last executing test programs: 11.716735477s ago: executing program 0 (id=1525): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(&(0x7f0000000240)='/dev/video#\x00', 0x40, 0x80, &(0x7f0000000300)={0xfffffffffffffffb, 0x4, 0x3ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000040)="732fbfdb019d7da37edad2e06a44164ecdaa2c0071e55d0f2412f7561e683df8bf8bec", 0x23) 11.447337453s ago: executing program 4 (id=1528): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000011c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3, 0x8}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x5a, 0x0, @fd_index=0x8, 0x3, {}, 0x2, 0x0, 0x1, {0x0, 0x0, r1}}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) semget(0x1, 0x4, 0x39c) 10.074545334s ago: executing program 0 (id=1529): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac14"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304", @ANYBLOB="e5fda9880000000018"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f000513c", 0xc, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.846060758s ago: executing program 4 (id=1532): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043) 9.758259404s ago: executing program 0 (id=1533): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$sg(0x0, 0x100000001, 0x400) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/286]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x48, 0x0, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x3e, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 8.178116532s ago: executing program 4 (id=1540): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2029) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000340)={0x84, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x8, {0x1, 0x0, 0x57, 0x2}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x6, 0x9, [0x9]}}, @ra={0x5, 0x2, 0x8}]}, 0x30) dup3(r4, r2, 0x0) 6.922392186s ago: executing program 2 (id=1542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.816430817s ago: executing program 1 (id=1543): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac14"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304", @ANYBLOB="e5fda9880000000018"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f000513c", 0xc, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.648907118s ago: executing program 3 (id=1544): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x57) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000098000000", @ANYBLOB="0000000000000000b702000014000000b7030400000000008500000083000000bf09000000000000550901000000000095000000000000008520000002000000d72b1000000000009500", @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x5, 0xb}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000380)=[{0x0, 0x2, 0x10, 0x1}, {0x4, 0x5, 0x4, 0x4}, {0xc21, 0x5, 0x4, 0x3}], 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.590454428s ago: executing program 4 (id=1545): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x4, 0x4, 0x4, 0x4000b, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 6.532874857s ago: executing program 0 (id=1546): socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt(r2, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0)) r3 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x822b01) syz_clone(0xa908080, 0x0, 0x0, 0x0, 0x0, 0x0) 6.175246797s ago: executing program 1 (id=1547): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000b00000000000000008008001e0001"], 0x2c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x2000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffff7f, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0x80d05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0xa79, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0xa3, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x3fc8a9e1, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x791bfd1ea2b89f05, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.037349438s ago: executing program 2 (id=1548): socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) r0 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x54, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6.027193079s ago: executing program 1 (id=1549): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000733}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) unshare(0x22020600) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1460}, 0x0, 0x40c4, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) 5.758702306s ago: executing program 2 (id=1550): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0xff61}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_mark(0xffffffffffffffff, 0x71, 0x40000009, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xffe00}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={r4, 0x8, 0x360}, 0x8) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x80000000, 0x181100) 5.354770325s ago: executing program 3 (id=1551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000003340)=0x9, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000300), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x80000001, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000240)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, '}', 0x3a, '', 0x3a, './file1'}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 5.185458568s ago: executing program 0 (id=1552): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, 0x0, 0xfc) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r4, 0x2afd, 0x308b, 0xc, 0x0, 0x0) 4.641498545s ago: executing program 2 (id=1553): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3010}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010070d042a", @ANYRES32=0x0, @ANYBLOB="01010200000000001c00128009000100626f6e6400"], 0x3c}}, 0x0) 4.394519831s ago: executing program 4 (id=1554): openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) r2 = io_uring_setup(0x664c, &(0x7f0000000500)) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) r6 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x16, 0x16, 0x0, 0x8000}}) close_range(r2, 0xffffffffffffffff, 0x0) 3.305824408s ago: executing program 1 (id=1555): bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = fsopen(&(0x7f0000000000)='pstore\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000540)='cco@\xcegro_p\x00\xb8\x00HD\x00\a\x00\x004\x96\t\x8f\xc5\f\x00\x1fa\xfc\xdd\xd4\x8d@=TtZG\xf2M\xe67\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) openat$sequencer(0xffffffffffffff9c, 0x0, 0xb02c1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0xf6, 0x0, 0x7fff0000}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$packet(0x11, 0x3, 0x300) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000000140)='./file0\x00', 0x97, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0) 3.305575919s ago: executing program 2 (id=1556): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x2, 0x300) socket(0x1000000010, 0x80002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) 3.122765819s ago: executing program 1 (id=1557): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8019) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[]) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r6, 0x0, 0x0, 0x378e) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 2.909553866s ago: executing program 0 (id=1558): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000003c80)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x4}, 0x1c, &(0x7f0000000e40)=[{&(0x7f00000002c0)='#', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x83, &(0x7f0000000080)="1a00000002000000", 0x8) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) 2.378231743s ago: executing program 3 (id=1559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000b00000000000000008008001e0001"], 0x2c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x2000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffff7f, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0x80d05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0xa79, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0xa3, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x3fc8a9e1, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x791bfd1ea2b89f05, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.775642293s ago: executing program 3 (id=1560): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f0966f2a665f0ff0f0fc73666ba2100ecc4e2e59364498e2e0f06ea009000002c00c4c1b81516", 0x27}], 0x1, 0x11, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r4, 0x0, 0x1) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.747073902s ago: executing program 4 (id=1561): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x7ffffffff002, 0x7ffffffff002, 0x0, &(0x7f0000000000/0x4000)=nil) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000000)=""/97) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb888defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63ddb2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede5f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0fdeed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d803be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4a96b47d4c8e3124f53bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589a05484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0xfffffffffffffff5, 0x101, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x800, 0xee01, 0x0, 0x2000, '\x00', 0x9, 0xffffffffffff8001, 0xb4e7, 0x3, {0x8003, 0x8}, {0x4000000000006, 0x5}, {0xfffffffffffffffb, 0x9}, {0x200000008, 0xa00}, 0x8000, 0xa, 0x0, 0x1}}}}) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) 813.663546ms ago: executing program 2 (id=1562): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000"]) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 493.020536ms ago: executing program 3 (id=1563): syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500005800000000002f907800000000000000002480655800000000100008000000efdd080088be86ddffff100000000100000000000000080022eb0000000020000800655800000000"], 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x5) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000180)) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xba, 0x2, 0x0, 0x0, 0x0, 0x4, 0xfc, 0xfd, 0x0, 0x0, 0xff}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6, 0x80}, &(0x7f0000000100)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) 182.441138ms ago: executing program 3 (id=1564): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) rseq(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @loopback, 0x4e24, 0x1, 'none\x00', 0x1, 0x32bd, 0x9}, {@loopback, 0x4e22, 0x2, 0xfffffffe, 0x4, 0x12d5c}}, 0x44) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1565): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000733}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) unshare(0x22020600) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1460}, 0x0, 0x40c4, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) kernel console output (not intermixed with test programs): T10] usb 5-1: USB disconnect, device number 9 [ 231.793341][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 231.983959][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 231.996285][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 232.007881][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 232.017196][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.025296][ T10] usb 1-1: Product: syz [ 232.030300][ T10] usb 1-1: Manufacturer: syz [ 232.035225][ T10] usb 1-1: SerialNumber: syz [ 232.081508][ T10] usb 1-1: config 0 descriptor?? [ 232.108291][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 232.299556][ T7921] vivid-000: ================= START STATUS ================= [ 232.361763][ T7921] vivid-000: Test Pattern: 75% Colorbar [ 232.385808][ T7921] vivid-000: Fill Percentage of Frame: 100 [ 232.391772][ T7921] vivid-000: Horizontal Movement: No Movement [ 232.398013][ T7921] vivid-000: Vertical Movement: No Movement [ 232.404023][ T7921] vivid-000: OSD Text Mode: All [ 232.409037][ T7921] vivid-000: Show Border: false [ 232.419345][ T7921] vivid-000: Show Square: false [ 232.433132][ T7921] vivid-000: Sensor Flipped Horizontally: false [ 232.439680][ T7921] vivid-000: Sensor Flipped Vertically: false [ 232.455880][ T7921] vivid-000: Insert SAV Code in Image: false [ 232.483319][ T7921] vivid-000: Insert EAV Code in Image: false [ 232.509419][ T7921] vivid-000: Insert Video Guard Band: false [ 232.535837][ T7921] vivid-000: Reduced Framerate: false [ 232.553274][ T7921] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 232.561074][ T7921] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 232.588542][ T7921] vivid-000: Enable Capture Cropping: true [ 232.628134][ T7921] vivid-000: Enable Capture Composing: true [ 232.634204][ T7921] vivid-000: Enable Capture Scaler: true [ 232.639972][ T7921] vivid-000: Timestamp Source: End of Frame [ 232.646289][ T7921] vivid-000: Colorspace: sRGB [ 232.651081][ T7921] vivid-000: Transfer Function: Default [ 232.657575][ T7921] vivid-000: Y'CbCr Encoding: Default [ 232.663527][ T7921] vivid-000: HSV Encoding: Hue 0-179 [ 232.668949][ T7921] vivid-000: Quantization: Default [ 232.674184][ T7921] vivid-000: Apply Alpha To Red Only: false [ 232.680218][ T7921] vivid-000: Standard Aspect Ratio: 4x3 [ 232.685880][ T7921] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 232.693870][ T7921] vivid-000: DV Timings: 640x480p59 inactive [ 232.699981][ T7921] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 232.707410][ T7921] vivid-000: Maximum EDID Blocks: 2 [ 232.712718][ T7921] vivid-000: Limited RGB Range (16-235): false [ 232.719018][ T7921] vivid-000: Rx RGB Quantization Range: Automatic [ 232.725657][ T7921] vivid-000: Power Present: 0x00000001 [ 232.731236][ T7921] tpg source WxH: 1600x1200 (R'G'B) [ 232.736592][ T7921] tpg field: 1 [ 232.740043][ T7921] tpg crop: (0,0)/1600x1200 [ 232.744660][ T7921] tpg compose: (0,0)/1600x1200 [ 232.749510][ T7921] tpg colorspace: 8 [ 232.753429][ T7921] tpg transfer function: 0/0 [ 232.758896][ T7921] tpg quantization: 0/0 [ 232.763575][ T7921] tpg RGB range: 0/2 [ 232.768795][ T7921] vivid-000: ================== END STATUS ================== [ 232.866468][ T10] gspca_zc3xx: reg_w_i err -71 [ 233.040212][ T5829] usb 4-1: USB disconnect, device number 16 [ 233.051712][ T7912] fuse: root generation should be zero [ 233.473675][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 233.480115][ T10] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 233.492422][ T10] usb 1-1: USB disconnect, device number 17 [ 234.996787][ T7610] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.203659][ T7610] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.212407][ T7610] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.373463][ T7610] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.283549][ T8010] capability: warning: `syz.2.574' uses 32-bit capabilities (legacy support in use) [ 238.658255][ T8021] sctp: [Deprecated]: syz.4.578 (pid 8021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.658255][ T8021] Use struct sctp_sack_info instead [ 238.883425][ T5897] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 238.958801][ T8024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.974178][ T8024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.025659][ T8030] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.580'. [ 239.064631][ T8024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.081676][ T8024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.093398][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 239.118130][ T5897] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 239.152006][ T5897] usb 2-1: config 0 has no interface number 0 [ 239.178578][ T5897] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 239.193271][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.208386][ T5897] usb 2-1: Product: syz [ 239.212570][ T5897] usb 2-1: Manufacturer: syz [ 239.233705][ T5897] usb 2-1: SerialNumber: syz [ 239.254194][ T5897] usb 2-1: config 0 descriptor?? [ 239.285873][ T5897] smsc95xx v2.0.0 [ 239.364106][ T5829] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 239.417560][ T8038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.584'. [ 239.523675][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 239.535663][ T5829] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 239.550247][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.564762][ T5829] usb 3-1: config 0 descriptor?? [ 239.643038][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 239.643054][ T30] audit: type=1326 audit(1760649281.137:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 239.677753][ T30] audit: type=1326 audit(1760649281.177:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 239.684630][ T5897] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 239.731275][ T30] audit: type=1326 audit(1760649281.177:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 239.746492][ T5897] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 239.754804][ T30] audit: type=1326 audit(1760649281.177:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 239.808233][ T5829] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 239.818315][ T30] audit: type=1326 audit(1760649281.177:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 239.841987][ T30] audit: type=1326 audit(1760649281.177:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 239.865191][ T30] audit: type=1326 audit(1760649281.177:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 239.891910][ T30] audit: type=1326 audit(1760649281.177:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 239.914700][ T30] audit: type=1326 audit(1760649281.177:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 239.938726][ T30] audit: type=1326 audit(1760649281.177:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 241.213434][ T116] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 241.461772][ T116] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.537944][ T116] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 241.617986][ T116] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 241.690400][ T116] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.747570][ T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.882408][ T116] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.938924][ T5897] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 242.034895][ T5897] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 242.142605][ T116] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 242.169714][ T5897] usb 2-1: USB disconnect, device number 12 [ 242.439635][ T5829] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 242.461109][ T5829] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 242.507399][ T5829] asix 3-1:0.0: probe with driver asix failed with error -71 [ 242.530261][ T5829] usb 3-1: USB disconnect, device number 15 [ 242.745914][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.594'. [ 242.772911][ T8074] vlan2: entered promiscuous mode [ 242.778724][ T8074] macvtap0: entered promiscuous mode [ 243.084755][ T5897] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 243.243291][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 243.255292][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.271052][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.283420][ T5897] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 243.292619][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.348947][ T5897] usb 1-1: config 0 descriptor?? [ 243.581984][ T5897] usbhid 1-1:0.0: can't add hid device: -71 [ 243.591274][ T5897] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 243.602957][ T5897] usb 1-1: USB disconnect, device number 18 [ 243.743343][ T5890] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 243.894722][ T5890] usb 2-1: config 0 has no interfaces? [ 243.904619][ T5890] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 243.915668][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.930334][ T5890] usb 2-1: Product: syz [ 243.939005][ T5890] usb 2-1: Manufacturer: syz [ 243.945414][ T5890] usb 2-1: SerialNumber: syz [ 243.961526][ T5890] usb 2-1: config 0 descriptor?? [ 244.267551][ T5897] usb 2-1: USB disconnect, device number 13 [ 244.662511][ T5890] usb 5-1: USB disconnect, device number 10 [ 245.533467][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 245.757843][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 245.777901][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 245.804453][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 245.833688][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 245.885338][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.923644][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 245.973299][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 246.013375][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 246.093353][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.143636][ T10] usb 2-1: config 0 descriptor?? [ 246.149948][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 246.369426][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 246.423360][ T10] usb 2-1: USB disconnect, device number 14 [ 246.460603][ T10] usblp0: removed [ 246.669092][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 246.669112][ T30] audit: type=1804 audit(1760649288.137:178): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.615" name="/newroot/121/file1" dev="fuse" ino=1 res=1 errno=0 [ 246.903281][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 247.230893][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 247.245145][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 247.253633][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 247.262887][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 247.272156][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.308405][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.343569][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 247.357172][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 247.395641][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.459274][ T10] usb 2-1: config 0 descriptor?? [ 247.758815][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 247.971182][ T10] usb 2-1: USB disconnect, device number 15 [ 248.003058][ T10] usblp0: removed [ 248.853020][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.621'. [ 249.474071][ T116] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 249.483702][ T10] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 249.702777][ T116] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.767084][ T116] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.970438][ T116] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.993741][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.016618][ T116] usb 4-1: SerialNumber: syz [ 250.257319][ T116] usb 4-1: 0:2 : does not exist [ 250.287741][ T10] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 250.303353][ T10] usb 1-1: config 7 has no interface number 0 [ 250.309482][ T10] usb 1-1: config 7 interface 252 has no altsetting 0 [ 250.407826][ T116] usb 4-1: USB disconnect, device number 17 [ 250.449161][ T10] usb 1-1: string descriptor 0 read error: -22 [ 250.473120][ T10] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 250.532991][ T8068] udevd[8068]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.553393][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.533391][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 252.203365][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 252.225082][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 252.252667][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.279048][ T10] usb 3-1: config 0 descriptor?? [ 252.285944][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 252.305073][ T10] ftdi_sio ttyUSB0: unknown device type: 0x256 [ 253.409284][ T5907] usb 1-1: USB disconnect, device number 19 [ 254.155921][ T10] usb 3-1: USB disconnect, device number 16 [ 254.166268][ T10] ftdi_sio 3-1:0.0: device disconnected [ 255.052578][ T8257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.647'. [ 255.307636][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 255.607947][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.628471][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.692358][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 255.772468][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.921362][ T10] usb 1-1: config 0 has no interfaces? [ 256.016189][ T10] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 256.032970][ T10] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 256.073729][ T116] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 256.074175][ T10] usb 1-1: Product: syz [ 256.096936][ T10] usb 1-1: Manufacturer: syz [ 256.101548][ T10] usb 1-1: SerialNumber: syz [ 256.256271][ T10] usb 1-1: config 0 descriptor?? [ 256.295137][ T116] usb 2-1: Using ep0 maxpacket: 16 [ 256.330232][ T116] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.422821][ T116] usb 2-1: config 0 interface 0 has no altsetting 0 [ 256.523463][ T116] usb 2-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 256.662039][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.699755][ T116] usb 2-1: config 0 descriptor?? [ 257.603550][ T116] usbhid 2-1:0.0: can't add hid device: -71 [ 257.671213][ T116] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 257.698339][ T116] usb 2-1: USB disconnect, device number 16 [ 258.008368][ T5829] usb 1-1: USB disconnect, device number 20 [ 258.274420][ T8288] netlink: 'syz.4.655': attribute type 1 has an invalid length. [ 258.463021][ T8288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.578008][ T8292] bond1: entered allmulticast mode [ 258.612466][ T8294] bond1: (slave ip6gretap1): making interface the new active one [ 258.623524][ T8294] ip6gretap1: entered allmulticast mode [ 258.633068][ T8294] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 259.103299][ T5897] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 259.254459][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 259.275395][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.287276][ T5897] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 259.304324][ T8314] kvm: pic: non byte write [ 259.308845][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.317682][ T8314] kvm: pic: non byte write [ 259.325096][ T5897] usb 1-1: config 0 descriptor?? [ 259.333943][ T8314] kvm: pic: non byte write [ 259.338455][ T8314] kvm: pic: non byte write [ 259.338676][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 259.413347][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 259.426793][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 259.455837][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 259.470522][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.485317][ T10] usb 4-1: Product: syz [ 259.503275][ T10] usb 4-1: Manufacturer: syz [ 259.513693][ T10] usb 4-1: SerialNumber: syz [ 259.531227][ T10] usb 4-1: config 0 descriptor?? [ 259.561420][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 259.573535][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 259.757663][ T5897] pwc: recv_control_msg error -32 req 02 val 2b00 [ 259.785126][ T5897] pwc: recv_control_msg error -32 req 02 val 2700 [ 259.795765][ T5897] pwc: recv_control_msg error -32 req 02 val 2c00 [ 259.804197][ T5897] pwc: recv_control_msg error -32 req 04 val 1000 [ 259.812340][ T5897] pwc: recv_control_msg error -32 req 04 val 1300 [ 259.820501][ T5897] pwc: recv_control_msg error -32 req 04 val 1400 [ 259.829816][ T5897] pwc: recv_control_msg error -32 req 02 val 2000 [ 259.837452][ T5897] pwc: recv_control_msg error -32 req 02 val 2100 [ 259.845734][ T5897] pwc: recv_control_msg error -32 req 04 val 1500 [ 259.853741][ T5897] pwc: recv_control_msg error -32 req 02 val 2500 [ 260.067350][ T5897] pwc: recv_control_msg error -71 req 02 val 2600 [ 260.085454][ T5897] pwc: recv_control_msg error -71 req 02 val 2900 [ 260.092644][ T5897] pwc: recv_control_msg error -71 req 02 val 2800 [ 260.105266][ T5897] pwc: recv_control_msg error -71 req 04 val 1100 [ 260.117947][ T5897] pwc: recv_control_msg error -71 req 04 val 1200 [ 260.143929][ T5897] pwc: Registered as video103. [ 260.171116][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 260.192004][ T5897] usb 1-1: USB disconnect, device number 21 [ 260.214580][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 261.074619][ T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 261.092890][ T10] em28xx 4-1:0.0: board has no eeprom [ 261.456854][ T8344] bridge0: entered promiscuous mode [ 261.462139][ T8344] bridge0: entered allmulticast mode [ 261.553287][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 261.561297][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 261.567557][ T5897] em28xx 4-1:0.0: Binding DVB extension [ 261.813396][ T116] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 262.047559][ T116] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 262.073358][ T116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.093428][ T116] usb 3-1: config 0 descriptor?? [ 262.229231][ T116] cp210x 3-1:0.0: cp210x converter detected [ 262.366335][ T116] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 262.376068][ T116] cp210x 3-1:0.0: querying part number failed [ 262.410312][ T116] usb 3-1: cp210x converter now attached to ttyUSB0 [ 262.725969][ T8310] em28xx 4-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 262.736421][ T116] usb 4-1: USB disconnect, device number 18 [ 262.745229][ T116] em28xx 4-1:0.0: Disconnecting em28xx [ 262.780268][ T5897] em28xx 4-1:0.0: Registering input extension [ 262.789443][ T116] em28xx 4-1:0.0: Closing input extension [ 263.248195][ T116] em28xx 4-1:0.0: Freeing device [ 264.560846][ T116] usb 3-1: USB disconnect, device number 17 [ 264.574247][ T116] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 264.621504][ T116] cp210x 3-1:0.0: device disconnected [ 266.278183][ T8413] bridge1: entered allmulticast mode [ 267.553346][ T5829] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 267.704728][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.715670][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.725461][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.738428][ T5829] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.747538][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.757307][ T5829] usb 3-1: config 0 descriptor?? [ 268.175267][ T5829] usbhid 3-1:0.0: can't add hid device: -71 [ 268.181306][ T5829] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 268.191993][ T5829] usb 3-1: USB disconnect, device number 18 [ 269.113404][ T5829] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 269.293824][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 269.302728][ T5829] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 269.312206][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.329735][ T5829] usb 2-1: Product: syz [ 269.339458][ T5829] usb 2-1: Manufacturer: syz [ 269.350820][ T5829] usb 2-1: SerialNumber: syz [ 269.374732][ T5829] usb 2-1: config 0 descriptor?? [ 269.387975][ T5829] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 269.916545][ T5829] gspca_sonixj: reg_w1 err -110 [ 269.923335][ T5829] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 269.978885][ T8459] tipc: Enabled bearer , priority 0 [ 269.998003][ T8459] syzkaller0: entered promiscuous mode [ 270.037958][ T8459] syzkaller0: entered allmulticast mode [ 270.087560][ T8459] tipc: Resetting bearer [ 270.111585][ T8457] tipc: Resetting bearer [ 270.136563][ T116] usb 2-1: USB disconnect, device number 17 [ 270.199905][ T8457] tipc: Disabling bearer [ 270.985753][ T5829] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 271.044859][ T8476] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[8476] [ 271.201506][ T5829] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 271.215632][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.248069][ T5829] usb 1-1: Product: syz [ 271.252736][ T5829] usb 1-1: Manufacturer: syz [ 271.257677][ T5829] usb 1-1: SerialNumber: syz [ 271.273620][ T5829] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 271.338840][ T116] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 271.874790][ T5890] usb 1-1: USB disconnect, device number 22 [ 272.413290][ T116] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 272.422633][ T116] ath9k_htc: Failed to initialize the device [ 272.437730][ T5890] usb 1-1: ath9k_htc: USB layer deinitialized [ 273.183819][ T116] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 273.477165][ T116] usb 5-1: Using ep0 maxpacket: 32 [ 273.527416][ T116] usb 5-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 273.551512][ T8517] syz_tun: entered allmulticast mode [ 273.575799][ T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.630838][ T116] usb 5-1: Product: syz [ 273.645885][ T116] usb 5-1: Manufacturer: syz [ 273.657026][ T116] usb 5-1: SerialNumber: syz [ 273.965446][ T116] usb 5-1: config 0 descriptor?? [ 274.230593][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 274.247214][ T8508] team0: entered promiscuous mode [ 274.258314][ T8508] team_slave_0: entered promiscuous mode [ 274.264372][ T8508] team_slave_1: entered promiscuous mode [ 274.277110][ T8508] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 274.347007][ T8508] team0: left promiscuous mode [ 274.371601][ T8508] team_slave_0: left promiscuous mode [ 274.401266][ T8508] team_slave_1: left promiscuous mode [ 274.525928][ T10] usb 5-1: USB disconnect, device number 11 [ 275.218745][ T30] audit: type=1326 audit(1760649316.717:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 275.240964][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.051889][ T8554] netlink: 'syz.0.729': attribute type 1 has an invalid length. [ 276.078999][ T30] audit: type=1326 audit(1760649316.717:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 276.137633][ T30] audit: type=1326 audit(1760649316.717:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 276.161882][ T30] audit: type=1326 audit(1760649316.717:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 276.186707][ T30] audit: type=1326 audit(1760649316.717:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 276.209478][ T30] audit: type=1326 audit(1760649316.717:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 276.251608][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.729'. [ 276.579975][ T30] audit: type=1326 audit(1760649316.717:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 276.660588][ T8554] bond2: entered promiscuous mode [ 276.692148][ T30] audit: type=1326 audit(1760649316.717:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 276.724197][ T8554] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.738664][ T30] audit: type=1326 audit(1760649316.717:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 276.803420][ T30] audit: type=1326 audit(1760649316.717:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 276.891844][ T8559] bond2: entered allmulticast mode [ 276.977988][ T8562] bond2: (slave bridge1): making interface the new active one [ 276.990134][ T8562] bridge1: entered promiscuous mode [ 277.020326][ T8562] bridge1: entered allmulticast mode [ 277.039302][ T8562] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 281.399278][ T8624] binder: BINDER_SET_CONTEXT_MGR already set [ 281.417861][ T8624] binder: 8622:8624 ioctl 4018620d 2000000002c0 returned -16 [ 283.145533][ T8644] sctp: [Deprecated]: syz.3.752 (pid 8644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.145533][ T8644] Use struct sctp_sack_info instead [ 283.410162][ T8650] netlink: 36 bytes leftover after parsing attributes in process `syz.4.755'. [ 283.559760][ T8650] IPv6: sit1: Disabled Multicast RS [ 283.582753][ T8656] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 283.604847][ T8650] sit1: entered allmulticast mode [ 283.670082][ T8656] veth3: entered promiscuous mode [ 283.680901][ T8656] bond1: (slave veth3): Enslaving as an active interface with a down link [ 283.734919][ T8656] bond1: (slave veth5): Enslaving as an active interface with a down link [ 283.754964][ T8656] bond1: entered promiscuous mode [ 283.760019][ T8656] bond1: entered allmulticast mode [ 283.767727][ T8656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.970696][ T8667] syzkaller0: entered promiscuous mode [ 283.989599][ T8667] syzkaller0: entered allmulticast mode [ 286.179740][ T116] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 286.429653][ T116] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.439979][ T116] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 286.449514][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.468788][ T116] usb 4-1: config 0 descriptor?? [ 286.520023][ T116] pwc: Askey VC010 type 2 USB webcam detected. [ 286.946596][ T116] pwc: recv_control_msg error -32 req 02 val 2b00 [ 286.955131][ T116] pwc: recv_control_msg error -32 req 02 val 2700 [ 286.973273][ T116] pwc: recv_control_msg error -32 req 02 val 2c00 [ 286.980789][ T116] pwc: recv_control_msg error -32 req 04 val 1000 [ 287.004309][ T116] pwc: recv_control_msg error -32 req 04 val 1300 [ 287.011497][ T116] pwc: recv_control_msg error -32 req 04 val 1400 [ 287.059076][ T116] pwc: recv_control_msg error -32 req 02 val 2000 [ 287.099954][ T116] pwc: recv_control_msg error -32 req 02 val 2100 [ 287.120677][ T116] pwc: recv_control_msg error -32 req 04 val 1500 [ 287.134435][ T116] pwc: recv_control_msg error -32 req 02 val 2500 [ 287.150527][ T116] pwc: recv_control_msg error -32 req 02 val 2400 [ 287.360604][ T116] pwc: recv_control_msg error -71 req 02 val 2900 [ 287.368821][ T116] pwc: recv_control_msg error -71 req 02 val 2800 [ 287.377462][ T116] pwc: recv_control_msg error -71 req 04 val 1100 [ 287.411781][ T116] pwc: recv_control_msg error -71 req 04 val 1200 [ 287.435808][ T116] pwc: Registered as video103. [ 287.445768][ T116] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 287.463558][ T116] usb 4-1: USB disconnect, device number 19 [ 288.033489][ T5897] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 288.381605][ T5897] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 288.405366][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.673262][ T5897] usb 2-1: Product: syz [ 288.677434][ T5897] usb 2-1: Manufacturer: syz [ 288.683364][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 288.707442][ T8732] syz_tun: entered allmulticast mode [ 288.711715][ T5897] usb 2-1: SerialNumber: syz [ 288.716629][ T8732] syz_tun: left allmulticast mode [ 288.838276][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 288.995635][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 289.003085][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 289.018229][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.030275][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 289.041980][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 289.092373][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 289.291088][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 289.303292][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.315526][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 289.326984][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 289.340984][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 289.353364][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 289.411352][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.425932][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 289.437425][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 289.655864][ T10] usb 4-1: string descriptor 0 read error: -22 [ 289.662321][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 289.722162][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.829350][ T10] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 290.121170][ T8729] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 290.147141][ T8729] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 290.193096][ T116] usb 4-1: USB disconnect, device number 20 [ 290.391936][ T5897] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 290.433317][ T5897] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 290.514729][ T5897] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 290.672034][ T5897] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 291.613565][ T10] usb 2-1: USB disconnect, device number 18 [ 292.793010][ T8779] use of bytesused == 0 is deprecated and will be removed in the future, [ 292.823413][ T8779] use the actual size instead. [ 294.905061][ T116] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 295.105178][ T116] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.116171][ T116] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.146043][ T116] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 295.177093][ T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 295.206343][ T116] usb 5-1: SerialNumber: syz [ 295.764172][ T116] usb 5-1: 0:2 : does not exist [ 295.983254][ T116] usb 5-1: USB disconnect, device number 12 [ 296.155561][ T8068] udevd[8068]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.420161][ T8849] IPVS: set_ctl: invalid protocol: 165 172.30.0.4:20002 [ 298.455845][ T8849] tipc: Started in network mode [ 298.472620][ T8849] tipc: Node identity 4, cluster identity 4711 [ 298.692985][ T8849] tipc: Node number set to 4 [ 299.354764][ T8860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.811'. [ 299.470272][ T8861] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 300.102990][ T8881] usb usb8: usbfs: process 8881 (syz.1.820) did not claim interface 0 before use [ 300.687463][ T8896] usb usb8: usbfs: process 8896 (syz.4.823) did not claim interface 0 before use [ 300.843612][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 301.235435][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 301.258191][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 301.268288][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.328430][ T10] usb 4-1: config 0 descriptor?? [ 301.342748][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 302.133294][ T5897] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 302.443335][ T5897] usb 2-1: config 7 has an invalid interface number: 252 but max is 0 [ 302.889062][ T10] gspca_sonixj: reg_w1 err -110 [ 302.951302][ T10] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 303.010429][ T5897] usb 2-1: config 7 has no interface number 0 [ 303.053109][ T5897] usb 2-1: config 7 interface 252 has no altsetting 0 [ 303.253381][ T5890] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 303.282587][ T5897] usb 2-1: string descriptor 0 read error: -22 [ 303.289380][ T5897] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 303.298511][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.414240][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 303.437987][ T5890] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 303.502289][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.552341][ T5890] usb 5-1: config 0 descriptor?? [ 303.686863][ T5890] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 303.699651][ T8923] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 304.463312][ T5897] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 304.597022][ T5890] gspca_nw80x: reg_r err -32 [ 304.601789][ T5890] nw80x 5-1:0.0: probe with driver nw80x failed with error -32 [ 304.637636][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.650838][ T5897] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 304.660047][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.704010][ T5897] usb 3-1: config 0 descriptor?? [ 304.919887][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 304.927353][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 304.947483][ T5897] usb 3-1: USB disconnect, device number 19 [ 305.473371][ T5897] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 306.088362][ T10] usb 4-1: USB disconnect, device number 21 [ 306.101127][ T5907] usb 2-1: USB disconnect, device number 19 [ 306.203391][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 306.222451][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.839'. [ 306.222883][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.299920][ T5897] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 306.329256][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 306.358750][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.390935][ T5897] usb 3-1: config 0 descriptor?? [ 306.573373][ T5907] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 306.743249][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 306.752397][ T5907] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 306.783277][ T5907] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 306.801738][ T5907] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.009516][ T5897] kye 0003:0458:5016.0002: control desc unexpectedly large [ 307.016992][ T5907] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 307.042261][ T5897] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0002/input/input15 [ 307.120334][ T5890] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 307.127936][ T5907] usb 2-1: config 0 interface 0 has no altsetting 0 [ 307.127979][ T5907] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 307.128001][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.169017][ T5907] usb 2-1: config 0 descriptor?? [ 307.233965][ T5897] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0002/input/input16 [ 307.316754][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.368997][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.393343][ T5897] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 307.405895][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.405945][ T5890] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.405990][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.188531][ T5890] usb 4-1: config 0 descriptor?? [ 308.194662][ T5907] microsoft 0003:045E:00F9.0003: hidraw1: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.1-1/input0 [ 308.231974][ T5907] microsoft 0003:045E:00F9.0003: no inputs found [ 308.300816][ T5907] microsoft 0003:045E:00F9.0003: could not initialize ff, continuing anyway [ 308.646705][ T5890] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 308.837027][ T5890] usb 4-1: USB disconnect, device number 22 [ 308.904940][ T5907] usb 2-1: USB disconnect, device number 20 [ 309.000107][ T8981] fido_id[8981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 309.232584][ T5890] usb 3-1: USB disconnect, device number 20 [ 309.883424][ T5890] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 310.063254][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 310.072834][ T5890] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 310.088870][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.112114][ T5890] usb 4-1: Product: syz [ 310.228689][ T5890] usb 4-1: Manufacturer: syz [ 310.265661][ T5890] usb 4-1: SerialNumber: syz [ 310.345900][ T5890] usb 4-1: config 0 descriptor?? [ 310.587041][ T5890] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 311.210133][ T5890] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 311.271375][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'. [ 311.293484][ T8998] bond_slave_0: entered promiscuous mode [ 311.299464][ T8998] bond_slave_1: entered promiscuous mode [ 311.305164][ T8998] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 311.316593][ T8998] macvlan2: entered promiscuous mode [ 311.322017][ T8998] bond0: entered promiscuous mode [ 311.341761][ T8998] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 311.387265][ T5907] usb 4-1: USB disconnect, device number 23 [ 312.293502][ T5907] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 312.463858][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 312.472971][ T5907] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.483447][ T5907] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 312.493546][ T5907] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.504019][ T5907] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.518167][ T5907] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 312.544926][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.921051][ T9027] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 313.003598][ T5907] usb 4-1: GET_CAPABILITIES returned 0 [ 313.009140][ T5907] usbtmc 4-1:16.0: can't read capabilities [ 313.563315][ T9044] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.639991][ T9044] bond_slave_0: entered promiscuous mode [ 313.645743][ T9044] bond_slave_1: entered promiscuous mode [ 313.685440][ T9044] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 313.737036][ T9044] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 313.776068][ T5890] usb 4-1: USB disconnect, device number 24 [ 313.864664][ T5907] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 313.923690][ T5907] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 315.757006][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.803855][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.915241][ T9094] tipc: Enabled bearer , priority 0 [ 316.933561][ T9094] syzkaller0: entered promiscuous mode [ 316.953799][ T9094] syzkaller0: entered allmulticast mode [ 317.047137][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.054115][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.413015][ T9099] tipc: Resetting bearer [ 317.453550][ T9093] tipc: Resetting bearer [ 317.474877][ T9093] tipc: Disabling bearer [ 317.788959][ T9107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.797694][ T9107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.825331][ T5890] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 318.103233][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 318.175179][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 318.227687][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 318.274128][ T5890] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 318.283544][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.301558][ T5890] usb 4-1: Product: syz [ 318.317691][ T5890] usb 4-1: Manufacturer: syz [ 318.336521][ T5890] usb 4-1: SerialNumber: syz [ 318.365518][ T5890] usb 4-1: config 0 descriptor?? [ 318.402340][ T5890] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 318.423284][ T5890] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 318.992773][ T5890] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 319.003969][ T5890] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 319.163415][ T5907] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 319.315099][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 319.329857][ T5907] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 319.352219][ T5907] usb 2-1: config 0 has no interface number 0 [ 319.426704][ T5907] usb 2-1: config 0 interface 196 has no altsetting 0 [ 319.441199][ T5907] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 319.450805][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.459229][ T5907] usb 2-1: Product: syz [ 319.465710][ T5907] usb 2-1: Manufacturer: syz [ 319.471945][ T5907] usb 2-1: SerialNumber: syz [ 319.490751][ T5907] usb 2-1: config 0 descriptor?? [ 319.628745][ T5890] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 319.636791][ T5890] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 319.647099][ T5890] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 319.673870][ T5890] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 319.694609][ T5890] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 320.395694][ T5890] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 320.586672][ T5890] usb 4-1: USB disconnect, device number 25 [ 321.730157][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.891'. [ 321.820765][ T5907] ipheth 2-1:0.196: Unable to find endpoints [ 321.860425][ T5897] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 321.879492][ T5907] usb 2-1: USB disconnect, device number 21 [ 321.933601][ T9147] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 321.962033][ T9147] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 322.067334][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.080377][ T5897] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.091899][ T5897] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 322.122918][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.131615][ T5897] usb 3-1: Product: syz [ 322.136164][ T5897] usb 3-1: Manufacturer: syz [ 322.140765][ T5897] usb 3-1: SerialNumber: syz [ 322.153038][ T5897] usb 3-1: config 0 descriptor?? [ 324.192217][ T5890] usb 3-1: USB disconnect, device number 21 [ 328.022084][ T9207] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 329.584897][ T9226] loop2: detected capacity change from 0 to 7 [ 329.612259][ T9226] Dev loop2: unable to read RDB block 7 [ 330.391387][ T9226] loop2: unable to read partition table [ 330.408779][ T9226] loop2: partition table beyond EOD, truncated [ 330.424779][ T9226] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 331.227603][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.918'. [ 332.415289][ T9261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.425622][ T9261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.793916][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 333.542266][ T9270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.561159][ T9270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.163468][ T9297] fuse: Bad value for 'fd' [ 338.411124][ T9314] syzkaller0: entered promiscuous mode [ 338.434194][ T9314] syzkaller0: entered allmulticast mode [ 338.686113][ T9325] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 339.894056][ T9345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.963821][ T9345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.603807][ T5907] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 340.814034][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 341.529924][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 183, changing to 11 [ 341.529976][ T5907] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 341.693291][ T5907] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.693324][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.693343][ T5907] usb 2-1: Product: ꕲ뱒ৃ䧕ï‚㟲㜶潳˴浰久雭ë‰ä£‚é‹´ [ 341.693360][ T5907] usb 2-1: Manufacturer: Љ [ 341.693374][ T5907] usb 2-1: SerialNumber: à ‡ [ 341.964736][ T5907] cdc_ncm 2-1:1.0: bind() failure [ 341.999131][ T5907] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 342.090768][ T5907] cdc_ncm 2-1:1.1: bind() failure [ 342.184994][ T5907] usb 2-1: USB disconnect, device number 22 [ 343.073270][ T5890] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 343.363287][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 343.672996][ T5890] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 343.689353][ T5890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 343.699660][ T5890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.810737][ T5890] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.233503][ T5890] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 344.247591][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.386808][ T9395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.519320][ T5890] usb 3-1: GET_CAPABILITIES returned 0 [ 344.524885][ T5890] usbtmc 3-1:16.0: can't read capabilities [ 344.740054][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 344.749589][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 344.792453][ T5890] usb 3-1: USB disconnect, device number 22 [ 345.935579][ T9412] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 346.229851][ T9423] tipc: Enabling of bearer rejected, failed to enable media [ 346.505215][ T116] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 346.816820][ T116] usb 3-1: Using ep0 maxpacket: 8 [ 346.836347][ T116] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 346.868274][ T116] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 347.113796][ T116] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.173459][ T116] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.200695][ T9434] binder: 9433:9434 ioctl c0306201 200000000640 returned -22 [ 347.241446][ T116] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 347.387067][ T116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.640259][ T116] usb 3-1: GET_CAPABILITIES returned 0 [ 347.773253][ T116] usbtmc 3-1:16.0: can't read capabilities [ 347.897557][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 347.906896][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 347.916196][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 348.149087][ T116] usb 3-1: USB disconnect, device number 23 [ 348.613513][ T5908] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 348.794204][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 348.840316][ T5908] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 348.862450][ T5908] usb 2-1: config 0 has no interface number 0 [ 348.874906][ T5908] usb 2-1: config 0 interface 184 has no altsetting 0 [ 348.929164][ T5908] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 348.942167][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.951085][ T5908] usb 2-1: Product: syz [ 349.045029][ T5908] usb 2-1: Manufacturer: syz [ 349.049798][ T5908] usb 2-1: SerialNumber: syz [ 349.057786][ T5908] usb 2-1: config 0 descriptor?? [ 349.074197][ T5908] smsc75xx v1.0.0 [ 349.896921][ T5908] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 350.148866][ T5908] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 351.327384][ T9481] loop6: detected capacity change from 0 to 7 [ 351.337926][ T9481] Dev loop6: unable to read RDB block 7 [ 351.353369][ T9481] loop6: unable to read partition table [ 351.360115][ T9481] loop6: partition table beyond EOD, truncated [ 351.369435][ T9481] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 352.483494][ T5908] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71 [ 352.523226][ T5908] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71 [ 352.573249][ T5908] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 352.613320][ T5908] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 352.633569][ T5908] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 352.709056][ T9498] binder: 9495:9498 ioctl 5402 0 returned -22 [ 352.713642][ T5908] usb 2-1: USB disconnect, device number 23 [ 357.030987][ T9546] input: syz1 as /devices/virtual/input/input17 [ 358.200791][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 358.200809][ T30] audit: type=1804 audit(1760649399.697:285): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1000" name="/newroot/191/file1" dev="fuse" ino=1 res=1 errno=0 [ 358.346879][ T9580] vlan2: entered promiscuous mode [ 358.397952][ T9580] bridge0: entered promiscuous mode [ 359.398378][ T9611] kvm: pic: non byte write [ 359.751972][ T9617] kvm: pic: non byte write [ 360.312774][ T9627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.650599][ T5907] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.826311][ T5907] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 363.387418][ T9639] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 363.394252][ T9639] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 363.464032][ T9639] vhci_hcd vhci_hcd.0: Device attached [ 363.475942][ T9650] vhci_hcd: connection closed [ 363.493255][ T7584] vhci_hcd: stop threads [ 363.503725][ T7584] vhci_hcd: release socket [ 363.511711][ T7584] vhci_hcd: disconnect device [ 367.702778][ T116] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 368.064466][ T116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.261238][ T116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.365132][ T116] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 368.427827][ T116] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 368.561217][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.256375][ T116] usb 4-1: config 0 descriptor?? [ 369.746400][ T116] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 370.717774][ T9731] netlink: 'syz.4.1037': attribute type 1 has an invalid length. [ 371.074219][ T9731] 8021q: adding VLAN 0 to HW filter on device bond3 [ 371.182734][ T9736] bond3: (slave veth5): Enslaving as an active interface with a down link [ 371.308192][ T9737] bond3: (slave veth0_to_bond): making interface the new active one [ 371.336240][ T9737] veth0_to_bond: entered promiscuous mode [ 371.342623][ T9737] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 371.393052][ T9731] vlan2: entered allmulticast mode [ 371.405062][ T9731] veth0_to_bond: entered allmulticast mode [ 371.416518][ T9731] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 371.603425][ T5890] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 371.763537][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 371.771795][ T5890] usb 3-1: config 0 interface 0 has no altsetting 0 [ 371.990291][ T5890] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 372.023331][ T5829] usb 4-1: USB disconnect, device number 26 [ 372.031826][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.044865][ T5890] usb 3-1: Product: syz [ 372.049053][ T5890] usb 3-1: Manufacturer: syz [ 372.072635][ T5890] usb 3-1: SerialNumber: syz [ 372.087364][ T5890] usb 3-1: config 0 descriptor?? [ 373.032756][ T5890] gs_usb 3-1:0.0: Configuring for 196 interfaces [ 373.151013][ T5890] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 373.210237][ T5890] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 373.391013][ T5890] usb 3-1: USB disconnect, device number 24 [ 374.768757][ T9787] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 374.779693][ T9787] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 375.019336][ T5908] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 375.186646][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 375.201790][ T5908] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.247445][ T5908] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.650533][ T5908] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 375.816988][ T5908] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 375.868443][ T5908] usb 4-1: Product: syz [ 376.192920][ T5908] usb 4-1: Manufacturer: syz [ 376.265823][ T5908] hub 4-1:4.0: USB hub found [ 376.481277][ T5908] hub 4-1:4.0: 5 ports detected [ 376.486936][ T5908] hub 4-1:4.0: insufficient power available to use all downstream ports [ 376.713329][ T5908] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 376.925142][ T5908] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 377.054403][ T5908] usb 4-1: USB disconnect, device number 27 [ 377.190082][ T9803] netlink: 'syz.1.1058': attribute type 4 has an invalid length. [ 378.487165][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.513301][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.780063][ T9821] netlink: 'syz.4.1063': attribute type 5 has an invalid length. [ 380.636118][ T9836] tipc: Started in network mode [ 380.661393][ T9836] tipc: Node identity 920f32c60cc4, cluster identity 4711 [ 380.689904][ T9836] tipc: Enabled bearer , priority 0 [ 380.725772][ T9837] syzkaller0: entered promiscuous mode [ 380.752055][ T9837] syzkaller0: entered allmulticast mode [ 380.866271][ T9837] tipc: Resetting bearer [ 380.932010][ T9835] tipc: Resetting bearer [ 381.107282][ T9835] tipc: Disabling bearer [ 381.294193][ T9821] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 382.429594][ T30] audit: type=1800 audit(1760649423.917:286): pid=9844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1070" name="bus" dev="ramfs" ino=53460 res=0 errno=0 [ 382.438095][ T9856] team0: Port device vxlan0 added [ 382.473751][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.490736][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.511081][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.587164][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.830737][ T9859] tipc: Enabled bearer , priority 0 [ 382.861092][ T9859] syzkaller0: entered promiscuous mode [ 382.879635][ T9859] syzkaller0: entered allmulticast mode [ 382.925052][ T9859] tipc: Resetting bearer [ 382.942586][ T9858] tipc: Resetting bearer [ 382.980219][ T9858] tipc: Disabling bearer [ 383.037179][ T9861] syzkaller0: entered promiscuous mode [ 383.042681][ T9861] syzkaller0: entered allmulticast mode [ 385.843212][ T30] audit: type=1800 audit(1760649427.297:287): pid=9905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1085" name="bus" dev="tmpfs" ino=1148 res=0 errno=0 [ 386.644124][ T4505] veth0_to_bond: left promiscuous mode [ 387.433236][ T30] audit: type=1800 audit(1760649428.797:288): pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1084" name="bus" dev="ramfs" ino=52983 res=0 errno=0 [ 388.080438][ T9930] netlink: 'syz.3.1092': attribute type 1 has an invalid length. [ 388.110024][ T9928] kvm: pic: non byte write [ 388.330734][ T9930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.550671][ T9934] veth3: entered promiscuous mode [ 388.620602][ T9934] bond1: (slave veth3): Enslaving as an active interface with a down link [ 389.113737][ T9930] veth5: entered promiscuous mode [ 389.130066][ T9930] bond1: (slave veth5): Enslaving as an active interface with a down link [ 389.226553][ T9935] bond1: entered allmulticast mode [ 391.181805][ T9978] mmap: syz.2.1101 (9978) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 391.388781][ T9979] ptrace attach of "./syz-executor exec"[5838] was attempted by ""[9979] [ 391.407153][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1103'. [ 393.779840][T10005] create_pit_timer: 8 callbacks suppressed [ 393.779852][T10005] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 393.837410][T10005] kvm: pic: non byte read [ 393.856436][T10005] kvm: pic: level sensitive irq not supported [ 393.857183][T10005] kvm: pic: non byte read [ 393.871763][T10005] kvm: pic: level sensitive irq not supported [ 393.871825][T10005] kvm: pic: non byte read [ 393.884160][T10005] kvm: pic: level sensitive irq not supported [ 393.884221][T10005] kvm: pic: non byte read [ 393.917431][T10005] kvm: pic: level sensitive irq not supported [ 393.917543][T10005] kvm: pic: non byte read [ 394.413561][T10021] tipc: Enabled bearer , priority 0 [ 394.422741][T10021] syzkaller0: entered promiscuous mode [ 394.432248][T10021] syzkaller0: entered allmulticast mode [ 394.785975][T10022] tipc: Resetting bearer [ 395.138247][T10020] tipc: Resetting bearer [ 395.178871][T10020] tipc: Disabling bearer [ 395.743247][ T116] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 396.415337][ T116] usb 3-1: Using ep0 maxpacket: 16 [ 396.535304][ T116] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 396.546962][ T116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 396.589104][ T116] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 396.609096][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.626600][ T116] usb 3-1: Product: syz [ 396.643170][ T116] usb 3-1: Manufacturer: syz [ 396.659107][ T116] usb 3-1: SerialNumber: syz [ 396.673735][ T116] usb 3-1: config 0 descriptor?? [ 396.692953][ T116] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 396.709933][ T116] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 397.164310][T10048] tipc: Enabled bearer , priority 0 [ 397.186924][T10048] tipc: Resetting bearer [ 397.237762][T10047] tipc: Disabling bearer [ 397.494603][ T116] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 397.573471][ T30] audit: type=1326 audit(1760649439.007:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 397.631401][ T116] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 397.633961][ T30] audit: type=1326 audit(1760649439.007:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 397.701856][ T30] audit: type=1326 audit(1760649439.007:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 397.823334][ T30] audit: type=1326 audit(1760649439.007:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 397.850904][ T30] audit: type=1326 audit(1760649439.007:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 397.874933][ T30] audit: type=1326 audit(1760649439.007:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 397.901153][ T30] audit: type=1326 audit(1760649439.007:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 398.057942][ T30] audit: type=1326 audit(1760649439.007:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 398.145198][ T30] audit: type=1326 audit(1760649439.017:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 398.302026][ T30] audit: type=1326 audit(1760649439.017:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 398.311972][T10064] kvm: kvm [10063]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 398.492833][ T116] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 398.723482][ T116] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 398.747809][ T116] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 399.163400][T10072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.283693][T10072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.513246][ T116] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 399.521870][ T116] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 399.549560][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'. [ 399.707119][ T116] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 399.771765][ T116] usb 3-1: USB disconnect, device number 25 [ 399.946963][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1129'. [ 399.967717][T10089] vlan2: entered promiscuous mode [ 399.995163][T10089] team0: entered promiscuous mode [ 400.000266][T10089] team_slave_0: entered promiscuous mode [ 400.012651][T10089] team_slave_1: entered promiscuous mode [ 400.322627][T10097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.339907][T10097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.352894][T10097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.363370][T10097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.552195][T10112] bridge3: entered allmulticast mode [ 404.755053][T10140] syzkaller0: entered promiscuous mode [ 404.760664][T10140] syzkaller0: entered allmulticast mode [ 408.468744][T10187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.478500][T10187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.514497][T10195] tipc: Enabled bearer , priority 0 [ 409.532767][T10195] syzkaller0: entered promiscuous mode [ 409.552176][T10195] syzkaller0: entered allmulticast mode [ 409.935040][T10202] tipc: Resetting bearer [ 410.032986][T10192] tipc: Resetting bearer [ 410.208263][T10192] tipc: Disabling bearer [ 411.299456][T10219] kvm: pic: non byte write [ 412.043095][T10235] binder: 10233:10235 ioctl c0306201 200000000240 returned -11 [ 412.093007][T10240] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1169'. [ 412.404875][T10246] netlink: 'syz.2.1173': attribute type 1 has an invalid length. [ 412.502319][T10246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.582785][T10248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.590291][T10248] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 412.606716][T10248] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 412.692786][T10246] gretap1: entered promiscuous mode [ 412.707416][T10246] bond1: (slave gretap1): making interface the new active one [ 412.715996][T10246] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 412.742459][T10251] macvlan2: entered promiscuous mode [ 412.750582][T10251] macvlan2: entered allmulticast mode [ 412.756907][T10251] bond1: entered promiscuous mode [ 412.763073][T10251] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 412.805925][T10251] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 412.869993][T10251] bond1: left promiscuous mode [ 412.926154][T10262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.949198][T10262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.274963][T10301] tipc: Enabled bearer , priority 0 [ 416.293964][T10301] syzkaller0: entered promiscuous mode [ 416.299457][T10301] syzkaller0: entered allmulticast mode [ 416.541206][T10302] tipc: Resetting bearer [ 416.659439][T10300] tipc: Resetting bearer [ 416.810773][T10300] tipc: Disabling bearer [ 417.828596][T10317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 417.999061][T10319] tipc: Started in network mode [ 418.004114][T10319] tipc: Node identity 062431685889, cluster identity 4711 [ 418.011541][T10319] tipc: Enabled bearer , priority 0 [ 418.063819][T10321] syzkaller0: entered promiscuous mode [ 418.070876][T10321] syzkaller0: entered allmulticast mode [ 418.117850][T10323] tipc: Enabling of bearer rejected, failed to enable media [ 418.135026][T10319] tipc: Resetting bearer [ 418.143945][T10325] netlink: 'syz.3.1194': attribute type 1 has an invalid length. [ 418.201007][T10318] tipc: Resetting bearer [ 418.244594][T10318] tipc: Disabling bearer [ 418.268855][T10325] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 418.285657][T10325] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 418.506116][T10330] bond2: (slave bridge4): Enslaving as an active interface with a down link [ 418.804216][T10333] macvlan3: entered promiscuous mode [ 418.809872][T10333] macvlan3: entered allmulticast mode [ 418.821924][T10333] bond2: entered promiscuous mode [ 418.943506][T10333] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 419.010269][T10333] bond2: left promiscuous mode [ 419.242436][T10349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.618416][T10385] bond_slave_0: left promiscuous mode [ 423.697397][T10385] bond_slave_1: left promiscuous mode [ 424.066110][T10385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.016756][T10385] bridge0: left promiscuous mode [ 425.263475][ T7584] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.276312][ T7584] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.286498][ T7584] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.296136][ T7584] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.335432][ T7584] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.346732][ T7584] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.357874][ T7584] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.368152][ T7584] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.769340][T10424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.832756][T10424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.336385][T10441] tipc: Started in network mode [ 427.341260][T10441] tipc: Node identity 080211000001, cluster identity 4711 [ 427.373824][T10441] tipc: Enabled bearer , priority 0 [ 427.483364][T10441] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 427.564706][T10441] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 427.735040][T10441] tipc: Resetting bearer [ 427.984414][T10446] tipc: Enabling of bearer rejected, already enabled [ 428.444405][ T5897] tipc: Node number set to 134418688 [ 429.018088][T10465] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1230'. [ 429.118433][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1230'. [ 429.248074][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1230'. [ 429.362463][T10471] netlink: 'syz.4.1232': attribute type 1 has an invalid length. [ 429.498469][ T5897] IPVS: starting estimator thread 0... [ 429.506553][T10480] tipc: Enabled bearer , priority 0 [ 429.514457][T10480] syzkaller0: entered promiscuous mode [ 429.519942][T10480] syzkaller0: entered allmulticast mode [ 429.602382][T10477] veth7: entered promiscuous mode [ 429.615931][T10477] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 429.629402][T10478] IPVS: using max 24 ests per chain, 57600 per kthread [ 429.668613][T10480] tipc: Resetting bearer [ 429.677062][T10479] tipc: Resetting bearer [ 430.480799][T10479] tipc: Disabling bearer [ 430.943290][ T116] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 