last executing test programs: 9.045255017s ago: executing program 3 (id=1236): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$FS_IOC_GETVERSION(r0, 0x4008af25, &(0x7f0000000600)) 8.820515668s ago: executing program 3 (id=1238): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000a80)={0x20, 0x7, 0x4, "0dc8f9b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.644454949s ago: executing program 2 (id=1243): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0}, 0x1472}], 0x0, 0x0, 0x0}) 7.483294955s ago: executing program 2 (id=1244): syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.297776489s ago: executing program 1 (id=1248): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x45) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x24000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1fc}]}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.102996262s ago: executing program 1 (id=1249): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) 5.795927893s ago: executing program 2 (id=1250): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x800, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r1, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) creat(0x0, 0x18a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) 5.689875525s ago: executing program 2 (id=1251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_a, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_emit_ethernet(0x89, &(0x7f00000004c0)={@empty, @broadcast, @val={@val={0x88a8, 0x3}, {0x8100, 0x2, 0x0, 0x9b2}}, {@llc_tr={0x11, {@snap={0x54, 0xab, '\bj', "9abad6", 0x3, "12fa8edb329140b158ceb4810242df47772f9d2d04e919af3834c579941393fc1084d999d70d636dc968e101eb98d584dc317f37acdbadc550e2237aed465c30b711aa45d4d4c35e87ca1ef1dbcfa04a6d29c8675c89cda28237285382c17a6d86e14da2e63f69f02689"}}}}}, &(0x7f0000000300)={0x1, 0x3, [0x52b, 0x3c8, 0x430, 0x709]}) 5.552847718s ago: executing program 4 (id=1252): openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) ioctl$FS_IOC_RESVSP(r0, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.452271938s ago: executing program 3 (id=1253): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000005380)='./file0\x00', &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$PTRACE_GETSIGMASK(0x420a, r9, 0x8, &(0x7f0000000780)) r10 = getegid() r11 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$unix(r1, &(0x7f0000005680)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000002c0)="79a1e0a2dfa3c7c4866aead144a55e2f2cb7adf832a11e2093198407162f0216a0517dcd8dfd5bd559b58d73adeebb55a7ff46c98725ad8c9ebb505f72fc7cf24fd385faf62818dcf461cbe09b7f2796fa825cedbb4337022315630201ec73ab9af835d03aeb", 0x66}], 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000012000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r3], 0xe8, 0x40000}}, {{&(0x7f0000001180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000004340)="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", 0x1000}], 0x1, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @rights={{0x34, 0x1, 0x1, [r11, r5, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}}, @rights={{0x20, 0x1, 0x1, [r11, r0, r2, r3]}}], 0x78, 0x810}}, {{&(0x7f00000054c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000005600)=[{&(0x7f0000005540)="ebc3b1b50b6067648ef6c17b1c57f931ec58d33f0475be18f4dd41cb468b70e75a6ee7d30d9c88ed8f290dd383e50aa5767dc6b563ad3847bc3c15878551d89612413d37e4cf9345b23cf3bd14ffdfdd2eb3d2a36c4c00800678a3674e9d20d0e98e41526d194fd54d09e79a7cd6f84ae309ff6cffc859080e648f0b9630016d6ae5813f06e6b47f9d1c127f883de1a3116a421a1f7435135d643e896ffa6253aca69c1e0b4e840f1eaafeef46f2bc4fcf13bac73195f5aa", 0xb8}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r10}}}], 0x38, 0x4048805}}], 0x3, 0x20000051) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newtfilter={0x888, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xf}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x858, 0x2, [@TCA_BASIC_POLICE={0x854, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0xe8b, 0x6, 0x3, {0x9, 0x1, 0xfff, 0xfeff, 0x7, 0xe}, {0x1, 0x2, 0x8, 0x3c0, 0xbb, 0x800}, 0x8, 0x100, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6c, 0x6, 0x6, 0x8, 0x8, 0x5, 0x0, 0x7, 0x8000, 0x3aee, 0x4, 0x4, 0x8000, 0x6, 0x69, 0x7, 0x3, 0x7, 0x0, 0x480000, 0xce0, 0xd208, 0x4, 0xc078, 0x0, 0x1, 0x8000, 0x6, 0x4, 0x7ff, 0x2, 0x4, 0x18000000, 0x5, 0x4, 0xfffffffd, 0x3, 0xfffffff8, 0x3, 0x2, 0x9, 0x400, 0xfffffff8, 0x40, 0x2, 0x2, 0xdd4, 0xb7d6, 0x4, 0x40, 0x3, 0x16d, 0x3, 0x10001, 0xf9, 0x6, 0x25, 0x9, 0x6, 0x7fffffff, 0xfffffff9, 0x7fffffff, 0x0, 0xc8c, 0x80000000, 0xfffffffa, 0x9, 0x1, 0x2, 0x0, 0x80, 0x6, 0xfffffff7, 0x1, 0x4, 0x3f5, 0x401, 0x5, 0x10001, 0xa55, 0x2, 0x0, 0x8, 0x2, 0x7fffffff, 0x2, 0x0, 0x7, 0xf4, 0x2, 0xdf9, 0x3, 0x4, 0x7b25, 0x1b, 0x5, 0x0, 0x8, 0x8001, 0xa98, 0x7, 0x8001, 0x2, 0x1000, 0x5, 0xf, 0x1, 0x4, 0xa3cd, 0xfb, 0xe6e2, 0x8, 0x80000001, 0x5, 0x6, 0xfffffffb, 0xcf4d, 0x6, 0x8000, 0x5, 0x4, 0x100, 0xfffffff8, 0x2, 0x10, 0xfe0, 0x80, 0x101, 0xc95, 0x5, 0x34, 0x4, 0x3, 0x2, 0x7, 0x6, 0x101, 0x6, 0x1, 0x4, 0x2, 0xe408, 0x6, 0x6, 0x395, 0x9, 0x3, 0x1, 0x1, 0x1e1f, 0x2, 0x0, 0x5, 0x7, 0x200, 0x7, 0x4, 0xd, 0x5, 0x9, 0xb54, 0x9, 0x180, 0x5, 0x4b6, 0x4, 0x414110a6, 0x0, 0x0, 0x8, 0xac, 0x4, 0x7fffffff, 0x2715, 0xe, 0x6, 0x8, 0x80, 0x5, 0x4, 0x1, 0x8000, 0x3, 0x3, 0x7f, 0x0, 0x25, 0xff, 0xaa8000, 0x0, 0x7, 0x9, 0x7fffffff, 0x8, 0x9, 0xfffffffa, 0x9, 0x6, 0x7, 0xffffffff, 0x8, 0xfffffffd, 0x3, 0x0, 0xa, 0x40, 0x8001, 0x2, 0x9, 0x200, 0x4, 0x401, 0xff, 0x7, 0x8, 0x9, 0x6, 0xa8f9, 0x6d, 0x1, 0x6, 0x0, 0x80000001, 0xd, 0x9, 0xd31, 0x6, 0x289df43f, 0x6, 0x7fff, 0x8, 0x4, 0x5, 0xf, 0x8, 0xc, 0x3ff, 0xffffffff, 0x3, 0x8001, 0x6, 0x9, 0x9, 0x7fff, 0x8f, 0x2, 0x8000, 0x4, 0x5, 0xca, 0x6, 0x8, 0xfffffff7, 0x2, 0xc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x89, 0xa, 0x2, 0x8, 0x0, 0x1, 0x509, 0x3ff, 0x4, 0x4, 0x6, 0x3, 0x6, 0x8, 0xb647, 0x3, 0x20000000, 0x10, 0x7, 0x1, 0x964, 0xb03, 0x4, 0x2, 0x5f, 0x0, 0x3afa, 0xa8, 0x5, 0x4e24, 0xd747, 0x679b, 0x2, 0x5, 0x3ff, 0x3, 0x2e, 0x400, 0x5, 0x46f, 0x7fffffff, 0x4, 0xd4, 0xff, 0x7, 0x50, 0x4, 0x0, 0x10000, 0xffffffff, 0x7, 0x2, 0x7, 0xfffffff9, 0x5, 0x8, 0x80000001, 0x7, 0x9, 0xdf, 0x5, 0x3, 0xa41, 0x4, 0xfff, 0x80000001, 0x1, 0xe456, 0x8, 0x2, 0x4, 0x6a505143, 0x7fff, 0x9, 0xffe, 0x10000, 0x9, 0x6, 0x1, 0x5, 0xbcb6, 0xffff, 0xa, 0x9, 0x4, 0x0, 0x4, 0x9, 0x4, 0x2, 0xfffffffd, 0x5, 0x2, 0x7bcb, 0x5, 0x10001, 0xffffffff, 0x200, 0x9, 0x8, 0x7fffffff, 0x0, 0x0, 0x2, 0x2a, 0x9, 0x9, 0x8, 0x7, 0x6, 0x5, 0x5, 0x4, 0x400, 0x200000, 0x4, 0x1, 0x6, 0x7, 0x0, 0x7, 0x9, 0x8, 0x4, 0x8, 0x6, 0x1000, 0x8001, 0x7f, 0x20, 0x1, 0x656, 0x4d94, 0x2, 0x518, 0x3, 0x80, 0x0, 0x1, 0xa940, 0x3, 0xc, 0x2, 0x10, 0xffffff08, 0xb, 0x0, 0x2, 0x1, 0xe4, 0xfffffff8, 0x9, 0x2, 0x8, 0x3ff, 0xfffffff7, 0x3, 0x8, 0x1, 0x9, 0x4, 0x0, 0xffffffff, 0x7f, 0x3d08c4c7, 0x7f, 0x3, 0x4, 0x7, 0xfffffffd, 0x100, 0x7, 0x1, 0x7, 0xc, 0x2, 0x7, 0xffff, 0x5, 0xf9a, 0x1, 0x1, 0x728a0000, 0x2, 0x6, 0xe73, 0xffffffff, 0x4, 0x195, 0x1, 0x0, 0x3, 0x5a, 0x9, 0x9287, 0x3, 0xffffffc0, 0xe8b, 0x400, 0x0, 0xedd, 0x7, 0xa, 0x5, 0xff, 0x9d, 0x6, 0xb, 0xe84c, 0x0, 0x800, 0x9ef, 0xd, 0xfffffffe, 0xefa, 0x10001, 0xfffffeff, 0x5, 0x52b, 0x8, 0x4, 0xfffffffd, 0x4, 0xc, 0x3, 0x1, 0x8, 0x78e, 0x5, 0x4, 0x400, 0x800, 0x80, 0x200000, 0x3, 0x6, 0x1, 0x7ff, 0x800, 0x10, 0xfffffff8, 0x3, 0x6, 0x10, 0x5, 0x0, 0x7, 0xb, 0x7f, 0x7ff, 0x7ff, 0x2, 0xc1d2, 0xb, 0xfffffffd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.451870281s ago: executing program 4 (id=1254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xe42f3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x5c, 0x3, 0xfffffffc}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 5.304588147s ago: executing program 1 (id=1255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000500)={0xa4, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f00000002c0)="c5469e3602c607ca68b5", 0xa) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x3, 0x1, 0x0, 0x2, 0x8, 0x0, 0x6, 0x0, 0x0, 0x7, 0x6, 0x7, 0x3], 0x8000000, 0x59352}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.107312968s ago: executing program 1 (id=1256): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write(r0, &(0x7f0000000100)="df", 0x1) write(r1, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x7, 0x4, 0x2, 0x6, 0x1, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 5.038603921s ago: executing program 2 (id=1257): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 4.912088371s ago: executing program 1 (id=1258): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x1c}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400c4}, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240088c1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="090f26bd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) 3.086332796s ago: executing program 0 (id=1259): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040841}, 0x48009) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) 2.14007052s ago: executing program 0 (id=1260): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000280)) 2.065040714s ago: executing program 0 (id=1261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002540)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x8a}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 1.92669051s ago: executing program 2 (id=1262): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e000000200000000000000000000000000000000000003"], 0xb8}}, 0x0) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000380)=ANY=[@ANYRES8=r4]}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000003c0)="c4c37905d6040f0866bad104ec66660f388043006665660f3a0d9a0050000000b805000000b9050000000f01d926d0eb0f20e035200000000f22e0b9800000c00f3235000100000f306566dad3", 0x4d}], 0x1, 0x43, 0x0, 0x0) request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='\x00', 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r9, 0xae80, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 793.29695ms ago: executing program 4 (id=1263): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40010) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/kernel/cpu_byteorder', 0x109000, 0x44) syz_io_uring_setup(0x2, &(0x7f0000000280)={0x0, 0x6d08, 0x2, 0xfffffffe, 0x10d, 0x0, r0}, &(0x7f0000000080), 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0x288, 0x350, 0x1c8, 0x1c8, 0x288, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, &(0x7f0000000400), {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x2, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x5}}}, {{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 'batadv0\x00', 'dvmrp1\x00', {0xff}, {}, 0xa6, 0x1, 0x3a}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x67f2, 0xb74, @broadcast, 0x4e22}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x3d}, 0xffffff00, 0xffffff00, 'bond_slave_0\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x33, 0x1, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "ca3e", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) eventfd2(0x1, 0x800) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x560, 0x4) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0x28) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40002000) 732.767454ms ago: executing program 0 (id=1264): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x300, 0x300, 0x0, 0x300, 0x1a0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) 688.149708ms ago: executing program 1 (id=1265): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000005380)='./file0\x00', &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$PTRACE_GETSIGMASK(0x420a, r9, 0x8, &(0x7f0000000780)) r10 = getegid() r11 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$unix(r1, &(0x7f0000005680)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000002c0)="79a1e0a2dfa3c7c4866aead144a55e2f2cb7adf832a11e2093198407162f0216a0517dcd8dfd5bd559b58d73adeebb55a7ff46c98725ad8c9ebb505f72fc7cf24fd385faf62818dcf461cbe09b7f2796fa825cedbb4337022315630201ec73ab9af835d03aeb", 0x66}], 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000012000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r3], 0xe8, 0x40000}}, {{&(0x7f0000001180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000004340)="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", 0x1000}], 0x1, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @rights={{0x34, 0x1, 0x1, [r11, r5, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}}, @rights={{0x20, 0x1, 0x1, [r11, r0, r2, r3]}}], 0x78, 0x810}}, {{&(0x7f00000054c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000005600)=[{&(0x7f0000005540)="ebc3b1b50b6067648ef6c17b1c57f931ec58d33f0475be18f4dd41cb468b70e75a6ee7d30d9c88ed8f290dd383e50aa5767dc6b563ad3847bc3c15878551d89612413d37e4cf9345b23cf3bd14ffdfdd2eb3d2a36c4c00800678a3674e9d20d0e98e41526d194fd54d09e79a7cd6f84ae309ff6cffc859080e648f0b9630016d6ae5813f06e6b47f9d1c127f883de1a3116a421a1f7435135d643e896ffa6253aca69c1e0b4e840f1eaafeef46f2bc4fcf13bac73195f5aa", 0xb8}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r10}}}], 0x38, 0x4048805}}], 0x3, 0x20000051) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newtfilter={0x888, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xf}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x858, 0x2, [@TCA_BASIC_POLICE={0x854, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0xe8b, 0x6, 0x3, {0x9, 0x1, 0xfff, 0xfeff, 0x7, 0xe}, {0x1, 0x2, 0x8, 0x3c0, 0xbb, 0x800}, 0x8, 0x100, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6c, 0x6, 0x6, 0x8, 0x8, 0x5, 0x0, 0x7, 0x8000, 0x3aee, 0x4, 0x4, 0x8000, 0x6, 0x69, 0x7, 0x3, 0x7, 0x0, 0x480000, 0xce0, 0xd208, 0x4, 0xc078, 0x0, 0x1, 0x8000, 0x6, 0x4, 0x7ff, 0x2, 0x4, 0x18000000, 0x5, 0x4, 0xfffffffd, 0x3, 0xfffffff8, 0x3, 0x2, 0x9, 0x400, 0xfffffff8, 0x40, 0x2, 0x2, 0xdd4, 0xb7d6, 0x4, 0x40, 0x3, 0x16d, 0x3, 0x10001, 0xf9, 0x6, 0x25, 0x9, 0x6, 0x7fffffff, 0xfffffff9, 0x7fffffff, 0x0, 0xc8c, 0x80000000, 0xfffffffa, 0x9, 0x1, 0x2, 0x0, 0x80, 0x6, 0xfffffff7, 0x1, 0x4, 0x3f5, 0x401, 0x5, 0x10001, 0xa55, 0x2, 0x0, 0x8, 0x2, 0x7fffffff, 0x2, 0x0, 0x7, 0xf4, 0x2, 0xdf9, 0x3, 0x4, 0x7b25, 0x1b, 0x5, 0x0, 0x8, 0x8001, 0xa98, 0x7, 0x8001, 0x2, 0x1000, 0x5, 0xf, 0x1, 0x4, 0xa3cd, 0xfb, 0xe6e2, 0x8, 0x80000001, 0x5, 0x6, 0xfffffffb, 0xcf4d, 0x6, 0x8000, 0x5, 0x4, 0x100, 0xfffffff8, 0x2, 0x10, 0xfe0, 0x80, 0x101, 0xc95, 0x5, 0x34, 0x4, 0x3, 0x2, 0x7, 0x6, 0x101, 0x6, 0x1, 0x4, 0x2, 0xe408, 0x6, 0x6, 0x395, 0x9, 0x3, 0x1, 0x1, 0x1e1f, 0x2, 0x0, 0x5, 0x7, 0x200, 0x7, 0x4, 0xd, 0x5, 0x9, 0xb54, 0x9, 0x180, 0x5, 0x4b6, 0x4, 0x414110a6, 0x0, 0x0, 0x8, 0xac, 0x4, 0x7fffffff, 0x2715, 0xe, 0x6, 0x8, 0x80, 0x5, 0x4, 0x1, 0x8000, 0x3, 0x3, 0x7f, 0x0, 0x25, 0xff, 0xaa8000, 0x0, 0x7, 0x9, 0x7fffffff, 0x8, 0x9, 0xfffffffa, 0x9, 0x6, 0x7, 0xffffffff, 0x8, 0xfffffffd, 0x3, 0x0, 0xa, 0x40, 0x8001, 0x2, 0x9, 0x200, 0x4, 0x401, 0xff, 0x7, 0x8, 0x9, 0x6, 0xa8f9, 0x6d, 0x1, 0x6, 0x0, 0x80000001, 0xd, 0x9, 0xd31, 0x6, 0x289df43f, 0x6, 0x7fff, 0x8, 0x4, 0x5, 0xf, 0x8, 0xc, 0x3ff, 0xffffffff, 0x3, 0x8001, 0x6, 0x9, 0x9, 0x7fff, 0x8f, 0x2, 0x8000, 0x4, 0x5, 0xca, 0x6, 0x8, 0xfffffff7, 0x2, 0xc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x89, 0xa, 0x2, 0x8, 0x0, 0x1, 0x509, 0x3ff, 0x4, 0x4, 0x6, 0x3, 0x6, 0x8, 0xb647, 0x3, 0x20000000, 0x10, 0x7, 0x1, 0x964, 0xb03, 0x4, 0x2, 0x5f, 0x0, 0x3afa, 0xa8, 0x5, 0x4e24, 0xd747, 0x679b, 0x2, 0x5, 0x3ff, 0x3, 0x2e, 0x400, 0x5, 0x46f, 0x7fffffff, 0x4, 0xd4, 0xff, 0x7, 0x50, 0x4, 0x0, 0x10000, 0xffffffff, 0x7, 0x2, 0x7, 0xfffffff9, 0x5, 0x8, 0x80000001, 0x7, 0x9, 0xdf, 0x5, 0x3, 0xa41, 0x4, 0xfff, 0x80000001, 0x1, 0xe456, 0x8, 0x2, 0x4, 0x6a505143, 0x7fff, 0x9, 0xffe, 0x10000, 0x9, 0x6, 0x1, 0x5, 0xbcb6, 0xffff, 0xa, 0x9, 0x4, 0x0, 0x4, 0x9, 0x4, 0x2, 0xfffffffd, 0x5, 0x2, 0x7bcb, 0x5, 0x10001, 0xffffffff, 0x200, 0x9, 0x8, 0x7fffffff, 0x0, 0x0, 0x2, 0x2a, 0x9, 0x9, 0x8, 0x7, 0x6, 0x5, 0x5, 0x4, 0x400, 0x200000, 0x4, 0x1, 0x6, 0x7, 0x0, 0x7, 0x9, 0x8, 0x4, 0x8, 0x6, 0x1000, 0x8001, 0x7f, 0x20, 0x1, 0x656, 0x4d94, 0x2, 0x518, 0x3, 0x80, 0x0, 0x1, 0xa940, 0x3, 0xc, 0x2, 0x10, 0xffffff08, 0xb, 0x0, 0x2, 0x1, 0xe4, 0xfffffff8, 0x9, 0x2, 0x8, 0x3ff, 0xfffffff7, 0x3, 0x8, 0x1, 0x9, 0x4, 0x0, 0xffffffff, 0x7f, 0x3d08c4c7, 0x7f, 0x3, 0x4, 0x7, 0xfffffffd, 0x100, 0x7, 0x1, 0x7, 0xc, 0x2, 0x7, 0xffff, 0x5, 0xf9a, 0x1, 0x1, 0x728a0000, 0x2, 0x6, 0xe73, 0xffffffff, 0x4, 0x195, 0x1, 0x0, 0x3, 0x5a, 0x9, 