0x2}}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) 3.27882818s ago: executing program 4 (id=4429): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) socket$kcm(0xa, 0x2, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]}) sendfile(r7, r7, 0x0, 0x2000fb) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 3.221396084s ago: executing program 3 (id=4430): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x4, 0x4, 0x410, 0x218, 0x130, 0x218, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010101, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x4, 0x8, 0xd, 0x8, 0xe8, 0x6, 'wg2\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x12803, 0x6, 0xff0c, 0x0, 0x0, "2e3db46bbd54492c3b8b94a26d2b6f09949a2c5d377e1886c36b8e355354a160d73a311a2ee6b7547689bb9a515857b39523fadabc9d55f111b9f1dbe8567b8a"}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0x64c, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x81, 0xff03}}}, {{@arp={@multicast2, @local, 0x0, 0xff000000, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local, {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0x64010100, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) 2.983809178s ago: executing program 3 (id=4431): r0 = syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x80, 0xd0, 0x4}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000dc0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000080)=0x14) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000002f00)={0xe, 0x59555956, 0x1, @discrete={0x7, 0x315c}}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x800, 0x70bd2a, 0x25dfdbfd, {0x2, 0x10, 0x0, 0x1, 0xfe, 0x2, 0xc8, 0x0, 0x2000}, [@RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_TABLE={0x8, 0xf, 0xe}, @RTA_IIF={0x8, 0x3, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c0}, 0x40080) unshare(0x22020600) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0x5, 0x6}, {0x81ff, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) syz_usb_control_io(r0, &(0x7f00000013c0)={0x2c, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001a80)={0x14, 0x0, &(0x7f0000001980)={0x0, 0x3, 0x37, @string={0x37, 0x3, "24939a7ebed91e1434bdc6fc252fdcc0f0801d49fc435cbbcfdf4fc81dbed4b90eb12e91f04ee67b81cf65aeef6221d39f0e3b7759"}}}, 0x0) 2.870313496s ago: executing program 5 (id=4432): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x3) (async) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r2 = io_uring_setup(0x45a6, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) (async) r3 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) (async) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r4, r3}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r6 = dup(r5) fallocate(r6, 0x10, 0x0, 0x72000) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=@gettaction={0x24, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) 2.787496122s ago: executing program 2 (id=4433): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xe9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x620541) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000000c0)={0x89, 0x4, 0x3, 0xa, 0x400, 0x10}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x0, 0x21, 0x1e, {0x1e, 0x3, "1be16074b2aefa5e52491cd7f0e2dff060d4eb264ffe43fb74cfbcd3"}}, &(0x7f0000000200)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "efaf0028f0d6ff24a2267732faca5f086cd42e30ba286878bf1ee3e1b308014044ed2b732672d75c1a55fa38a93067886aa7b6febaf6771da302f8e70ca90b5be6acbb758c3ab23f63441daa8d05201d5776b13a1cca237d174b27a5ddd51f4768164e7725214722782aad9ac7fe5d47d8f18cd4c8a808f6867bc4a733971f839fcd9000493cd154c11af8a56bdb8d43102167c3aef1cfda3b0d781b2e4a7d285141b1bcf6f271bdbc7e68c07087e608e61e1ed6eb1de4a6b3e810c6c69806443fdd1f576f29ebfebf4a59ce258c88d5"}}, &(0x7f0000000300)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x4, 0x7, 0x6}, @ptm_cap={0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x1, 0xa, 0xe5, "6f12654d", "56e9753c"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x13, 0xcf, 0x7, 0xfe, 0x3, 0x7}}}, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x20, 0x12, 0x4e, "b59c12d145a5c3f7146466c2de4804f66f9e8265ab100071035cbf9018a415841d921bb021398803ab9070f6aceae7104ee3f4d7298e815d49dc7e233274b453480270abe5562c6ec1e1e68500ed"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x0, 0x2, [0xf]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x80}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000600)={0x40, 0xb, 0x2, "101a"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x363b}, &(0x7f0000000680)={0x40, 0x13, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000700)={0x40, 0x19, 0x2, "cfda"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xff}}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.727960235s ago: executing program 0 (id=4434): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) sendto$inet6(r3, &(0x7f00000000c0)="95fcfcc177", 0x5, 0x4004001, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x40045b17, 0x0) 2.684236s ago: executing program 5 (id=4435): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200", 0x59}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x1400000, 0x0, 0x10000082}, 0x90) syz_genetlink_get_family_id$ipvs(0x0, r0) 973.88002ms ago: executing program 5 (id=4436): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2166994bd8d20fda, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000080)={{0xfe, 0x12}, {0x10, 0x1}, 0x200005, 0x2, 0x4}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ftruncate(r5, 0xffff) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)={0x56, 0x75, 0x1, {0x4b, "14fba0db444ced646db9dd729b5c5aa14d47e170de9676175d40235abdf5e483c60c304a4b30aa66de0674c873f044f713124179b79e82042570047bf75876875525450311c49f4874bd89"}}, 0x56) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000033c0)={0x0, 0x0, &(0x7f00000032c0)=[{0x0}, {0x0}], 0x2}, 0x4004004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8701, 0x8000, 0xffffffff, 0x7fffffff, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x64, 0x0, 0x6, 0x0, 0x0, @loopback, @remote}}}}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004a00010000000000000000020a00806e0800000000000000"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', r8, 0x700, 0x8, 0x7, 0x401, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x6e, 0x0, 0x40, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x12, "819ea9e51cc7b18056c063868c13812b"}]}}}}}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r8, 0x1, {0x0, 0x0, 0x2}, 0x1}, 0x18) 932.066154ms ago: executing program 4 (id=4437): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000001440)={0x7, 'pim6reg\x00', {0x9}, 0x8}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000051000000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x60}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="9110aa0000000000958ca123cfebb5f04f6f20ef5bfb020000000068ec6149000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffede}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$tipc(r6, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x80) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x101, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x20, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000100000000000000e200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100000000000075020000018500000085000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x3f, &(0x7f00000005c0)=""/63, 0x40f00, 0x2, '\x00', r4, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x8, 0x0, 0x7fff}, 0x10, 0x0, r1, 0x1, &(0x7f0000001300)=[r7, r7, r7, r7, r8, r7], &(0x7f0000001340)=[{0x0, 0x3, 0xa, 0x3}], 0x10, 0x1000}, 0x94) fchdir(r7) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) r10 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r13 = syz_io_uring_setup(0x8d4, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x4, 0x37c}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r14, r15, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x1, &(0x7f0000000280)={0x77359400}, 0x1, 0x20}) io_uring_enter(r13, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f00000002c0)={0x9, 0x0, 0x0, 0x9, 0x2, 0x663, 0x7fffffff}, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r9, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0x5}], 0x1}) io_uring_enter(r10, 0x847ba, 0x0, 0xe, 0x0, 0x0) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r16, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000080)=@ethtool_cmd={0x24, 0x0, 0x3, 0xfffe, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x6, 0x2aa, 0x0, 0x1, 0x1, 0x6162b9dd, [0x0, 0x6d]}}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000000)={0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x7}, {0x4, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "d8310dde341f31e020bbee19039c64a8777ab817585291166dac5635c31036723bbd1fd2110b49bf4b99ebb97022c10bc4d0b891ff51116605109bcb3fcad5f1026b4244e46a2014098eb7a3190479e265270b89195f617cccdcde49d053ba8adb169b5e7eba85032a0c9f774d51c00182b76ef1f2cbfe12de96d251a22bd1c73f4d58111ab19a1008cda61f460bc389313303329d78bda4082b91c11f73cf513cf79e7fcae32fef4017db1db6890582f8650498cdd8f804bbc31f0946ba25083af2842bbd7292dfa91c25841d4b3a5adba71f07f11e7c7e57055557adcbdface87ce8610503de5034d28518a20fbb47ebf14b79ca4894a0c64324f0b8c4b706"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x3, 0x7, 0x1a, 0x19, 0xa, 0x8}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20040}, 0x40004) 431.204194ms ago: executing program 3 (id=4438): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015000c8537350d000300686173683a6d6163"], 0x5c}}, 0x4000) (async) listen(r1, 0x0) mmap(&(0x7f0000583000/0x2000)=nil, 0x2000, 0x100000d, 0x2010, r1, 0x3ffc7000) (async) r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) close(0x4) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x6, &(0x7f0000000140)=0x10001, 0x4) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="c001000019000100fffffffffcdbdf2500000000000000000000000000000000fffffffc00000000000000000000000000000000fffc00000a00800087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000100000000000000004000000000000000002000000000000000000000000c06b6e0000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="0000000044000500e0000001000000000000000000000000000004d4ff0000000a000000fc0200000000000000000000000000010000000003025b000100000000000000b5000800b10008000108"], 0x1c0}}, 0x2c000010) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'gre0\x00', @ifru_mtu=0x10001}}) io_uring_enter(r3, 0x7855, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x122) (async) memfd_create(&(0x7f0000000180)='macvlan\x00', 0x5) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 402.663539ms ago: executing program 2 (id=4439): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f000083b000/0x1000)=nil, 0x1000, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) r6 = socket(0x29, 0x2, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x40, r7, 0x7fff}, 0xc) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r8 = eventfd(0x80000000) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x0, r8}) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x602100, 0x0) ioctl$FBIOGETCMAP(r9, 0x4604, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) 0s ago: executing program 4 (id=4440): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x3050, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x4) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000300)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5ad718e0, 0x0, 0x7, 0x2, [0x2, 0x7, 0x10001, 0x8, 0x100000, 0x3d9e289b]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x7) r5 = getpgrp(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078006000400000000000600054000000000080008"], 0x64}}, 0x0) landlock_restrict_self(r4, 0x7) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r5}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20048843) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) kernel console output (not intermixed with test programs): vice found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1383.713842][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1383.744209][ T5934] usb 5-1: Product: syz [ 1383.764923][ T5934] usb 5-1: Manufacturer: syz [ 1383.796879][ T5934] usb 5-1: SerialNumber: syz [ 1383.867175][ T5934] usb 5-1: config 0 descriptor?? [ 1384.172791][T22506] FAULT_INJECTION: forcing a failure. [ 1384.172791][T22506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1384.246574][T22506] CPU: 1 UID: 0 PID: 22506 Comm: syz.2.3923 Tainted: G L syzkaller #0 PREEMPT(full) [ 1384.246607][T22506] Tainted: [L]=SOFTLOCKUP [ 1384.246615][T22506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1384.246626][T22506] Call Trace: [ 1384.246635][T22506] [ 1384.246643][T22506] dump_stack_lvl+0xe8/0x150 [ 1384.246674][T22506] should_fail_ex+0x412/0x560 [ 1384.246706][T22506] _copy_to_user+0x31/0xb0 [ 1384.246730][T22506] simple_read_from_buffer+0xe1/0x170 [ 1384.246771][T22506] proc_fail_nth_read+0x1bb/0x230 [ 1384.246801][T22506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1384.246831][T22506] ? rw_verify_area+0x2a6/0x4d0 [ 1384.246850][T22506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1384.246876][T22506] vfs_read+0x20c/0xa70 [ 1384.246894][T22506] ? fdget_pos+0x246/0x320 [ 1384.246926][T22506] ? __pfx___mutex_lock+0x10/0x10 [ 1384.246948][T22506] ? __pfx_vfs_read+0x10/0x10 [ 1384.246970][T22506] ? __fget_files+0x2a/0x420 [ 1384.247002][T22506] ? __fget_files+0x3a0/0x420 [ 1384.247027][T22506] ? __fget_files+0x2a/0x420 [ 1384.247062][T22506] ksys_read+0x150/0x270 [ 1384.247087][T22506] ? __pfx_ksys_read+0x10/0x10 [ 1384.247120][T22506] do_syscall_64+0x14d/0xf80 [ 1384.247139][T22506] ? trace_irq_disable+0x3b/0x150 [ 1384.247163][T22506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.247181][T22506] ? clear_bhb_loop+0x40/0x90 [ 1384.247202][T22506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.247220][T22506] RIP: 0033:0x7fb64455cfce [ 1384.247238][T22506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1384.247255][T22506] RSP: 002b:00007fb6454fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1384.247278][T22506] RAX: ffffffffffffffda RBX: 00007fb6455006c0 RCX: 00007fb64455cfce [ 1384.247292][T22506] RDX: 000000000000000f RSI: 00007fb6455000a0 RDI: 0000000000000004 [ 1384.247305][T22506] RBP: 00007fb645500090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.247317][T22506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1384.247329][T22506] R13: 00007fb644816038 R14: 00007fb644815fa0 R15: 00007fb64493fa48 [ 1384.247359][T22506] [ 1384.961098][T22525] team0: entered allmulticast mode [ 1384.966467][T22525] team_slave_0: entered allmulticast mode [ 1384.989862][T22525] team_slave_1: entered allmulticast mode [ 1385.036720][T22525] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1385.263029][ T5933] usb 5-1: USB disconnect, device number 115 [ 1385.680187][ T5933] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1385.903539][ T5933] usb 5-1: New USB device found, idVendor=07fd, idProduct=0104, bcdDevice= 0.40 [ 1385.930210][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.955248][ T5933] usb 5-1: Product: syz [ 1385.975409][ T5933] usb 5-1: Manufacturer: syz [ 1386.001485][ T5933] usb 5-1: SerialNumber: syz [ 1386.264527][ T5933] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1386.279919][ T5933] usb 5-1: MIDIStreaming interface descriptor not found [ 1386.394595][ T5933] usb 5-1: USB disconnect, device number 116 [ 1386.592236][T20714] udevd[20714]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1386.658739][T22543] loop5: detected capacity change from 0 to 7 [ 1386.673860][T22543] Dev loop5: unable to read RDB block 7 [ 1386.700345][T22543] loop5: unable to read partition table [ 1386.738387][T22543] loop5: partition table beyond EOD, truncated [ 1386.787073][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3934'. [ 1386.817635][T22543] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1386.861662][T22543] netlink: 'syz.5.3934': attribute type 18 has an invalid length. [ 1386.883650][T22543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3934'. [ 1386.943687][T21324] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1386.976261][T21324] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1387.005464][T21324] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1387.047082][T21324] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1387.151409][T22555] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1387.322700][T22557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3936'. [ 1387.332261][T22557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1388.904728][T22576] team0: entered allmulticast mode [ 1388.929692][T22576] team_slave_0: entered allmulticast mode [ 1388.960397][T22576] team_slave_1: entered allmulticast mode [ 1388.997934][T22576] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.051793][T22576] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1389.166381][T22584] loop5: detected capacity change from 0 to 7 [ 1389.207159][T18190] Dev loop5: unable to read RDB block 7 [ 