last executing test programs: 5m1.117429756s ago: executing program 0 (id=587): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) mmap(&(0x7f00006c4000/0x3000)=nil, 0x3000, 0x100000f, 0x80010, r2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e001"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x90) fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [{0x2, 0x2}, {0x2, 0x4}, {0x2, 0x1, 0xee01}], {0x4, 0x7}, [{0x8, 0x5}, {0x8, 0x6}, {0x8, 0x4}, {}], {}, {0x20, 0x4}}, 0x5c, 0x3) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffe) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="d8000000", @ANYRES16, @ANYBLOB="00012cbd7000fddbdf25040000000cb3038008000100040000006c0004803c0007800800040001000000080002004b33000008000200fdffffff08000200ff0f0000080003000008000008000200080000000800e9ff0a0000002c0007800800030001000000080003000200000008000200090000000800040004000000080001000f0000004c000380080003000900000008000008000300dd8c000008000200050000000800030001010000080002005d00000008000300ff0f00000800020072070000", @ANYRESOCT=r5], 0xd8}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008011) close(r3) r6 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_G_PARM(r6, 0xc0cc5615, &(0x7f0000000700)={0x4, @capture={0x0, 0x1, {0x8, 0x5}, 0x70, 0x8}}) mremap(&(0x7f0000608000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4m59.145490413s ago: executing program 0 (id=597): r0 = semget(0x1, 0x4, 0x69c) semop(r0, &(0x7f00000000c0)=[{0x3, 0x400, 0x800}, {0x1, 0xbbdd, 0x1000}, {0x3, 0x7fff, 0x800}], 0x3) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 4m59.032404651s ago: executing program 0 (id=598): r0 = semget(0x1, 0x4, 0x69c) semop(r0, &(0x7f00000000c0)=[{0x3, 0x400, 0x800}, {0x1, 0xbbdd, 0x1000}, {0x3, 0x7fff, 0x800}], 0x3) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) (fail_nth: 1) 4m58.435146596s ago: executing program 0 (id=601): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x148}}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000000c0)=0xffffffff, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000ac0), 0x480502, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00', 0x6}, 0x0, [0x400000, 0x0, 0x100000001, 0xfffffffffffffffe, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x1000000000000, 0x0, 0x10, 0x0, 0x0, 0x7fff, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000003, 0x6, 0x3, 0x0, 0x4, 0x0, 0x4, 0x0, 0x3, 0x7fffffffffffffc, 0x1, 0x8, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x97, 0x9, 0x3, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x9]}) r9 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$sock(r9, &(0x7f0000000600)={&(0x7f0000000580)=@hci={0x1f, 0x2}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000680)="31e2b4ce9f617d9893268baa133d40fa713d830ff14a3e9f43f154fe11c04b7170d62af1e876fe7a8be47a645c17525c10beb015d60eb9c517b1db52a1d1fc72356b700f6a440a14bbcc8a370a66d552a39e71e2dc860f9c4534", 0x5a}, {&(0x7f0000000700)="342040f27f85035733ca2d7071679277e556456e4bc41e9ffb92f1704b2997557786813fbebd356c64cfa7445ed7158a3cb15f476c77634b8e2a1d7191bdda25d650ae7766ec3899f47b20ae573bf83ced04818f05bb94c99462126b4fd7c7822c0475975f9c68a942e07865d41eaae224222ed78dd2a8c66083db9092e6f697fa5c793e9abe23e53ffe96778fccfd734c23dbeecb0abbaa3c7885fef52b56a27c", 0xa1}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f0000000100)="721400aae53810eadfdf7d03dbdb358d68f4f3f0", 0x14}, {&(0x7f00000007c0)="e5cda911cd2ee531bccc32c0d8059ba78bd3963a18b14db449d5f773a6154fe42dbf03dec7846f77c04c056849c83a2fd1992980a69126954067ef5fdba9aa4987011ad6f98a2fb005a55acd84d9ccb2d3102d2ee60e495e1851957e4d6668b896e6300c22063387922d91f4a1e12c850b873878cc56cfda1f95bb0c0765c7084b35112bc6009338f0a706fba869a9da1683d0cb1542021aabe6a41ebd79d81ece2672630e6d24251b7be3c9910045e99ded20dfa05e613426e4c348132f0a4ef952148d170098e3579f19ef86947d3b9f0b91b8c890d93e95fa7768818b", 0xde}, {&(0x7f0000000200)="71dbcc1b8822c359882ba60dea06ccebe705d6ff834192f4d923a9ca3fc38e223abc37c3ffeb878d9d5e31ae47daaa4e7360b8e6ae119be46c95cb7dbfca03d2", 0x40}, {&(0x7f00000008c0)="55d7d294502d27f9101659b389f12a593a398b2cf1208a33516b7cc0af74b8e073ba364392e926163e19b00a30957ec1f8ed3a4e8bbbbec104c2bcb66786c6f09310fada53ca99742635f3959baa303c5838e4bedb151ad0d2130b086bad55d8b6df452888ce343509", 0x69}, {&(0x7f0000000940)="91dc3b25b36c7593c7e43f240b8141f175d4055753aa28eb83de8123c5872f3c0cf067229f8f27e2cbca6efa8b448ba1ed63603eee8e481b6792ce5f0660f5036a0a74ad81dca4210c05f74ecd4631a404416f716a6db8546260d3713a90f772ba0a51f3bbc2116d311364ef0d60bd2315a3eb0eaf78318e7533776ec3bded5610f4e40016e123ade90d529dd7e2b47e5138133ecce3ee1cf24764b253f41d10d61447681d82664e3337f3e9be8fd8cdd7e61424ca88cf9f9e062035188a", 0xbe}, {&(0x7f0000000a00)="8ff1bcbc4ef0c4ac87dd1766caf795d7d9a64befdd1ef61bbd7c97c6a0694789fec0dea1e1c443af4b3e4089751a20559e89f7c0c8b0a40ae17d63980c42dda2952efc69dc748590782e10dfb33f67c0acb235b0e21c7a3922b1c3fed8331502a202eb669d08403d195ccf892e40c6223cfd8a29d217b90f5cbf10dcb7c9972826db2d94be6967b0239fd6c4ce6940387c353aae141594c81301a0b877204827", 0xa0}], 0xa, &(0x7f00000004c0)=[@txtime={{0x18, 