0x9287, 0x3, 0xffffffc0, 0xe8b, 0x400, 0x0, 0xedd, 0x7, 0xa, 0x5, 0xff, 0x9d, 0x6, 0xb, 0xe84c, 0x0, 0x800, 0x9ef, 0xd, 0xfffffffe, 0xefa, 0x10001, 0xfffffeff, 0x5, 0x52b, 0x8, 0x4, 0xfffffffd, 0x4, 0xc, 0x3, 0x1, 0x8, 0x78e, 0x5, 0x4, 0x400, 0x800, 0x80, 0x200000, 0x3, 0x6, 0x1, 0x7ff, 0x800, 0x10, 0xfffffff8, 0x3, 0x6, 0x10, 0x5, 0x0, 0x7, 0xb, 0x7f, 0x7ff, 0x7ff, 0x2, 0xc1d2, 0xb, 0xfffffffd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x0) 671.631006ms ago: executing program 3 (id=1266): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x3, 0xe}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) 644.050802ms ago: executing program 0 (id=1267): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000dc0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x700000000000000, &(0x7f0000000500)="e401"}) 614.277364ms ago: executing program 4 (id=1268): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000000)={0x0, 0x6bd7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r0, 0x47f9, 0x1, 0x0, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 427.857153ms ago: executing program 0 (id=1269): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004051}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 313.120632ms ago: executing program 3 (id=1270): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x40}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 235.236117ms ago: executing program 4 (id=1271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9820}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9}) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 99.796109ms ago: executing program 3 (id=1272): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x1bb5, 0x4) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x26, &(0x7f0000000540)={@fd, @ptr={0x77622a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x4000, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1273): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x300) r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x3050, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x7) r4 = getpgrp(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r4}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) kernel console output (not intermixed with test programs): nnect, device number 22 [ 221.711191][ T3457] usb 5-1: unable to send the bmi data to the device: -71 [ 221.726125][ T3457] usb 5-1: unable to get target info from device [ 221.734557][ T3457] usb 5-1: could not get target info (-71) [ 221.742257][ T3457] usb 5-1: could not probe fw (-71) [ 222.236747][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 222.409218][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 222.456548][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 222.966975][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 223.136685][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 223.156874][ T10] usb 4-1: config 0 has no interfaces? [ 223.186091][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 223.195231][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 223.203787][ T10] usb 4-1: Manufacturer: syz [ 223.276771][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.309924][ T10] usb 4-1: config 0 descriptor?? [ 223.323562][ T8039] capability: warning: `syz.4.654' uses 32-bit capabilities (legacy support in use) [ 223.406936][ T5937] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 223.626768][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 223.641384][ T5937] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 223.650594][ T5937] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 223.660806][ T5937] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 223.671315][ T5937] usb 1-1: config 250 has no interface number 0 [ 223.731544][ T5937] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 223.754126][ T5937] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 223.773931][ T5937] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 223.786668][ T5937] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 223.797265][ T5937] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 223.818074][ T5937] usb 1-1: config 250 interface 228 has no altsetting 0 [ 223.830635][ T5937] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 223.834634][ T8052] libceph: resolve '0..' (ret=-3): failed [ 223.878861][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 223.901477][ T8054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.916810][ T5937] usb 1-1: Product: syz [ 223.922845][ T5937] usb 1-1: SerialNumber: syz [ 223.991925][ T5937] hub 1-1:250.228: bad descriptor, ignoring hub [ 224.001545][ T5937] hub 1-1:250.228: probe with driver hub failed with error -5 [ 224.316806][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 224.331344][ T5937] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 224.580794][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 224.634045][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 224.658801][ T5937] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 225.314678][ T5937] usb 1-1: failed to restore interface 228 altsetting 255 (error=-71) [ 225.346717][ T5914] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 225.355785][ T5937] usb 1-1: USB disconnect, device number 19 [ 225.361873][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 225.393583][ T5937] usblp0: removed [ 225.455490][ T8082] netlink: 'syz.4.667': attribute type 4 has an invalid length. [ 225.537279][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 225.571726][ T5914] usb 3-1: config 0 has no interfaces? [ 225.614136][ T5914] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 225.638409][ T5914] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 225.674766][ T5914] usb 3-1: Manufacturer: syz [ 225.695297][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 225.695309][ T30] audit: type=1326 audit(1769897097.806:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 225.763791][ T30] audit: type=1326 audit(1769897097.806:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 225.818108][ T5914] usb 3-1: config 0 descriptor?? [ 225.886666][ T30] audit: type=1326 audit(1769897097.806:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 226.003726][ T30] audit: type=1326 audit(1769897097.806:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 226.059037][ T10] usb 4-1: USB disconnect, device number 26 [ 226.163296][ T8093] Cannot find add_set index 0 as target [ 226.171144][ T8093] netdevsim netdevsim0: Direct firmware load for / [ 226.171144][ T8093] failed with error -2 [ 226.182143][ T8093] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 226.182143][ T8093] [ 226.306095][ T30] audit: type=1326 audit(1769897097.806:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 226.336293][ T30] audit: type=1326 audit(1769897097.846:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 226.396732][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 226.436393][ T30] audit: type=1326 audit(1769897097.846:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 226.485269][ T30] audit: type=1326 audit(1769897097.846:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 226.500073][ T8098] input: syz1 as /devices/virtual/input/input21 [ 226.664598][ T30] audit: type=1326 audit(1769897097.846:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 226.711615][ T30] audit: type=1326 audit(1769897097.846:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 226.967683][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'. [ 226.977010][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'. [ 227.312770][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 227.436798][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 227.506659][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 227.513886][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 227.529687][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 227.563381][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 227.672920][ T10] usb 2-1: Product: syz [ 227.689097][ T10] usb 2-1: Manufacturer: syz [ 227.713576][ T10] usb 2-1: SerialNumber: syz [ 227.771496][ T10] usb 2-1: config 0 descriptor?? [ 227.788714][ T8113] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 227.800370][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 227.829331][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 228.127770][ T981] usb 2-1: USB disconnect, device number 23 [ 228.131317][ T5884] usb 3-1: USB disconnect, device number 30 [ 228.353830][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 228.404334][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 228.486750][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 228.876788][ T5914] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 229.117489][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 229.124650][ T5914] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 229.139546][ T5914] usb 2-1: string descriptor 0 read error: -22 [ 229.145950][ T5914] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 229.164105][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 229.179174][ T5914] usb 2-1: config 0 descriptor?? [ 229.185586][ T8113] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.216712][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 229.232200][ T5914] hub 2-1:0.0: bad descriptor, ignoring hub [ 229.251399][ T5914] hub 2-1:0.0: probe with driver hub failed with error -5 [ 229.376646][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 229.402279][ T10] usb 3-1: config 0 has no interfaces? [ 229.409564][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 229.418920][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 229.430221][ T10] usb 3-1: Manufacturer: syz [ 229.437585][ T10] usb 3-1: config 0 descriptor?? [ 229.516661][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 229.547059][ T24] usb 2-1: USB disconnect, device number 24 [ 229.641197][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 230.258372][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 230.426782][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 230.483378][ T24] usb 4-1: config 0 has no interfaces? [ 230.506132][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 230.531705][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 230.556632][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 230.564171][ T24] usb 4-1: Manufacturer: syz [ 230.570514][ T24] usb 4-1: config 0 descriptor?? [ 231.236346][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 231.596744][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 231.627221][ T24] usb 3-1: USB disconnect, device number 31 [ 231.734017][ T8176] netlink: 104 bytes leftover after parsing attributes in process `syz.1.690'. [ 232.531153][ T8192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.636770][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 232.794641][ T981] usb 4-1: USB disconnect, device number 27 [ 233.676665][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 234.545739][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 234.617101][ T5937] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 234.726633][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 234.946094][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 235.124848][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 235.138862][ T5937] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 235.158287][ T5937] usb 3-1: config 0 has no interface number 0 [ 235.181420][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 235.216003][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 235.276665][ T39] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 235.619842][ T24] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 235.629279][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.641562][ T24] usb 4-1: Product: syz [ 235.641576][ T5937] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 235.645741][ T24] usb 4-1: Manufacturer: syz [ 235.660600][ T24] usb 4-1: SerialNumber: syz [ 235.676920][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 235.739822][ T39] usb 5-1: config 0 has no interfaces? [ 235.756809][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 235.764234][ T39] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 235.799731][ T5937] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 235.808842][ T39] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 235.808869][ T39] usb 5-1: Manufacturer: syz [ 235.830863][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.832686][ T39] usb 5-1: config 0 descriptor?? [ 235.842361][ T5937] usb 3-1: Product: syz [ 235.859908][ T5914] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 235.866765][ T5937] usb 3-1: Manufacturer: syz [ 235.872270][ T5937] usb 3-1: SerialNumber: syz [ 235.951755][ T5937] usb 3-1: config 0 descriptor?? [ 235.974342][ T8213] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 235.974468][ T24] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 236.077384][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 236.089278][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 236.132537][ T5914] usb 2-1: config 0 has no interfaces? [ 236.143105][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 236.163714][ T5914] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 236.188937][ T5914] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 236.204104][ T24] usb 4-1: media controller created [ 236.214439][ T8213] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.266139][ T5914] usb 2-1: Manufacturer: syz [ 236.283759][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.297514][ T5914] usb 2-1: config 0 descriptor?? [ 236.465209][ T24] zl10353_read_register: readreg error (reg=127, ret==-32) [ 236.796768][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 237.132121][ T24] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 237.150623][ T24] usb 4-1: USB disconnect, device number 28 [ 237.170206][ T8247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.345386][ T5937] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 237.406284][ T39] usb 5-1: USB disconnect, device number 23 [ 237.429896][ T5937] asix 3-1:0.188: probe with driver asix failed with error -71 [ 237.498842][ T5937] usb 3-1: USB disconnect, device number 32 [ 237.846803][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 238.050928][ T24] usb 2-1: USB disconnect, device number 25 [ 238.100170][ T8258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.202606][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 238.202624][ T30] audit: type=1326 audit(1769897110.316:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 238.304947][ T30] audit: type=1326 audit(1769897110.346:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 238.399866][ T30] audit: type=1326 audit(1769897110.346:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 238.512838][ T30] audit: type=1326 audit(1769897110.346:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 238.619873][ T30] audit: type=1326 audit(1769897110.346:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 238.771817][ T30] audit: type=1326 audit(1769897110.346:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 238.797557][ T5937] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 238.849556][ T30] audit: type=1326 audit(1769897110.346:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 238.876780][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 238.908312][ T30] audit: type=1326 audit(1769897110.346:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 238.976655][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 238.992983][ T30] audit: type=1326 audit(1769897110.346:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 238.993173][ T5937] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 239.103163][ T30] audit: type=1326 audit(1769897110.346:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 239.137855][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.161579][ T5937] usb 3-1: Product: syz [ 239.165791][ T5937] usb 3-1: Manufacturer: syz [ 239.198445][ T5937] usb 3-1: SerialNumber: syz [ 239.209184][ T5937] usb 3-1: config 0 descriptor?? [ 239.228435][ T5937] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 239.636668][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 