1389.264429][T18190] loop5: unable to read partition table [ 1389.306143][T18190] loop5: partition table beyond EOD, truncated [ 1389.398801][T22584] Dev loop5: unable to read RDB block 7 [ 1389.404741][T22584] loop5: unable to read partition table [ 1389.435805][T22584] loop5: partition table beyond EOD, truncated [ 1389.442769][T22584] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1389.682399][ T5933] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1389.695496][ T5194] Dev loop5: unable to read RDB block 7 [ 1389.706172][ T5194] loop5: unable to read partition table [ 1389.715689][ T5194] loop5: partition table beyond EOD, truncated [ 1389.809764][T22596] PKCS7: Unknown OID: [4] 2.19.13055.1334505.28.28.0.0 [ 1389.830132][ T5933] usb 3-1: device descriptor read/64, error -71 [ 1389.848194][T22596] PKCS7: Only support pkcs7_signedData type [ 1389.881041][T12165] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1390.044998][T12165] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.063628][T12165] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1390.080723][ T5933] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1390.092218][T12165] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1390.139445][T12165] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1390.159854][T12165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.168392][T12165] usb 4-1: Product: syz [ 1390.173013][T12165] usb 4-1: Manufacturer: syz [ 1390.177617][T12165] usb 4-1: SerialNumber: syz [ 1390.191255][T12165] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1390.198366][T12165] cdc_ncm 4-1:1.0: bind() failure [ 1390.240420][ T5933] usb 3-1: device descriptor read/64, error -71 [ 1390.352690][ T5933] usb usb3-port1: attempt power cycle [ 1390.392934][T12165] usb 4-1: USB disconnect, device number 90 [ 1390.700284][ T5933] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1390.742529][ T5933] usb 3-1: device descriptor read/8, error -71 [ 1390.990941][ T5933] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1391.031899][ T5933] usb 3-1: device descriptor read/8, error -71 [ 1391.150476][ T5933] usb usb3-port1: unable to enumerate USB device [ 1391.233727][T22610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3953'. [ 1391.243328][T22610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1391.721305][T22613] netlink: 'syz.5.3955': attribute type 11 has an invalid length. [ 1392.377381][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1392.377401][ T30] audit: type=1326 audit(1773591961.060:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22620 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1392.394375][T22629] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1392.505327][ T30] audit: type=1326 audit(1773591961.070:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22620 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1392.567324][ T30] audit: type=1326 audit(1773591961.070:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22620 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1392.573652][T22630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3960'. [ 1392.594606][ T30] audit: type=1326 audit(1773591961.110:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22620 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1392.640549][ T30] audit: type=1326 audit(1773591961.120:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22620 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1392.688293][ T30] audit: type=1326 audit(1773591961.120:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22620 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1392.730154][T17651] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1392.744986][ T30] audit: type=1326 audit(1773591961.120:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22620 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1392.775448][ T30] audit: type=1326 audit(1773591961.120:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22620 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1392.799637][ T30] audit: type=1326 audit(1773591961.120:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22620 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1392.869173][ T30] audit: type=1326 audit(1773591961.120:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22620 comm="syz.4.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1392.901216][T17651] usb 4-1: device descriptor read/64, error -71 [ 1393.182466][T17651] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1393.340454][T17651] usb 4-1: device descriptor read/64, error -71 [ 1393.450564][T17651] usb usb4-port1: attempt power cycle [ 1393.761110][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3966'. [ 1393.783471][T22658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1393.881696][T17651] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1393.931487][T17651] usb 4-1: device descriptor read/8, error -71 [ 1394.210440][T17651] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1394.247558][T22660] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1394.294853][T17651] usb 4-1: device descriptor read/8, error -71 [ 1394.355161][T22660] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1394.380871][T22665] netlink: 'syz.2.3968': attribute type 11 has an invalid length. [ 1394.388869][T22660] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.453343][T17651] usb usb4-port1: unable to enumerate USB device [ 1394.542493][T22660] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1395.172452][T22677] netlink: 'syz.4.3970': attribute type 3 has an invalid length. [ 1395.700154][T17651] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1395.867051][T17651] usb 6-1: device descriptor read/64, error -71 [ 1395.890245][ T29] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1396.092641][ T29] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1396.113766][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.140228][T17651] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1396.157382][ T29] usb 3-1: config 0 descriptor?? [ 1396.176826][ T29] cp210x 3-1:0.0: cp210x converter detected [ 1396.270201][ T5934] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1396.290157][T17651] usb 6-1: device descriptor read/64, error -71 [ 1396.396157][ T29] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1396.405080][T17651] usb usb6-port1: attempt power cycle [ 1396.464009][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 1396.492358][ T5934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1396.509132][ T5934] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1396.518718][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.528746][ T5934] usb 4-1: Product: syz [ 1396.533286][ T5934] usb 4-1: Manufacturer: syz [ 1396.538878][ T5934] usb 4-1: SerialNumber: syz [ 1396.577853][ T5933] usb 3-1: USB disconnect, device number 103 [ 1396.609637][ T5933] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1396.631886][ T5933] cp210x 3-1:0.0: device disconnected [ 1396.762697][T17651] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1396.772505][ T5934] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1396.785214][ T5934] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1396.796842][ T5934] usb 4-1: unit 3 not found! [ 1396.801185][T17651] usb 6-1: device descriptor read/8, error -71 [ 1396.833991][ T5934] usb 4-1: USB disconnect, device number 95 [ 1396.902515][T18277] udevd[18277]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1397.007518][T22697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1397.050161][T17651] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1397.081215][T17651] usb 6-1: device descriptor read/8, error -71 [ 1397.191846][T17651] usb usb6-port1: unable to enumerate USB device [ 1397.554266][T22704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3979'. [ 1398.069467][T22712] x_tables: duplicate underflow at hook 3 [ 1398.652836][T22719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3982'. [ 1398.702990][T22719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1399.018915][T22725] netlink: 'syz.0.3984': attribute type 11 has an invalid length. [ 1399.486979][T22736] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1399.638144][T22739] netlink: 'syz.2.3987': attribute type 3 has an invalid length. [ 1399.740333][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 1399.805450][T22722] usb usb8: usbfs: process 22722 (syz.5.3983) did not claim interface 0 before use [ 1399.815631][ T5910] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1399.820391][ T5934] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1399.906838][T22722] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1399.941255][T22722] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1399.970246][T22722] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1400.050491][ T5934] usb 4-1: device descriptor read/64, error -71 [ 1400.073514][T22744] pimreg3: entered allmulticast mode [ 1400.320152][ T5934] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1400.492731][T22749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.533707][ T5934] usb 4-1: device descriptor read/64, error -71 [ 1400.560677][T22749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.699508][ T5934] usb usb4-port1: attempt power cycle [ 1400.903734][T22760] fuse: Bad value for 'fd' [ 1401.040188][ T5910] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1401.111495][ T5934] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1401.161386][ T5934] usb 4-1: device descriptor read/8, error -71 [ 1401.271369][ T5910] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1401.330977][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.340652][ T5910] usb 3-1: Product: syz [ 1401.354865][ T5910] usb 3-1: Manufacturer: syz [ 1401.367343][ T5910] usb 3-1: SerialNumber: syz [ 1401.430427][ T5934] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1401.460309][ T5910] usb 3-1: config 0 descriptor?? [ 1401.486642][ T5934] usb 4-1: device descriptor read/8, error -71 [ 1401.610568][ T5934] usb usb4-port1: unable to enumerate USB device [ 1402.343482][T22749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.392157][T22749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.442197][T22749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.473228][T22749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.517175][ T5910] usb 3-1: Firmware version (0.0) predates our first public release. [ 1402.568552][ T5910] usb 3-1: Please update to version 0.2 or newer [ 1402.725623][ T5910] usb 3-1: USB disconnect, device number 105 [ 1403.160186][ T5933] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1403.344558][T22788] netlink: 'syz.4.4001': attribute type 4 has an invalid length. [ 1403.370438][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 1403.401463][ T5933] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1403.415462][T22790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1403.440675][ T5933] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1403.520936][ T5933] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1403.559238][ T5933] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1403.624133][ T5933] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1403.650172][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.714199][ T5933] usb 4-1: Product: syz [ 1403.718589][ T5933] usb 4-1: Manufacturer: syz [ 1403.760985][ T5933] usb 4-1: SerialNumber: syz [ 1403.807486][ T5933] usb 4-1: config 0 descriptor?? [ 1403.826636][T22796] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1404.095881][ T5933] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input135 [ 1404.132892][T22803] syzkaller0: entered promiscuous mode [ 1404.142002][ T5179] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1404.161234][T22803] syzkaller0: entered allmulticast mode [ 1404.203502][ T5179] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1404.215303][T22806] tipc: Enabled bearer , priority 0 [ 1404.254680][ T5179] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1404.291069][ T5179] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1404.330558][T18277] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1404.377050][T22779] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1404.431832][ T5179] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1404.457489][ T5179] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1404.478839][T22802] tipc: Resetting bearer [ 1404.486959][ T29] usb 4-1: USB disconnect, device number 100 [ 1404.499067][ T5179] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 1404.554340][T22802] tipc: Disabling bearer [ 1404.818603][T22814] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 1405.408261][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1405.408281][ T30] audit: type=1326 audit(1773591974.100:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c719c799 code=0x7ffc0000 [ 1405.511120][ T30] audit: type=1326 audit(1773591974.200:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f20c719c799 code=0x7ffc0000 [ 1405.600574][ T30] audit: type=1326 audit(1773591974.200:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c719c799 code=0x7ffc0000 [ 1405.631911][ T30] audit: type=1326 audit(1773591974.200:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f20c719c799 code=0x7ffc0000 [ 1405.686145][T22845] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1405.694921][ T30] audit: type=1326 audit(1773591974.200:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c719c799 code=0x7ffc0000 [ 1405.779570][ T30] audit: type=1326 audit(1773591974.200:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20c719c799 code=0x7ffc0000 [ 1405.840536][T22851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4013'. [ 1405.900567][ T30] audit: type=1326 audit(1773591974.200:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c719c799 code=0x7ffc0000 [ 1405.925914][T22851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1405.956315][ T30] audit: type=1326 audit(1773591974.260:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20c719c799 code=0x7ffc0000 [ 1406.205862][ T30] audit: type=1326 audit(1773591974.260:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c719c799 code=0x7ffc0000 [ 1406.515329][ T30] audit: type=1326 audit(1773591974.330:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f20c719c799 code=0x7ffc0000 [ 1407.430183][T17651] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1407.450202][ T29] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1407.590180][T17651] usb 5-1: Using ep0 maxpacket: 8 [ 1407.598382][T17651] usb 5-1: config 2 has an invalid interface number: 138 but max is 0 [ 1407.612095][T17651] usb 5-1: config 2 has no interface number 0 [ 1407.618943][T17651] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 1407.633157][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1407.641967][T17651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.651414][ T29] usb 3-1: not running at top speed; connect to a high speed hub [ 1407.663371][ T29] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 1407.672696][ T29] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 1407.688823][ T29] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1407.699026][ T29] usb 3-1: config 129 has no interface number 0 [ 1407.709169][ T29] usb 3-1: config 129 has no interface number 1 [ 1407.717023][ T29] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1407.732657][ T29] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1407.744908][ T29] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1407.760205][ T29] usb 3-1: config 129 interface 135 has no altsetting 0 [ 1407.767355][ T29] usb 3-1: config 129 interface 5 has no altsetting 0 [ 1407.775587][ T29] usb 3-1: language id specifier not provided by device, defaulting to English [ 1407.791921][ T29] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 1407.803025][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.812876][ T29] usb 3-1: Manufacturer:  [ 1407.817521][ T29] usb 3-1: SerialNumber: Ჸ [ 1407.868464][T22918] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1407.892048][T17651] usb 5-1: USB disconnect, device number 117 [ 1407.999741][T22933] netlink: 'syz.3.4029': attribute type 4 has an invalid length. [ 1408.021928][T22933] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4029'. [ 1408.037428][T22933] .