0x1, 0x3d, 0x93}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}], 0x30}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01030000000000000000170000000e0001006e657464657673696d00001c0f0002"], 0x34}}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x100000000, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m57.296154313s ago: executing program 0 (id=603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect$uac1(0x2, 0x91, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x1, 0x0, 0x5c, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7bf9, 0x22}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x3, 0x9, 0x5, 0x9, 0x4b}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x206, 0x3, 0x1, 0x7, 0xff, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x80, 0x1, 0x6, {0x7, 0x25, 0x1, 0x4, 0x2, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xff, 0x6, 0x4, {0x7, 0x25, 0x1, 0xc, 0x10, 0x8}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000002c0)=0x79, 0x60) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8", 0x2}], 0x1}}], 0x1, 0x2090) 4m54.724513599s ago: executing program 0 (id=608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000540)={@multicast1, @private, 0x0}, &(0x7f0000000640)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', r5, 0x10, 0x8, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x9, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000020601000000000600000000000000"], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r7, 0x0, 0x4811) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b8, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000000580)=""/90) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000480)) r10 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x10001, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f00000006c0)=0xb, 0x9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4m54.503794274s ago: executing program 32 (id=608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000540)={@multicast1, @private, 0x0}, &(0x7f0000000640)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', r5, 0x10, 0x8, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x9, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000020601000000000600000000000000"], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r7, 0x0, 0x4811) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b8, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000000580)=""/90) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000480)) r10 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x10001, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f00000006c0)=0xb, 0x9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2m41.625489946s ago: executing program 2 (id=1530): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5], 0xe4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r6], 0x28}}, 0x0) 2m41.037439022s ago: executing program 2 (id=1534): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) keyctl$link(0x8, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m38.772706724s ago: executing program 2 (id=1545): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x701}], 0x1, 0x0, 0x0, 0x0) 2m37.76156285s ago: executing program 2 (id=1556): r0 = syz_open_dev$sg(0x0, 0x0, 0x400) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x58, 0xcd, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="238d7acf0800", 0x0, 0x0, 0x1b, 0x0, 0x0}) 2m37.670111859s ago: executing program 2 (id=1558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 2m37.562636542s ago: executing program 2 (id=1559): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r3, 0xe) landlock_restrict_self(r3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(r6, &(0x7f00000004c0)=""/67, 0x43) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 2m22.390838066s ago: executing program 33 (id=1559): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r3, 0xe) landlock_restrict_self(r3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(r6, &(0x7f00000004c0)=""/67, 0x43) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 9.810191971s ago: executing program 5 (id=2340): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x101, 0x63c, 0x1, 0x0, 0x7, 0x19f2, 0xfd, 0x19ed, 0x3, 0x6, 0x5, 0x2801, 0x2, 0x1000ba2, 0x0, 0x38, {0x1, 0xfffffffe}, 0xd1, 0x1}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) creat(&(0x7f0000000000)='./file0\x00', 0x14e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8.31947658s ago: executing program 5 (id=2342): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 7.032715608s ago: executing program 5 (id=2348): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3000) 6.885905025s ago: executing program 4 (id=2351): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x101, 0xb, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) 6.837569358s ago: executing program 5 (id=2352): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 6.746881463s ago: executing program 4 (id=2355): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x2) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000000), 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) keyctl$link(0x8, r3, r2) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000329bd7000fc5bdf25010000000500020002000000050004000208000005004f8793d2370bdb02000aef000000000a004e230000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d394490c200", 0xffffffffffffffeb) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000206010200000000000000000700000928d3ced9f8b054ac535c05e8fffaaefc027f527b48e195554f91455804ff4a1a005f191b"], 0x14}, 0x1, 0x0, 0x0, 0x6008000}, 0x8080) sendfile(r6, r7, 0x0, 0x100000500) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r9, 0x80015b12, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r10, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c", 0xad) socket$inet_tcp(0x2, 0x1, 0x0) 6.315024612s ago: executing program 1 (id=2357): syz_emit_ethernet(0x46, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.164854514s ago: executing program 6 (id=2358): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 5.725473257s ago: executing program 5 (id=2359): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0x6) getsockname$inet(r2, 0x0, &(0x7f0000002280)) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x8, 0x6e}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 5.369884205s ago: executing program 1 (id=2360): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={0x0, 0x8000}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="d3d0666d223e4686", 0x8) 5.230001625s ago: executing program 1 (id=2361): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x28c81, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x1, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0xc3, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x61b, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x27e, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/480], 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, 0x0, 0x0, 0x4) unshare(0x28000600) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x1, 0x2820000, 0x8001, 0x4, 0x7fff, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_LOCK(0x1e, r8, 0x0, 0x5003) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 4.873411913s ago: executing program 1 (id=2363): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 4.825158799s ago: executing program 6 (id=2364): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000001040)=""/203, 0xcb}], 0x1) 4.729176186s ago: executing program 1 (id=2365): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a\x00\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000380)) 3.675720593s ago: executing program 3 (id=2367): socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xa002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) fsopen(&(0x7f0000000300)='fusectl\x00', 0x0) io_uring_setup(0x1af0, &(0x7f0000000180)={0x0, 0xbc1f, 0x400, 0x1, 0x152}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) 3.560844787s ago: executing program 3 (id=2368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x7, "d58838068b"}]}}}}}}, 0x4a) 3.458368792s ago: executing program 3 (id=2369): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x5004}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x18) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000280)) 3.273941486s ago: executing program 4 (id=2370): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 2.853085194s ago: executing program 6 (id=2371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x854, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x824, 0x2, [@TCA_BASIC_POLICE={0x820, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7ff, 0x7, 0x8, 0x5, 0xc6b, 0x6, 0x4, 0x5, 0x3, 0x1, 0x8c15, 0x152a, 0x400, 0x3ff, 0xffff7fff, 0x4, 0x10001, 0x8, 0x1, 0x40800000, 0x4, 0xd129, 0x5ee, 0x1ff, 0x5, 0xffffff00, 0xffffffff, 0x7, 0x7fff, 0x400, 0x1, 0x9, 0x100, 0xff, 0x2, 0x80000000, 0x8, 0x2, 0x10000, 0xf6be, 0x5c0, 0x1ff, 0x8, 0xffffffff, 0x6, 0xdc, 0x8, 0x0, 0x7, 0x1, 0x3fe, 0x3, 0x6, 0x9, 0x8, 0x0, 0x6, 0x40000, 0x9, 0x8, 0x9, 0x6, 0x3, 0x7fffffff, 0x4001, 0x9, 0x9, 0xffffffff, 0x10001, 0x30, 0x40, 0x0, 0x4, 0x1, 0x0, 0xf6d1, 0x6, 0x10001, 0x1, 0x400, 0x33a, 0xf70, 0x40, 0x1, 0x1, 0x3, 0x1, 0x0, 0x7, 0x24, 0x2, 0x9, 0x4, 0x1, 0x6, 0x4, 0x0, 0x10, 0x71a1, 0x7fff, 0x8, 0x6, 0xb0, 0x100, 0x101, 0x4, 0x3c, 0xc, 0xb35f, 0x2, 0x9, 0x5, 0x8000, 0x7, 0x3, 0x7, 0x7, 0x8, 0x1, 0x9, 0x8, 0x1, 0x7, 0x5, 0x7, 0x56, 0x7f, 0x8, 0x36c, 0x0, 0xf9, 0x2, 0x4, 0xffff, 0x6, 0x4, 0xfffff000, 0x10001, 0x9, 0xa2, 0x80000000, 0x4, 0x1, 0xd2e, 0x9, 0x9, 0x3, 0x0, 0x9, 0x3, 0x8, 0x2, 0x3, 0x3, 0xfff, 0x0, 0x4, 0x7, 0x8, 0x7, 0x1000, 0x5000000, 0x8, 0x7, 0x101, 0x9, 0x9, 0x0, 0x8, 0x9, 0xb, 0x0, 0xc5, 0x1, 0x8, 0x9, 0x4, 0x5, 0x5, 0x3, 0x8, 0xc, 0x4, 0x5, 0x3, 0x0, 0x7, 0x2, 0x2400, 0xc, 0x8, 0x4, 0x4, 0x200, 0x1, 0x4255, 0x10001, 0xfde, 0x4, 0x6, 0x4, 0x100000, 0x0, 0x2caf, 0x2, 0x3, 0x0, 0xc8c, 0x7b50, 0x9, 0x7ff, 0x3ff, 0xfffffffe, 0x7, 0x40, 0x4, 0xcb5, 0x2, 