239.797035][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 239.916827][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 240.045107][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 240.053746][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.065274][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.075898][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.091199][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.131454][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 240.148595][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.366734][ T5914] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 240.379691][ T24] usb 1-1: usb_control_msg returned -32 [ 240.385884][ T24] usbtmc 1-1:16.0: can't read capabilities [ 240.548756][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 240.569747][ T5914] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 240.579353][ T5914] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 240.592557][ T5914] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 240.603442][ T5914] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 240.617896][ T5914] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 240.625812][ T5937] gspca_topro: reg_w err -71 [ 240.628245][ T5914] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.650092][ T5914] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 240.666752][ T5937] gspca_topro: Sensor soi763a [ 240.668240][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.693940][ T5937] usb 3-1: USB disconnect, device number 33 [ 240.925091][ T5914] usb 4-1: usb_control_msg returned -32 [ 240.940618][ T5914] usbtmc 4-1:16.0: can't read capabilities [ 240.966698][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.228676][ T8311] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 241.284061][ T8316] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 241.436738][ T5937] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 241.523230][ T8322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.633987][ T5937] usb 5-1: config 0 has no interfaces? [ 241.643179][ T5937] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 241.665927][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.681730][ T5937] usb 5-1: config 0 descriptor?? [ 241.996734][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 242.005764][ T8313] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 242.036245][ T5937] usb 5-1: USB disconnect, device number 24 [ 242.616799][ T8331] Cannot find add_set index 0 as target [ 242.697390][ T8331] netdevsim netdevsim1: Direct firmware load for / [ 242.697390][ T8331] failed with error -2 [ 242.710148][ T8331] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 242.710148][ T8331] [ 243.036709][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 243.347591][ T8346] netlink: 388 bytes leftover after parsing attributes in process `syz.2.739'. [ 244.076735][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 244.426819][ T5937] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 244.586672][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 244.593586][ T5937] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 244.616665][ T5937] usb 2-1: config 0 has no interface number 0 [ 244.622877][ T5937] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 244.640511][ T5937] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 244.651024][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.659460][ T5937] usb 2-1: Product: syz [ 244.664038][ T5937] usb 2-1: Manufacturer: syz [ 244.671236][ T5937] usb 2-1: SerialNumber: syz [ 244.685137][ T5937] usb 2-1: config 0 descriptor?? [ 244.703906][ T5937] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 244.717557][ T5937] em28xx 2-1:0.132: Video interface 132 found: [ 244.905745][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.746'. [ 245.095090][ T5937] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 245.116748][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 245.566721][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 245.727215][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 245.736145][ T24] usb 3-1: config 0 has no interfaces? [ 245.745635][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 245.766109][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 245.782804][ T24] usb 3-1: Manufacturer: syz [ 245.797407][ T24] usb 3-1: config 0 descriptor?? [ 245.919218][ T5937] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 245.934222][ T5937] em28xx 2-1:0.132: board has no eeprom [ 245.996941][ T5937] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 246.016044][ T5937] em28xx 2-1:0.132: analog set to bulk mode. [ 246.027141][ T981] em28xx 2-1:0.132: Registering V4L2 extension [ 246.040194][ T5937] usb 2-1: USB disconnect, device number 26 [ 246.095251][ T5937] em28xx 2-1:0.132: Disconnecting em28xx [ 246.156661][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 246.262558][ T981] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 246.278409][ T981] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 246.286802][ T981] em28xx 2-1:0.132: No AC97 audio processor [ 246.302493][ T981] usb 2-1: Decoder not found [ 246.316449][ T981] em28xx 2-1:0.132: failed to create media graph [ 246.323236][ T8316] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 246.338725][ T5912] usb 1-1: USB disconnect, device number 20 [ 246.349111][ T981] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 246.381067][ T10] usb 4-1: USB disconnect, device number 29 [ 246.400733][ T981] em28xx 2-1:0.132: Remote control support is not available for this card. [ 246.456819][ T5937] em28xx 2-1:0.132: Closing input extension [ 246.485787][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 246.485805][ T30] audit: type=1326 audit(1769897118.586:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 246.575170][ T30] audit: type=1326 audit(1769897118.616:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 246.582075][ T5937] em28xx 2-1:0.132: Freeing device [ 246.664274][ T30] audit: type=1326 audit(1769897118.746:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 246.733604][ T8392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.795480][ T30] audit: type=1326 audit(1769897118.746:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 246.896784][ T30] audit: type=1326 audit(1769897118.746:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 247.141168][ T30] audit: type=1326 audit(1769897118.746:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 247.173217][ T30] audit: type=1326 audit(1769897118.746:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 247.195969][ T30] audit: type=1326 audit(1769897118.746:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 247.196645][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 247.220312][ T30] audit: type=1326 audit(1769897118.746:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 247.324712][ T30] audit: type=1326 audit(1769897118.746:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 247.794229][ T39] usb 3-1: USB disconnect, device number 34 [ 247.998687][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 248.236656][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 249.276737][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 249.555409][ T8433] Cannot find add_set index 0 as target [ 249.568441][ T8433] netdevsim netdevsim2: Direct firmware load for / [ 249.568441][ T8433] failed with error -2 [ 249.598764][ T8433] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 249.598764][ T8433] [ 249.629117][ T8435] netlink: 388 bytes leftover after parsing attributes in process `syz.4.763'. [ 250.275390][ T8413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.759'. [ 250.316646][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 250.534727][ T8443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.166323][ T8449] Cannot find add_set index 0 as target [ 251.176651][ T8449] netdevsim netdevsim0: Direct firmware load for / [ 251.176651][ T8449] failed with error -2 [ 251.229914][ T8449] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 251.229914][ T8449] [ 251.356635][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 251.966881][ T39] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 252.206669][ T5937] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 252.230791][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.269876][ T39] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 252.296706][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.315854][ T39] usb 3-1: config 0 descriptor?? [ 252.323660][ T8458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.396669][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 252.436759][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 252.445047][ T5937] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.461756][ T5937] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.475429][ T5937] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 252.500669][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.530707][ T5937] usb 4-1: config 0 descriptor?? [ 252.549514][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 252.555588][ T39] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 252.577273][ T39] usb 3-1: USB disconnect, device number 35 [ 252.808359][ T8460] netlink: 182 bytes leftover after parsing attributes in process `syz.1.773'. [ 253.017954][ T5937] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 253.158443][ T39] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 253.328598][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.361673][ T39] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 253.393884][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.424992][ T39] usb 3-1: config 0 descriptor?? [ 253.436645][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 253.462981][ T5914] usb 4-1: USB disconnect, device number 30 [ 253.537196][ T8479] Cannot find add_set index 0 as target [ 253.545785][ T8479] netdevsim netdevsim1: Direct firmware load for / [ 253.545785][ T8479] failed with error -2 [ 253.556590][ T8479] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 253.556590][ T8479] [ 253.855254][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 253.872755][ T39] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 253.905137][ T39] usb 3-1: USB disconnect, device number 36 [ 254.106085][ T8491] Cannot find add_set index 0 as target [ 254.476756][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 254.536321][ T8498] veth1_to_bond: entered allmulticast mode [ 254.659450][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 254.786741][ T39] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 254.921817][ T8498] veth1_to_bond (unregistering): left allmulticast mode [ 254.976761][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 255.004904][ T39] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 255.015823][ T8498] bond0: (slave bond_slave_1): Releasing backup interface [ 255.057601][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.068257][ T39] usb 4-1: Product: syz [ 255.081793][ T39] usb 4-1: Manufacturer: syz [ 255.086406][ T39] usb 4-1: SerialNumber: syz [ 255.108263][ T39] usb 4-1: config 0 descriptor?? [ 255.126763][ T5914] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 255.308137][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 255.318123][ T5914] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 255.324310][ T8512] netlink: 'syz.4.787': attribute type 8 has an invalid length. [ 255.332229][ T5914] usb 3-1: config 179 has no interface number 0 [ 255.340729][ T5914] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 255.353651][ T39] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 255.360066][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 255.372802][ T5914] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 255.385445][ T5914] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.398260][ T5914] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 255.415121][ T8512] bond0: entered promiscuous mode [ 255.421718][ T8512] bond_slave_0: entered promiscuous mode [ 255.427804][ T5914] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 255.441722][ T8512] bond_slave_1: entered promiscuous mode [ 255.447498][ T5914] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 255.465734][ T8512] gretap0: entered promiscuous mode [ 255.471380][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.484616][ T8505] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 255.493365][ T8512] bond0: left promiscuous mode [ 255.516649][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 255.522024][ T8512] bond_slave_0: left promiscuous mode [ 255.556335][ T8512] bond_slave_1: left promiscuous mode [ 255.565746][ T8512] gretap0: left promiscuous mode [ 255.605706][ T39] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 255.631340][ T39] usb 4-1: USB disconnect, device number 31 [ 255.681431][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.688692][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.792838][ T5914] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input22 [ 256.071376][ T8517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.112202][ T981] usb 3-1: USB disconnect, device number 37 [ 256.112202][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 256.112245][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 256.476662][ T39] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 256.510574][ T981] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 256.556644][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 256.586072][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 256.651329][ T39] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 256.661767][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.716700][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 256.744539][ T981] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 256.760457][ T981] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 256.774396][ T39] usb 2-1: config 0 descriptor?? [ 256.791533][ T981] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 256.921012][ T39] gspca_main: spca508-2.14.0 probing 8086:0110 [ 257.118571][ T981] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 257.128675][ T39] gspca_spca508: reg_read err -32 [ 257.144650][ T981] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 257.147814][ T39] gspca_spca508: reg_read err -32 [ 257.162230][ T39] gspca_spca508: reg_read err -32 [ 257.186172][ T981] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.206714][ T5914] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 257.214898][ T981] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.243561][ T39] gspca_spca508: reg_read err -32 [ 257.261584][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.464416][ T39] gspca_spca508: reg write: error -71 [ 257.476997][ T39] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 257.497327][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 257.514357][ T39] usb 2-1: USB disconnect, device number 27 [ 257.593936][ T981] usb 4-1: usb_control_msg returned -32 [ 257.600081][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 257.619542][ T5914] usb 1-1: config 0 has no interfaces? [ 257.627544][ T5914] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 257.638430][ T5914] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 257.646442][ T5914] usb 1-1: Manufacturer: syz [ 257.661364][ T981] usbtmc 4-1:16.0: can't read capabilities [ 257.680494][ T5914] usb 1-1: config 0 descriptor?? [ 257.856893][ T8544] Cannot find add_set index 0 as target [ 257.864477][ T8544] netdevsim netdevsim2: Direct firmware load for / [ 257.864477][ T8544] failed with error -2 [ 257.875331][ T8544] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 257.875331][ T8544] [ 257.936264][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 257.996378][ T8545] usbtmc 4-1:16.0: Unable to send data, error -71 [ 258.029702][ T8545] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 258.038616][ T5914] usb 4-1: USB disconnect, device number 32 [ 258.145432][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 258.646733][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 258.776035][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.803'. [ 259.617691][ T5914] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 259.634582][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 259.634599][ T30] audit: type=1326 audit(1769897131.746:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 259.676642][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 259.718299][ T981] usb 1-1: USB disconnect, device number 21 [ 259.827372][ T5937] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 259.862523][ T8579] loop6: detected capacity change from 0 to 7 [ 259.870391][ T30] audit: type=1326 audit(1769897131.746:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 259.892830][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 259.910962][ T5914] usb 5-1: config 0 has no interfaces? [ 259.919423][ T30] audit: type=1326 audit(1769897131.746:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 259.943348][ T5914] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 259.952967][ T5914] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 259.961293][ T5914] usb 5-1: Manufacturer: syz [ 259.970848][ T5914] usb 5-1: config 0 descriptor?? [ 259.987088][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 260.001590][ T8579] loop6: [ 260.004627][ T5937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 260.016710][ T8579] loop6: partition table partially beyond EOD, truncated [ 260.020286][ T5937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 260.048762][ T5195] loop6: [ 260.051771][ T5195] loop6: partition table partially beyond EOD, truncated [ 260.061480][ T30] audit: type=1326 audit(1769897131.746:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 260.112267][ T5937] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.148504][ T5937] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 260.163204][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 260.176675][ T30] audit: type=1326 audit(1769897131.746:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 260.252036][ T5937] usb 3-1: Product: syz [ 260.257481][ T5937] usb 3-1: Manufacturer: syz [ 260.263440][ T5937] usb 3-1: SerialNumber: syz [ 260.426276][ T30] audit: type=1326 audit(1769897131.746:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 260.465784][ T5937] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input23 [ 260.549338][ C0] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 260.585227][ T30] audit: type=1326 audit(1769897131.746:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 260.642667][ T5937] usb 3-1: USB disconnect, device number 38 [ 260.701850][ T30] audit: type=1326 audit(1769897131.746:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 260.724226][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 260.739704][ T5937] appletouch 3-1:1.0: input: appletouch disconnected [ 260.762816][ T30] audit: type=1326 audit(1769897131.746:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 260.868301][ T30] audit: type=1326 audit(1769897131.746:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8572 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 261.201692][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 261.346671][ T39] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 261.356829][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 261.364115][ T24] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 261.372950][ T24] usb 1-1: config 0 has no interface number 0 [ 261.379466][ T24] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 261.391076][ T24] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 261.403251][ T24] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 261.414897][ T24] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.431645][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 261.442719][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.454503][ T24] usb 1-1: Product: syz [ 261.470430][ T24] usb 1-1: Manufacturer: syz [ 261.475446][ T24] usb 1-1: SerialNumber: syz [ 261.485155][ T24] usb 1-1: config 0 descriptor?? [ 261.507053][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 261.528992][ T39] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 261.551114][ T39] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 261.563601][ T39] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.578778][ T39] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.592854][ T39] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.602713][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.707574][ T24] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 261.756638][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 261.845382][ T39] usb 4-1: GET_CAPABILITIES returned 0 [ 261.861834][ T39] usbtmc 4-1:16.0: can't read capabilities [ 261.931876][ C0] iowarrior 1-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 261.943969][ T981] usb 1-1: USB disconnect, device number 22 [ 262.061467][ T5937] usb 4-1: USB disconnect, device number 33 [ 262.258449][ T24] usb 5-1: USB disconnect, device number 25 [ 262.796661][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 262.878868][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 262.933643][ T8632] netlink: 76 bytes leftover after parsing attributes in process `syz.3.826'. [ 263.196646][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 263.203781][ T24] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 263.213171][ T24] usb 1-1: config 0 has no interface number 0 [ 263.220488][ T24] usb 1-1: config 0 interface 12 has no altsetting 0 [ 263.230105][ T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 263.242260][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.251633][ T24] usb 1-1: Product: syz [ 263.255945][ T24] usb 1-1: Manufacturer: syz [ 263.261970][ T24] usb 1-1: SerialNumber: syz [ 263.321312][ T24] usb 1-1: config 0 descriptor?? [ 263.846661][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 264.305619][ T8669] Cannot find add_set index 0 as target [ 264.315076][ T8669] netdevsim netdevsim4: Direct firmware load for / [ 264.315076][ T8669] failed with error -2 [ 264.326310][ T8669] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 264.326310][ T8669] [ 264.416712][ T39] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 264.601512][ T39] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.643303][ T30] kauditd_printk_skb: 156 callbacks suppressed [ 264.643321][ T30] audit: type=1326 audit(1769897136.756:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 264.735171][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 264.750797][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 264.791014][ T24] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 264.824689][ T24] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 264.832401][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.845666][ T24] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 264.853526][ T39] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.865469][ T24] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 264.876702][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 264.971129][ T30] audit: type=1326 audit(1769897136.756:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8fa5f5b78e code=0x7ffc0000 [ 265.031863][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.062007][ T24] usb 1-1: USB disconnect, device number 23 [ 265.071632][ T30] audit: type=1326 audit(1769897136.756:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 265.212762][ T30] audit: type=1326 audit(1769897136.886:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 265.278279][ T39] usb 4-1: config 0 descriptor?? [ 265.424039][ T30] audit: type=1326 audit(1769897136.886:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 265.448665][ T30] audit: type=1326 audit(1769897136.886:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 265.471241][ T30] audit: type=1326 audit(1769897136.886:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 265.535556][ T30] audit: type=1326 audit(1769897136.886:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 265.689974][ T30] audit: type=1326 audit(1769897136.886:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 265.729194][ T39] plantronics 0003:047F:FFFF.0017: ignoring exceeding usage max [ 265.784763][ T39] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 265.813723][ T30] audit: type=1326 audit(1769897136.886:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 265.916658][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 266.937836][ T5937] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 266.956647][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 266.988599][ T5884] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 267.118238][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 267.140119][ T5937] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 267.153648][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.168670][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 267.168675][ T5937] usb 5-1: config 0 descriptor?? [ 267.169366][ T8695] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.226113][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.246234][ T5884] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 267.256364][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.285572][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'. [ 267.300927][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'. [ 267.311422][ T5884] usb 1-1: config 0 descriptor?? [ 267.357967][ T39] usb 4-1: reset high-speed USB device number 34 using dummy_hcd [ 267.608856][ T5937] elan 0003:04F3:0755.0018: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 267.845252][ T39] usb 4-1: device descriptor read/64, error -71 [ 267.890682][ T5884] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 267.904598][ T5912] usb 5-1: USB disconnect, device number 26 [ 267.997041][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 268.076215][ T8698] i2c i2c-1: unsupported multi-msg i2c transaction [ 268.085356][ T5937] usb 1-1: USB disconnect, device number 24 [ 268.108669][ T39] usb 4-1: reset high-speed USB device number 34 using dummy_hcd [ 268.122158][ T39] usb 4-1: device reset changed ep0 maxpacket size! [ 268.136440][ T797] usb 4-1: USB disconnect, device number 34 [ 268.364802][ T797] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 268.556746][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 268.569058][ T797] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 268.583055][ T797] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.605212][ T797] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.635487][ T797] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.666699][ T797] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.696894][ T797] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.724770][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.776663][ T5912] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 268.797696][ T8729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.856'. [ 268.866792][ T8729] geneve2: entered promiscuous mode [ 268.908113][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.855'. [ 268.975421][ T797] usb 4-1: usb_control_msg returned -32 [ 268.990186][ T797] usbtmc 4-1:16.0: can't read capabilities [ 268.992331][ T5912] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 269.005668][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.013958][ T5912] usb 3-1: Product: syz [ 269.036723][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 269.110261][ T5912] usb 3-1: Manufacturer: syz [ 269.114890][ T5912] usb 3-1: SerialNumber: syz [ 269.129514][ T5912] usb 3-1: config 0 descriptor?? [ 269.149029][ T5912] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 269.340986][ T8743] usbtmc 4-1:16.0: INDICATOR_PULSE returned 0 [ 269.487341][ T981] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 269.561038][ T797] usb 4-1: USB disconnect, device number 35 [ 269.679772][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 269.694711][ T981] usb 5-1: config 0 has no interfaces? [ 269.700309][ T5937] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 269.715701][ T981] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 269.763283][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.859'. [ 269.775815][ T981] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 269.794747][ T981] usb 5-1: Manufacturer: syz [ 269.804426][ T981] usb 5-1: config 0 descriptor?? [ 269.858312][ T5937] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 269.875411][ T5937] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 269.934940][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.986148][ T5937] usb 1-1: config 0 descriptor?? [ 270.086754][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 270.380017][ T797] usb 1-1: USB disconnect, device number 25 [ 270.636685][ T5884] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 270.779164][ T5912] gspca_sunplus: reg_r err -71 [ 270.784193][ T5912] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 270.795457][ T5912] usb 3-1: USB disconnect, device number 39 [ 270.848097][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 270.858084][ T5884] usb 2-1: config 0 has no interfaces? [ 270.878312][ T5884] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 270.925986][ T5884] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 270.945938][ T5884] usb 2-1: Manufacturer: syz [ 270.963023][ T5884] usb 2-1: config 0 descriptor?? [ 271.116725][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 271.210360][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 271.225018][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 271.795466][ T5912] usb 5-1: USB disconnect, device number 27 [ 272.166767][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 272.176704][ T5884] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 272.338260][ T5884] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.349015][ T5884] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.453258][ T5884] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.476016][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.503006][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 272.503025][ T30] audit: type=1326 audit(1769897144.526:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.4.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 272.574645][ T30] audit: type=1326 audit(1769897144.526:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.4.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 272.711250][ T5884] usb 3-1: usb_control_msg returned -32 [ 272.717474][ T5884] usbtmc 3-1:16.0: can't read capabilities [ 272.748759][ T5912] usb 2-1: USB disconnect, device number 28 [ 272.771643][ T30] audit: type=1326 audit(1769897144.526:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.4.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 272.886308][ T30] audit: type=1326 audit(1769897144.526:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.4.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 272.964026][ T30] audit: type=1326 audit(1769897144.526:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.4.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 273.196671][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 273.289444][ T30] audit: type=1326 audit(1769897144.526:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.4.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 273.386692][ T30] audit: type=1326 audit(1769897144.536:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.4.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 273.439967][ T30] audit: type=1326 audit(1769897144.536:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.4.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 273.497809][ T30] audit: type=1326 audit(1769897144.536:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.4.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 273.578671][ T8804] netlink: 'syz.0.876': attribute type 4 has an invalid length. [ 273.662049][ T8808] netlink: 'syz.0.876': attribute type 4 has an invalid length. [ 273.745869][ T30] audit: type=1326 audit(1769897144.536:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.4.