`: renamed from bond0 (while UP) [ 1408.049899][ T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1408.059864][ T29] usb 3-1: MIDIStreaming interface descriptor not found [ 1408.155844][ T29] usb 3-1: USB disconnect, device number 106 [ 1408.258741][T20714] udevd[20714]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1408.288212][T22966] team0: left allmulticast mode [ 1408.300084][T22966] team_slave_0: left allmulticast mode [ 1408.316167][T22966] team_slave_1: left allmulticast mode [ 1408.324836][T22966] batadv1: left allmulticast mode [ 1408.956038][ T29] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1409.152043][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 1409.170205][ T5934] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1409.192518][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1409.331733][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 1409.378168][ T5934] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1409.387999][ T5934] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1409.399988][ T5934] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1409.412254][ T5934] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1409.422602][ T5934] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1409.464783][ T5934] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1409.506350][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.520610][ T2154] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1409.750268][ T2154] usb 6-1: Using ep0 maxpacket: 8 [ 1409.770543][ T5934] usb 5-1: GET_CAPABILITIES returned 0 [ 1409.795684][ T5934] usbtmc 5-1:16.0: can't read capabilities [ 1409.883497][ T2154] usb 6-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1409.945630][ T2154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.031187][ T2154] usb 6-1: config 0 descriptor?? [ 1410.236238][ T2154] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1410.279859][ T2154] pwc: Warning: more than 1 configuration available. [ 1411.727220][T23026] netlink: 'syz.0.4038': attribute type 11 has an invalid length. [ 1411.751877][ T29] usb 3-1: New USB device found, idVendor=0582, idProduct=002d, bcdDevice= 0.40 [ 1411.816763][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.935630][ T29] usb 3-1: can't set config #1, error -71 [ 1411.994392][ T29] usb 3-1: USB disconnect, device number 107 [ 1412.084638][T23045] fuse: Bad value for 'fd' [ 1412.351400][ T29] usb 5-1: USB disconnect, device number 118 [ 1412.430178][ T2154] pwc: Failed to set LED on/off time (-71) [ 1412.463014][ T2154] pwc: send_video_command error -71 [ 1412.489510][ T2154] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1412.524309][ T2154] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1412.562493][ T2154] usb 6-1: USB disconnect, device number 27 [ 1412.996993][T23076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1413.524066][T23093] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4046'. [ 1413.797461][T23112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4048'. [ 1413.852439][T23112] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1414.490148][ T5934] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1414.595523][ T5910] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1414.641623][ T5934] usb 4-1: device descriptor read/64, error -71 [ 1414.813112][T23161] netlink: 'syz.0.4054': attribute type 11 has an invalid length. [ 1414.883911][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 1414.912769][ T5934] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1415.081410][ T2154] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 1415.109214][ T5934] usb 4-1: device descriptor read/64, error -71 [ 1415.132655][ T5910] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1415.168001][ T5910] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1415.208047][ T5910] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1415.250138][ T2154] usb 6-1: device descriptor read/64, error -71 [ 1415.268317][ T5910] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1415.281663][ T5934] usb usb4-port1: attempt power cycle [ 1415.320998][ T5910] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1415.366151][ T5910] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1415.388352][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.520229][ T2154] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 1415.650611][ T5934] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1415.658886][ T2154] usb 6-1: device descriptor read/64, error -71 [ 1415.692185][ T5934] usb 4-1: device descriptor read/8, error -71 [ 1415.773199][ T2154] usb usb6-port1: attempt power cycle [ 1415.890669][ T5910] usb 3-1: GET_CAPABILITIES returned 0 [ 1415.912474][ T5910] usbtmc 3-1:16.0: can't read capabilities [ 1415.960160][ T5934] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1415.987070][T23183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4055'. [ 1416.001954][ T5934] usb 4-1: device descriptor read/8, error -71 [ 1416.014769][T23183] netlink: 'syz.0.4055': attribute type 14 has an invalid length. [ 1416.032409][T23183] netlink: 'syz.0.4055': attribute type 13 has an invalid length. [ 1416.097694][T23183] vxlan0: entered promiscuous mode [ 1416.111197][ T5934] usb usb4-port1: unable to enumerate USB device [ 1416.122898][ T2154] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 1416.134051][T21325] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.145804][T21325] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.161035][ T2154] usb 6-1: device descriptor read/8, error -71 [ 1416.170899][T21325] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.185689][T21325] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1416.410154][ T2154] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 1416.430801][ T2154] usb 6-1: device descriptor read/8, error -71 [ 1416.541626][ T2154] usb usb6-port1: unable to enumerate USB device [ 1417.353639][T23271] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4060'. [ 1417.385148][T23272] fuse: Bad value for 'fd' [ 1417.403735][ T5933] usb 3-1: USB disconnect, device number 108 [ 1417.787618][T23273] delete_channel: no stack [ 1417.973663][T23304] kvm: pic: non byte write [ 1418.193091][T23333] netlink: 'syz.4.4065': attribute type 11 has an invalid length. [ 1418.402910][T23344] syzkaller0: entered promiscuous mode [ 1418.426978][T23344] syzkaller0: entered allmulticast mode [ 1418.443436][T23344] tipc: Enabled bearer , priority 0 [ 1418.684490][T23343] tipc: Resetting bearer [ 1418.717929][T23343] tipc: Disabling bearer [ 1418.948900][T23364] netlink: 'syz.3.4068': attribute type 58 has an invalid length. [ 1419.063552][ T5933] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1419.245569][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.278214][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.304235][ T5933] usb 3-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 1419.314325][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.345123][ T5933] usb 3-1: config 0 descriptor?? [ 1419.358396][ T5910] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1419.542141][ T5910] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1419.555450][ T5933] usbhid 3-1:0.0: can't add hid device: -71 [ 1419.560479][ T5910] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1419.575909][ T5910] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1419.576073][ T5933] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1419.587443][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1419.589174][ T5910] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1419.611844][ T5910] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1419.631415][T21326] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.644132][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1419.654409][ T5910] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1419.657745][ T5933] usb 3-1: USB disconnect, device number 109 [ 1419.677603][ T5910] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1419.690142][ T5934] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1419.708374][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1419.726099][ T5910] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1419.747392][ T5910] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1419.774293][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1419.792415][ T5910] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1419.811894][ T5910] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1419.838587][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1419.850289][ T5934] usb 5-1: Using ep0 maxpacket: 16 [ 1419.858053][ T5910] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1419.858696][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.889832][ T5910] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1419.907570][ T5934] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1419.908718][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1419.938615][ T5910] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1419.939656][ T5934] usb 5-1: New USB device found, idVendor=046d, idProduct=0921, bcdDevice=ab.34 [ 1419.961975][ T5910] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1419.976782][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.976871][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1419.996395][ T5910] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1420.005831][ T5934] usb 5-1: Product: syz [ 1420.010582][ T5910] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1420.026045][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1420.033137][ T5934] usb 5-1: Manufacturer: syz [ 1420.036024][ T5910] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1420.038779][ T5934] usb 5-1: SerialNumber: syz [ 1420.047233][ T5910] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1420.062199][ T5910] usb 6-1: Product: syz [ 1420.070175][ T5910] usb 6-1: Manufacturer: syz [ 1420.077318][ T5910] usb 6-1: SerialNumber: syz [ 1420.088722][ T5934] usb 5-1: config 0 descriptor?? [ 1420.106430][ T5910] usb 6-1: config 0 descriptor?? [ 1420.128823][ T5910] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1420.238593][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1420.238635][ T30] audit: type=1400 audit(1773591988.930:2453): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=23416 comm="syz.2.4075" [ 1420.414271][T23396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4074'. [ 1420.468938][T23396] ip6tnl3: entered allmulticast mode [ 1420.502392][T23376] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1420.534188][ T5934] gspca_main: tv8532-2.14.0 probing 046d:0921 [ 1420.599498][ T5934] usb 5-1: USB disconnect, device number 119 [ 1421.108017][T23449] kvm: pic: non byte write [ 1421.193650][ T5934] usb 6-1: USB disconnect, device number 32 [ 1421.241386][ T5934] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1421.382455][T23471] fuse: Bad value for 'fd' [ 1422.410122][ T5933] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1422.594639][ T5933] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1422.638568][ T5933] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1422.657894][ T5933] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1422.683520][ T5933] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1422.693408][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.715813][T23485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1423.059791][T23511] loop5: detected capacity change from 0 to 7 [ 1423.097701][T23511] Dev loop5: unable to read RDB block 7 [ 1423.112871][T23511] loop5: unable to read partition table [ 1423.142679][T23511] loop5: partition table beyond EOD, truncated [ 1423.149513][T23511] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1423.257484][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.263996][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.330889][ T5910] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1423.500681][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 1423.521389][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 1423.573182][ T5910] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1423.618256][ T5910] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1423.654319][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.684382][ T5910] usb 6-1: Product: syz [ 1423.700254][ T5910] usb 6-1: Manufacturer: syz [ 1423.715975][ T5910] usb 6-1: SerialNumber: syz [ 1423.741209][ T5910] usb 6-1: config 0 descriptor?? [ 1423.772168][T23512] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1423.823149][ C1] port100 6-1:0.0: NFC: Urb failure (status -71) [ 1424.010955][ C1] port100 6-1:0.0: NFC: Urb failure (status -71) [ 1424.019259][ T5910] port100 6-1:0.0: NFC: Could not get supported command types [ 1424.070573][ T5910] usb 6-1: USB disconnect, device number 33 [ 1424.130854][T23544] kvm: pic: non byte write [ 1424.520139][ T5910] usb 3-1: new low-speed USB device number 110 using dummy_hcd [ 1424.698568][T23561] tipc: Enabled bearer , priority 0 [ 1424.716940][T23561] tipc: Resetting bearer [ 1424.727416][T23564] tipc: Enabling of bearer rejected, already enabled [ 1424.783216][ T5910] usb 3-1: device descriptor read/all, error -71 [ 1424.842177][T23572] input: syz0 as /devices/virtual/input/input137 [ 1424.990428][T23564] tipc: Disabling bearer [ 1426.227354][T23609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4098'. [ 1426.268406][ T5933] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1426.276665][T23609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4098'. [ 1426.358815][ T5933] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input136 [ 1426.567480][T23619] netlink: 'syz.4.4099': attribute type 23 has an invalid length. [ 1426.591843][T23619] netlink: 'syz.4.4099': attribute type 23 has an invalid length. [ 1426.604902][ T5933] usb 4-1: USB disconnect, device number 105 [ 1426.604956][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1426.841642][T23596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.090255][ T5910] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1427.217469][T23645] loop5: detected capacity change from 0 to 7 [ 1427.237433][T23645] Dev loop5: unable to read RDB block 7 [ 1427.260478][T23645] loop5: unable to read partition table [ 1427.285586][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.296867][T23645] loop5: partition table beyond EOD, truncated [ 1427.307446][T23645] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1427.322270][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.337731][ T5910] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1427.348414][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.363557][ T5910] usb 5-1: config 0 descriptor?? [ 1427.560560][ T5933] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1427.710174][ T5933] usb 3-1: device descriptor read/64, error -71 [ 1427.784683][ T5910] hid-steam 0003:28DE:1142.0046: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1427.880344][ T5910] hid-steam 0003:28DE:1142.0046: Steam wireless receiver connected [ 1427.917857][ T5910] hid-steam 0003:28DE:1142.0047: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1427.960200][ T5933] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1427.977732][T23632] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1428.026276][T12165] usb 5-1: USB disconnect, device number 120 [ 1428.048419][T23674] fido_id[23674]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1428.068897][T12165] hid-steam 0003:28DE:1142.0046: Steam wireless receiver disconnected [ 1428.130540][ T5933] usb 3-1: device descriptor read/64, error -71 [ 1428.256449][ T5933] usb usb3-port1: attempt power cycle [ 1428.612634][ T5933] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1428.654126][ T5933] usb 3-1: device descriptor read/8, error -71 [ 1428.668500][T23715] x_tables: duplicate underflow at hook 2 [ 1428.921715][ T5933] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1428.950900][ T5933] usb 3-1: device descriptor read/8, error -71 [ 1428.961945][T23723] usb usb9: usbfs: process 23723 (syz.4.4113) did not claim interface 47 before use [ 1429.080422][ T5933] usb usb3-port1: unable to enumerate USB device [ 1429.180287][ T5934] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1429.392107][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.415271][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.435823][ T5934] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1429.455195][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.476419][ T5934] usb 4-1: config 0 descriptor?? [ 1429.500176][ T29] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1429.708835][ T5934] usbhid 4-1:0.0: can't add hid device: -71 [ 1429.743080][ T5934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1429.815895][ T5934] usb 4-1: USB disconnect, device number 106 [ 1430.220113][ T5934] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1430.350443][ T29] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1430.382034][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.404153][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.425199][ T5934] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1430.445966][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.458899][ T5934] usb 4-1: config 0 descriptor?? [ 1430.513068][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1430.524473][ T29] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1430.534670][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.545888][ T29] usb 6-1: config 0 descriptor?? [ 1430.883329][ T5934] keytouch 0003:0926:3333.0048: fixing up Keytouch IEC report descriptor [ 1430.898734][ T5934] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0048/input/input138 [ 1430.964378][ T29] hid_parser_main: 30 callbacks suppressed [ 1430.964404][ T29] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1430.989727][ T29] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1431.000760][ T29] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1431.007692][ T29] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1431.033479][ T29] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1431.071414][ T5934] keytouch 0003:0926:3333.0048: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1431.119669][ T29] elan 0003:04F3:0755.0049: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1431.170432][T23757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.195616][T23757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.230799][ T5934] usb 6-1: USB disconnect, device number 35 [ 1431.317992][T23807] fido_id[23807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1431.895749][T23852] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4126'. [ 1431.920534][ T30] audit: type=1326 audit(1773592000.600:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23846 comm="syz.4.