0x20000, 0x6, 0x7, 0x9d6, 0xa, 0x2, 0x76162fc3, 0x9, 0x1, 0x0, 0x0, 0x8, 0xea, 0x81, 0x4, 0x100000, 0x8, 0x0, 0x7fb, 0x0, 0x2, 0x1c, 0x400, 0xf, 0x6d5, 0xffffffff, 0x80, 0x7fffffff, 0x0, 0x9, 0x1000, 0x10000, 0x3, 0x0, 0x6, 0x7, 0x31954adf]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x641, 0xffffffb0, 0x1, 0x2, 0x76, 0x0, 0x4, 0x3, 0x96cc, 0x101, 0x0, 0xffffffff, 0xfffff4b2, 0x6, 0x6, 0x4, 0x1, 0x4, 0x7, 0x5, 0x1, 0x4, 0x5, 0x4, 0x2, 0x3, 0xc, 0x6, 0x9, 0x8, 0x9, 0x400, 0x6, 0xfb, 0xe, 0x7618, 0x58a0bb92, 0x1, 0x0, 0x1, 0x7, 0x8, 0xfff, 0xabc, 0x771, 0x8, 0xffff, 0x3, 0x7ff, 0x4673, 0x5, 0x7, 0x5, 0x43a, 0x8001, 0x308, 0x3, 0x0, 0xffffffff, 0x4, 0xff, 0x100, 0x7fffffff, 0x354280aa, 0x7, 0xe82, 0x2, 0xbe75, 0x2, 0xbe14, 0x3, 0x52, 0x3ff, 0x5, 0x7, 0x1, 0x0, 0x3, 0x100, 0x5, 0xd, 0xfffff54d, 0x1, 0x0, 0x9, 0x1f, 0x9, 0x2000, 0x75, 0x8000, 0x80000001, 0x7, 0x2, 0x1, 0xffffffff, 0x2, 0x4, 0x1, 0x2, 0x6, 0x3, 0x7ff, 0xffffffff, 0x1000, 0x80, 0x2, 0x4000, 0x9, 0x3, 0x800, 0x1, 0x8, 0x800, 0x3a, 0x1, 0xffff, 0x1, 0x4, 0xff000000, 0xffff, 0x2, 0x0, 0x8, 0xfffffffd, 0x8, 0x5, 0x0, 0x1, 0x59e, 0xf, 0x4, 0x80000000, 0x100, 0x202, 0x6, 0x4, 0x5, 0x3, 0xffffffff, 0xf, 0x20000, 0x2, 0x1, 0x7, 0x3, 0x4, 0x3642, 0xe, 0x40, 0xfffff001, 0x2400000, 0x5, 0x2, 0x7f, 0x3, 0x5, 0x0, 0x1, 0x9, 0x247, 0x8, 0x3, 0x2, 0xc1, 0x7fffffff, 0x9, 0x0, 0x401, 0xb, 0x9, 0x5, 0x0, 0xb342, 0x10000, 0x5, 0x3, 0x5, 0x5, 0x6f, 0xff, 0x4cf5, 0x7f, 0x100, 0xd76, 0xc, 0x2, 0x35, 0x7f, 0x200, 0xa2, 0x6, 0x4, 0x0, 0x9, 0x0, 0x7, 0x4, 0x5, 0xfffffff1, 0xbc, 0x6, 0x7, 0x200, 0x1, 0x10000, 0x4, 0x9, 0x2, 0x1ff, 0x8, 0xceb9, 0x9, 0xa, 0x6, 0x9, 0x1, 0xfe4e, 0xb, 0x7, 0x400, 0x7, 0x10000, 0x1, 0x10000, 0x7, 0x20, 0xf9, 0x2, 0x8, 0xe0000, 0x6, 0x10, 0x7fffffff, 0x4a, 0xffffff72, 0x9, 0x7fffffff, 0x7, 0x8fc, 0x7, 0x6, 0x7, 0xe, 0x9, 0xe, 0xb, 0x8, 0x1, 0x2, 0xe, 0xc2b8, 0x10000, 0x7, 0x2, 0x2]}]}]}}]}, 0x854}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.72920175s ago: executing program 6 (id=2372): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) socket$netlink(0x10, 0x3, 0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) r3 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r3, 0x200004) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r6, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0xa, 0x4e22, 0x3, @empty, 0x4}, @ib={0x1b, 0x7f, 0xd4, {"cea31507e82abe3ab619f5d8000832d4"}, 0x4, 0x7, 0x3}}}, 0x118) close(r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000100)) 2.38323095s ago: executing program 3 (id=2373): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x101000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, &(0x7f0000000580)) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mknod(0x0, 0x4, 0x5) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x675, @dev={0xfe, 0x80, '\x00', 0x31}, 0x80000002}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]}) 2.231053644s ago: executing program 5 (id=2374): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1.780219736s ago: executing program 4 (id=2375): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 1.589458341s ago: executing program 1 (id=2376): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x0, 0x93, 0x8000, 0x4, 0x8a, 0xa4, 0xffb, 0x7, 0x8, 0xc3, 0x0, 0xd4200003, 0x3, 0x6, 0x6, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0xe, 0x6, 0x6, 0x0, 0x7, 0x5, 0x100000, 0x767, 0xc, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x80001c00, 0xb, 0x5, 0xa, 0x8, 0x8000100, 0x1fc00000, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x2, 0x7e, 0x6, 0x800a, 0xcd22, 0xf, 0xff, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x17ffff, 0x4003, 0x2fd, 0x9, 0x0, 0xf7, 0x5, 0x3, 0x6, 0x9, 0x10, 0x9, 0x6, 0xe, 0x4, 0x100002, 0x8, 0x80000752, 0x8, 0x3, 0x24, 0x10001, 0x313, 0x1, 0x6, 0x6, 0x9, 0x8, 0xfdffffef, 0xffffffff, 0x41, 0x1084, 0x100, 0x5, 0x252, 0x81, 0x1, 0xaa0c, 0x80, 0x5, 0x0, 0xb, 0x2, 0xd9a, 0xd, 0x2e2, 0xffffdffc, 0x43, 0x5, 0x9, 0x8, 0x3, 0x4, 0x2, 0x41a, 0x8, 0x9, 0x6, 0x401, 0x66d1, 0x9, 0x9, 0x8, 0x7, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) 1.536084218s ago: executing program 4 (id=2377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) write$sndseq(r6, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) readv(r7, &(0x7f0000000780)=[{0x0}], 0x1) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0x80045300, &(0x7f0000000040)) 1.162436257s ago: executing program 6 (id=2378): futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000100), 0x8c, 0x1, 0x0, &(0x7f00000001c0), 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4000) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xc}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x200}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44810}, 0x8040) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 319.211549ms ago: executing program 3 (id=2379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x7, "d58838068b"}]}}}}}}, 0x4a) 256.502268ms ago: executing program 6 (id=2380): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 