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b5d9aeb9 code=0x7ffc0000 [ 273.845415][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'. [ 273.854665][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'. [ 274.236682][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 274.365714][ T8829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.373199][ T8829] IPv6: NLM_F_CREATE should be set when creating new route [ 274.429292][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 274.794273][ T39] usb 3-1: USB disconnect, device number 40 [ 275.153774][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 275.175146][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 275.184986][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.193814][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.211876][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.226725][ T5937] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 275.245465][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.276657][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 275.386648][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 275.418742][ T5937] usb 5-1: config 0 has no interfaces? [ 275.449100][ T5937] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 275.486339][ T5937] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 275.499765][ T5937] usb 5-1: Manufacturer: syz [ 275.519894][ T8858] Cannot find add_set index 0 as target [ 275.531526][ T8858] netdevsim netdevsim0: Direct firmware load for / [ 275.531526][ T8858] failed with error -2 [ 275.543170][ T8858] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 275.543170][ T8858] [ 275.582224][ T5937] usb 5-1: config 0 descriptor?? [ 276.316647][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 276.719688][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'. [ 277.366653][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 277.696868][ T5884] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 277.865314][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 277.956694][ T5884] usb 4-1: config 0 has no interfaces? [ 278.008511][ T5884] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 278.017672][ T5884] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 278.025734][ T5884] usb 4-1: Manufacturer: syz [ 278.033256][ T5884] usb 4-1: config 0 descriptor?? [ 278.051748][ T8891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.107646][ T5884] usb 5-1: USB disconnect, device number 28 [ 278.396634][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 278.666700][ T981] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 278.836895][ T981] usb 5-1: Using ep0 maxpacket: 32 [ 278.844243][ T981] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 278.873082][ T981] usb 5-1: config 0 has no interface number 0 [ 278.903394][ T981] usb 5-1: config 0 interface 184 has no altsetting 0 [ 278.963371][ T981] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 278.998577][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.033033][ T981] usb 5-1: Product: syz [ 279.065459][ T981] usb 5-1: Manufacturer: syz [ 279.075820][ T981] usb 5-1: SerialNumber: syz [ 279.084045][ T981] usb 5-1: config 0 descriptor?? [ 279.094041][ T981] smsc75xx v1.0.0 [ 279.436668][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 279.537409][ T5912] usb 4-1: USB disconnect, device number 36 [ 279.751935][ T8920] geneve2: entered promiscuous mode [ 279.866911][ T981] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 279.916154][ T981] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 280.124407][ T8933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.402965][ T981] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 280.438746][ T981] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 280.465851][ T981] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 280.486741][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 280.501073][ T981] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 280.525211][ T981] usb 5-1: USB disconnect, device number 29 [ 281.026962][ T8946] geneve2: entered promiscuous mode [ 281.119141][ T981] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 281.323079][ T981] usb 1-1: Using ep0 maxpacket: 8 [ 281.390811][ T981] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 281.399296][ T981] usb 1-1: config 179 has no interface number 0 [ 281.413664][ T981] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 281.466454][ T981] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 281.482231][ T981] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 281.516653][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 281.533901][ T981] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 281.596161][ T981] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 281.613270][ T981] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 281.629120][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.699658][ T8942] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.795307][ T8953] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 282.059356][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.144117][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.260265][ T981] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input24 [ 282.396857][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 282.556728][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 282.590645][ T8962] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 282.599536][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 282.619485][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.631686][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 282.641980][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.661853][ T5884] usb 1-1: USB disconnect, device number 26 [ 282.661850][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 282.661998][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 282.690998][ T9] usb 3-1: config 0 descriptor?? [ 283.122985][ T9] kye 0003:0458:5016.001A: control desc unexpectedly large [ 283.165612][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.001A/input/input25 [ 283.275822][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.001A/input/input26 [ 283.348991][ T9] kye 0003:0458:5016.001A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 283.596656][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 283.751940][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 283.751957][ T30] audit: type=1326 audit(1769897155.846:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 283.782806][ T30] audit: type=1326 audit(1769897155.856:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 283.836000][ T39] usb 3-1: USB disconnect, device number 41 [ 283.914129][ T8989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.001149][ T30] audit: type=1326 audit(1769897155.856:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 284.165280][ T30] audit: type=1326 audit(1769897155.856:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 284.321159][ T30] audit: type=1326 audit(1769897155.856:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 284.466317][ T30] audit: type=1326 audit(1769897155.856:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 284.489477][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.942'. [ 284.513660][ T30] audit: type=1326 audit(1769897155.856:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 284.579747][ T30] audit: type=1326 audit(1769897155.856:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 284.614514][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 284.636651][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 284.663597][ T9001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.708146][ T30] audit: type=1326 audit(1769897155.856:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 284.760365][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 284.779271][ T9003] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 284.845934][ T30] audit: type=1326 audit(1769897155.856:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.0.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 285.179953][ T9005] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 285.212674][ T9005] bond1 (unregistering): Released all slaves [ 285.602796][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 285.647092][ T9024] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 285.676666][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 285.707771][ T9031] veth0: entered promiscuous mode [ 285.714446][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'. [ 285.878079][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 285.910864][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 285.920327][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 286.407229][ T5884] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 286.437589][ T981] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 286.576645][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 286.585083][ T5884] usb 5-1: config 0 has no interfaces? [ 286.594194][ T5884] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 286.599202][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.603771][ T5884] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 286.632538][ T5884] usb 5-1: Manufacturer: syz [ 286.657260][ T5884] usb 5-1: config 0 descriptor?? [ 286.679796][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.716663][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 286.760468][ T981] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 286.806357][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.851185][ T981] usb 1-1: config 0 descriptor?? [ 287.362290][ T981] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 287.378513][ T981] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 287.394689][ T981] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 287.407624][ T981] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 287.428414][ T981] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 287.505715][ T981] hid-steam 0003:28DE:1142.001B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 287.756713][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 287.802616][ T9062] Cannot find add_set index 0 as target [ 287.811213][ T9062] netdevsim netdevsim2: Direct firmware load for / [ 287.811213][ T9062] failed with error -2 [ 287.821991][ T9062] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 287.821991][ T9062] [ 288.439205][ T5884] usb 5-1: USB disconnect, device number 30 [ 288.796655][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 288.900672][ T9077] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 289.166319][ T9] usb 1-1: USB disconnect, device number 27 [ 289.382848][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 289.382865][ T30] audit: type=1326 audit(1769897161.496:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 289.431314][ T30] audit: type=1326 audit(1769897161.546:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 289.454412][ T30] audit: type=1326 audit(1769897161.546:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 289.476989][ T5884] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 289.490737][ T30] audit: type=1326 audit(1769897161.546:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 289.572535][ T30] audit: type=1326 audit(1769897161.576:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 289.611977][ T30] audit: type=1326 audit(1769897161.576:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 289.634994][ T30] audit: type=1326 audit(1769897161.576:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 289.657412][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 289.662752][ T30] audit: type=1326 audit(1769897161.576:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 289.697989][ T5884] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 289.751592][ T5884] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.826173][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.836675][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 289.913821][ T30] audit: type=1326 audit(1769897161.576:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 289.963355][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.984919][ T5884] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.006389][ T30] audit: type=1326 audit(1769897161.576:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 290.042789][ T5884] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 290.067006][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.105670][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 290.114686][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 290.520499][ T5884] usb 2-1: usb_control_msg returned -32 [ 290.569901][ T5884] usbtmc 2-1:16.0: can't read capabilities [ 290.752780][ T9118] Cannot find add_set index 0 as target [ 290.761198][ T9118] netdevsim netdevsim4: Direct firmware load for / [ 290.761198][ T9118] failed with error -2 [ 290.776740][ T9118] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 290.776740][ T9118] [ 290.876657][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 291.130292][ T9123] netlink: 104 bytes leftover after parsing attributes in process `syz.0.979'. [ 291.469881][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 291.697597][ T9136] netlink: 104 bytes leftover after parsing attributes in process `syz.3.982'. [ 291.712382][ T9137] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 291.861511][ T39] usb 2-1: USB disconnect, device number 29 [ 291.916662][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 292.026699][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 292.186691][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 292.195350][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 292.256718][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.286417][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.323788][ T9153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.361064][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.373977][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.383338][ T10] usb 5-1: Product: syz [ 292.388199][ T10] usb 5-1: Manufacturer: syz [ 292.393041][ T10] usb 5-1: SerialNumber: syz [ 292.495745][ T9155] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 292.843660][ T10] usb 5-1: 0:2 : does not exist [ 292.956648][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 293.764907][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 293.774204][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 293.891059][ T10] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 293.995434][ T10] usb 5-1: USB disconnect, device number 31 [ 294.001474][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 294.118387][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.036663][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 295.138312][ T9180] Cannot find add_set index 0 as target [ 295.192441][ T9180] netdevsim netdevsim3: Direct firmware load for / [ 295.192441][ T9180] failed with error -2 [ 295.256707][ T9180] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 295.256707][ T9180] [ 296.076660][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 296.313897][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 296.313910][ T30] audit: type=1326 audit(1769897168.416:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 296.482538][ T30] audit: type=1326 audit(1769897168.496:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 296.565727][ T30] audit: type=1326 audit(1769897168.496:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 296.908298][ T9207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.987787][ T30] audit: type=1326 audit(1769897168.496:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 297.068140][ T30] audit: type=1326 audit(1769897168.516:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 297.116646][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 297.137728][ T30] audit: type=1326 audit(1769897168.516:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 297.194452][ T30] audit: type=1326 audit(1769897168.516:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 297.209398][ T9216] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1004'. [ 297.226959][ T30] audit: type=1326 audit(1769897168.516:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 297.446966][ T30] audit: type=1326 audit(1769897168.516:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 297.485758][ T9225] input: syz0 as /devices/virtual/input/input27 [ 297.553520][ T30] audit: type=1326 audit(1769897168.516:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 297.717573][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'. [ 297.729732][ T9229] l2tp_ppp: sess 2/0: no socket in recv [ 298.156659][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 298.279818][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 298.330338][ T9242] Cannot find add_set index 0 as target [ 298.342301][ T9242] netdevsim netdevsim0: Direct firmware load for / [ 298.342301][ T9242] failed with error -2 [ 298.353043][ T9242] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 298.353043][ T9242] [ 298.363345][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 298.495443][ T9246] syzkaller1: entered promiscuous mode [ 298.515373][ T9246] syzkaller1: entered allmulticast mode [ 298.517031][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 298.541878][ T9] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 298.554783][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.576648][ T9] usb 3-1: Product: syz [ 298.580862][ T9] usb 3-1: Manufacturer: syz [ 298.590093][ T9] usb 3-1: SerialNumber: syz [ 298.618374][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 298.832863][ T9] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 298.846292][ T9254] team_slave_0: entered promiscuous mode [ 298.852182][ T9254] team_slave_1: entered promiscuous mode [ 298.867210][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 298.896320][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 298.906438][ T9254] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.916645][ T9] usb 3-1: media controller created [ 298.954161][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.031377][ T9] zl10353_read_register: readreg error (reg=127, ret==-32) [ 299.196974][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 299.584766][ T9] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 299.630920][ T9] usb 3-1: USB disconnect, device number 42 [ 300.236647][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 300.694940][ T9292] syzkaller0: entered promiscuous mode [ 300.719300][ T9292] syzkaller0: entered allmulticast mode [ 301.276861][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 301.394374][ T9318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1035'. [ 301.403504][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 301.470942][ T9318] vlan2: entered promiscuous mode [ 301.480766][ T9318] syz_tun: entered promiscuous mode [ 301.673738][ T9322] loop8: detected capacity change from 0 to 7 [ 301.702801][ T9322] Dev loop8: unable to read RDB block 7 [ 301.728827][ T9322] loop8: unable to read partition table [ 301.791975][ T9322] loop8: partition table beyond EOD, truncated [ 301.845567][ T9322] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 302.100391][ T9333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.316765][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 303.356633][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 304.374080][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 304.396650][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 304.426076][ T9385] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1058'. [ 305.192300][ T9405] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1066'. [ 305.313707][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 305.437551][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 305.935267][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 305.935283][ T30] audit: type=1326 audit(1769897178.046:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 306.040920][ T30] audit: type=1326 audit(1769897178.086:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 306.110603][ T30] audit: type=1326 audit(1769897178.106:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 306.184512][ T30] audit: type=1326 audit(1769897178.106:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 306.315652][ T30] audit: type=1326 audit(1769897178.106:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 306.350987][ T30] audit: type=1326 audit(1769897178.106:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 306.399927][ T30] audit: type=1326 audit(1769897178.106:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 306.452243][ T30] audit: type=1326 audit(1769897178.106:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 306.476644][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 306.511755][ T30] audit: type=1326 audit(1769897178.106:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 306.557595][ T30] audit: type=1326 audit(1769897178.106:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa5f9aeb9 code=0x7ffc0000 [ 306.789169][ T9437] input: syz0 as /devices/virtual/input/input28 [ 306.806667][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 306.853597][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 307.306741][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 307.516779][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 307.769446][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 307.936730][ T9] usb 1-1: config 0 has no interfaces? [ 308.035451][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 308.046789][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 308.055568][ T9] usb 1-1: Manufacturer: syz [ 308.062605][ T9] usb 1-1: config 0 descriptor?? [ 308.556653][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 309.596638][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 309.825104][ T9484] loop2: detected capacity change from 0 to 7 [ 309.864397][ T24] usb 1-1: USB disconnect, device number 28 [ 309.867190][ T5842] Dev loop2: unable to read RDB block 7 [ 309.878813][ T5842] loop2: unable to read partition table [ 309.906993][ T5842] loop2: partition table beyond EOD, truncated [ 309.922067][ T9484] Dev loop2: unable to read RDB block 7 [ 309.927783][ T9484] loop2: unable to read partition table [ 309.936175][ T9484] loop2: partition table beyond EOD, truncated [ 309.946939][ T9484] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 310.103807][ T9492] netlink: 'syz.3.1093': attribute type 1 has an invalid length. [ 310.135533][ T9492] geneve2: entered promiscuous mode [ 310.141000][ T9492] geneve2: entered allmulticast mode [ 310.151454][ T9492] bond1: (slave geneve2): making interface the new active one [ 310.173971][ T9492] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 310.354488][ T9504] bond1: (slave netdevsim0): Enslaving as a backup interface with a down link [ 310.636651][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 310.916465][ T9528] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 310.973937][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 310.973954][ T30] audit: type=1326 audit(1769897183.086:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.0.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 311.042546][ T30] audit: type=1326 audit(1769897183.086:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.0.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 311.133587][ T30] audit: type=1326 audit(1769897183.086:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.0.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 311.139847][ T9533] mmap: syz.2.1107 (9533) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 311.220546][ T30] audit: type=1326 audit(1769897183.136:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.0.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 311.275859][ T30] audit: type=1326 audit(1769897183.136:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.0.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 311.347291][ T30] audit: type=1326 audit(1769897183.136:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.0.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 311.430271][ T9543] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1108'. [ 311.631112][ T30] audit: type=1326 audit(1769897183.156:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.0.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 311.676736][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 311.777801][ T30] audit: type=1326 audit(1769897183.156:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.0.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 312.014752][ T30] audit: type=1326 audit(1769897183.156:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.0.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92ea93c2d9 code=0x7ffc0000 [ 312.146746][ T30] audit: type=1326 audit(1769897183.156:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.0.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 312.716737][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 313.465063][ T9575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.756668][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 314.274531][ T9597] team_slave_0: left promiscuous mode [ 314.283932][ T9597] team_slave_1: left promiscuous mode [ 314.449273][ T9597] team0 (unregistering): Failed to send options change via netlink (err -105) [ 314.494117][ T9597] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 314.533860][ T9597] team0 (unregistering): Port device team_slave_0 removed [ 314.564411][ T9597] team0 (unregistering): Failed to send options change via netlink (err -105) [ 314.607794][ T9597] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 314.646183][ T9597] team0 (unregistering): Port device team_slave_1 removed [ 314.796645][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 314.824971][ T9606] syz_tun: entered allmulticast mode [ 314.881216][ T9605] syz_tun: left allmulticast mode [ 315.057869][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'. [ 315.245600][ T9618] Cannot find add_set index 0 as target [ 315.280604][ T9618] netdevsim netdevsim4: Direct firmware load for / [ 315.280604][ T9618] failed with error -2 [ 315.326949][ T9618] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 315.326949][ T9618] [ 315.354478][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'. [ 315.363733][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 315.389074][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'. [ 315.626763][ T10] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 315.690802][ T10] usb 4-1: config 0 has no interfaces? [ 315.698329][ T10] usb 4-1: config 0 has no interfaces? [ 315.708048][ T10] usb 4-1: config 0 has no interfaces? [ 315.718946][ T10] usb 4-1: config 0 has no interfaces? [ 315.739542][ T10] usb 4-1: config 0 has no interfaces? [ 315.748756][ T10] usb 4-1: config 0 has no interfaces? [ 315.755434][ T10] usb 4-1: config 0 has no interfaces? [ 315.761914][ T10] usb 4-1: config 0 has no interfaces? [ 315.783421][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.800424][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.809469][ T10] usb 4-1: Product: syz [ 315.823714][ T10] usb 4-1: Manufacturer: syz [ 315.834064][ T10] usb 4-1: SerialNumber: syz [ 315.839010][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 315.973551][ T10] usb 4-1: config 0 descriptor?? [ 315.999340][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 316.078325][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 316.311871][ T5835] usb 4-1: USB disconnect, device number 37 [ 316.515230][ T39] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 316.643973][ T9642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.747956][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 316.771489][ T39] usb 2-1: config 0 has no interfaces? [ 316.779367][ T39] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 316.788701][ T39] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 316.798935][ T39] usb 2-1: Manufacturer: syz [ 316.805237][ T39] usb 2-1: config 0 descriptor?? [ 316.876765][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 316.970970][ T39] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 317.007395][ T9649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.130120][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.137086][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.233184][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 317.273946][ T39] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 317.290733][ T39] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 317.301318][ T39] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 317.313734][ T39] usb 4-1: Product: syz [ 317.375606][ T39] usb 4-1: Manufacturer: syz [ 317.403428][ T39] usb 4-1: SerialNumber: syz [ 317.441012][ T39] usb 4-1: config 0 descriptor?? [ 317.461274][ T9615] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.916714][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 318.643001][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 318.643014][ T30] audit: type=1326 audit(1769897190.736:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 318.694545][ T30] audit: type=1326 audit(1769897190.736:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 318.727535][ T30] audit: type=1326 audit(1769897190.736:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 318.856218][ T30] audit: type=1326 audit(1769897190.736:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 318.945293][ T30] audit: type=1326 audit(1769897190.746:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 318.976738][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 319.010792][ T30] audit: type=1326 audit(1769897190.746:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 319.072655][ T30] audit: type=1326 audit(1769897190.746:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 319.147161][ T30] audit: type=1326 audit(1769897190.746:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 319.172490][ T30] audit: type=1326 audit(1769897190.746:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 319.210267][ T30] audit: type=1326 audit(1769897190.746:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 319.237277][ T39] usb 4-1: USB disconnect, device number 38 [ 319.440946][ T9] usb 2-1: USB disconnect, device number 30 [ 319.895003][ T9683] Cannot find add_set index 0 as target [ 319.919122][ T9683] netdevsim netdevsim2: Direct firmware load for / [ 319.919122][ T9683] failed with error -2 [ 319.989471][ T9683] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 319.989471][ T9683] [ 320.000937][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 321.020457][ T9705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.036678][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 321.106943][ T9700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.921079][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 322.076639][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 322.090568][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.115359][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.219506][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 322.269664][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 322.322876][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 322.549910][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 322.581063][ T9] usb 1-1: SerialNumber: syz [ 322.837817][ T39] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 322.871252][ T9] usb 1-1: 0:2 : does not exist [ 323.032421][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 323.044928][ T39] usb 4-1: config 0 has no interfaces? [ 323.052329][ T39] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 323.061495][ T39] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 323.077996][ T39] usb 4-1: Manufacturer: syz [ 323.086733][ T9] usb 1-1: USB disconnect, device number 29 [ 323.099855][ T39] usb 4-1: config 0 descriptor?? [ 323.116666][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 323.176405][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.280861][ T9729] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 323.630530][ T9736] Cannot find add_set index 0 as target [ 323.673067][ T9736] netdevsim netdevsim4: Direct firmware load for / [ 323.673067][ T9736] failed with error -2 [ 323.683989][ T9736] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 323.683989][ T9736] [ 323.706423][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 323.706442][ T30] audit: type=1326 audit(1769897195.816:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 323.870338][ T30] audit: type=1326 