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1431.962611][ T30] audit: type=1326 audit(1773592000.640:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23846 comm="syz.4.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1431.986892][ T30] audit: type=1326 audit(1773592000.640:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23846 comm="syz.4.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1432.019181][ T30] audit: type=1326 audit(1773592000.660:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23846 comm="syz.4.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1432.049243][ T30] audit: type=1326 audit(1773592000.660:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23846 comm="syz.4.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1432.109635][ T30] audit: type=1326 audit(1773592000.660:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23846 comm="syz.4.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1432.152761][ T30] audit: type=1326 audit(1773592000.680:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23846 comm="syz.4.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1432.180321][ T5934] usb 4-1: reset high-speed USB device number 107 using dummy_hcd [ 1432.219802][ T30] audit: type=1326 audit(1773592000.680:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23846 comm="syz.4.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1432.256650][ T30] audit: type=1326 audit(1773592000.740:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23846 comm="syz.4.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1432.286359][ T30] audit: type=1326 audit(1773592000.740:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23846 comm="syz.4.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1432.520197][ T5910] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1432.560154][ T29] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1432.680236][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 1432.688865][ T5910] usb 6-1: unable to get BOS descriptor set [ 1432.707601][ T5910] usb 6-1: config 127 has an invalid interface number: 116 but max is 0 [ 1432.719342][ T29] usb 3-1: config index 0 descriptor too short (expected 292, got 36) [ 1432.734390][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.746199][ T5910] usb 6-1: config 127 has no interface number 0 [ 1432.764447][ T5910] usb 6-1: config 127 interface 116 has no altsetting 0 [ 1432.777442][ T29] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1432.801517][ T5910] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c002, bcdDevice=46.4a [ 1432.820119][ T29] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1432.826849][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.841914][ T5910] usb 6-1: Product: 堲 [ 1432.846245][ T29] usb 3-1: string descriptor 0 read error: -22 [ 1432.857243][ T5910] usb 6-1: Manufacturer: Ⰱ [ 1432.864849][ T29] usb 3-1: New USB device found, idVendor=17ef, idProduct=6045, bcdDevice= 0.40 [ 1432.878611][ T5910] usb 6-1: SerialNumber: 勶녽要蘘攂ᚡオ᮶哵횏쨊ᭌ墛缜⍬齹䇡דּ茡⏜䡹쟳뇡霯ጯ䤅ᰩ쪉펮썘桡਱婿펍쬰䎚㎗䭥拳᐀㤫㩝⒵瓸湗徿ꊫ䍗ⰨᲩ磉틑䐲Ԥꦘ⊀탧⋌띐╻鱯燈螎ȓꅍ撃윸褐斷浥ࡍ蓱终✹흰⷟ꗜ劑꥛僳ᐚ朼 [ 1432.913686][ T29] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1432.951600][ T29] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1433.182741][T23880] netlink: 'syz.3.4130': attribute type 11 has an invalid length. [ 1433.202838][ T5910] gspca_main: vc032x-2.14.0 probing 0ac8:c002 [ 1433.223445][ T5910] gspca_vc032x: reg_r err -71 [ 1433.228204][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.235472][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.246192][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.262823][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.269190][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.276673][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.288722][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.302437][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.312582][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.323183][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.328518][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.347396][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.360622][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.366165][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.380252][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.385583][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.403325][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.423497][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 1433.428881][ T5910] gspca_vc032x: Unknown sensor... [ 1433.445088][ T5910] vc032x 6-1:127.116: probe with driver vc032x failed with error -22 [ 1433.456399][ T5910] usb 6-1: USB disconnect, device number 36 [ 1433.478640][T23887] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4127'. [ 1433.760162][ T5910] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1433.840959][T12165] usb 4-1: USB disconnect, device number 107 [ 1433.914664][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 1433.929061][ T5910] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1433.937998][ T5910] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1433.945691][ T5910] usb 6-1: can't read configurations, error -71 [ 1435.340139][ T5910] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1435.411356][T12165] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1435.430217][ T29] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 1435.500450][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 1435.511626][ T5910] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1435.532316][ T5910] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1435.551956][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.569224][ T5910] usb 4-1: Product: syz [ 1435.581073][ T5910] usb 4-1: Manufacturer: syz [ 1435.584583][T12165] usb 6-1: Using ep0 maxpacket: 8 [ 1435.596126][ T5910] usb 4-1: SerialNumber: syz [ 1435.606226][T12165] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1435.621506][ T29] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 1435.636534][ T5910] usb 4-1: config 0 descriptor?? [ 1435.642719][T12165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.653045][ T29] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1435.666747][T12165] usb 6-1: Product: syz [ 1435.669164][ T5910] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1435.674624][T12165] usb 6-1: Manufacturer: syz [ 1435.683410][T12165] usb 6-1: SerialNumber: syz [ 1435.699327][ T29] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1435.702669][T12165] usb 6-1: config 0 descriptor?? [ 1435.710211][ T5910] usb 4-1: Detected FT232R [ 1435.722044][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.882044][ T5910] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1435.935177][T12165] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1435.975388][ T29] usb 5-1: string descriptor 0 read error: -71 [ 1435.989063][ T29] hub 5-1:32.0: bad descriptor, ignoring hub [ 1435.997995][ T29] hub 5-1:32.0: probe with driver hub failed with error -5 [ 1436.115195][ T5910] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 1436.132728][ T5910] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1436.165572][ T29] usb 5-1: USB disconnect, device number 121 [ 1436.320202][ T5933] usb 4-1: USB disconnect, device number 108 [ 1436.395599][ T5933] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1436.408668][ T5933] ftdi_sio 4-1:0.0: device disconnected [ 1436.678795][ T5933] usb 3-1: USB disconnect, device number 116 [ 1437.560210][ T29] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 1437.710141][ T29] usb 3-1: device descriptor read/64, error -71 [ 1437.822441][T12165] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1437.946688][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1437.946706][ T30] audit: type=1326 audit(1773592006.640:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24050 comm="syz.0.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aeed9c799 code=0x7ffc0000 [ 1437.980638][ T29] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1438.052440][ T30] audit: type=1326 audit(1773592006.640:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24050 comm="syz.0.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aeed9c799 code=0x7ffc0000 [ 1438.150210][ T29] usb 3-1: device descriptor read/64, error -71 [ 1438.261882][ T29] usb usb3-port1: attempt power cycle [ 1438.484976][ T5910] usb 6-1: USB disconnect, device number 39 [ 1438.500142][ T2154] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1438.563387][T24078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1438.584295][T24078] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1438.612402][ T29] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1438.640238][ T2154] usb 5-1: device descriptor read/64, error -71 [ 1438.660983][ T29] usb 3-1: device descriptor read/8, error -71 [ 1438.797367][T24088] delete_channel: no stack [ 1438.900269][ T2154] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1438.908384][ T29] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1438.940905][ T29] usb 3-1: device descriptor read/8, error -71 [ 1439.060178][ T2154] usb 5-1: device descriptor read/64, error -71 [ 1439.067114][ T29] usb usb3-port1: unable to enumerate USB device [ 1439.170478][ T2154] usb usb5-port1: attempt power cycle [ 1439.187158][T24097] syzkaller0: entered promiscuous mode [ 1439.192908][T24097] syzkaller0: entered allmulticast mode [ 1439.389216][T17651] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1439.527312][ T2154] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1439.551014][ T2154] usb 5-1: device descriptor read/8, error -71 [ 1439.580125][T17651] usb 6-1: Using ep0 maxpacket: 32 [ 1439.587953][T17651] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1439.598010][T17651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.638845][T17651] usb 6-1: config 0 descriptor?? [ 1439.659431][T17651] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1439.730193][ T29] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1439.790174][ T2154] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1439.827633][ T2154] usb 5-1: device descriptor read/8, error -71 [ 1439.890356][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 1439.899424][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1439.909933][ T29] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1439.925220][ T29] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1439.936366][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.946814][ T29] usb 4-1: Product: syz [ 1439.954812][ T2154] usb usb5-port1: unable to enumerate USB device [ 1439.961983][ T29] usb 4-1: Manufacturer: syz [ 1439.966728][ T29] usb 4-1: SerialNumber: syz [ 1439.984776][ T29] usb 4-1: config 0 descriptor?? [ 1440.917366][ T29] usb 4-1: USB disconnect, device number 109 [ 1441.042486][T17651] gspca_sunplus: reg_w_riv err -110 [ 1441.055159][T17651] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 1441.285164][T24143] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4158'. [ 1441.364997][T24148] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4158'. [ 1442.017889][T24158] fuse: Unknown parameter '0x0000000000000003' [ 1442.038404][T24158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4160'. [ 1442.100957][ T30] audit: type=1326 audit(1773592010.800:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64459c799 code=0x7ffc0000 [ 1442.138338][ T30] audit: type=1326 audit(1773592010.800:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64459c799 code=0x7ffc0000 [ 1442.186667][ T30] audit: type=1326 audit(1773592010.800:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64459c799 code=0x7ffc0000 [ 1442.240538][ T30] audit: type=1326 audit(1773592010.800:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64459c799 code=0x7ffc0000 [ 1442.295567][ T30] audit: type=1326 audit(1773592010.800:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb64459c799 code=0x7ffc0000 [ 1442.318419][ T30] audit: type=1326 audit(1773592010.800:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64459c799 code=0x7ffc0000 [ 1442.351743][ T30] audit: type=1326 audit(1773592010.800:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64459c799 code=0x7ffc0000 [ 1442.393305][ T30] audit: type=1326 audit(1773592010.800:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64459c799 code=0x7ffc0000 [ 1442.958957][ T30] kauditd_printk_skb: 190 callbacks suppressed [ 1442.958974][ T30] audit: type=1326 audit(1773592011.650:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb64455cfce code=0x7ffc0000 [ 1443.001253][ T30] audit: type=1326 audit(1773592011.700:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb64455cfce code=0x7ffc0000 [ 1443.025956][ T30] audit: type=1326 audit(1773592011.700:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb64455cfce code=0x7ffc0000 [ 1443.049217][ T30] audit: type=1326 audit(1773592011.720:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb64455cfce code=0x7ffc0000 [ 1443.072977][ T30] audit: type=1326 audit(1773592011.730:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb64455cfce code=0x7ffc0000 [ 1443.100769][ T30] audit: type=1326 audit(1773592011.740:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb64455cfce code=0x7ffc0000 [ 1443.125064][ T30] audit: type=1326 audit(1773592011.760:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb64455cfce code=0x7ffc0000 [ 1443.149821][ T30] audit: type=1326 audit(1773592011.780:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb64455cfce code=0x7ffc0000 [ 1443.173507][ T30] audit: type=1326 audit(1773592011.800:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb64455cfce code=0x7ffc0000 [ 1443.196414][ T30] audit: type=1326 audit(1773592011.820:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb64455cfce code=0x7ffc0000 [ 1443.322936][ T29] usb 6-1: USB disconnect, device number 40 [ 1444.126046][T24201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4167'. [ 1445.956865][T24283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4174'. [ 1445.998755][T24275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4174'. [ 1446.050786][T12165] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1446.076189][T24275] bridge1: entered promiscuous mode [ 1446.144143][T24275] bridge1: port 1(macsec2) entered blocking state [ 1446.164104][T24275] bridge1: port 1(macsec2) entered disabled state [ 1446.173112][T24275] macsec2: entered allmulticast mode [ 1446.179106][T24275] bridge1: entered allmulticast mode [ 1446.188266][T24275] macsec2: left allmulticast mode [ 1446.194006][T24275] bridge1: left allmulticast mode [ 1446.208173][T24275] bridge1: left promiscuous mode [ 1446.249331][T24290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4174'. [ 1446.258553][T12165] usb 6-1: Using ep0 maxpacket: 8 [ 1446.267927][T12165] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1446.278850][T12165] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 1446.292330][T12165] usb 6-1: config 0 has no interface number 0 [ 1446.316419][T12165] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1446.328788][T12165] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1446.358154][T12165] usb 6-1: config 0 interface 88 has no altsetting 0 [ 1446.397140][T12165] usb 6-1: language id specifier not provided by device, defaulting to English [ 1446.466050][T12165] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1446.498909][T12165] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1446.582037][T12165] usb 6-1: Product: syz [ 1446.606910][T12165] usb 6-1: SerialNumber: syz [ 1446.634010][T12165] usb 6-1: config 0 descriptor?? [ 1446.801773][T24313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1447.003699][T12165] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input139 [ 1447.209765][T12165] usb 6-1: USB disconnect, device number 41 [ 1447.614293][T24396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4184'. [ 