97.868784ms ago: executing program 3 (id=2381): r0 = socket(0xa, 0x3, 0x3a) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f00000011c0)={0xfc, {"a483885aed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f073063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801118c20b8f16bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399ea4727d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a040200b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a64002bebc2407aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef64ab253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bf068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827475e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcb32b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba36b37767b6b45a44957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b94025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b03512629f46366e7205dd8d6f37525c1a0e94210dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9154f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d603994732d6b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21396532713e5b69cf767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285e6a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeaf1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b627cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e46a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5c92441918145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed608000000a006e39336d07c2b80817a28ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030f81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c00004f5d374755534d7f68f679c4ff516e9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00", 0x1000}}, 0xffbc) ioctl$VT_DISALLOCATE(r1, 0x5608) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RXATTRWALK(r2, &(0x7f00000001c0)={0xf, 0x1f, 0x2, 0x5}, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000180)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000003dc0)="65f3aa2e8c1e66baa00066ed360f017f54640fc7bdfcffffffc7442400cfae0000c74424027fb10000c7442406000000000f011c24de85dd000000ea05000000290178000fc72c5c", 0x48}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$kcm(0x29, 0x7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000080)={r7, @in={{0x2, 0x4e20, @broadcast}}}, 0x84) 0s ago: executing program 4 (id=2382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x854, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x824, 0x2, [@TCA_BASIC_POLICE={0x820, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7ff, 0x7, 0x8, 0x5, 0xc6b, 0x6, 0x4, 0x5, 0x3, 0x1, 0x8c15, 0x152a, 0x400, 0x3ff, 0xffff7fff, 0x4, 0x10001, 0x8, 0x1, 0x40800000, 0x4, 0xd129, 0x5ee, 0x1ff, 0x5, 0xffffff00, 0xffffffff, 0x7, 0x7fff, 0x400, 0x1, 0x9, 0x100, 0xff, 0x2, 0x80000000, 0x8, 0x2, 0x10000, 0xf6be, 0x5c0, 0x1ff, 0x8, 0xffffffff, 0x6, 0xdc, 0x8, 0x0, 0x7, 0x1, 0x3fe, 0x3, 0x6, 0x9, 0x8, 0x0, 0x6, 0x40000, 0x9, 0x8, 0x9, 0x6, 0x3, 0x7fffffff, 0x4001, 0x9, 0x9, 0xffffffff, 0x10001, 0x30, 0x40, 0x0, 0x4, 0x1, 0x0, 0xf6d1, 0x6, 0x10001, 0x1, 0x400, 0x33a, 0xf70, 0x40, 0x1, 0x1, 0x3, 0x1, 0x0, 0x7, 0x24, 0x2, 0x9, 0x4, 0x1, 0x6, 0x4, 0x0, 0x10, 0x71a1, 0x7fff, 0x8, 0x6, 0xb0, 0x100, 0x101, 0x4, 0x3c, 0xc, 0xb35f, 0x2, 0x9, 0x5, 0x8000, 0x7, 0x3, 0x7, 0x7, 0x8, 0x1, 0x9, 0x8, 0x1, 0x7, 0x5, 0x7, 0x56, 0x7f, 0x8, 0x36c, 0x0, 0xf9, 0x2, 0x4, 0xffff, 0x6, 0x4, 0xfffff000, 0x10001, 0x9, 0xa2, 0x80000000, 0x4, 0x1, 0xd2e, 0x9, 0x9, 0x3, 0x0, 0x9, 0x3, 0x8, 0x2, 0x3, 0x3, 0xfff, 0x0, 0x4, 0x7, 0x8, 0x7, 0x1000, 0x5000000, 0x8, 0x7, 0x101, 0x9, 0x9, 0x0, 0x8, 0x9, 0xb, 0x0, 0xc5, 0x1, 0x8, 0x9, 0x4, 0x5, 0x5, 0x3, 0x8, 0xc, 0x4, 0x5, 0x3, 0x0, 0x7, 0x2, 0x2400, 0xc, 0x8, 0x4, 0x4, 0x200, 0x1, 0x4255, 0x10001, 0xfde, 0x4, 0x6, 0x4, 0x100000, 0x0, 0x2caf, 0x2, 0x3, 0x0, 0xc8c, 0x7b50, 0x9, 0x7ff, 0x3ff, 0xfffffffe, 0x7, 0x40, 0x4, 0xcb5, 0x2, 0x20000, 0x6, 0x7, 0x9d6, 0xa, 0x2, 0x76162fc3, 0x9, 0x1, 0x0, 0x0, 0x8, 0xea, 0x81, 0x4, 0x100000, 0x8, 0x0, 0x7fb, 0x0, 0x2, 0x1c, 0x400, 0xf, 0x6d5, 0xffffffff, 0x80, 0x7fffffff, 0x0, 0x9, 0x1000, 0x10000, 0x3, 0x0, 0x6, 0x7, 0x31954adf]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x641, 0xffffffb0, 0x1, 0x2, 0x76, 0x0, 0x4, 0x3, 0x96cc, 0x101, 0x0, 0xffffffff, 0xfffff4b2, 0x6, 0x6, 0x4, 0x1, 0x4, 0x7, 0x5, 0x1, 0x4, 0x5, 0x4, 0x2, 0x3, 0xc, 0x6, 0x9, 0x8, 0x9, 0x400, 0x6, 0xfb, 0xe, 0x7618, 0x58a0bb92, 0x1, 0x0, 0x1, 0x7, 0x8, 0xfff, 0xabc, 0x771, 0x8, 0xffff, 0x3, 0x7ff, 0x4673, 0x5, 0x7, 0x5, 0x43a, 0x8001, 0x308, 0x3, 0x0, 0xffffffff, 0x4, 0xff, 0x100, 0x7fffffff, 0x354280aa, 0x7, 0xe82, 0x2, 0xbe75, 0x2, 0xbe14, 0x3, 0x52, 0x3ff, 0x5, 0x7, 0x1, 0x0, 0x3, 0x100, 0x5, 0xd, 0xfffff54d, 0x1, 0x0, 0x9, 0x1f, 0x9, 0x2000, 0x75, 0x8000, 0x80000001, 0x7, 0x2, 0x1, 0xffffffff, 0x2, 0x4, 0x1, 0x2, 0x6, 0x3, 0x7ff, 0xffffffff, 0x1000, 0x80, 0x2, 0x4000, 0x9, 0x3, 0x800, 0x1, 0x8, 0x800, 0x3a, 0x1, 0xffff, 0x1, 0x4, 0xff000000, 0xffff, 0x2, 0x0, 0x8, 0xfffffffd, 0x8, 0x5, 0x0, 0x1, 0x59e, 0xf, 0x4, 0x80000000, 