audit(1769897195.856:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 324.042754][ T30] audit: type=1326 audit(1769897195.856:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 324.156777][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 324.187989][ T9752] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1170'. [ 324.314952][ T30] audit: type=1326 audit(1769897195.876:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 324.339715][ T30] audit: type=1326 audit(1769897195.876:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 324.362681][ T30] audit: type=1326 audit(1769897195.876:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92ea93c2d9 code=0x7ffc0000 [ 324.385293][ T30] audit: type=1326 audit(1769897195.876:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 324.408056][ T30] audit: type=1326 audit(1769897195.876:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 324.432497][ T30] audit: type=1326 audit(1769897195.876:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 324.458620][ T30] audit: type=1326 audit(1769897195.876:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ea99aeb9 code=0x7ffc0000 [ 324.889980][ T9758] netlink: 'syz.2.1173': attribute type 13 has an invalid length. [ 325.196749][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 325.667452][ T10] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 325.712434][ T9] usb 4-1: USB disconnect, device number 39 [ 325.839576][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.870966][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 325.902053][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 325.926215][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.018330][ T10] usb 5-1: config 0 descriptor?? [ 326.062808][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 326.087835][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 326.101887][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 326.152723][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'. [ 326.195048][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 326.213262][ T10] usb 5-1: media controller created [ 326.230124][ T9768] dvb-usb: bulk message failed: -22 (2/0) [ 326.236869][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 326.271096][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.302171][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 326.314023][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 326.357954][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 326.492173][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 326.522322][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 326.543791][ T10] usb 5-1: USB disconnect, device number 32 [ 326.621458][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 327.276649][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 327.432012][ T9798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1185'. [ 327.444839][ T9796] kvm: pic: non byte write [ 327.903899][ T9807] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1186'. [ 328.326630][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 328.367880][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 328.403180][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 329.346038][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 329.366725][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 329.395282][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 329.395297][ T30] audit: type=1326 audit(1769897201.506:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 329.430032][ T30] audit: type=1326 audit(1769897201.536:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 329.464018][ T30] audit: type=1326 audit(1769897201.536:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 329.486826][ T30] audit: type=1326 audit(1769897201.536:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 329.536662][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 329.558078][ T30] audit: type=1326 audit(1769897201.536:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 329.587794][ T10] usb 2-1: config 0 has no interfaces? [ 329.598712][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 329.610223][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 329.642035][ T10] usb 2-1: Manufacturer: syz [ 329.661870][ T10] usb 2-1: config 0 descriptor?? [ 329.675884][ T30] audit: type=1326 audit(1769897201.536:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 329.736141][ T30] audit: type=1326 audit(1769897201.536:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 329.883759][ T30] audit: type=1326 audit(1769897201.536:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 330.068224][ T30] audit: type=1326 audit(1769897201.536:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 330.396791][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 330.478120][ T30] audit: type=1326 audit(1769897201.536:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3ad9aeb9 code=0x7ffc0000 [ 331.069988][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'. [ 331.436910][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 331.549588][ T9862] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 331.809727][ T797] usb 2-1: USB disconnect, device number 31 [ 331.926722][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 332.108747][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 332.118045][ T10] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 332.126225][ T10] usb 1-1: config 0 has no interface number 0 [ 332.132852][ T10] usb 1-1: config 0 interface 23 has no altsetting 0 [ 332.140721][ T10] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 332.156056][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.198717][ T10] usb 1-1: config 0 descriptor?? [ 332.441004][ T10] usb 1-1: string descriptor 0 read error: -71 [ 332.460551][ T10] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 332.488971][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 332.507814][ T10] gspca_mr97310a: reg write [21] error -22 [ 332.531831][ T10] mr97310a 1-1:0.23: probe with driver mr97310a failed with error -22 [ 332.579424][ T10] usb 1-1: USB disconnect, device number 30 [ 332.962625][ T9881] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 332.974717][ T9881] bond1 (unregistering): Released all slaves [ 333.313459][ T797] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 333.324220][ T9900] team0 (unregistering): Port device team_slave_0 removed [ 333.361721][ T9900] team0 (unregistering): Port device team_slave_1 removed [ 333.478057][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 333.516968][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 333.533044][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 333.996717][ T797] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 334.010772][ T797] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 334.027798][ T797] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 334.048822][ T797] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 334.061121][ T797] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 334.075419][ T797] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 334.093132][ T797] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 334.145019][ T797] usb 5-1: Product: syz [ 334.154275][ T797] usb 5-1: Manufacturer: syz [ 334.185398][ T797] cdc_wdm 5-1:1.0: skipping garbage [ 334.197469][ T797] cdc_wdm 5-1:1.0: skipping garbage [ 334.219383][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 334.221533][ T797] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 334.260025][ T797] cdc_wdm 5-1:1.0: Unknown control protocol [ 334.558062][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 334.946256][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 334.969062][ T9] usb 2-1: config 0 has no interfaces? [ 334.984139][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 335.013200][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 335.046759][ T9] usb 2-1: Manufacturer: syz [ 335.073038][ T9] usb 2-1: config 0 descriptor?? [ 335.286282][ T797] usb 5-1: USB disconnect, device number 33 [ 335.596759][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 336.469808][ T797] usb 2-1: USB disconnect, device number 32 [ 336.636651][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 337.076672][ T981] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 337.254447][ T981] usb 2-1: Using ep0 maxpacket: 8 [ 337.265061][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.309583][ T981] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 337.318742][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.351219][ T981] usb 2-1: config 0 descriptor?? [ 337.567981][ T981] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 337.676940][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 337.745111][ T9950] tipc: Started in network mode [ 337.752190][ T9950] tipc: Node identity , cluster identity 4711 [ 337.767078][ T9950] tipc: Failed to obtain node identity [ 337.782986][ T9950] tipc: Enabling of bearer rejected, failed to enable media [ 338.025756][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'. [ 338.441543][ T9973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.726711][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 338.826961][ T39] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 338.939117][ T24] usb 2-1: USB disconnect, device number 33 [ 339.038179][ T797] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 339.047085][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 339.054772][ T39] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 339.076968][ T39] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.091166][ T39] usb 1-1: config 0 interface 0 has no altsetting 0 [ 339.098300][ T39] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 339.107579][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.140388][ T39] usb 1-1: config 0 descriptor?? [ 339.201395][ T797] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 339.210997][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.221132][ T797] usb 4-1: Product: syz [ 339.225346][ T797] usb 4-1: Manufacturer: syz [ 339.271184][ T797] usb 4-1: SerialNumber: syz [ 339.570474][ T39] input: HID 28bd:0933 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.001C/input/input30 [ 339.673740][ T39] uclogic 0003:28BD:0933.001C: input,hidraw0: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 339.709094][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 339.728008][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 339.756652][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 340.049688][ T9] usb 1-1: USB disconnect, device number 31 [ 340.797032][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 341.096832][ T39] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 341.281888][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.304887][ T39] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 341.327264][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.356089][ T39] usb 1-1: config 0 descriptor?? [ 341.363487][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 341.379176][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 341.404072][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 341.416987][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 341.431581][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 341.452845][ T797] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 341.482637][ T797] usb 4-1: USB disconnect, device number 40 [ 341.618261][ T39] usbhid 1-1:0.0: can't add hid device: -71 [ 341.627598][ T39] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 341.661931][ T39] usb 1-1: USB disconnect, device number 32 [ 341.759854][T10016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.828413][T10016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.838461][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 342.178984][ T39] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 342.336960][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 342.352117][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.377973][ T39] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 342.398902][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.424187][ T39] usb 1-1: config 0 descriptor?? [ 342.440752][ T39] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 342.542754][ T39] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 342.841942][ C1] ldusb 1-1:0.0: Ring buffer overflow, 8 bytes dropped [ 342.876666][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 343.171476][ C0] ldusb 1-1:0.0: Ring buffer overflow, 8 bytes dropped [ 343.916634][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 344.276659][ T10] usb 1-1: USB disconnect, device number 33 [ 344.293588][ T10] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 344.956622][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 345.654072][T10059] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1262'. [ 345.996657][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 346.854049][T10073] syz_tun: entered allmulticast mode [ 346.955323][T10074] binder: 10072:10074 ioctl c0306201 200000000dc0 returned -14 [ 347.012753][T10071] syz_tun: left allmulticast mode [ 347.036655][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 347.101038][T10083] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1269'. [ 347.230580][T10088] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1269'. [ 347.275080][T10083] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.282601][T10083] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.346650][T10088] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.353992][T10088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.362774][T10088] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.369898][T10088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.470448][T10088] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1269'. [ 347.494618][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.502662][T10088] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.513206][T10099] [ 347.515546][T10099] ===================================================== [ 347.522462][T10099] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 347.529919][T10099] syzkaller #0 Tainted: G L [ 347.535880][T10099] ----------------------------------------------------- [ 347.542792][T10099] syz.4.1273/10099 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 347.550493][T10099] ffffffff8e20c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 347.559174][T10099] [ 347.559174][T10099] and this task is already holding: [ 347.566518][T10099] ffff88801ebf3d20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 347.575210][T10099] which would create a new lock dependency: [ 347.581079][T10099] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 347.588629][T10099] [ 347.588629][T10099] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 347.598056][T10099] (&dev->event_lock#2){..-.}-{3:3} [ 347.598081][T10099] [ 347.598081][T10099] ... which became SOFTIRQ-irq-safe at: [ 347.610939][T10099] lock_acquire+0x106/0x330 [ 347.615521][T10099] _raw_spin_lock_irqsave+0x40/0x60 [ 347.620795][T10099] input_event+0x76/0xe0 [ 347.625127][T10099] xpad360_process_packet+0x1fe/0xdd0 [ 347.630588][T10099] xpad_irq_in+0x1583/0x25e0 [ 347.635260][T10099] __usb_hcd_giveback_urb+0x376/0x540 [ 347.640708][T10099] dummy_timer+0xbbd/0x45d0 [ 347.645287][T10099] __hrtimer_run_queues+0x527/0xc30 [ 347.650559][T10099] hrtimer_run_softirq+0x182/0x5a0 [ 347.655757][T10099] handle_softirqs+0x22a/0x7c0 [ 347.660590][T10099] __irq_exit_rcu+0x5f/0x150 [ 347.665252][T10099] irq_exit_rcu+0x9/0x30 [ 347.669573][T10099] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 347.675304][T10099] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 347.681363][T10099] memset_orig+0x3a/0xb0 [ 347.685679][T10099] __kmalloc_cache_noprof+0x393/0x6e0 [ 347.691123][T10099] uevent_show+0x15a/0x310 [ 347.695612][T10099] dev_attr_show+0x58/0xc0 [ 347.700095][T10099] sysfs_kf_seq_show+0x310/0x490 [ 347.705099][T10099] seq_read_iter+0x4ef/0xe10 [ 347.709767][T10099] vfs_read+0x582/0xa70 [ 347.714000][T10099] ksys_read+0x150/0x270 [ 347.718313][T10099] do_syscall_64+0xe2/0xf80 [ 347.722884][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.728842][T10099] [ 347.728842][T10099] to a SOFTIRQ-irq-unsafe lock: [ 347.735840][T10099] (tasklist_lock){.