1447.658187][T24398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4183'. [ 1447.670174][T12165] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1447.763595][T24396] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1447.808032][T24396] team0: Device ipvlan2 is already an upper device of the team interface [ 1447.840141][T12165] usb 4-1: Using ep0 maxpacket: 32 [ 1447.888154][T12165] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1447.903502][T12165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.915430][T24398] 8021q: VLANs not supported on vxcan0 [ 1447.960283][T12165] usb 4-1: Product: syz [ 1447.970377][T12165] usb 4-1: Manufacturer: syz [ 1447.992562][T12165] usb 4-1: SerialNumber: syz [ 1448.101856][T12165] usb 4-1: config 0 descriptor?? [ 1448.132856][T12165] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1448.147416][T24421] netlink: 'syz.0.4186': attribute type 8 has an invalid length. [ 1448.188526][T24421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1448.298485][T24421] bond0: entered promiscuous mode [ 1448.304105][T24421] bond_slave_0: entered promiscuous mode [ 1448.327290][T24421] bond_slave_1: entered promiscuous mode [ 1448.371130][T24421] gretap0: entered promiscuous mode [ 1448.423871][T24421] bond0: left promiscuous mode [ 1448.435844][T24433] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1448.452725][T24421] bond_slave_0: left promiscuous mode [ 1448.478831][T24421] bond_slave_1: left promiscuous mode [ 1448.506820][T24421] gretap0: left promiscuous mode [ 1448.596635][T24434] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4188'. [ 1449.522047][T12165] gspca_topro: reg_r err -71 [ 1449.535020][T12165] gspca_topro: Sensor soi763a [ 1449.587816][T12165] usb 4-1: USB disconnect, device number 110 [ 1450.906160][T24521] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1451.231475][T24543] xt_hashlimit: size too large, truncated to 1048576 [ 1451.281491][T24544] : renamed from vxcan1 (while UP) [ 1451.729206][T24567] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4206'. [ 1451.800146][ T5933] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1451.953126][T24575] netlink: 'syz.4.4209': attribute type 3 has an invalid length. [ 1451.991842][ T5933] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.043962][ T5933] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1452.099366][ T5933] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1452.143901][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.187268][ T5933] usb 4-1: Product: syz [ 1452.215589][ T5933] usb 4-1: Manufacturer: syz [ 1452.240952][ T5933] usb 4-1: SerialNumber: syz [ 1452.284841][ T5933] cdc_mbim 4-1:1.0: skipping garbage [ 1452.484128][T24559] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1452.740963][ T5933] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 1452.741038][ T5933] cdc_mbim 4-1:1.0: bind() failure [ 1452.761181][ T5933] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1452.761215][ T5933] cdc_ncm 4-1:1.1: bind() failure [ 1453.372450][T24610] IPVS: set_ctl: invalid protocol: 103 172.30.1.6:20004 [ 1453.381065][T24610] sctp: [Deprecated]: syz.5.4214 (pid 24610) Use of int in max_burst socket option deprecated. [ 1453.381065][T24610] Use struct sctp_assoc_value instead [ 1453.570247][T24614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4215'. [ 1453.579551][T24614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1454.260215][ T29] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1454.422889][ T29] usb 5-1: device descriptor read/64, error -71 [ 1454.586077][T17651] usb 4-1: USB disconnect, device number 111 [ 1454.680328][ T29] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1454.830156][ T29] usb 5-1: device descriptor read/64, error -71 [ 1454.951042][ T29] usb usb5-port1: attempt power cycle [ 1454.971363][T24663] usb usb7: usbfs: process 24663 (syz.3.4222) did not claim interface 0 before use [ 1455.271036][T17651] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1455.330298][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1455.360774][ T29] usb 5-1: device descriptor read/8, error -71 [ 1455.430223][T17651] usb 6-1: Using ep0 maxpacket: 16 [ 1455.445647][T17651] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1455.482348][T17651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1455.523864][T17651] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1455.537572][T17651] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.548762][T17651] usb 6-1: Product: syz [ 1455.555623][T17651] usb 6-1: Manufacturer: syz [ 1455.566696][T17651] usb 6-1: SerialNumber: syz [ 1455.600166][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1455.616096][T17651] usb 6-1: config 0 descriptor?? [ 1455.637012][T17651] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1455.648254][ T29] usb 5-1: device descriptor read/8, error -71 [ 1455.657509][T17651] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1455.770509][ T29] usb usb5-port1: unable to enumerate USB device [ 1455.906345][T12165] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1455.961206][T12165] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1456.262453][T17651] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1456.280359][T17651] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1456.291083][T24666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.327483][T24666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.893502][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4229'. [ 1456.902853][T24707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1456.953312][T17651] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1456.961856][T17651] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1457.201679][T24715] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4230'. [ 1457.221746][T24716] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4230'. [ 1457.232522][T24715] openvswitch: netlink: Flow key attr not present in new flow. [ 1457.232532][T24716] openvswitch: netlink: Flow key attr not present in new flow. [ 1457.600259][T17651] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 1457.629617][T17651] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1457.694479][T24732] Invalid argument reading file caps for ./file0 [ 1457.910201][T12165] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1458.074477][T12165] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 1458.100416][T12165] usb 3-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 1458.116486][T12165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.159688][T12165] usb 3-1: Product: syz [ 1458.177653][T12165] usb 3-1: Manufacturer: syz [ 1458.230177][T12165] usb 3-1: SerialNumber: syz [ 1458.467014][T17651] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1458.499158][T17651] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1458.554262][T17651] usb 6-1: USB disconnect, device number 42 [ 1458.953266][T24751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4236'. [ 1459.140157][T17651] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1459.350126][T17651] usb 6-1: Using ep0 maxpacket: 16 [ 1459.368669][T17651] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1459.399387][T17651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.442201][T17651] usb 6-1: config 0 descriptor?? [ 1459.474198][T17651] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1460.498033][T17651] gspca_sonixj: reg_w1 err -71 [ 1460.540280][T17651] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1460.550500][ T5933] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1460.598253][T17651] usb 6-1: USB disconnect, device number 43 [ 1460.765276][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 1460.775614][T12165] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1460.837483][T12165] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1460.872811][ T5933] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1460.924943][T24819] fuse: blksize only supported for fuseblk [ 1460.941274][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.983680][ T5933] usb 5-1: Product: syz [ 1461.005479][ T5933] usb 5-1: Manufacturer: syz [ 1461.027983][ T5933] usb 5-1: SerialNumber: syz [ 1461.091502][ T5933] usb 5-1: config 0 descriptor?? [ 1461.103866][T12165] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1461.151768][ T5933] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 1461.214194][T12165] usb 3-1: USB disconnect, device number 121 [ 1461.221101][ T5933] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1461.266373][ T5933] dvb-usb: bulk message failed: -22 (2/0) [ 1461.357465][ T5933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1461.398458][T24785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.446803][T18253] udevd[18253]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1461.469538][T24785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.506435][ T5933] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 1461.511846][T24785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.524775][T24785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.612874][ T5933] usb 5-1: media controller created [ 1461.644628][ T5933] dvb-usb: bulk message failed: -22 (6/0) [ 1461.701243][ T5933] dw2102: i2c transfer failed. [ 1461.719072][ T5933] dvb-usb: bulk message failed: -22 (6/0) [ 1461.761581][ T5933] dw2102: i2c transfer failed. [ 1461.787603][ T5933] dvb-usb: bulk message failed: -22 (6/0) [ 1461.810647][ T5933] dw2102: i2c transfer failed. [ 1461.838369][ T5933] dvb-usb: bulk message failed: -22 (6/0) [ 1461.850573][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4245'. [ 1461.897937][ T5933] dw2102: i2c transfer failed. [ 1461.904250][T24864] syzkaller0: entered promiscuous mode [ 1461.915162][T24862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1461.924508][ T5933] dvb-usb: bulk message failed: -22 (6/0) [ 1461.937980][T24864] syzkaller0: entered allmulticast mode [ 1461.965855][ T5933] dw2102: i2c transfer failed. [ 1461.984240][T24867] tipc: Enabled bearer , priority 0 [ 1462.031605][ T5933] dvb-usb: bulk message failed: -22 (6/0) [ 1462.090204][ T5933] dw2102: i2c transfer failed. [ 1462.105515][T24863] tipc: Resetting bearer [ 1462.115300][ T5933] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1462.189346][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1462.217226][T24863] tipc: Disabling bearer [ 1462.362223][ T5933] dvb-usb: bulk message failed: -22 (3/0) [ 1462.391206][T24873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1462.413502][ T5933] dw2102: command 0x0e transfer failed. [ 1462.428181][ T5933] dvb-usb: bulk message failed: -22 (3/0) [ 1462.438604][ T5933] dw2102: command 0x0e transfer failed. [ 1462.700123][T12165] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1462.781538][ T5933] dvb-usb: bulk message failed: -22 (3/0) [ 1462.806845][ T5933] dw2102: command 0x0e transfer failed. [ 1462.820600][ T5933] dvb-usb: bulk message failed: -22 (3/0) [ 1462.857500][ T5933] dw2102: command 0x0e transfer failed. [ 1462.869602][T12165] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 1462.881639][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 1462.893178][T12165] usb 4-1: config 0 has no interface number 1 [ 1462.923721][ T5933] dw2102: command 0x51 transfer failed. [ 1462.929950][T12165] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1462.964280][T12165] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1462.997573][T12165] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1463.018145][T12165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1463.046859][T12165] usb 4-1: SerialNumber: syz [ 1463.084338][T12165] usb 4-1: config 0 descriptor?? [ 1463.102817][ T5933] DVB: Unable to find symbol ds3000_attach() [ 1463.117536][ T5933] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 1463.401443][ T5933] rc_core: IR keymap rc-su3000 not found [ 1463.430077][ T5933] Registered IR keymap rc-empty [ 1463.500287][T12165] uvcvideo 4-1:0.199: Found UVC 0.00 device (0002:0000) [ 1463.508199][T12165] uvcvideo 4-1:0.199: No valid video chain found. [ 1463.515011][ T5933] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1463.567997][ T5933] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input140 [ 1463.653090][T12165] usb 4-1: USB disconnect, device number 112 [ 1463.678091][ T5933] dvb-usb: schedule remote query interval to 150 msecs. [ 1463.696614][ T5933] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1463.714420][ T5933] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 1463.763742][ T5933] usb 5-1: USB disconnect, device number 4 [ 1463.851645][T24931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1463.956408][ T5933] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 1464.010342][T12165] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1464.190635][T12165] usb 4-1: Using ep0 maxpacket: 16 [ 1464.268010][T12165] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 1464.268042][T12165] usb 4-1: config 254 has no interface number 0 [ 1464.268082][T12165] usb 4-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 1464.268110][T12165] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1464.268134][T12165] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1464.268156][T12165] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1464.268192][T12165] usb 4-1: config 254 interface 235 has no altsetting 0 [ 1464.273909][T12165] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 1464.273941][T12165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.273962][T12165] usb 4-1: Product: syz [ 1464.273978][T12165] usb 4-1: Manufacturer: syz [ 1464.273993][T12165] usb 4-1: SerialNumber: syz [ 1464.350320][T24954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1464.353226][ T5830] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 1464.365818][ T5826] Bluetooth: hci0: hardware error 0x0a [ 1464.493361][T24965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1464.559232][T24955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1464.750731][T12165] usbtest 4-1:254.235: couldn't get endpoints, -71 [ 1464.757472][T12165] usbtest 4-1:254.235: probe with driver usbtest failed with error -71 [ 1464.775580][T12165] usb 4-1: USB disconnect, device number 113 [ 1464.950231][ T2154] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1465.114327][ T2154] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1465.240281][ T2154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.257612][ T2154] usb 3-1: Product: syz [ 1465.263131][ T2154] usb 3-1: Manufacturer: syz [ 1465.267831][ T2154] usb 3-1: SerialNumber: syz [ 1465.304076][ T2154] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1465.345976][ T29] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1465.751468][T24971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.802849][T24971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.857200][T25021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4260'. [ 1465.902577][ T2154] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1465.922252][T25021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1465.968343][T12165] usb 3-1: USB disconnect, device number 122 [ 1466.094542][ T2154] usb 4-1: Using ep0 maxpacket: 16 [ 1466.129765][ T2154] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1466.169940][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.190622][ T2154] usb 4-1: Product: syz [ 1466.209378][ T2154] usb 4-1: Manufacturer: syz [ 1466.242420][ T2154] usb 4-1: SerialNumber: syz [ 1466.274376][ T2154] usb 4-1: config 0 descriptor?? [ 1466.316757][ T2154] as10x_usb: device has been detected [ 1466.343932][ T2154] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1466.406617][ T2154] usb 4-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 1466.450184][ T5826] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1466.463126][ T29] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1466.484732][ T2154] as10x_usb: error during firmware upload part1 [ 1466.503790][ T29] ath9k_htc: Failed to initialize the device [ 1466.529441][ T2154] Registered device Sky IT Digital Key (green led) [ 1466.529590][ T30] kauditd_printk_skb: 375 callbacks suppressed [ 1466.529607][ T30] audit: type=1326 audit(1773592035.220:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25008 comm="syz.3.4261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20c719c799 code=0x0 [ 1466.597468][T12165] usb 3-1: ath9k_htc: USB layer deinitialized [ 1466.739873][ T5933] usb 4-1: USB disconnect, device number 114 [ 1466.875529][ T5933] Unregistered device Sky IT Digital Key (green led) [ 1466.884915][ T5933] as10x_usb: device has been disconnected [ 1468.080159][ T2154] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1468.177716][T25092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4270'. [ 1468.226935][T25098] bridge0: port 3(syz_tun) entered blocking state [ 1468.246743][ T2154] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1468.259060][T25098] bridge0: port 3(syz_tun) entered disabled state [ 1468.296805][T25098] syz_tun: entered allmulticast mode [ 1468.302821][ T2154] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1468.321126][T25098] syz_tun: entered promiscuous mode [ 1468.334352][ T2154] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1468.345047][T25098] bridge0: port 3(syz_tun) entered blocking state [ 1468.351649][T25098] bridge0: port 3(syz_tun) entered forwarding state [ 1468.360417][T25099] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1468.370786][ T2154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.422299][T25075] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1468.458628][ T2154] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1468.735795][T25075] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4267'. [ 1468.806600][ T2154] usb 6-1: USB disconnect, device number 44 [ 1469.046203][T25132] vivid-006: disconnect [ 1469.073055][T25132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1469.113444][T25132] vivid-006: reconnect [ 1469.691853][T12165] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1469.901677][T12165] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1469.929815][T12165] usb 6-1: string descriptor 0 read error: -22 [ 1469.968209][T12165] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.40 [ 1470.021568][T12165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.361028][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1470.541419][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 1470.591372][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.680843][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.697319][T25157] bond3: (slave erspan0): Device is not bonding slave [ 1470.757981][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1470.766136][T12165] magicmouse 0003:05AC:0269.004B: unknown main item tag 0x0 [ 1470.777867][T25157] bond3: option active_slave: invalid value (erspan0) [ 1470.820427][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.824247][T12165] magicmouse 0003:05AC:0269.004B: unknown main item tag 0x0 [ 1470.849457][T12165] magicmouse 0003:05AC:0269.004B: unknown main item tag 0x0 [ 1470.861398][T25157] bond3 (unregistering): Released all slaves [ 1470.867382][T12165] magicmouse 0003:05AC:0269.004B: unknown main item tag 0x0 [ 1470.879809][ T29] usb 5-1: config 0 descriptor?? [ 1470.890829][T12165] magicmouse 0003:05AC:0269.004B: unknown main item tag 0x0 [ 1470.912841][T12165] magicmouse 0003:05AC:0269.004B: unknown main item tag 0x0 [ 1470.938725][ T29] hub 5-1:0.0: USB hub found [ 1470.968574][T12165] magicmouse 0003:05AC:0269.004B: unknown main item tag 0x0 [ 1471.028074][T12165] magicmouse 0003:05AC:0269.004B: unknown main item tag 0x0 [ 1471.056639][T12165] magicmouse 0003:05AC:0269.004B: unknown main item tag 0x0 [ 1471.088970][T12165] magicmouse 0003:05AC:0269.004B: unknown main item tag 0x0 [ 1471.141242][T12165] magicmouse 0003:05AC:0269.004B: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.5-1/input0 [ 1471.175499][ T29] hub 5-1:0.0: 29 ports detected [ 1471.214090][ T29] hub 5-1:0.0: insufficient power available to use all downstream ports [ 1471.582095][T25276] netlink: 'syz.0.4284': attribute type 3 has an invalid length. [ 1471.591794][T25276] netlink: 'syz.0.4284': attribute type 3 has an invalid length. [ 1471.627595][T25276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4284'. [ 1471.741107][T25284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4286'. [ 1471.794473][T25284] bond0: entered promiscuous mode [ 1471.802282][T25284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1471.828067][T25281] syzkaller0: entered promiscuous mode [ 1471.848604][T25281] syzkaller0: entered allmulticast mode [ 1471.863831][ T29] usb 5-1: USB disconnect, device number 5 [ 1472.019914][T25337] netlink: 'syz.3.4291': attribute type 10 has an invalid length. [ 1472.033976][T25338] netlink: 'syz.3.4291': attribute type 10 has an invalid length. [ 1472.065848][T25337] team0: Port device dummy0 added [ 1472.131662][T25338] team0: Port device dummy0 removed [ 1472.143289][T25338] .`: (slave dummy0): Enslaving as an active interface with an up link [ 1472.185416][T25347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4293'. [ 1472.351591][T25364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1472.491239][ T5933] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1472.497489][ T2154] usb 6-1: USB disconnect, device number 45 [ 1472.650992][ T5933] usb 4-1: device descriptor read/64, error -71 [ 1472.769748][ T30] audit: type=1326 audit(1773592041.460:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.4.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1472.884735][ T30] audit: type=1326 audit(1773592041.500:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.4.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1472.923780][ T5933] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1472.963200][ T30] audit: type=1326 audit(1773592041.500:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.4.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1473.051437][ T30] audit: type=1326 audit(1773592041.500:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.4.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1473.095307][ T5933] usb 4-1: device descriptor read/64, error -71 [ 1473.123806][ T30] audit: type=1326 audit(1773592041.510:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.4.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1473.149546][ T30] audit: type=1326 audit(1773592041.510:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.4.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1473.236519][ T5933] usb usb4-port1: attempt power cycle [ 1473.248712][ T30] audit: type=1326 audit(1773592041.510:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.4.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1473.307449][T25430] ucma_write: process 1419 (syz.2.4305) changed security contexts after opening file descriptor, this is not allowed. [ 1473.341227][ T30] audit: type=1326 audit(1773592041.510:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.4.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1473.408142][T25432] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1473.420251][ T5934] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1473.432190][ T30] audit: type=1326 audit(1773592041.510:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.4.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bab9c799 code=0x7ffc0000 [ 1473.494193][ T30] audit: type=1326 audit(1773592041.510:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.4.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa9bab9b607 code=0x7ffc0000 [ 1473.622651][ T5934] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1473.630988][ T5933] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1473.660546][ T5934] usb 5-1: config 0 has no interface number 0 [ 1473.676995][ T5933] usb 4-1: device descriptor read/8, error -71 [ 1473.795123][ T5934] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1473.815782][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.837315][ T5934] usb 5-1: Product: syz [ 1473.847474][ T5934] usb 5-1: Manufacturer: syz [ 1473.852303][ T5934] usb 5-1: SerialNumber: syz [ 1473.878440][ T5934] usb 5-1: config 0 descriptor?? [ 1474.010536][ T5933] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1474.031002][ T5933] usb 4-1: device descriptor read/8, error -71 [ 1474.136006][ T5934] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1474.143774][ T5933] usb usb4-port1: unable to enumerate USB device [ 1474.154199][ T5934] uvcvideo 5-1:0.64: No valid video chain found. [ 1474.169939][ T5934] usb 5-1: USB disconnect, device number 6 [ 1474.391760][T25456] loop5: detected capacity change from 0 to 7 [ 1474.411109][T25456] Dev loop5: unable to read RDB block 7 [ 1474.417350][T25456] loop5: unable to read partition table [ 1474.424196][T25456] loop5: partition table beyond EOD, truncated [ 1474.461778][T25456] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1475.050416][ T5934] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1475.109265][T25485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4310'. [ 1475.280276][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 1475.336537][ T5934] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1475.372990][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1475.401075][ T5934] usb 5-1: Product: syz [ 1475.405319][ T5934] usb 5-1: Manufacturer: syz [ 1475.409961][ T5934] usb 5-1: SerialNumber: syz [ 1475.480818][ T5934] usb 5-1: config 0 descriptor?? [ 1475.515639][T25503] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1475.537759][ T5934] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1476.075092][ T5934] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 1476.136899][ T5934] sq905 5-1:0.0: probe with driver sq905 failed with error -110 [ 1476.350216][ T5934] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1476.361949][ T5933] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1476.530152][ T5933] usb 6-1: Using ep0 maxpacket: 32 [ 1476.542881][ T5934] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.555087][ T5934] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1476.571157][ T5933] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.588315][ T5933] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1476.611649][ T5934] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1476.626759][ T5933] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1476.636746][ T5934] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1476.650631][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.660600][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.683153][ T5933] usb 6-1: config 0 descriptor?? [ 1476.724559][ T5933] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1476.733832][ T5934] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1476.916876][ T5934] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1476.942342][T25521] fuse: Unknown parameter 'gro00000000000000000000' [ 1476.971662][ T5934] usb 3-1: USB disconnect, device number 123 [ 1477.830190][ T29] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1477.838676][ T5934] usb 5-1: USB disconnect, device number 7 [ 1477.990618][ T29] usb 3-1: device descriptor read/64, error -71 [ 1478.015859][T25575] sit0: entered promiscuous mode [ 1478.037129][T25575] netlink: 'syz.4.4318': attribute type 1 has an invalid length. [ 1478.068626][T25575] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4318'. [ 1478.069412][T25576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4318'. [ 1478.158976][T25579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4320'. [ 1478.241493][ T29] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1478.382484][ T29] usb 3-1: device descriptor read/64, error -71 [ 1478.500664][ T29] usb usb3-port1: attempt power cycle [ 1478.610459][ T5934] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1478.760100][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 1478.767733][ T5934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1478.777328][ T5934] usb 4-1: config 1 has too many interfaces: 36, using maximum allowed: 32 [ 1478.786174][ T5934] usb 4-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 1478.796959][ T5934] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 36 [ 1478.811084][ T5934] usb 4-1: New USB device found, idVendor=0000, idProduct=474b, bcdDevice= 0.40 [ 1478.827839][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.840156][ T29] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1478.853827][ T5934] usb 4-1: Product: syz [ 1478.870502][ T5934] usb 4-1: Manufacturer: syz [ 1478.875601][ T29] usb 3-1: device descriptor read/8, error -71 [ 1478.890770][ T5934] usb 4-1: SerialNumber: syz [ 1479.033843][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1479.033863][ T30] audit: type=1326 audit(1773592047.730:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25600 comm="syz.0.4323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0aeed9c799 code=0x0 [ 1479.130320][ T29] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1479.154355][ T5934] usb 4-1: USB disconnect, device number 119 [ 1479.167612][T25613] loop5: detected capacity change from 0 to 7 [ 1479.178942][ T29] usb 3-1: device descriptor read/8, error -71 [ 1479.200565][T25613] Dev loop5: unable to read RDB block 7 [ 1479.207673][T25613] loop5: unable to read partition table [ 1479.237747][T25613] loop5: partition table beyond EOD, truncated [ 1479.268035][T25613] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1479.305429][ T5933] usb 6-1: USB disconnect, device number 46 [ 1479.316296][ T29] usb usb3-port1: unable to enumerate USB device [ 1479.353920][ T5194] Dev loop5: unable to read RDB block 7 [ 1479.399369][ T5194] loop5: unable to read partition table [ 1479.420648][ T5194] loop5: partition table beyond EOD, truncated [ 1480.156394][T25649] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4328'. [ 1480.460304][T25652] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4329'. [ 1480.497564][T25652] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4329'. [ 1480.914239][ T30] audit: type=1326 audit(1773592049.610:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25677 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4d9c799 code=0x7ffc0000 [ 1480.979828][ T30] audit: type=1326 audit(1773592049.610:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25677 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4d9c799 code=0x7ffc0000 [ 1481.034128][T25680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4333'. [ 1481.085794][ T30] audit: type=1326 audit(1773592049.610:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25677 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fd0e4d9c799 code=0x7ffc0000 [ 1481.173015][ T30] audit: type=1326 audit(1773592049.610:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25677 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4d9c799 code=0x7ffc0000 [ 1481.294990][ T30] audit: type=1326 audit(1773592049.610:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25677 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4d9c799 code=0x7ffc0000 [ 1481.370154][ T5933] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1481.393520][ T30] audit: type=1326 audit(1773592049.610:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25677 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0e4d9c799 code=0x7ffc0000 [ 1481.483869][T25700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4332'. [ 1481.501524][T25700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1481.518724][ T30] audit: type=1326 audit(1773592049.610:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25677 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4d9c799 code=0x7ffc0000 [ 1481.570323][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 1481.597327][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.628227][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1481.630740][ T30] audit: type=1326 audit(1773592049.610:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25677 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4d9c799 code=0x7ffc0000 [ 1481.742973][ T5933] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1481.827784][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.842441][ T30] audit: type=1326 audit(1773592049.630:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25677 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd0e4d9c799 code=0x7ffc0000 [ 1481.897824][T25719] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4339'. [ 1481.913082][ T5933] usb 4-1: config 0 descriptor?? [ 1481.928626][T25718] binfmt_misc: register: failed to install interpreter file ./file0 [ 1481.952792][ T5933] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1481.991384][T25722] sctp: [Deprecated]: syz.4.4340 (pid 25722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1481.991384][T25722] Use struct sctp_sack_info instead [ 1482.320224][ T5933] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1482.490318][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 1482.507310][ T5933] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1482.545171][ T5933] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1482.583814][ T5933] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.612290][ T5933] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1482.622332][ T5933] usb 5-1: config 1 has no interface number 1 [ 1482.635892][ T5933] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1482.657496][ T5933] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1482.670828][ T5933] usb 5-1: config 1 interface 2 has no altsetting 0 [ 1482.681490][ T5933] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1482.690907][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.699203][ T5933] usb 5-1: Product: syz [ 1482.703983][ T5933] usb 5-1: Manufacturer: syz [ 1482.709134][ T5933] usb 5-1: SerialNumber: syz [ 1483.189455][ T5933] usb 5-1: USB disconnect, device number 8 [ 1483.265269][T25766] loop5: detected capacity change from 0 to 7 [ 