0x100, 0x202, 0x6, 0x4, 0x5, 0x3, 0xffffffff, 0xf, 0x20000, 0x2, 0x1, 0x7, 0x3, 0x4, 0x3642, 0xe, 0x40, 0xfffff001, 0x2400000, 0x5, 0x2, 0x7f, 0x3, 0x5, 0x0, 0x1, 0x9, 0x247, 0x8, 0x3, 0x2, 0xc1, 0x7fffffff, 0x9, 0x0, 0x401, 0xb, 0x9, 0x5, 0x0, 0xb342, 0x10000, 0x5, 0x3, 0x5, 0x5, 0x6f, 0xff, 0x4cf5, 0x7f, 0x100, 0xd76, 0xc, 0x2, 0x35, 0x7f, 0x200, 0xa2, 0x6, 0x4, 0x0, 0x9, 0x0, 0x7, 0x4, 0x5, 0xfffffff1, 0xbc, 0x6, 0x7, 0x200, 0x1, 0x10000, 0x4, 0x9, 0x2, 0x1ff, 0x8, 0xceb9, 0x9, 0xa, 0x6, 0x9, 0x1, 0xfe4e, 0xb, 0x7, 0x400, 0x7, 0x10000, 0x1, 0x10000, 0x7, 0x20, 0xf9, 0x2, 0x8, 0xe0000, 0x6, 0x10, 0x7fffffff, 0x4a, 0xffffff72, 0x9, 0x7fffffff, 0x7, 0x8fc, 0x7, 0x6, 0x7, 0xe, 0x9, 0xe, 0xb, 0x8, 0x1, 0x2, 0xe, 0xc2b8, 0x10000, 0x7, 0x2, 0x2]}]}]}}]}, 0x854}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): free_cma:0 [ 296.232831][ T9907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.252670][ T9904] Node 0 active_anon:94864kB inactive_anon:0kB active_file:59176kB inactive_file:160032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133564kB dirty:2800kB writeback:0kB shmem:69704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12724kB pagetables:5400kB sec_pagetables:20kB all_unreclaimable? no Balloon:0kB [ 296.256699][ T9907] bond0 (unregistering): Released all slaves [ 296.376107][ T9904] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 296.482810][ T9904] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.741128][ T9904] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 296.748078][ T9904] Node 0 DMA32 free:1255596kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96964kB inactive_anon:0kB active_file:59176kB inactive_file:160032kB unevictable:1536kB writepending:2800kB zspages:0kB present:3129332kB managed:2552744kB mlocked:0kB bounce:0kB free_pcp:23084kB local_pcp:16200kB free_cma:0kB [ 296.940256][ T9904] lowmem_reserve[]: 0 0 0 0 0 [ 296.987832][ T9904] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 297.073447][ T9904] lowmem_reserve[]: 0 0 0 0 0 [ 297.117039][ T9904] Node 1 Normal free:3935312kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.349509][ T9904] lowmem_reserve[]: 0 0 0 0 0 [ 297.361665][ T9904] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 297.428611][ T9932] netlink: 4448 bytes leftover after parsing attributes in process `syz.2.1182'. [ 297.440543][ T9932] openvswitch: netlink: Flow key attr not present in new flow. [ 297.692468][ T9904] Node 0 DMA32: 2317*4kB (UE) 2191*8kB (UME) 853*16kB (UM) 103*32kB (UM) 124*64kB (UME) 84*128kB (UME) 34*256kB (UM) 33*512kB (UME) 17*1024kB (UM) 7*2048kB (UME) 275*4096kB (UM) = 1246172kB [ 297.736565][ T9904] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 297.809307][ T9904] Node 1 Normal: 8*4kB (U) 10*8kB (UM) 10*16kB (UM) 10*32kB (UM) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (UM) = 3935312kB [ 297.834970][ T9904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.848387][ T9904] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.858754][ T9904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.909972][ T9904] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.935324][ T9904] 75079 total pagecache pages [ 297.948434][ T9904] 0 pages in swap cache [ 297.960406][ T9904] Free swap = 124996kB [ 297.978700][ T9904] Total swap = 124996kB [ 297.995129][ T9904] 2097051 pages RAM [ 298.004033][ T9904] 0 pages HighMem/MovableOnly [ 298.034634][ T9904] 427030 pages reserved [ 298.047319][ T9904] 0 pages cma reserved [ 298.951494][ T9947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1189'. [ 301.587793][ T9993] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1202'. [ 301.637434][ T9995] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1202'. [ 301.662464][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'. [ 302.663516][T10015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1210'. [ 302.764044][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 302.984805][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.015228][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.042569][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 303.063841][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.103242][ T24] usb 3-1: config 0 descriptor?? [ 305.697301][ T9996] syz.4.1203 (9996): drop_caches: 1 [ 306.646009][T10065] mmap: syz.5.1226 (10065) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 306.662354][ T5895] IPVS: starting estimator thread 0... [ 306.684754][T10067] input: syz1 as /devices/virtual/input/input15 [ 306.789468][T10066] IPVS: using max 32 ests per chain, 76800 per kthread [ 307.130462][ T5908] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 307.303224][ T5908] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 307.391006][ T5908] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 307.439890][ T5908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 307.530880][ T5908] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 307.593945][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 