431.124945][ T116] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.138111][ T116] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 431.161556][T10460] syz.1.1229 (10460): drop_caches: 2 [ 431.187823][ T116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.227024][ T116] usb 3-1: config 0 descriptor?? [ 431.681970][ T116] aquacomputer_d5next 0003:0C70:F00B.0008: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.2-1/input0 [ 433.135591][ T116] usb 3-1: USB disconnect, device number 26 [ 435.273216][ T116] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 435.717795][ T116] usb 3-1: config 0 has no interfaces? [ 435.729362][ T116] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 435.738552][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.746899][ T116] usb 3-1: Product: syz [ 435.751050][ T116] usb 3-1: Manufacturer: syz [ 435.764284][ T116] usb 3-1: SerialNumber: syz [ 435.823873][ T116] usb 3-1: config 0 descriptor?? [ 436.250332][T10544] blktrace: Concurrent blktraces are not allowed on loop3 [ 437.873470][ T116] usb 3-1: USB disconnect, device number 27 [ 439.849296][T10572] bond0: entered promiscuous mode [ 439.854704][T10572] bond_slave_0: entered promiscuous mode [ 439.940934][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.947988][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.960474][T10572] bond_slave_1: entered promiscuous mode [ 439.966422][T10572] bond0: entered allmulticast mode [ 439.971639][T10572] bond_slave_0: entered allmulticast mode [ 439.978539][T10572] bond_slave_1: entered allmulticast mode [ 441.393265][ T116] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 441.595253][ T116] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.605525][ T116] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 441.617034][ T116] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 441.628858][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.640679][ T116] usb 2-1: config 0 descriptor?? [ 441.668743][ T116] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 441.698415][ T116] dvb-usb: bulk message failed: -22 (3/0) [ 441.720365][ T116] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 441.817230][ T116] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 441.825785][T10594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.834554][T10594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.843743][ T116] usb 2-1: media controller created [ 441.852321][ T116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 442.211397][ T116] dvb-usb: bulk message failed: -22 (6/0) [ 442.218712][ T116] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 442.265668][ T116] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 442.468299][ T116] dvb-usb: schedule remote query interval to 150 msecs. [ 442.475699][ T116] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 442.635369][ T116] dvb-usb: bulk message failed: -22 (1/0) [ 442.699498][ T116] dvb-usb: error while querying for an remote control event. [ 442.762605][T10585] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1259'. [ 442.774319][T10585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.804702][T10585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.973560][ T116] dvb-usb: bulk message failed: -22 (1/0) [ 442.979448][ T116] dvb-usb: error while querying for an remote control event. [ 443.091120][ T116] usb 2-1: USB disconnect, device number 24 [ 443.165594][ T116] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 443.505288][T10612] tipc: Enabled bearer , priority 0 [ 443.513543][T10612] syzkaller0: entered promiscuous mode [ 443.519615][T10612] syzkaller0: entered allmulticast mode [ 443.595679][T10612] tipc: Resetting bearer [ 443.621107][T10611] tipc: Resetting bearer [ 443.742499][T10611] tipc: Disabling bearer [ 444.496118][T10618] nvme_fabrics: missing parameter 'transport=%s' [ 444.502632][T10618] nvme_fabrics: missing parameter 'nqn=%s' [ 444.991260][T10637] tipc: Enabled bearer , priority 0 [ 445.036422][T10637] syzkaller0: entered promiscuous mode [ 445.059527][T10637] syzkaller0: entered allmulticast mode [ 445.171130][T10638] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1271'. [ 445.204201][T10637] tipc: Resetting bearer [ 445.258448][T10635] tipc: Resetting bearer [ 445.337719][T10635] tipc: Disabling bearer [ 445.753627][T10649] binder: 10646:10649 ioctl c018620c 0 returned -14 [ 445.754909][T10647] binder: 10646:10647 ioctl 4018620d 0 returned -22 [ 447.444580][T10661] tipc: Enabled bearer , priority 0 [ 447.462865][T10661] syzkaller0: entered promiscuous mode [ 447.471910][T10661] syzkaller0: entered allmulticast mode [ 447.516455][T10661] tipc: Resetting bearer [ 447.527342][T10660] tipc: Resetting bearer [ 447.544872][T10660] tipc: Disabling bearer [ 448.186431][T10668] netlink: 'syz.3.1279': attribute type 12 has an invalid length. [ 448.727290][T10686] tipc: Enabled bearer , priority 0 [ 448.917680][T10686] tipc: Resetting bearer [ 448.950690][T10688] syzkaller0: entered promiscuous mode [ 448.995433][T10684] tipc: Resetting bearer [ 449.424386][T10684] tipc: Disabling bearer [ 449.825689][T10694] netlink: 'syz.3.1286': attribute type 10 has an invalid length. [ 449.856880][T10694] syz_tun: entered promiscuous mode [ 449.862582][T10694] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 449.948182][T10694] bond3: (slave macvlan3): unknown ethtool speed (30000) for port 1 (set it to 0) [ 449.958284][T10694] bond3: (slave macvlan3): speed changed to 0 on port 1 [ 449.966409][T10694] bond3: (slave macvlan3): Enslaving as a backup interface with an up link [ 450.648786][T10710] bond3: (slave veth0_to_bond): Releasing active interface [ 450.741649][T10710] bond0: (slave bond_slave_0): Releasing backup interface [ 450.820002][T10710] bond0: (slave bond_slave_1): Releasing backup interface [ 451.053885][T10710] team0: Port device team_slave_0 removed [ 451.467423][T10710] team0: Port device team_slave_1 removed [ 451.474905][T10710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.545363][T10710] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 451.845714][T10716] tipc: Enabled bearer , priority 0 [ 451.853429][T10716] syzkaller0: entered promiscuous mode [ 451.976529][T10716] syzkaller0: entered allmulticast mode [ 452.028632][T10716] tipc: Resetting bearer [ 452.036653][T10716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.045016][T10716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.071884][T10715] tipc: Resetting bearer [ 452.179572][T10715] tipc: Disabling bearer [ 454.066017][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 454.066036][ T30] audit: type=1326 audit(1760649495.527:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.1.1298" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51c898eec9 code=0x0 [ 455.336196][T10755] cgroup: fork rejected by pids controller in /syz1 [ 457.230447][T11518] kvm_intel: kvm [11517]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100000009 [ 457.599818][T14183] tipc: Enabled bearer , priority 0 [ 457.611584][T14183] syzkaller0: entered promiscuous mode [ 457.622931][T14183] syzkaller0: entered allmulticast mode [ 457.713683][T14183] tipc: Resetting bearer [ 457.729071][T14182] tipc: Resetting bearer [ 457.756563][T14182] tipc: Disabling bearer [ 458.392173][T14191] tipc: Enabled bearer , priority 0 [ 458.499784][T14191] tipc: Resetting bearer [ 458.514608][T14188] tipc: Disabling bearer [ 461.271902][T14223] trusted_key: syz.1.1312 sent an empty control message without MSG_MORE. [ 462.233376][ T5829] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 462.470418][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.494933][ T5829] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 462.531178][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.572602][ T5829] usb 3-1: config 0 descriptor?? [ 462.625138][ T5829] pwc: Askey VC010 type 2 USB webcam detected. [ 463.034636][ T5829] pwc: recv_control_msg error -32 req 02 val 2b00 [ 463.104204][T14245] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1318'. [ 463.186163][ T5829] pwc: recv_control_msg error -32 req 02 val 2700 [ 463.231706][ T5829] pwc: recv_control_msg error -32 req 02 val 2c00 [ 463.245499][ T5829] pwc: recv_control_msg error -32 req 04 val 1000 [ 463.254842][ T5829] pwc: recv_control_msg error -32 req 04 val 1300 [ 463.262806][ T5829] pwc: recv_control_msg error -32 req 04 val 1400 [ 463.277285][ T5829] pwc: recv_control_msg error -32 req 02 val 2000 [ 463.285661][ T5829] pwc: recv_control_msg error -32 req 02 val 2100 [ 463.349052][ T5829] pwc: recv_control_msg error -32 req 04 val 1500 [ 463.359550][ T5829] pwc: recv_control_msg error -32 req 02 val 2500 [ 463.368275][ T5829] pwc: recv_control_msg error -32 req 02 val 2400 [ 463.376399][ T5829] pwc: recv_control_msg error -32 req 02 val 2600 [ 463.402358][ T5829] pwc: recv_control_msg error -32 req 02 val 2900 [ 463.654285][ T5829] pwc: recv_control_msg error -71 req 04 val 1100 [ 463.695334][ T5829] pwc: recv_control_msg error -71 req 04 val 1200 [ 464.400121][ T5829] pwc: Registered as video103. [ 464.423065][ T5829] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 464.561002][ T5829] usb 3-1: USB disconnect, device number 28 [ 465.191461][T14263] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.198925][T14263] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.369778][T14263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.381935][T14263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.524384][T14267] netlink: 'syz.1.1325': attribute type 12 has an invalid length. [ 465.541290][T14267] netlink: 'syz.1.1325': attribute type 29 has an invalid length. [ 465.562715][T14267] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1325'. [ 465.604081][T14268] netlink: 'syz.1.1325': attribute type 12 has an invalid length. [ 465.641638][T14268] netlink: 'syz.1.1325': attribute type 29 has an invalid length. [ 465.663723][T14268] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1325'. [ 465.675339][ T7598] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.713629][ T7598] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.740550][ T7598] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.801798][ T7598] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.384777][T14277] tipc: Enabled bearer , priority 0 [ 466.394276][T14277] syzkaller0: entered promiscuous mode [ 466.403397][T14277] syzkaller0: entered allmulticast mode [ 466.781147][T14284] tipc: Resetting bearer [ 466.912855][T14275] tipc: Resetting bearer [ 467.103991][T14275] tipc: Disabling bearer [ 468.054333][T14295] tipc: Enabled bearer , priority 0 [ 468.064169][T14295] syzkaller0: entered promiscuous mode [ 468.069656][T14295] syzkaller0: entered allmulticast mode [ 468.102147][T14295] tipc: Resetting bearer [ 468.203377][T14294] tipc: Resetting bearer [ 468.427328][T14294] tipc: Disabling bearer [ 468.723854][ T5829] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 468.885003][ T5829] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 468.923364][ T5829] usb 3-1: config 0 has no interface number 0 [ 468.944421][ T5829] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=92.c2 [ 468.968260][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.013301][ T5829] usb 3-1: Product: syz [ 469.039251][ T5829] usb 3-1: Manufacturer: syz [ 469.053253][ T5829] usb 3-1: SerialNumber: syz [ 469.064914][ T5829] usb 3-1: config 0 descriptor?? [ 469.077631][ T5829] usbserial_generic 3-1:0.244: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 469.100440][ T5829] usbserial_generic 3-1:0.244: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 469.126026][ T5829] usbserial_generic 3-1:0.244: device has no bulk endpoints [ 469.152792][ T5829] safe_serial 3-1:0.244: safe_serial converter detected [ 469.171682][ T5829] safe_serial 3-1:0.244: probe with driver safe_serial failed with error -22 [ 469.211279][ T30] audit: type=1804 audit(1760649510.697:310): pid=14301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1335" name="/newroot/269/file1" dev="fuse" ino=1 res=1 errno=0 [ 469.290301][ T5829] usb 3-1: USB disconnect, device number 29 [ 469.305353][T14304] tipc: Enabled bearer , priority 0 [ 469.312621][T14304] syzkaller0: entered promiscuous mode [ 469.327094][T14304] syzkaller0: entered allmulticast mode [ 469.328476][T14306] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1336'. [ 469.377120][T14306] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1336'. [ 469.427989][T14304] tipc: Resetting bearer [ 469.437371][T14302] tipc: Resetting bearer [ 469.456257][T14302] tipc: Disabling bearer [ 469.546460][T14308] tipc: Enabled bearer , priority 0 [ 469.556746][T14308] syzkaller0: entered promiscuous mode [ 469.562237][T14308] syzkaller0: entered allmulticast mode [ 469.656327][T14308] tipc: Resetting bearer [ 469.673937][T14307] tipc: Resetting bearer [ 469.702532][T14307] tipc: Disabling bearer [ 469.721942][T14311] tipc: Enabling of bearer rejected, already enabled [ 469.825753][T14317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1342'. [ 470.053575][T14322] tipc: Enabled bearer , priority 0 [ 470.232169][T14324] syzkaller0: entered promiscuous mode [ 470.237993][T14324] syzkaller0: entered allmulticast mode [ 470.269492][T14322] tipc: Resetting bearer [ 471.010767][ T30] audit: type=1326 audit(1760649512.227:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14316 comm="syz.1.