1483.276424][T18253] udevd[18253]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1483.308612][T25766] Dev loop5: unable to read RDB block 7 [ 1483.337747][T25766] loop5: unable to read partition table [ 1483.363010][T25766] loop5: partition table beyond EOD, truncated [ 1483.386292][T25766] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1484.067165][T25791] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4345'. [ 1484.502701][ T5933] usb 4-1: USB disconnect, device number 120 [ 1484.698233][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.705063][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.885548][T25825] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4351'. [ 1485.142732][T25832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4353'. [ 1485.174199][T25832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1485.181541][T25832] IPv6: NLM_F_CREATE should be set when creating new route [ 1485.188901][T25832] IPv6: NLM_F_CREATE should be set when creating new route [ 1485.223917][T25836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4352'. [ 1485.520187][ T5933] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1485.703703][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.769953][ T5933] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1485.817899][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.872554][ T5933] usb 3-1: config 0 descriptor?? [ 1486.131177][ T5933] usbhid 3-1:0.0: can't add hid device: -71 [ 1486.198700][ T5933] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1486.269906][ T5933] usb 3-1: USB disconnect, device number 2 [ 1486.470183][T17651] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1486.652107][T17651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1486.680582][ T5933] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1486.691400][T17651] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1486.706132][T17651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1486.717334][T17651] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1486.754599][T17651] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1486.788670][T17651] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.817776][T17651] usb 6-1: Product: syz [ 1486.838178][T17651] usb 6-1: Manufacturer: syz [ 1486.862595][T17651] usb 6-1: SerialNumber: syz [ 1486.904057][T17651] usb 6-1: config 0 descriptor?? [ 1486.962645][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 1486.966702][T17651] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 1486.983712][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1487.017970][ T5933] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1487.091921][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.152848][ T5933] usb 3-1: config 0 descriptor?? [ 1487.195394][T25906] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4363'. [ 1487.202021][ T5933] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1487.295122][T17651] scsi host1: usb-storage 6-1:0.0 [ 1487.308322][ T5933] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1487.444692][ T5933] usb 6-1: USB disconnect, device number 47 [ 1487.585788][T25938] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1487.684072][T25934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4364'. [ 1487.723121][T25934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1488.124212][T25952] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4367'. [ 1488.167329][T25959] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4369'. [ 1488.461421][ T29] usb 3-1: USB disconnect, device number 3 [ 1488.497331][ T29] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1488.604051][T25974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4371'. [ 1488.935725][T25987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4373'. [ 1488.956230][T25987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1489.287944][T26006] fuse: Bad value for 'fd' [ 1489.541100][ T29] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1489.703430][ T29] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1489.715378][ T29] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1489.725857][ T29] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1489.735601][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.757153][T26008] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1489.774177][ T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1490.181167][T26051] team0: entered allmulticast mode [ 1490.206416][T26051] team_slave_0: entered allmulticast mode [ 1490.223665][T26051] team_slave_1: entered allmulticast mode [ 1490.256581][T26051] batadv1: entered allmulticast mode [ 1490.703406][ T29] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1490.743420][T26079] __nla_validate_parse: 1 callbacks suppressed [ 1490.743434][T26079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4386'. [ 1490.860247][T17651] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1490.871175][ T29] usb 4-1: device descriptor read/64, error -71 [ 1491.030700][T17651] usb 5-1: Using ep0 maxpacket: 16 [ 1491.047511][T17651] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1491.057853][T17651] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.068286][T17651] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1491.082587][T17651] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1491.083709][ T5933] usb 3-1: USB disconnect, device number 4 [ 1491.099697][T17651] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.110979][ T29] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1491.128957][T17651] usb 5-1: Product: syz [ 1491.134802][T17651] usb 5-1: Manufacturer: syz [ 1491.143336][T17651] usb 5-1: SerialNumber: syz [ 1491.245334][T26126] fuse: Unknown parameter '\-' [ 1491.272059][ T29] usb 4-1: device descriptor read/64, error -71 [ 1491.410664][ T29] usb usb4-port1: attempt power cycle [ 1491.557783][T17651] usb 5-1: 0:2 : does not exist [ 1491.750178][ T29] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1491.795508][ T29] usb 4-1: device descriptor read/8, error -71 [ 1492.051025][ T29] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1492.136614][ T29] usb 4-1: device descriptor read/8, error -71 [ 1492.253464][T26145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4393'. [ 1492.290742][ T29] usb usb4-port1: unable to enumerate USB device [ 1492.320457][T17651] usb 5-1: USB disconnect, device number 9 [ 1492.857658][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1492.857672][ T30] audit: type=1326 audit(1773592061.550:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26164 comm="syz.5.4395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4d9c799 code=0x3fff0000 [ 1493.145836][T26173] binder: BINDER_SET_CONTEXT_MGR already set [ 1493.172122][T26173] binder: 26171:26173 ioctl 4018620d 200000000100 returned -16 [ 1493.242021][T26172] binder: 26171:26172 ioctl 7010 0 returned -22 [ 1493.441566][T26177] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4398'. [ 1494.099848][T26197] veth0: entered promiscuous mode [ 1494.185100][T26197] veth0: left promiscuous mode [ 1494.513728][T26217] kvm: kvm [26214]: vcpu0, guest rIP: 0x273 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1494.780140][ T5933] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1494.950152][ T5934] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1494.964353][ T5933] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1494.985018][ T5933] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1495.011437][ T5933] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1495.047679][ T5933] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1495.067658][T26241] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4411'. [ 1495.081447][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.104163][ T5933] usb 3-1: Product: syz [ 1495.117638][ T5933] usb 3-1: Manufacturer: syz [ 1495.125040][ T5934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1495.142123][ T5934] usb 4-1: not running at top speed; connect to a high speed hub [ 1495.150503][ T5933] usb 3-1: SerialNumber: syz [ 1495.198245][ T5934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.214471][ T5933] hub 3-1:1.0: bad descriptor, ignoring hub [ 1495.231291][ T5934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1495.241968][ T5933] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1495.260456][ T5934] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1495.271356][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.293845][ T5934] usb 4-1: Product: syz [ 1495.310868][ T5934] usb 4-1: Manufacturer: syz [ 1495.323238][ T5934] usb 4-1: SerialNumber: syz [ 1495.422300][ T5933] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1495.585470][ T5934] usb 4-1: 0:1 : does not exist [ 1495.605389][ T5934] usb 4-1: BAAD GENERIC IO: no channels? [ 1495.772135][ T5933] usb 3-1: USB disconnect, device number 5 [ 1495.823225][ T5933] usblp0: removed [ 1495.834648][ T5934] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1495.869893][ T5934] usb 4-1: USB disconnect, device number 125 [ 1495.872075][T18190] udevd[18190]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1496.931073][T21450] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1497.080264][T17651] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1497.113299][T21450] usb 4-1: device descriptor read/64, error -71 [ 1497.370700][T21450] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1497.460230][T17651] usb 5-1: Using ep0 maxpacket: 8 [ 1497.498582][T17651] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.540155][T21450] usb 4-1: device descriptor read/64, error -71 [ 1497.609063][T17651] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1497.638623][T17651] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1497.667518][T17651] usb 5-1: Product: syz [ 1497.680496][T21450] usb usb4-port1: attempt power cycle [ 1497.699449][T17651] usb 5-1: Manufacturer: syz [ 1497.718001][T17651] usb 5-1: SerialNumber: syz [ 1497.774358][T17651] usb 5-1: config 0 descriptor?? [ 1497.990861][T17651] imon_raw 5-1:0.0: IR endpoint missing [ 1498.060352][T21450] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1498.100540][T21450] usb 4-1: device descriptor read/8, error -71 [ 1498.360221][T21450] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1498.401418][T21450] usb 4-1: device descriptor read/8, error -71 [ 1498.521243][T21450] usb usb4-port1: unable to enumerate USB device [ 1498.600260][T17651] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1498.750338][ T2154] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1498.780231][T17651] usb 6-1: Using ep0 maxpacket: 8 [ 1498.796425][T17651] usb 6-1: config 1 has an invalid interface number: 255 but max is 6 [ 1498.820919][T17651] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1498.841470][T26377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4427'. [ 1498.851768][T17651] usb 6-1: config 1 has no interface number 0 [ 1498.869271][T17651] usb 6-1: too many endpoints for config 1 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1498.902277][T17651] usb 6-1: config 1 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1498.940116][ T2154] usb 3-1: Using ep0 maxpacket: 16 [ 1498.950055][T17651] usb 6-1: config 1 interface 255 has no altsetting 0 [ 1498.969101][ T2154] usb 3-1: config 1 interface 0 altsetting 194 bulk endpoint 0x82 has invalid maxpacket 16 [ 1498.994069][T17651] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1499.015778][ T2154] usb 3-1: config 1 interface 0 altsetting 194 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1499.038692][T17651] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1499.063979][ T2154] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1499.072787][T17651] usb 6-1: Product: syz [ 1499.093655][T17651] usb 6-1: Manufacturer: syz [ 1499.100181][T17651] usb 6-1: SerialNumber: syz [ 1499.107201][ T2154] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1499.145385][ T2154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.176697][ T2154] usb 3-1: Product: 솖ꎓ답䫁訳蘖ꝴ╊龗ꍝᔘ⦟⾺ꠟˑ᥿ᔳꔤづ뫛튓꼰諈⥧䔠궰帄䶳Ḷ睕㽹蘆☒௢觯㌶撣햳쮯荲퇽㌒∝閆嘁햂⼅싥ꬪ即씍ꓵ겵Á [ 1499.252117][ T2154] usb 3-1: Manufacturer: 惾⫁瞐⶚ꮗ퀰軯珕퉇鮷揩⹱箊ὄԖ鑭ᆿ泑䉦梲↼콏㸲 [ 1499.301350][ T2154] usb 3-1: SerialNumber: ﳿ [ 1499.334328][T17651] usb 6-1: Invalid connection information received from device [ 1499.365469][T26370] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1499.394777][T26370] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1499.548437][T26360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.595401][T26360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.642534][ T5934] usb 6-1: USB disconnect, device number 48 [ 1499.733721][ T2154] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1499.799337][ T2154] usb 3-1: USB disconnect, device number 6 [ 1499.870675][ T29] usb 5-1: USB disconnect, device number 10 [ 1499.988366][T17651] IPVS: starting estimator thread 0... [ 1500.090220][T26422] IPVS: using max 26 ests per chain, 62400 per kthread [ 1500.510098][ T2154] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1500.690150][ T2154] usb 4-1: Using ep0 maxpacket: 16 [ 1500.697574][ T2154] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.729954][ T2154] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1500.753053][ T2154] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1500.839304][ T2154] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1500.850213][ T5934] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1500.908551][ T2154] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1500.955454][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.989000][ T2154] usb 4-1: Product: syz [ 1500.998557][ T2154] usb 4-1: Manufacturer: syz [ 1501.024466][ T2154] usb 4-1: SerialNumber: syz [ 1501.031295][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 1501.043391][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.075799][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.112522][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1501.166902][ T5934] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1501.200728][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.242692][ T5934] usb 3-1: config 0 descriptor?? [ 1501.890347][T26447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.920732][T26447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.952806][ T5934] hid_parser_main: 363 callbacks suppressed [ 1501.952831][ T5934] apple 0003:05AC:027D.004C: unknown main item tag 0x0 [ 1501.990179][ T5934] apple 0003:05AC:027D.004C: unknown main item tag 0x0 [ 1502.010158][ T5934] apple 0003:05AC:027D.004C: unknown main item tag 0x0 [ 1502.017177][ T5934] apple 0003:05AC:027D.004C: unknown main item tag 0x0 [ 1502.050986][ T5934] apple 0003:05AC:027D.004C: unknown main item tag 0x0 [ 1502.068424][ T5934] apple 0003:05AC:027D.004C: unknown main item tag 0x0 [ 1502.084533][ T5934] apple 0003:05AC:027D.004C: unknown main item tag 0x0 [ 1502.123203][ T5934] apple 0003:05AC:027D.004C: unknown main item tag 0x0 [ 1502.160548][ T5934] apple 0003:05AC:027D.004C: unknown main item tag 0x0 [ 1502.178722][ T5934] apple 0003:05AC:027D.004C: unknown main item tag 0x0 [ 1502.219884][ T5934] apple 0003:05AC:027D.004C: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.2-1/input0 [ 1502.276461][ T5934] usb 3-1: USB disconnect, device number 7 [ 1502.396737][T26478] fido_id[26478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1502.428805][T26489] netlink: 'syz.5.4436': attribute type 10 has an invalid length. [ 1502.539643][T26489] dummy0: entered allmulticast mode [ 1502.541226][T26492] netlink: 'syz.5.4436': attribute type 10 has an invalid length. [ 1502.555265][T26489] team0: Port device dummy0 added [ 1502.632029][T26492] dummy0: left allmulticast mode [ 1502.646713][T26492] team0: Port device dummy0 removed [ 1502.677555][ T2154] usb 4-1: 0:2 : does not exist [ 1502.695227][T26492] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1502.869148][ T2154] usb 4-1: USB disconnect, device number 4 [ 1503.524242][T26529] [ 1503.526657][T26529] ===================================================== [ 1503.533706][T26529] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1503.541189][T26529] syzkaller #0 Tainted: G L [ 1503.547295][T26529] ----------------------------------------------------- [ 1503.554433][T26529] syz.4.4440/26529 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1503.562439][T26529] ffffffff8e40c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1503.571241][T26529] [ 1503.571241][T26529] and this task is already holding: [ 1503.578792][T26529] ffff88805f970da0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1503.587543][T26529] which would create a new lock dependency: [ 1503.593561][T26529] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1503.601142][T26529] [ 1503.601142][T26529] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1503.610766][T26529] (&dev->event_lock#2){..-.