307.645375][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 307.735202][ T5908] usb 4-1: string descriptor 0 read error: -22 [ 307.749785][ T5908] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 307.761269][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.874471][ T5908] usb 4-1: config 0 descriptor?? [ 307.898276][ T5908] hub 4-1:0.0: bad descriptor, ignoring hub [ 307.904817][ T5908] hub 4-1:0.0: probe with driver hub failed with error -5 [ 308.032907][T10081] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1232'. [ 308.762762][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.784112][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.827037][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1228'. [ 308.844214][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 310.140313][ T5895] usb 4-1: USB disconnect, device number 21 [ 310.686823][ T29] usb 3-1: USB disconnect, device number 26 [ 314.412447][ T1625] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 314.591421][ T1625] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 314.603854][ T1625] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 314.614135][ T1625] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.629714][ T1625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 314.654900][ T1625] usb 3-1: string descriptor 0 read error: -22 [ 314.671849][ T5888] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 314.682056][ T1625] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 314.701677][ T1625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.722559][ T30] audit: type=1326 audit(1773424416.127:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6c39c799 code=0x7ffc0000 [ 314.748927][ T1625] usb 3-1: config 0 descriptor?? [ 314.766353][ T1625] hub 3-1:0.0: bad descriptor, ignoring hub [ 314.778093][ T1625] hub 3-1:0.0: probe with driver hub failed with error -5 [ 314.790724][ T30] audit: type=1326 audit(1773424416.127:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6c39c42b code=0x7ffc0000 [ 314.833603][ T30] audit: type=1326 audit(1773424416.127:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6c39c42b code=0x7ffc0000 [ 314.868074][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.878663][ T5888] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 314.904682][ T30] audit: type=1326 audit(1773424416.127:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6c39c42b code=0x7ffc0000 [ 314.932688][ T5888] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 314.957246][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.985382][ T5888] usb 2-1: config 0 descriptor?? [ 315.009501][ T30] audit: type=1326 audit(1773424416.127:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6c39c42b code=0x7ffc0000 [ 315.059053][ T30] audit: type=1326 audit(1773424416.127:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6c39c42b code=0x7ffc0000 [ 315.112059][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 315.149009][ T30] audit: type=1326 audit(1773424416.127:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6c39c42b code=0x7ffc0000 [ 315.191952][ T30] audit: type=1326 audit(1773424416.127:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6c39c42b code=0x7ffc0000 [ 315.263854][ T30] audit: type=1326 audit(1773424416.127:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6c39c42b code=0x7ffc0000 [ 315.367553][ T30] audit: type=1326 audit(1773424416.127:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6c39c42b code=0x7ffc0000 [ 316.865819][T10269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1280'. [ 316.896248][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1280'. [ 316.990807][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1282'. [ 317.125311][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.135836][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.489691][ T24] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 317.744393][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.769321][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.771528][ T5888] usb 3-1: USB disconnect, device number 27 [ 317.781732][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.800800][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.800829][ T24] usb 6-1: Product: syz [ 317.800844][ T24] usb 6-1: Manufacturer: syz [ 317.800859][ T24] usb 6-1: SerialNumber: syz [ 317.921618][ T5888] usb 2-1: USB disconnect, device number 15 [ 318.550444][ T24] usb 6-1: 0:2 : does not exist [ 318.597225][ T24] usb 6-1: unit 6 not found! [ 319.063605][ T24] usb 6-1: USB disconnect, device number 4 [ 320.292741][T10330] syzkaller0: entered promiscuous mode [ 320.336750][T10330] syzkaller0: entered allmulticast mode [ 320.368667][T10330] tipc: Enabled bearer , priority 0 [ 320.402462][T10329] tipc: Resetting bearer [ 320.523456][T10329] tipc: Disabling bearer [ 322.560550][T10391] fuse: Bad value for 'fd' [ 322.572320][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1315'. [ 322.593518][T10391] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1315'. [ 