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c898eec9 code=0x7fc00000 [ 471.033659][T14321] tipc: Resetting bearer [ 471.152137][T14321] tipc: Disabling bearer [ 471.384384][T14334] tipc: Enabling of bearer rejected, already enabled [ 472.761944][T14352] tipc: Enabled bearer , priority 0 [ 472.877713][T14352] syzkaller0: entered promiscuous mode [ 472.887965][T14352] syzkaller0: entered allmulticast mode [ 472.956476][T14352] tipc: Resetting bearer [ 472.968227][T14351] tipc: Resetting bearer [ 473.091341][ T5897] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 473.151226][T14351] tipc: Disabling bearer [ 473.158553][ T5897] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 473.210135][T14366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.221305][T14366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.432675][T14373] tipc: Enabling of bearer rejected, already enabled [ 473.519272][T14376] netlink: 'syz.1.1358': attribute type 1 has an invalid length. [ 473.543251][ T5897] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 473.587802][T14376] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 473.598885][T14376] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 473.630145][T14378] gretap1: entered promiscuous mode [ 473.638788][T14378] bond2: (slave gretap1): making interface the new active one [ 473.647245][T14378] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 473.684546][T14376] macvlan2: entered promiscuous mode [ 473.690082][T14376] macvlan2: entered allmulticast mode [ 473.697605][T14376] bond2: entered promiscuous mode [ 473.704917][T14376] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 473.714984][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 473.723474][ T5897] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 473.734075][ T5897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.745959][ T5897] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.746257][T14376] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 473.755475][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.792955][ T5897] usb 4-1: Product: syz [ 473.797443][ T5897] usb 4-1: Manufacturer: syz [ 473.802138][ T5897] usb 4-1: SerialNumber: syz [ 473.869121][T14376] bond2: left promiscuous mode [ 473.918318][T14380] tipc: Enabled bearer , priority 0 [ 473.927355][T14380] syzkaller0: entered promiscuous mode [ 473.932939][T14380] syzkaller0: entered allmulticast mode [ 473.968480][T14380] tipc: Resetting bearer [ 473.979406][T14379] tipc: Resetting bearer [ 474.016474][T14379] tipc: Disabling bearer [ 474.043953][ T5897] usb 4-1: 0:2 : does not exist [ 474.054345][ T5897] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 474.099139][ T5897] usb 4-1: USB disconnect, device number 28 [ 474.149635][ T8068] udevd[8068]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.283259][ T5907] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 474.354781][T14384] kvm: kvm [14383]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 474.376924][T14384] kvm: kvm [14383]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 474.433402][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 474.445914][ T5907] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 474.470028][ T5907] usb 3-1: config 0 has no interface number 0 [ 474.487730][ T5907] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.536677][ T5907] usb 3-1: config 0 interface 85 has no altsetting 0 [ 474.557031][ T5907] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 474.583168][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.591602][ T5907] usb 3-1: Product: syz [ 474.596158][ T5907] usb 3-1: Manufacturer: syz [ 474.600786][ T5907] usb 3-1: SerialNumber: syz [ 474.609595][ T5907] usb 3-1: config 0 descriptor?? [ 474.751745][T14392] tipc: Enabled bearer , priority 0 [ 474.760860][T14392] syzkaller0: entered promiscuous mode [ 474.766901][T14392] syzkaller0: entered allmulticast mode [ 474.827768][T14392] tipc: Resetting bearer [ 474.848191][T14391] tipc: Resetting bearer [ 474.963268][ T116] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 474.985205][T14391] tipc: Disabling bearer [ 475.103007][ T5907] appletouch 3-1:0.85: Geyser mode initialized. [ 475.121655][T14395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.167201][ T5907] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input20 [ 475.184594][ T116] usb 2-1: Using ep0 maxpacket: 8 [ 475.262477][ T116] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 475.271919][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.280314][ T116] usb 2-1: Product: syz [ 475.284851][ T116] usb 2-1: Manufacturer: syz [ 475.289679][ T116] usb 2-1: SerialNumber: syz [ 475.303703][ T116] usb 2-1: config 0 descriptor?? [ 475.437557][ T116] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 475.529045][ T5907] usb 3-1: USB disconnect, device number 30 [ 475.582810][ T5911] udevd[5911]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 475.640680][ T5907] appletouch 3-1:0.85: input: appletouch disconnected [ 475.809012][T14403] tipc: Enabled bearer , priority 0 [ 476.576024][ T116] gspca_sonixj: reg_r err -110 [ 476.582860][ T116] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 476.654269][T14406] syzkaller0: entered promiscuous mode [ 476.771109][T14406] syzkaller0: entered allmulticast mode [ 476.870544][T14403] tipc: Resetting bearer [ 476.876583][T14403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.884950][T14403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.962004][T14402] tipc: Resetting bearer [ 476.981269][T14402] tipc: Disabling bearer [ 477.507496][T14422] IPVS: length: 73 != 8023400 [ 477.518315][T14423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.527077][T14423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.079368][T14430] tipc: Enabled bearer , priority 0 [ 478.223785][T14431] syzkaller0: entered promiscuous mode [ 478.244056][ T5907] usb 2-1: USB disconnect, device number 25 [ 478.271688][T14431] syzkaller0: entered allmulticast mode [ 478.493701][T14437] tipc: Enabled bearer , priority 0 [ 478.549733][T14431] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1373'. [ 478.593625][T14433] syzkaller0: entered promiscuous mode [ 478.599180][T14433] syzkaller0: entered allmulticast mode [ 478.607447][T14430] tipc: Resetting bearer [ 478.614663][T14434] tipc: Resetting bearer [ 478.637320][T14429] tipc: Resetting bearer [ 478.793175][T14429] tipc: Disabling bearer [ 478.947786][T14432] tipc: Resetting bearer [ 478.973918][T14432] tipc: Disabling bearer [ 479.502854][T14454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.575029][T14454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.287001][T14459] tipc: Enabling of bearer rejected, already enabled [ 480.321915][T14459] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 480.416827][T14463] tipc: Enabled bearer , priority 0 [ 480.437798][T14463] syzkaller0: entered promiscuous mode [ 480.501711][T14463] syzkaller0: entered allmulticast mode [ 480.539804][T14463] tipc: Resetting bearer [ 480.562661][T14462] tipc: Resetting bearer [ 480.611575][T14462] tipc: Disabling bearer [ 482.015479][T14480] program syz.4.1386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.514294][ T116] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 482.721405][ T116] usb 2-1: config 0 has an invalid interface number: 102 but max is 0 [ 482.729698][ T116] usb 2-1: config 0 has no interface number 0 [ 482.736098][ T116] usb 2-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 482.745347][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.024122][ T116] usb 2-1: config 0 descriptor?? [ 483.870280][ T116] asix 2-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 483.889839][ T116] asix 2-1:0.102: probe with driver asix failed with error -71 [ 483.917251][T14513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1393'. [ 483.926477][T14513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1393'. [ 483.965485][ T116] usb 2-1: USB disconnect, device number 26 [ 483.981168][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'. [ 486.071902][T14529] netlink: 'syz.2.1397': attribute type 1 has an invalid length. [ 486.357352][T14531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.406952][T14539] Cannot find del_set index 1 as target [ 486.407874][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'. [ 486.426515][T14529] 8021q: adding VLAN 0 to HW filter on device bond3 [ 486.437594][T14529] bond2: (slave bond3): making interface the new active one [ 486.462606][T14529] bond2: (slave bond3): Enslaving as an active interface with an up link [ 486.475364][T14541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.492440][T14541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.568808][T14544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1397'. [ 486.610125][T14538] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 486.637452][T14544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.722860][T14568] kvm: kvm [14564]: vcpu0, guest rIP: 0x43c Unhandled WRMSR(0xc1) = 0x800 [ 488.737850][T14568] kvm: kvm [14564]: vcpu0, guest rIP: 0x43c Unhandled WRMSR(0xc2) = 0x800 [ 488.750167][T14568] kvm: kvm [14564]: vcpu0, guest rIP: 0x43c Unhandled WRMSR(0x11e) = 0xbe702911 [ 488.988955][T14568] kvm: kvm [14564]: vcpu0, guest rIP: 0x43c Unhandled WRMSR(0x186) = 0x800 [ 489.005230][T14568] kvm: kvm [14564]: vcpu0, guest rIP: 0x43c Unhandled WRMSR(0x187) = 0x800 [ 489.695485][T14576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.707076][T14576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.968309][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'. [ 490.093939][ T30] audit: type=1326 audit(1760649531.557:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.3.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 490.133731][ T30] audit: type=1326 audit(1760649531.567:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.3.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 490.166056][ T30] audit: type=1326 audit(1760649531.567:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.3.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 490.190045][ T30] audit: type=1326 audit(1760649531.567:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.3.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 490.212393][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.342151][ T30] audit: type=1326 audit(1760649531.567:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.3.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 490.543590][ T30] audit: type=1326 audit(1760649531.567:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.3.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 490.567433][ T30] audit: type=1326 audit(1760649531.567:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.3.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 490.591115][ T30] audit: type=1326 audit(1760649531.567:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.3.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 490.617271][T14593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.639579][T14593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.791108][ T30] audit: type=1326 audit(1760649531.567:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.3.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 490.845625][ T30] audit: type=1326 audit(1760649531.577:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14577 comm="syz.3.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e78eec9 code=0x7ffc0000 [ 491.085530][T14596] tipc: Enabled bearer , priority 0 [ 491.093748][T14596] syzkaller0: entered promiscuous mode [ 491.099232][T14596] syzkaller0: entered allmulticast mode [ 491.253445][T14596] tipc: Resetting bearer [ 491.363698][T14595] tipc: Resetting bearer [ 491.453513][T14595] tipc: Disabling bearer [ 494.103348][ T116] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 494.327241][ T116] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.354921][ T116] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 494.416572][ T116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.430876][ T116] usb 3-1: config 0 descriptor?? [ 494.445359][ T116] pwc: Askey VC010 type 2 USB webcam detected. [ 494.851828][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.862401][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.884606][ T116] pwc: recv_control_msg error -32 req 02 val 2b00 [ 494.900410][ T116] pwc: recv_control_msg error -32 req 02 val 2700 [ 494.909952][ T116] pwc: recv_control_msg error -32 req 02 val 2c00 [ 494.917915][ T116] pwc: recv_control_msg error -32 req 04 val 1000 [ 494.926085][ T116] pwc: recv_control_msg error -32 req 04 val 1300 [ 494.933482][ T116] pwc: recv_control_msg error -32 req 04 val 1400 [ 494.996999][ T116] pwc: recv_control_msg error -32 req 02 val 2000 [ 495.014997][ T116] pwc: recv_control_msg error -32 req 02 val 2100 [ 495.024684][ T116] pwc: recv_control_msg error -32 req 04 val 1500 [ 495.059025][ T116] pwc: recv_control_msg error -32 req 02 val 2500 [ 495.070800][ T116] pwc: recv_control_msg error -32 req 02 val 2400 [ 495.083755][ T116] pwc: recv_control_msg error -32 req 02 val 2600 [ 495.104279][ T116] pwc: recv_control_msg error -32 req 02 val 2900 [ 495.116710][ T116] pwc: recv_control_msg error -32 req 02 val 2800 [ 495.367093][ T116] pwc: recv_control_msg error -71 req 04 val 1200 [ 495.382509][ T116] pwc: Registered as video103. [ 495.393810][ T116] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 495.488417][ T116] usb 3-1: USB disconnect, device number 31 [ 496.691384][ T5907] IPVS: starting estimator thread 0... [ 496.784587][T14685] IPVS: using max 50 ests per chain, 120000 per kthread [ 497.114208][ T5907] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 497.295204][ T5907] usb 3-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 497.306800][ T5907] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.451011][ T5907] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.483018][ T5907] usb 3-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 497.510654][ T5907] usb 3-1: config 0 interface 0 has no altsetting 0 [ 497.526332][ T5907] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 497.543891][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.625520][ T5907] usb 3-1: config 0 descriptor?? [ 497.769282][T14698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.783831][T14698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 498.072532][T14700] kvm: kvm [14699]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2d00000800 [ 498.264719][T14704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1445'. [ 498.345387][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1445'. [ 498.508150][ T5907] uclogic 0003:5543:004D.000A: failed retrieving Huion firmware version: -71 [ 498.518223][ T5907] uclogic 0003:5543:004D.000A: failed probing parameters: -71 [ 498.525881][ T5907] uclogic 0003:5543:004D.000A: probe with driver uclogic failed with error -71 [ 498.537174][ T5907] usb 3-1: USB disconnect, device number 32 [ 501.445849][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.452155][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.164505][T14754] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1453'. [ 503.433189][ T5907] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 503.577515][T14764] binder: 14762:14764 ioctl c0306201 200000000180 returned -14 [ 503.635115][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 503.708652][ T5907] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 503.717187][ T5907] usb 2-1: config 0 has no interface number 0 [ 503.726022][ T5907] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 503.735556][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.776987][ T5907] usb 2-1: Product: syz [ 503.805290][ T5907] usb 2-1: Manufacturer: syz [ 503.839970][ T5907] usb 2-1: SerialNumber: syz [ 503.886509][ T5907] usb 2-1: config 0 descriptor?? [ 503.897213][ T5907] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 503.907525][ T5907] pctv452e: pctv452e_power_ctrl: 1 [ 503.907525][ T5907] [ 503.931274][ T5907] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 503.931274][ T5907] [ 503.983310][ T5907] dvb-usb: bulk message failed: -22 (5/0) [ 503.998775][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 504.021996][ T5907] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 504.030537][ T5907] usb 2-1: media controller created [ 504.036304][ T5907] dvb-usb: bulk message failed: -22 (8/0) [ 504.043308][ T5907] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 504.052705][ T5907] dvb-usb: MAC address reading failed. [ 504.084114][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.314971][ T5907] DVB: Unable to find symbol stb0899_attach() [ 504.322867][ T5907] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 504.413336][ T5907] rc_core: IR keymap rc-tt-1500 not found [ 504.424835][ T5907] Registered IR keymap rc-empty [ 504.437339][ T5907] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 