+.+}-{3:3} [ 347.735858][T10099] [ 347.735858][T10099] ... which became SOFTIRQ-irq-unsafe at: [ 347.748449][T10099] ... [ 347.748455][T10099] lock_acquire+0x106/0x330 [ 347.755590][T10099] _raw_read_lock+0x36/0x50 [ 347.760178][T10099] __do_wait+0xde/0x740 [ 347.764412][T10099] do_wait+0x1e7/0x4f0 [ 347.768552][T10099] kernel_wait+0xd6/0x1c0 [ 347.772952][T10099] call_usermodehelper_exec_work+0xbe/0x230 [ 347.778916][T10099] process_scheduled_works+0xaec/0x17a0 [ 347.784535][T10099] worker_thread+0xda6/0x1360 [ 347.789278][T10099] kthread+0x726/0x8b0 [ 347.793413][T10099] ret_from_fork+0x51b/0xa40 [ 347.798090][T10099] ret_from_fork_asm+0x1a/0x30 [ 347.802922][T10099] [ 347.802922][T10099] other info that might help us debug this: [ 347.802922][T10099] [ 347.813126][T10099] Chain exists of: [ 347.813126][T10099] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 347.813126][T10099] [ 347.826141][T10099] Possible interrupt unsafe locking scenario: [ 347.826141][T10099] [ 347.834438][T10099] CPU0 CPU1 [ 347.839786][T10099] ---- ---- [ 347.845133][T10099] lock(tasklist_lock); [ 347.849356][T10099] local_irq_disable(); [ 347.856086][T10099] lock(&dev->event_lock#2); [ 347.863320][T10099] lock(&f_owner->lock); [ 347.870158][T10099] [ 347.873589][T10099] lock(&dev->event_lock#2); [ 347.878422][T10099] [ 347.878422][T10099] *** DEADLOCK *** [ 347.878422][T10099] [ 347.886540][T10099] 2 locks held by syz.4.1273/10099: [ 347.891715][T10099] #0: ffff88807bf086e0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 347.900246][T10099] #1: ffff88801ebf3d20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 347.909356][T10099] [ 347.909356][T10099] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 347.919735][T10099] -> (&dev->event_lock#2){..-.}-{3:3} { [ 347.925535][T10099] IN-SOFTIRQ-W at: [ 347.929751][T10099] lock_acquire+0x106/0x330 [ 347.936418][T10099] _raw_spin_lock_irqsave+0x40/0x60 [ 347.943786][T10099] input_event+0x76/0xe0 [ 347.950187][T10099] xpad360_process_packet+0x1fe/0xdd0 [ 347.957715][T10099] xpad_irq_in+0x1583/0x25e0 [ 347.964455][T10099] __usb_hcd_giveback_urb+0x376/0x540 [ 347.971981][T10099] dummy_timer+0xbbd/0x45d0 [ 347.978644][T10099] __hrtimer_run_queues+0x527/0xc30 [ 347.985994][T10099] hrtimer_run_softirq+0x182/0x5a0 [ 347.993253][T10099] handle_softirqs+0x22a/0x7c0 [ 348.000166][T10099] __irq_exit_rcu+0x5f/0x150 [ 348.006906][T10099] irq_exit_rcu+0x9/0x30 [ 348.013295][T10099] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 348.021079][T10099] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.029208][T10099] memset_orig+0x3a/0xb0 [ 348.035603][T10099] __kmalloc_cache_noprof+0x393/0x6e0 [ 348.043124][T10099] uevent_show+0x15a/0x310 [ 348.049694][T10099] dev_attr_show+0x58/0xc0 [ 348.056258][T10099] sysfs_kf_seq_show+0x310/0x490 [ 348.063347][T10099] seq_read_iter+0x4ef/0xe10 [ 348.070089][T10099] vfs_read+0x582/0xa70 [ 348.076401][T10099] ksys_read+0x150/0x270 [ 348.082807][T10099] do_syscall_64+0xe2/0xf80 [ 348.089470][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.097546][T10099] INITIAL USE at: [ 348.101685][T10099] lock_acquire+0x106/0x330 [ 348.108255][T10099] _raw_spin_lock_irqsave+0x40/0x60 [ 348.115519][T10099] input_inject_event+0xa5/0x340 [ 348.122519][T10099] kbd_led_trigger_activate+0xbc/0x100 [ 348.130047][T10099] led_trigger_set+0x535/0x960 [ 348.136876][T10099] led_trigger_set_default+0x260/0x2a0 [ 348.144398][T10099] led_classdev_register_ext+0x787/0x9c0 [ 348.152096][T10099] input_leds_connect+0x517/0x790 [ 348.159186][T10099] input_register_device+0xd00/0x1160 [ 348.166627][T10099] atkbd_connect+0x731/0xa50 [ 348.173277][T10099] serio_driver_probe+0x82/0xd0 [ 348.180195][T10099] really_probe+0x267/0xaf0 [ 348.186766][T10099] __driver_probe_device+0x18c/0x320 [ 348.194112][T10099] driver_probe_device+0x4f/0x240 [ 348.201196][T10099] __driver_attach+0x349/0x640 [ 348.208017][T10099] bus_for_each_dev+0x23b/0x2c0 [ 348.214947][T10099] serio_handle_event+0x232/0x10d0 [ 348.222139][T10099] process_scheduled_works+0xaec/0x17a0 [ 348.229785][T10099] worker_thread+0xda6/0x1360 [ 348.236532][T10099] kthread+0x726/0x8b0 [ 348.242665][T10099] ret_from_fork+0x51b/0xa40 [ 348.249323][T10099] ret_from_fork_asm+0x1a/0x30 [ 348.256155][T10099] } [ 348.258890][T10099] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 348.268156][T10099] -> (&client->buffer_lock){....}-{3:3} { [ 348.274038][T10099] INITIAL USE at: [ 348.278091][T10099] lock_acquire+0x106/0x330 [ 348.284506][T10099] _raw_spin_lock+0x2e/0x40 [ 348.290907][T10099] evdev_pass_values+0xb9/0xbd0 [ 348.297681][T10099] evdev_events+0x1e6/0x340 [ 348.304087][T10099] input_pass_values+0x288/0x890 [ 348.310922][T10099] input_event_dispose+0x330/0x6b0 [ 348.317921][T10099] input_inject_event+0x1dd/0x340 [ 348.324833][T10099] evdev_write+0x325/0x4c0 [ 348.331143][T10099] vfs_write+0x29a/0xb90 [ 348.337278][T10099] ksys_write+0x150/0x270 [ 348.343496][T10099] do_syscall_64+0xe2/0xf80 [ 348.349886][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.357666][T10099] } [ 348.360347][T10099] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 348.368654][T10099] ... acquired at: [ 348.372632][T10099] _raw_spin_lock+0x2e/0x40 [ 348.377291][T10099] evdev_pass_values+0xb9/0xbd0 [ 348.382300][T10099] evdev_events+0x1e6/0x340 [ 348.386960][T10099] input_pass_values+0x288/0x890 [ 348.392051][T10099] input_event_dispose+0x330/0x6b0 [ 348.397320][T10099] input_inject_event+0x1dd/0x340 [ 348.402496][T10099] evdev_write+0x325/0x4c0 [ 348.407065][T10099] vfs_write+0x29a/0xb90 [ 348.411468][T10099] ksys_write+0x150/0x270 [ 348.415950][T10099] do_syscall_64+0xe2/0xf80 [ 348.420602][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.426649][T10099] [ 348.428948][T10099] -> (&new->fa_lock){....}-{3:3} { [ 348.434133][T10099] INITIAL USE at: [ 348.438101][T10099] lock_acquire+0x106/0x330 [ 348.444323][T10099] _raw_write_lock_irq+0x3d/0x50 [ 348.450977][T10099] fasync_remove_entry+0xf1/0x1c0 [ 348.457740][T10099] __fput+0x8a5/0xa70 [ 348.463439][T10099] task_work_run+0x1d9/0x270 [ 348.469744][T10099] exit_to_user_mode_loop+0xed/0x480 [ 348.476748][T10099] do_syscall_64+0x2b7/0xf80 [ 348.483078][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.490712][T10099] INITIAL READ USE at: [ 348.495109][T10099] lock_acquire+0x106/0x330 [ 348.501768][T10099] _raw_read_lock_irqsave+0x48/0x60 [ 348.509115][T10099] kill_fasync+0x199/0x4d0 [ 348.515684][T10099] evdev_pass_values+0x627/0xbd0 [ 348.522772][T10099] evdev_events+0x1e6/0x340 [ 348.529431][T10099] input_pass_values+0x288/0x890 [ 348.536519][T10099] input_event_dispose+0x330/0x6b0 [ 348.543780][T10099] input_inject_event+0x1dd/0x340 [ 348.550955][T10099] evdev_write+0x325/0x4c0 [ 348.557524][T10099] vfs_write+0x29a/0xb90 [ 348.563918][T10099] ksys_write+0x150/0x270 [ 348.570401][T10099] do_syscall_64+0xe2/0xf80 [ 348.577054][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.585129][T10099] } [ 348.587698][T10099] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 348.596442][T10099] ... acquired at: [ 348.600308][T10099] _raw_read_lock_irqsave+0x48/0x60 [ 348.605661][T10099] kill_fasync+0x199/0x4d0 [ 348.610230][T10099] evdev_pass_values+0x627/0xbd0 [ 348.615323][T10099] evdev_events+0x1e6/0x340 [ 348.619980][T10099] input_pass_values+0x288/0x890 [ 348.625072][T10099] input_event_dispose+0x330/0x6b0 [ 348.630337][T10099] input_inject_event+0x1dd/0x340 [ 348.635512][T10099] evdev_write+0x325/0x4c0 [ 348.640083][T10099] vfs_write+0x29a/0xb90 [ 348.644480][T10099] ksys_write+0x150/0x270 [ 348.648963][T10099] do_syscall_64+0xe2/0xf80 [ 348.653616][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.659660][T10099] [ 348.661961][T10099] -> (&f_owner->lock){....}-{3:3} { [ 348.667149][T10099] INITIAL USE at: [ 348.671024][T10099] lock_acquire+0x106/0x330 [ 348.677080][T10099] _raw_write_lock_irq+0x3d/0x50 [ 348.683557][T10099] __f_setown+0x67/0x370 [ 348.689340][T10099] generic_setlease+0xba2/0xed0 [ 348.695732][T10099] do_fcntl_add_lease+0x35e/0x470 [ 348.702297][T10099] fcntl_setlease+0x123/0x180 [ 348.708515][T10099] do_fcntl+0x8b3/0x1a20 [ 348.714304][T10099] __se_sys_fcntl+0xc8/0x150 [ 348.720451][T10099] do_syscall_64+0xe2/0xf80 [ 348.726495][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.733927][T10099] INITIAL READ USE at: [ 348.738234][T10099] lock_acquire+0x106/0x330 [ 348.744718][T10099] _raw_read_lock_irqsave+0x48/0x60 [ 348.751888][T10099] send_sigio+0x38/0x370 [ 348.758108][T10099] kill_fasync+0x24d/0x4d0 [ 348.764501][T10099] lease_break_callback+0x26/0x30 [ 348.771499][T10099] __break_lease+0x741/0x1b80 [ 348.778158][T10099] do_dentry_open+0x73a/0x1420 [ 348.784895][T10099] vfs_open+0x3b/0x340 [ 348.790943][T10099] path_openat+0x3486/0x3e20 [ 348.797548][T10099] do_filp_open+0x22d/0x490 [ 348.804034][T10099] do_sys_openat2+0x12f/0x220 [ 348.810690][T10099] __x64_sys_creat+0x8f/0xc0 [ 348.817256][T10099] do_syscall_64+0xe2/0xf80 [ 348.823734][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.831603][T10099] } [ 348.834079][T10099] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 348.842904][T10099] ... acquired at: [ 348.846683][T10099] _raw_read_lock_irqsave+0x48/0x60 [ 348.852033][T10099] send_sigio+0x38/0x370 [ 348.856431][T10099] kill_fasync+0x24d/0x4d0 [ 348.860997][T10099] lease_break_callback+0x26/0x30 [ 348.866170][T10099] __break_lease+0x741/0x1b80 [ 348.871036][T10099] do_dentry_open+0x73a/0x1420 [ 348.875956][T10099] vfs_open+0x3b/0x340 [ 348.880203][T10099] path_openat+0x3486/0x3e20 [ 348.884943][T10099] do_filp_open+0x22d/0x490 [ 348.890032][T10099] do_sys_openat2+0x12f/0x220 [ 348.894868][T10099] __x64_sys_creat+0x8f/0xc0 [ 348.899613][T10099] do_syscall_64+0xe2/0xf80 [ 348.904267][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.910309][T10099] [ 348.912615][T10099] [ 348.912615][T10099] the dependencies between the lock to be acquired [ 348.912621][T10099] and SOFTIRQ-irq-unsafe lock: [ 348.926260][T10099] -> (tasklist_lock){.+.+}-{3:3} { [ 348.931359][T10099] HARDIRQ-ON-R at: [ 348.935320][T10099] lock_acquire+0x106/0x330 [ 348.941517][T10099] _raw_read_lock+0x36/0x50 [ 348.947646][T10099] __do_wait+0xde/0x740 [ 348.953431][T10099] do_wait+0x1e7/0x4f0 [ 348.959129][T10099] kernel_wait+0xd6/0x1c0 [ 348.965090][T10099] call_usermodehelper_exec_work+0xbe/0x230 [ 348.972616][T10099] process_scheduled_works+0xaec/0x17a0 [ 348.979795][T10099] worker_thread+0xda6/0x1360 [ 348.986104][T10099] kthread+0x726/0x8b0 [ 348.991799][T10099] ret_from_fork+0x51b/0xa40 [ 348.998024][T10099] ret_from_fork_asm+0x1a/0x30 [ 349.004428][T10099] SOFTIRQ-ON-R at: [ 349.008387][T10099] lock_acquire+0x106/0x330 [ 349.014518][T10099] _raw_read_lock+0x36/0x50 [ 349.020647][T10099] __do_wait+0xde/0x740 [ 349.026435][T10099] do_wait+0x1e7/0x4f0 [ 349.032133][T10099] kernel_wait+0xd6/0x1c0 [ 349.038092][T10099] call_usermodehelper_exec_work+0xbe/0x230 [ 349.045623][T10099] process_scheduled_works+0xaec/0x17a0 [ 349.052802][T10099] worker_thread+0xda6/0x1360 [ 349.059110][T10099] kthread+0x726/0x8b0 [ 349.064807][T10099] ret_from_fork+0x51b/0xa40 [ 349.071033][T10099] ret_from_fork_asm+0x1a/0x30 [ 349.077428][T10099] INITIAL USE at: [ 349.081298][T10099] lock_acquire+0x106/0x330 [ 349.087348][T10099] _raw_write_lock_irq+0x3d/0x50 [ 349.093829][T10099] copy_process+0x2199/0x3980 [ 349.100047][T10099] kernel_clone+0x248/0x870 [ 349.106095][T10099] user_mode_thread+0x110/0x180 [ 349.112484][T10099] rest_init+0x23/0x300 [ 349.118185][T10099] start_kernel+0x380/0x3d0 [ 349.124228][T10099] x86_64_start_reservations+0x24/0x30 [ 349.131225][T10099] x86_64_start_kernel+0x143/0x1c0 [ 349.137874][T10099] common_startup_64+0x13e/0x147 [ 349.144357][T10099] INITIAL READ USE at: [ 349.148661][T10099] lock_acquire+0x106/0x330 [ 349.155146][T10099] _raw_read_lock+0x36/0x50 [ 349.161623][T10099] __do_wait+0xde/0x740 [ 349.167784][T10099] do_wait+0x1e7/0x4f0 [ 349.173831][T10099] kernel_wait+0xd6/0x1c0 [ 349.180146][T10099] call_usermodehelper_exec_work+0xbe/0x230 [ 349.188026][T10099] process_scheduled_works+0xaec/0x17a0 [ 349.195548][T10099] worker_thread+0xda6/0x1360 [ 349.202204][T10099] kthread+0x726/0x8b0 [ 349.208260][T10099] ret_from_fork+0x51b/0xa40 [ 349.214919][T10099] ret_from_fork_asm+0x1a/0x30 [ 349.221662][T10099] } [ 349.224137][T10099] ... key at: [] tasklist_lock+0x18/0x40 [ 349.231836][T10099] ... acquired at: [ 349.235616][T10099] _raw_read_lock+0x36/0x50 [ 349.240271][T10099] send_sigurg+0x12b/0x420 [ 349.244841][T10099] sk_send_sigurg+0x6c/0x2e0 [ 349.249582][T10099] queue_oob+0x42c/0x4f0 [ 349.253977][T10099] unix_stream_sendmsg+0xcb1/0xe80 [ 349.259240][T10099] ____sys_sendmsg+0xa68/0xad0 [ 349.264155][T10099] ___sys_sendmsg+0x2a5/0x360 [ 349.268984][T10099] __x64_sys_sendmsg+0x1bd/0x2a0 [ 349.274078][T10099] do_syscall_64+0xe2/0xf80 [ 349.278734][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.284777][T10099] [ 349.287078][T10099] [ 349.287078][T10099] stack backtrace: [ 349.292983][T10099] CPU: 0 UID: 0 PID: 10099 Comm: syz.4.1273 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.292999][T10099] Tainted: [L]=SOFTLOCKUP [ 349.293003][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 349.293015][T10099] Call Trace: [ 349.293021][T10099] [ 349.293027][T10099] dump_stack_lvl+0xe8/0x150 [ 349.293042][T10099] __lock_acquire+0x2a94/0x2cf0 [ 349.293062][T10099] ? send_sigurg+0x12b/0x420 [ 349.293075][T10099] lock_acquire+0x106/0x330 [ 349.293088][T10099] ? send_sigurg+0x12b/0x420 [ 349.293103][T10099] _raw_read_lock+0x36/0x50 [ 349.293113][T10099] ? send_sigurg+0x12b/0x420 [ 349.293125][T10099] send_sigurg+0x12b/0x420 [ 349.293138][T10099] sk_send_sigurg+0x6c/0x2e0 [ 349.293149][T10099] queue_oob+0x42c/0x4f0 [ 349.293160][T10099] ? __pfx_queue_oob+0x10/0x10 [ 349.293171][T10099] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 349.293184][T10099] unix_stream_sendmsg+0xcb1/0xe80 [ 349.293196][T10099] ? __pfx___schedule+0x10/0x10 [ 349.293205][T10099] ? __lock_acquire+0x6b5/0x2cf0 [ 349.293219][T10099] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 349.293229][T10099] ? aa_sock_msg_perm+0xda/0x1b0 [ 349.293242][T10099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.293253][T10099] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 349.293262][T10099] ____sys_sendmsg+0xa68/0xad0 [ 349.293277][T10099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.293291][T10099] ? import_iovec+0x73/0xa0 [ 349.293307][T10099] ___sys_sendmsg+0x2a5/0x360 [ 349.293320][T10099] ? __lock_acquire+0x6b5/0x2cf0 [ 349.293334][T10099] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.293349][T10099] ? futex_wait+0x29a/0x380 [ 349.293364][T10099] ? __fget_files+0x2a/0x420 [ 349.293375][T10099] ? __fget_files+0x3a0/0x420 [ 349.293387][T10099] __x64_sys_sendmsg+0x1bd/0x2a0 [ 349.293401][T10099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.293416][T10099] ? rcu_is_watching+0x15/0xb0 [ 349.293428][T10099] do_syscall_64+0xe2/0xf80 [ 349.293439][T10099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.293449][T10099] ? trace_irq_disable+0x37/0x100 [ 349.293459][T10099] ? clear_bhb_loop+0x60/0xb0 [ 349.293470][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.293480][T10099] RIP: 0033:0x7f55b5d9aeb9 [ 349.293494][T10099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.293503][T10099] RSP: 002b:00007f55b6b9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.293515][T10099] RAX: ffffffffffffffda RBX: 00007f55b6016090 RCX: 00007f55b5d9aeb9 [ 349.293523][T10099] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 0000000000000004 [ 349.293530][T10099] RBP: 00007f55b5e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 349.293536][T10099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.293542][T10099] R13: 00007f55b6016128 R14: 00007f55b6016090 R15: 00007f55b613fa48 [ 349.293553][T10099] [ 349.577541][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 350.636676][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 351.676758][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 352.716659][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 353.756671][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 354.796685][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 355.836664][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 356.876647][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available