}-{3:3} [ 1503.610796][T26529] [ 1503.610796][T26529] ... which became SOFTIRQ-irq-safe at: [ 1503.623763][T26529] lock_acquire+0xf0/0x2e0 [ 1503.628469][T26529] _raw_spin_lock_irqsave+0x40/0x60 [ 1503.633770][T26529] input_event+0x76/0xe0 [ 1503.638157][T26529] hidinput_report_event+0xa1/0x100 [ 1503.643713][T26529] hid_report_raw_event+0x1489/0x1720 [ 1503.649463][T26529] hid_input_report+0x44b/0x580 [ 1503.654571][T26529] hid_irq_in+0x47e/0x6d0 [ 1503.659068][T26529] __usb_hcd_giveback_urb+0x376/0x540 [ 1503.664622][T26529] dummy_timer+0xbbd/0x45d0 [ 1503.669345][T26529] __hrtimer_run_queues+0x53a/0xcc0 [ 1503.674732][T26529] hrtimer_run_softirq+0x182/0x5a0 [ 1503.680104][T26529] handle_softirqs+0x22a/0x870 [ 1503.685044][T26529] __irq_exit_rcu+0x5f/0x150 [ 1503.689810][T26529] irq_exit_rcu+0x9/0x30 [ 1503.694219][T26529] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1503.700030][T26529] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1503.706186][T26529] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1503.712333][T26529] dummy_queue+0x6e4/0x8d0 [ 1503.717043][T26529] usb_ep_queue+0xf1/0x3f0 [ 1503.721643][T26529] raw_process_ep_io+0x5e4/0xd90 [ 1503.727180][T26529] raw_ioctl+0x252c/0x41c0 [ 1503.731672][T26529] __se_sys_ioctl+0xfc/0x170 [ 1503.736433][T26529] do_syscall_64+0x14d/0xf80 [ 1503.741356][T26529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.747412][T26529] [ 1503.747412][T26529] to a SOFTIRQ-irq-unsafe lock: [ 1503.754683][T26529] (tasklist_lock){.+.+}-{3:3} [ 1503.754704][T26529] [ 1503.754704][T26529] ... which became SOFTIRQ-irq-unsafe at: [ 1503.767403][T26529] ... [ 1503.767411][T26529] lock_acquire+0xf0/0x2e0 [ 1503.774593][T26529] _raw_read_lock+0x36/0x50 [ 1503.779219][T26529] __do_wait+0xde/0x740 [ 1503.783634][T26529] do_wait+0x1e7/0x540 [ 1503.787970][T26529] kernel_wait+0xd6/0x1c0 [ 1503.792484][T26529] call_usermodehelper_exec_work+0xbe/0x230 [ 1503.798478][T26529] process_scheduled_works+0xb6e/0x18c0 [ 1503.804106][T26529] worker_thread+0xa53/0xfc0 [ 1503.808787][T26529] kthread+0x388/0x470 [ 1503.812951][T26529] ret_from_fork+0x51e/0xb90 [ 1503.817815][T26529] ret_from_fork_asm+0x1a/0x30 [ 1503.822756][T26529] [ 1503.822756][T26529] other info that might help us debug this: [ 1503.822756][T26529] [ 1503.833092][T26529] Chain exists of: [ 1503.833092][T26529] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1503.833092][T26529] [ 1503.846383][T26529] Possible interrupt unsafe locking scenario: [ 1503.846383][T26529] [ 1503.854689][T26529] CPU0 CPU1 [ 1503.860060][T26529] ---- ---- [ 1503.865424][T26529] lock(tasklist_lock); [ 1503.869758][T26529] local_irq_disable(); [ 1503.876505][T26529] lock(&dev->event_lock#2); [ 1503.883789][T26529] lock(&f_owner->lock); [ 1503.890663][T26529] [ 1503.894383][T26529] lock(&dev->event_lock#2); [ 1503.899245][T26529] [ 1503.899245][T26529] *** DEADLOCK *** [ 1503.899245][T26529] [ 1503.907561][T26529] 2 locks held by syz.4.4440/26529: [ 1503.912773][T26529] #0: ffff888056aa2120 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 1503.921392][T26529] #1: ffff88805f970da0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1503.930979][T26529] [ 1503.930979][T26529] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1503.941910][T26529] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1503.947745][T26529] IN-SOFTIRQ-W at: [ 1503.951984][T26529] lock_acquire+0xf0/0x2e0 [ 1503.958659][T26529] _raw_spin_lock_irqsave+0x40/0x60 [ 1503.966382][T26529] input_event+0x76/0xe0 [ 1503.972898][T26529] hidinput_report_event+0xa1/0x100 [ 1503.980607][T26529] hid_report_raw_event+0x1489/0x1720 [ 1503.988321][T26529] hid_input_report+0x44b/0x580 [ 1503.995426][T26529] hid_irq_in+0x47e/0x6d0 [ 1504.001929][T26529] __usb_hcd_giveback_urb+0x376/0x540 [ 1504.009660][T26529] dummy_timer+0xbbd/0x45d0 [ 1504.016329][T26529] __hrtimer_run_queues+0x53a/0xcc0 [ 1504.023986][T26529] hrtimer_run_softirq+0x182/0x5a0 [ 1504.031261][T26529] handle_softirqs+0x22a/0x870 [ 1504.038203][T26529] __irq_exit_rcu+0x5f/0x150 [ 1504.045127][T26529] irq_exit_rcu+0x9/0x30 [ 1504.051635][T26529] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1504.059780][T26529] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1504.068011][T26529] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1504.075812][T26529] dummy_queue+0x6e4/0x8d0 [ 1504.082393][T26529] usb_ep_queue+0xf1/0x3f0 [ 1504.088971][T26529] raw_process_ep_io+0x5e4/0xd90 [ 1504.096188][T26529] raw_ioctl+0x252c/0x41c0 [ 1504.102772][T26529] __se_sys_ioctl+0xfc/0x170 [ 1504.109701][T26529] do_syscall_64+0x14d/0xf80 [ 1504.116473][T26529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.124722][T26529] INITIAL USE at: [ 1504.128958][T26529] lock_acquire+0xf0/0x2e0 [ 1504.135711][T26529] _raw_spin_lock_irqsave+0x40/0x60 [ 1504.142998][T26529] input_inject_event+0xa5/0x340 [ 1504.150120][T26529] kbd_led_trigger_activate+0xbc/0x100 [ 1504.157768][T26529] led_trigger_set+0x535/0x960 [ 1504.164892][T26529] led_trigger_set_default+0x260/0x2a0 [ 1504.172658][T26529] led_classdev_register_ext+0x787/0x9c0 [ 1504.180471][T26529] input_leds_connect+0x517/0x790 [ 1504.187753][T26529] input_register_device+0xd00/0x1160 [ 1504.196007][T26529] atkbd_connect+0x731/0xa50 [ 1504.202778][T26529] serio_driver_probe+0x82/0xd0 [ 1504.209885][T26529] really_probe+0x267/0xaf0 [ 1504.216648][T26529] __driver_probe_device+0x18c/0x320 [ 1504.224108][T26529] driver_probe_device+0x4f/0x240 [ 1504.231221][T26529] __driver_attach+0x349/0x640 [ 1504.238060][T26529] bus_for_each_dev+0x23b/0x2c0 [ 1504.245076][T26529] serio_handle_event+0x20a/0xdd0 [ 1504.252352][T26529] process_scheduled_works+0xb6e/0x18c0 [ 1504.260065][T26529] worker_thread+0xa53/0xfc0 [ 1504.266904][T26529] kthread+0x388/0x470 [ 1504.273091][T26529] ret_from_fork+0x51e/0xb90 [ 1504.279854][T26529] ret_from_fork_asm+0x1a/0x30 [ 1504.286706][T26529] } [ 1504.289544][T26529] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1504.299123][T26529] -> (&client->buffer_lock){....}-{3:3} { [ 1504.305043][T26529] INITIAL USE at: [ 1504.309106][T26529] lock_acquire+0xf0/0x2e0 [ 1504.315517][T26529] _raw_spin_lock_irq+0x3d/0x50 [ 1504.322361][T26529] evdev_read+0x37d/0xcb0 [ 1504.328612][T26529] vfs_readv+0x587/0x840 [ 1504.334863][T26529] do_readv+0x154/0x2e0 [ 1504.340977][T26529] do_syscall_64+0x14d/0xf80 [ 1504.347676][T26529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.355481][T26529] } [ 1504.358357][T26529] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1504.367004][T26529] ... acquired at: [ 1504.371009][T26529] _raw_spin_lock+0x2e/0x40 [ 1504.375809][T26529] evdev_pass_values+0xb9/0xbd0 [ 1504.380830][T26529] evdev_events+0x1e6/0x340 [ 1504.385510][T26529] input_pass_values+0x288/0x890 [ 1504.390711][T26529] input_event_dispose+0x330/0x6b0 [ 1504.396016][T26529] input_event+0x89/0xe0 [ 1504.400443][T26529] rc_keydown+0x62/0x1e0 [ 1504.405130][T26529] su3000_rc_query+0x18b/0x210 [ 1504.410397][T26529] dvb_usb_read_remote_control+0xb4/0x1a0 [ 1504.416722][T26529] process_scheduled_works+0xb6e/0x18c0 [ 1504.422435][T26529] worker_thread+0xa53/0xfc0 [ 1504.427241][T26529] kthread+0x388/0x470 [ 1504.431476][T26529] ret_from_fork+0x51e/0xb90 [ 1504.436248][T26529] ret_from_fork_asm+0x1a/0x30 [ 1504.441173][T26529] [ 1504.443671][T26529] -> (&new->fa_lock){....}-{3:3} { [ 1504.448917][T26529] INITIAL USE at: [ 1504.452910][T26529] lock_acquire+0xf0/0x2e0 [ 1504.459055][T26529] _raw_write_lock_irq+0x3d/0x50 [ 1504.465737][T26529] fasync_remove_entry+0xf1/0x1c0 [ 1504.472499][T26529] lease_modify+0x4f7/0x6c0 [ 1504.478730][T26529] locks_remove_file+0x5f0/0xf70 [ 1504.485399][T26529] __fput+0x3ae/0xa70 [ 1504.491197][T26529] task_work_run+0x1d9/0x270 [ 1504.497694][T26529] exit_to_user_mode_loop+0xed/0x480 [ 1504.504791][T26529] do_syscall_64+0x32d/0xf80 [ 1504.511200][T26529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.518993][T26529] INITIAL READ USE at: [ 1504.523487][T26529] lock_acquire+0xf0/0x2e0 [ 1504.530195][T26529] _raw_read_lock_irqsave+0x48/0x60 [ 1504.538274][T26529] kill_fasync+0x199/0x4d0 [ 1504.544864][T26529] lease_break_callback+0x26/0x30 [ 1504.552403][T26529] __break_lease+0x81c/0x1e80 [ 1504.559265][T26529] try_break_deleg+0xfc/0x180 [ 1504.566210][T26529] vfs_rename+0x861/0xeb0 [ 1504.572815][T26529] filename_renameat2+0x539/0x9c0 [ 1504.580198][T26529] __se_sys_rename+0x55/0x2c0 [ 1504.587216][T26529] do_syscall_64+0x14d/0xf80 [ 1504.594055][T26529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.602116][T26529] } [ 1504.604695][T26529] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1504.613551][T26529] ... acquired at: [ 1504.617431][T26529] _raw_read_lock_irqsave+0x48/0x60 [ 1504.623141][T26529] kill_fasync+0x199/0x4d0 [ 1504.627813][T26529] evdev_pass_values+0x627/0xbd0 [ 1504.632921][T26529] evdev_events+0x1e6/0x340 [ 1504.637851][T26529] input_pass_values+0x288/0x890 [ 1504.643234][T26529] input_event_dispose+0x330/0x6b0 [ 1504.648511][T26529] input_inject_event+0x1dd/0x340 [ 1504.653717][T26529] evdev_write+0x325/0x4c0 [ 1504.658647][T26529] vfs_write+0x29a/0xb90 [ 1504.663150][T26529] ksys_write+0x150/0x270 [ 1504.667643][T26529] do_syscall_64+0x14d/0xf80 [ 1504.672394][T26529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.678455][T26529] [ 1504.680855][T26529] -> (&f_owner->lock){....}-{3:3} { [ 1504.686146][T26529] INITIAL USE at: [ 1504.690038][T26529] lock_acquire+0xf0/0x2e0 [ 1504.696100][T26529] _raw_write_lock_irq+0x3d/0x50 [ 1504.702589][T26529] __f_setown+0x67/0x370 [ 1504.708567][T26529] generic_setlease+0xacf/0xff0 [ 1504.715075][T26529] do_fcntl_add_lease+0x35e/0x470 [ 1504.721739][T26529] fcntl_setdeleg+0x14c/0x1e0 [ 1504.727971][T26529] do_fcntl+0xe6d/0x1a20 [ 1504.733771][T26529] __se_sys_fcntl+0xc8/0x150 [ 1504.740110][T26529] do_syscall_64+0x14d/0xf80 [ 1504.746258][T26529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.753805][T26529] INITIAL READ USE at: [ 1504.758124][T26529] lock_acquire+0xf0/0x2e0 [ 1504.764624][T26529] _raw_read_lock_irqsave+0x48/0x60 [ 1504.771830][T26529] send_sigio+0x38/0x370 [ 1504.778058][T26529] kill_fasync+0x24d/0x4d0 [ 1504.784460][T26529] lease_break_callback+0x26/0x30 [ 1504.791558][T26529] __break_lease+0x81c/0x1e80 [ 1504.798225][T26529] try_break_deleg+0xfc/0x180 [ 1504.805150][T26529] vfs_rename+0x861/0xeb0 [ 1504.811649][T26529] filename_renameat2+0x539/0x9c0 [ 1504.818686][T26529] __se_sys_rename+0x55/0x2c0 [ 1504.825397][T26529] do_syscall_64+0x14d/0xf80 [ 1504.832065][T26529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.839943][T26529] } [ 1504.842435][T26529] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1504.851375][T26529] ... acquired at: [ 1504.855164][T26529] _raw_read_lock_irqsave+0x48/0x60 [ 1504.860610][T26529] send_sigio+0x38/0x370 [ 1504.865028][T26529] kill_fasync+0x24d/0x4d0 [ 1504.869603][T26529] lease_break_callback+0x26/0x30 [ 1504.874874][T26529] __break_lease+0x81c/0x1e80 [ 1504.879723][T26529] try_break_deleg+0xfc/0x180 [ 1504.884651][T26529] vfs_rename+0x861/0xeb0 [ 1504.889236][T26529] filename_renameat2+0x539/0x9c0 [ 1504.894431][T26529] __se_sys_rename+0x55/0x2c0 [ 1504.899469][T26529] do_syscall_64+0x14d/0xf80 [ 1504.904237][T26529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.910840][T26529] [ 1504.913200][T26529] [ 1504.913200][T26529] the dependencies between the lock to be acquired [ 1504.913207][T26529] and SOFTIRQ-irq-unsafe lock: [ 1504.927039][T26529] -> (tasklist_lock){.+.+}-{3:3} { [ 1504.932166][T26529] HARDIRQ-ON-R at: [ 1504.936136][T26529] lock_acquire+0xf0/0x2e0 [ 1504.942369][T26529] _raw_read_lock+0x36/0x50 [ 1504.948520][T26529] __do_wait+0xde/0x740 [ 1504.954310][T26529] do_wait+0x1e7/0x540 [ 1504.960060][T26529] kernel_wait+0xd6/0x1c0 [ 1504.966115][T26529] call_usermodehelper_exec_work+0xbe/0x230 [ 1504.973733][T26529] process_scheduled_works+0xb6e/0x18c0 [ 1504.981026][T26529] worker_thread+0xa53/0xfc0 [ 1504.987518][T26529] kthread+0x388/0x470 [ 1504.993410][T26529] ret_from_fork+0x51e/0xb90 [ 1504.999703][T26529] ret_from_fork_asm+0x1a/0x30 [ 1505.006109][T26529] SOFTIRQ-ON-R at: [ 1505.010087][T26529] lock_acquire+0xf0/0x2e0 [ 1505.016235][T26529] _raw_read_lock+0x36/0x50 [ 1505.022384][T26529] __do_wait+0xde/0x740 [ 1505.028352][T26529] do_wait+0x1e7/0x540 [ 1505.034186][T26529] kernel_wait+0xd6/0x1c0 [ 1505.040161][T26529] call_usermodehelper_exec_work+0xbe/0x230 [ 1505.047781][T26529] process_scheduled_works+0xb6e/0x18c0 [ 1505.055054][T26529] worker_thread+0xa53/0xfc0 [ 1505.061403][T26529] kthread+0x388/0x470 [ 1505.067286][T26529] ret_from_fork+0x51e/0xb90 [ 1505.073776][T26529] ret_from_fork_asm+0x1a/0x30 [ 1505.080287][T26529] INITIAL USE at: [ 1505.084219][T26529] lock_acquire+0xf0/0x2e0 [ 1505.090230][T26529] _raw_write_lock_irq+0x3d/0x50 [ 1505.096905][T26529] copy_process+0x247a/0x3cf0 [ 1505.103138][T26529] kernel_clone+0x248/0x8e0 [ 1505.109210][T26529] user_mode_thread+0x110/0x180 [ 1505.115617][T26529] rest_init+0x23/0x300 [ 1505.121414][T26529] start_kernel+0x385/0x3d0 [ 1505.127585][T26529] x86_64_start_reservations+0x24/0x30 [ 1505.134621][T26529] x86_64_start_kernel+0x143/0x1c0 [ 1505.141315][T26529] common_startup_64+0x13e/0x147 [ 1505.148100][T26529] INITIAL READ USE at: [ 1505.152531][T26529] lock_acquire+0xf0/0x2e0 [ 1505.159034][T26529] _raw_read_lock+0x36/0x50 [ 1505.165614][T26529] __do_wait+0xde/0x740 [ 1505.171864][T26529] do_wait+0x1e7/0x540 [ 1505.177951][T26529] kernel_wait+0xd6/0x1c0 [ 1505.184269][T26529] call_usermodehelper_exec_work+0xbe/0x230 [ 1505.192238][T26529] process_scheduled_works+0xb6e/0x18c0 [ 1505.199774][T26529] worker_thread+0xa53/0xfc0 [ 1505.206445][T26529] kthread+0x388/0x470 [ 1505.212762][T26529] ret_from_fork+0x51e/0xb90 [ 1505.219353][T26529] ret_from_fork_asm+0x1a/0x30 [ 1505.226293][T26529] } [ 1505.228784][T26529] ... key at: [] tasklist_lock+0x18/0x40 [ 1505.236571][T26529] ... acquired at: [ 1505.240361][T26529] _raw_read_lock+0x36/0x50 [ 1505.245116][T26529] send_sigurg+0x12b/0x420 [ 1505.249702][T26529] sk_send_sigurg+0x6c/0x2e0 [ 1505.254498][T26529] queue_oob+0x42c/0x4f0 [ 1505.258946][T26529] unix_stream_sendmsg+0xcb1/0xe80 [ 1505.264242][T26529] ____sys_sendmsg+0x972/0x9f0 [ 1505.269351][T26529] ___sys_sendmsg+0x2a5/0x360 [ 1505.274380][T26529] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1505.279588][T26529] do_syscall_64+0x14d/0xf80 [ 1505.284602][T26529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.290749][T26529] [ 1505.293443][T26529] [ 1505.293443][T26529] stack backtrace: [ 1505.299497][T26529] CPU: 0 UID: 0 PID: 26529 Comm: syz.4.4440 Tainted: G L syzkaller #0 PREEMPT(full) [ 1505.299516][T26529] Tainted: [L]=SOFTLOCKUP [ 1505.299520][T26529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1505.299528][T26529] Call Trace: [ 1505.299535][T26529] [ 1505.299541][T26529] dump_stack_lvl+0xe8/0x150 [ 1505.299559][T26529] __lock_acquire+0x2a94/0x2cf0 [ 1505.299579][T26529] lock_acquire+0xf0/0x2e0 [ 1505.299592][T26529] ? send_sigurg+0x12b/0x420 [ 1505.299606][T26529] _raw_read_lock+0x36/0x50 [ 1505.299617][T26529] ? send_sigurg+0x12b/0x420 [ 1505.299627][T26529] send_sigurg+0x12b/0x420 [ 1505.299639][T26529] sk_send_sigurg+0x6c/0x2e0 [ 1505.299655][T26529] queue_oob+0x42c/0x4f0 [ 1505.299670][T26529] ? __pfx_queue_oob+0x10/0x10 [ 1505.299686][T26529] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1505.299700][T26529] unix_stream_sendmsg+0xcb1/0xe80 [ 1505.299715][T26529] ? rcu_is_watching+0x15/0xb0 [ 1505.299729][T26529] ? trace_sched_exit_tp+0x3a/0x150 [ 1505.299742][T26529] ? __schedule+0x15f3/0x52d0 [ 1505.299754][T26529] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1505.299769][T26529] ? aa_sock_msg_perm+0xda/0x1b0 [ 1505.299784][T26529] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1505.299797][T26529] ____sys_sendmsg+0x972/0x9f0 [ 1505.299811][T26529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1505.299825][T26529] ? import_iovec+0x73/0xa0 [ 1505.299837][T26529] ___sys_sendmsg+0x2a5/0x360 [ 1505.299850][T26529] ? __pfx____sys_sendmsg+0x10/0x10 [ 1505.299863][T26529] ? futex_wake+0x4ac/0x580 [ 1505.299883][T26529] ? __fget_files+0x2a/0x420 [ 1505.299899][T26529] ? __fget_files+0x3a0/0x420 [ 1505.299916][T26529] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1505.299928][T26529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1505.299942][T26529] ? rcu_is_watching+0x15/0xb0 [ 1505.299958][T26529] do_syscall_64+0x14d/0xf80 [ 1505.299973][T26529] ? trace_irq_disable+0x3b/0x150 [ 1505.300004][T26529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.300024][T26529] ? clear_bhb_loop+0x40/0x90 [ 1505.300045][T26529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.300059][T26529] RIP: 0033:0x7fa9bab9c799 [ 1505.300073][T26529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.300084][T26529] RSP: 002b:00007fa9bb9c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1505.300098][T26529] RAX: ffffffffffffffda RBX: 00007fa9bae15fa0 RCX: 00007fa9bab9c799 [ 1505.300107][T26529] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 0000000000000004 [ 1505.300114][T26529] RBP: 00007fa9bac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1505.300121][T26529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1505.300129][T26529] R13: 00007fa9bae16038 R14: 00007fa9bae15fa0 R15: 00007fa9baf3fa48 [ 1505.300140][T26529] [ 1506.004919][T26526] pim6reg: entered allmulticast mode