504.451419][ T5907] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input22 [ 504.469195][ T5907] dvb-usb: schedule remote query interval to 100 msecs. [ 504.479946][ T5907] pctv452e: pctv452e_power_ctrl: 0 [ 504.479946][ T5907] [ 504.490404][ T5907] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 504.510207][ T5907] usb 2-1: USB disconnect, device number 27 [ 504.687768][ T5907] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 504.707030][T14789] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.1465'. [ 504.718400][T14789] openvswitch: netlink: EtherType 0 is less than min 600 [ 505.641954][T14796] cgroup: fork rejected by pids controller in /syz4 [ 508.986075][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 508.986092][ T30] audit: type=1326 audit(1760649550.417:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18233 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 509.131226][ T30] audit: type=1326 audit(1760649550.417:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18233 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 509.192486][T18243] syzkaller0: entered promiscuous mode [ 509.198351][T18243] syzkaller0: entered allmulticast mode [ 509.254415][ T30] audit: type=1326 audit(1760649550.417:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18233 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 509.279413][ T30] audit: type=1326 audit(1760649550.417:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18233 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 509.329626][ T30] audit: type=1326 audit(1760649550.417:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18233 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 509.358041][T18243] tipc: Enabled bearer , priority 0 [ 509.371006][T18242] tipc: Resetting bearer [ 509.379638][ T30] audit: type=1326 audit(1760649550.417:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18233 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 509.403390][ T30] audit: type=1326 audit(1760649550.417:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18233 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 509.428851][ T30] audit: type=1326 audit(1760649550.417:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18233 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 509.545909][ T30] audit: type=1326 audit(1760649550.427:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18233 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 509.569826][ T30] audit: type=1326 audit(1760649550.427:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18233 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f51c898eec9 code=0x7ffc0000 [ 509.604476][T18242] tipc: Disabling bearer [ 510.360147][T18258] tipc: Enabled bearer , priority 0 [ 510.378162][T18258] syzkaller0: entered promiscuous mode [ 510.397927][T18258] syzkaller0: entered allmulticast mode [ 510.507564][T18258] tipc: Resetting bearer [ 510.631514][T18257] tipc: Resetting bearer [ 510.669855][T18257] tipc: Disabling bearer [ 511.778784][ T5907] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 512.004480][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 512.049558][ T5907] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 512.081964][ T5907] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 512.124806][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.132960][ T5907] usb 2-1: Product: syz [ 512.138445][ T5907] usb 2-1: Manufacturer: syz [ 512.148725][ T5907] usb 2-1: SerialNumber: syz [ 512.184109][ T5907] usb 2-1: config 0 descriptor?? [ 512.195502][ T5907] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 512.209291][ T5907] usb 2-1: Detected FT232R [ 512.558056][ T5907] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 512.569785][ T5907] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 512.614319][ T5907] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 512.831373][ T5907] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 512.961818][ T5907] usb 2-1: USB disconnect, device number 28 [ 513.126387][ T5907] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 513.243401][ T5907] ftdi_sio 2-1:0.0: device disconnected [ 514.308420][T18295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.597672][T18303] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 514.844674][T18307] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 514.925066][ T60] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 514.946619][T18303] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.129772][T18303] veth5: entered promiscuous mode [ 515.141067][T18303] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 515.150835][ T7584] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 516.938972][T18338] all (unregistering): Released all slaves [ 517.353965][ T5907] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 517.469819][T18349] netlink: 'syz.4.1497': attribute type 13 has an invalid length. [ 518.219699][ T5907] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 518.229553][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.249792][ T5907] usb 3-1: Product: syz [ 518.263391][ T5907] usb 3-1: Manufacturer: syz [ 518.280143][ T5907] usb 3-1: SerialNumber: syz [ 518.348518][ T5907] usb 3-1: config 0 descriptor?? [ 518.828487][T18343] team0 (unregistering): Port device team_slave_0 removed [ 518.864907][T18343] team0 (unregistering): Port device team_slave_1 removed [ 519.046062][ T5907] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 519.095863][ T5907] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 519.292886][ T5907] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 519.330806][ T5907] usb 3-1: USB disconnect, device number 33 [ 519.634451][ T5908] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 519.895062][ T5908] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 519.904182][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.929932][ T5908] usb 4-1: config 0 descriptor?? [ 520.110230][T18374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.275536][T18374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.422667][ T5908] pegasus 4-1:0.0: setup Pegasus II specific registers [ 522.546709][ T5908] pegasus 4-1:0.0: can't locate MII phy, using default [ 522.647870][ T5908] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, e2:34:8e:ca:05:3c [ 522.659476][ T5908] usb 4-1: USB disconnect, device number 29 [ 524.544045][T18429] tipc: Enabling of bearer rejected, already enabled [ 527.363553][ T5908] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 527.523194][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 527.530503][ T5908] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 527.539022][ T5908] usb 2-1: config 0 has no interface number 0 [ 527.549160][ T5908] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 527.626390][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.945774][ T5908] usb 2-1: Product: syz [ 527.963190][ T5908] usb 2-1: Manufacturer: syz [ 527.973843][ T5908] usb 2-1: SerialNumber: syz [ 527.999756][ T5908] usb 2-1: config 0 descriptor?? [ 528.024535][ T5908] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 528.424254][ T5908] gspca_spca1528: reg_w err -71 [ 528.443187][ T5908] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 528.453738][ T5908] usb 2-1: USB disconnect, device number 29 [ 528.887722][T18474] tipc: Enabled bearer , priority 0 [ 528.897684][T18474] tipc: Resetting bearer [ 528.907162][T18473] tipc: Disabling bearer [ 529.097638][T18485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.100186][T18487] syz.2.1534 (18487): drop_caches: 2 [ 530.198443][T18501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1536'. [ 530.676736][T18508] tipc: Enabled bearer , priority 0 [ 530.684238][T18508] syzkaller0: entered promiscuous mode [ 530.689705][T18508] syzkaller0: entered allmulticast mode [ 530.714748][T18508] tipc: Resetting bearer [ 530.753040][T18507] tipc: Resetting bearer [ 530.791167][T18507] tipc: Disabling bearer [ 531.861759][T18523] tipc: Enabled bearer , priority 0 [ 531.950491][T18523] syzkaller0: entered promiscuous mode [ 531.969517][T18523] syzkaller0: entered allmulticast mode [ 532.116371][T18523] tipc: Resetting bearer [ 532.148724][T18522] tipc: Resetting bearer [ 532.258034][T18522] tipc: Disabling bearer [ 532.657264][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'. [ 533.132708][T18555] bond0: left promiscuous mode [ 533.141998][T18555] bond_slave_0: left promiscuous mode [ 533.153532][T18555] bond_slave_1: left promiscuous mode [ 533.159354][T18555] bond0: left allmulticast mode [ 533.177756][T18555] bond_slave_0: left allmulticast mode [ 533.187605][T18555] bond_slave_1: left allmulticast mode [ 533.226307][T18555] bridge2: left allmulticast mode [ 533.245229][T18555] gretap1: left promiscuous mode [ 534.691057][T18576] rtc_cmos 00:00: Alarms can be up to one day in the future [ 536.513518][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 537.285038][T18603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.295255][T18603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.823309][ T5829] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 539.140490][ T7610] ------------[ cut here ]------------ [ 539.146433][ T7610] WARNING: CPU: 1 PID: 7610 at io_uring/io_uring.c:3036 io_ring_exit_work+0x4ed/0x930 [ 539.156058][ T7610] Modules linked in: [ 539.160196][ T7610] CPU: 1 UID: 0 PID: 7610 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 539.169887][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 539.180021][ T7610] Workqueue: iou_exit io_ring_exit_work [ 539.185630][ T7610] RIP: 0010:io_ring_exit_work+0x4ed/0x930 [ 539.191366][ T7610] Code: c6 05 a2 40 5d 0e 01 48 c7 c7 40 0a be 8b be 24 00 00 00 48 c7 c2 e0 09 be 8b e8 6e ed 72 00 e9 7b fe ff ff e8 64 74 95 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 539.211088][ T7610] RSP: 0018:ffffc90002fc78c0 EFLAGS: 00010293 [ 539.217419][ T7610] RAX: ffffffff812acf8c RBX: 0000000100005cc1 RCX: ffff8880241d9e40 [ 539.225469][ T7610] RDX: 0000000000000000 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 539.233515][ T7610] RBP: ffffc90002fc7a50 R08: ffffc90002fc7847 R09: 1ffff920005f8f08 [ 539.241701][ T7610] R10: dffffc0000000000 R11: fffff520005f8f09 R12: 0000000100005cb8 [ 539.249903][ T7610] R13: ffff888067cb8310 R14: ffff888067cb8480 R15: dffffc0000000000 [ 539.257924][ T7610] FS: 0000000000000000(0000) GS:ffff888125e0b000(0000) knlGS:0000000000000000 [ 539.267122][ T7610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 539.273812][ T7610] CR2: 0000200000399030 CR3: 000000005836c000 CR4: 00000000003526f0 [ 539.281790][ T7610] Call Trace: [ 539.285249][ T7610] [ 539.288200][ T7610] ? __pfx_io_ring_exit_work+0x10/0x10 [ 539.293745][ T7610] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.298965][ T7610] ? process_scheduled_works+0x9ef/0x17b0 [ 539.304727][ T7610] ? process_scheduled_works+0x9ef/0x17b0 [ 539.310464][ T7610] process_scheduled_works+0xae1/0x17b0 [ 539.316119][ T7610] ? __pfx_process_scheduled_works+0x10/0x10 [ 539.322126][ T7610] worker_thread+0x8a0/0xda0 [ 539.326967][ T7610] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 539.333368][ T7610] ? __kthread_parkme+0x7b/0x200 [ 539.338302][ T7610] kthread+0x711/0x8a0 [ 539.342461][ T7610] ? __pfx_worker_thread+0x10/0x10 [ 539.347701][ T7610] ? __pfx_kthread+0x10/0x10 [ 539.352301][ T7610] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.357539][ T7610] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.362725][ T7610] ? __pfx_kthread+0x10/0x10 [ 539.367371][ T7610] ret_from_fork+0x4bc/0x870 [ 539.371949][ T7610] ? __pfx_ret_from_fork+0x10/0x10 [ 539.377073][ T7610] ? __switch_to_asm+0x39/0x70 [ 539.381828][ T7610] ? __switch_to_asm+0x33/0x70 [ 539.386607][ T7610] ? __pfx_kthread+0x10/0x10 [ 539.391179][ T7610] ret_from_fork_asm+0x1a/0x30 [ 539.395974][ T7610] [ 539.398976][ T7610] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 539.406242][ T7610] CPU: 1 UID: 0 PID: 7610 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 539.415761][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 539.425796][ T7610] Workqueue: iou_exit io_ring_exit_work [ 539.431328][ T7610] Call Trace: [ 539.434589][ T7610] [ 539.437501][ T7610] dump_stack_lvl+0x99/0x250 [ 539.442069][ T7610] ? __asan_memcpy+0x40/0x70 [ 539.446645][ T7610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.451829][ T7610] ? __pfx__printk+0x10/0x10 [ 539.456413][ T7610] vpanic+0x237/0x6d0 [ 539.460380][ T7610] ? __pfx_vpanic+0x10/0x10 [ 539.464868][ T7610] panic+0xb9/0xc0 [ 539.468574][ T7610] ? __pfx_panic+0x10/0x10 [ 539.472976][ T7610] __warn+0x31b/0x4b0 [ 539.476937][ T7610] ? io_ring_exit_work+0x4ed/0x930 [ 539.482030][ T7610] ? io_ring_exit_work+0x4ed/0x930 [ 539.487119][ T7610] report_bug+0x2be/0x4f0 [ 539.491428][ T7610] ? io_ring_exit_work+0x4ed/0x930 [ 539.496524][ T7610] ? io_ring_exit_work+0x4ed/0x930 [ 539.501614][ T7610] ? io_ring_exit_work+0x4ef/0x930 [ 539.506716][ T7610] handle_bug+0x84/0x160 [ 539.510953][ T7610] exc_invalid_op+0x1a/0x50 [ 539.515435][ T7610] asm_exc_invalid_op+0x1a/0x20 [ 539.520269][ T7610] RIP: 0010:io_ring_exit_work+0x4ed/0x930 [ 539.525971][ T7610] Code: c6 05 a2 40 5d 0e 01 48 c7 c7 40 0a be 8b be 24 00 00 00 48 c7 c2 e0 09 be 8b e8 6e ed 72 00 e9 7b fe ff ff e8 64 74 95 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 539.545555][ T7610] RSP: 0018:ffffc90002fc78c0 EFLAGS: 00010293 [ 539.551603][ T7610] RAX: ffffffff812acf8c RBX: 0000000100005cc1 RCX: ffff8880241d9e40 [ 539.559556][ T7610] RDX: 0000000000000000 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 539.567505][ T7610] RBP: ffffc90002fc7a50 R08: ffffc90002fc7847 R09: 1ffff920005f8f08 [ 539.575455][ T7610] R10: dffffc0000000000 R11: fffff520005f8f09 R12: 0000000100005cb8 [ 539.583413][ T7610] R13: ffff888067cb8310 R14: ffff888067cb8480 R15: dffffc0000000000 [ 539.591381][ T7610] ? io_ring_exit_work+0x4ec/0x930 [ 539.596497][ T7610] ? __pfx_io_ring_exit_work+0x10/0x10 [ 539.601959][ T7610] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.607166][ T7610] ? process_scheduled_works+0x9ef/0x17b0 [ 539.612881][ T7610] ? process_scheduled_works+0x9ef/0x17b0 [ 539.618602][ T7610] process_scheduled_works+0xae1/0x17b0 [ 539.624331][ T7610] ? __pfx_process_scheduled_works+0x10/0x10 [ 539.630307][ T7610] worker_thread+0x8a0/0xda0 [ 539.634884][ T7610] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 539.641201][ T7610] ? __kthread_parkme+0x7b/0x200 [ 539.646128][ T7610] kthread+0x711/0x8a0 [ 539.650192][ T7610] ? __pfx_worker_thread+0x10/0x10 [ 539.655317][ T7610] ? __pfx_kthread+0x10/0x10 [ 539.659917][ T7610] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.665124][ T7610] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.670302][ T7610] ? __pfx_kthread+0x10/0x10 [ 539.674883][ T7610] ret_from_fork+0x4bc/0x870 [ 539.679459][ T7610] ? __pfx_ret_from_fork+0x10/0x10 [ 539.684558][ T7610] ? __switch_to_asm+0x39/0x70 [ 539.689301][ T7610] ? __switch_to_asm+0x33/0x70 [ 539.694044][ T7610] ? __pfx_kthread+0x10/0x10 [ 539.698622][ T7610] ret_from_fork_asm+0x1a/0x30 [ 539.703391][ T7610] [ 539.706688][ T7610] Kernel Offset: disabled [ 539.711001][ T7610] Rebooting in 86400 seconds..