323.338227][ T5888] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 323.611180][ T5888] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 323.655744][ T5888] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 323.688436][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 323.739701][ T5888] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 323.809175][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 323.821981][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 323.841458][ T5888] usb 2-1: string descriptor 0 read error: -22 [ 323.848302][ T5888] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 323.905936][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.933520][ T5888] usb 2-1: config 0 descriptor?? [ 323.980721][ T5888] hub 2-1:0.0: bad descriptor, ignoring hub [ 323.998679][ T5888] hub 2-1:0.0: probe with driver hub failed with error -5 [ 324.862389][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.871812][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.725657][T10453] input: syz0 as /devices/virtual/input/input16 [ 326.989903][ T1625] usb 2-1: USB disconnect, device number 16 [ 327.035347][ T5881] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 327.071168][ T5881] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.343535][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 327.502438][ T24] usb 4-1: config 0 has no interfaces? [ 327.508861][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.527845][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 327.557930][ T24] usb 4-1: SerialNumber: syz [ 327.575053][ T24] usb 4-1: config 0 descriptor?? [ 327.842172][ T1625] usb 4-1: USB disconnect, device number 22 [ 327.989524][ T5888] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 328.183250][T10487] fuse: Bad value for 'fd' [ 328.198754][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 328.231524][T10487] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1345'. [ 328.240803][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 328.251207][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.264682][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.296400][T10488] macsec1: entered promiscuous mode [ 328.301751][T10488] macvlan0: entered promiscuous mode [ 328.350109][ T5888] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 328.377730][T10488] macvlan0: left promiscuous mode [ 328.382999][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.396747][ T5888] usb 6-1: config 0 descriptor?? [ 329.401446][ T5888] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 329.408426][ T5888] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 329.415562][ T5895] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 329.525155][ T5888] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 329.574485][T10494] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1350'. [ 329.650545][ T5895] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 329.658868][ T5895] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 329.719490][ T5895] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 329.728705][ T5888] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 329.749476][ T5895] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 329.779516][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 329.809491][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 329.835576][ T5895] usb 4-1: string descriptor 0 read error: -22 [ 329.842462][ T5895] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 329.858264][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.909507][ T5895] usb 4-1: config 0 descriptor?? [ 329.916346][ T5895] hub 4-1:0.0: bad descriptor, ignoring hub [ 329.924280][ T5895] hub 4-1:0.0: probe with driver hub failed with error -5 [ 329.931959][ T5888] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 330.153416][T10471] ft260 0003:0403:6030.0009: ft260_i2c_read: failed with -38 [ 330.162759][ T24] usb 6-1: USB disconnect, device number 5 [ 330.241445][T10500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.254133][T10500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.032478][ T5888] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 332.209457][ T5888] usb 6-1: device descriptor read/64, error -71 [ 332.291069][ T5895] usb 4-1: USB disconnect, device number 23 [ 332.749498][ T5888] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 332.929618][ T5888] usb 6-1: device descriptor read/64, error -71 [ 332.973939][T10544] input: syz0 as /devices/virtual/input/input17 [ 333.047552][ T5888] usb usb6-port1: attempt power cycle [ 333.450989][ T5888] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 333.490355][ T5888] usb 6-1: device descriptor read/8, error -71 [ 333.729737][ T5888] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 333.760893][ T5888] usb 6-1: device descriptor read/8, error -71 [ 333.885867][ T5888] usb usb6-port1: unable to enumerate USB device [ 333.927922][T10568] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1376'. [ 334.059523][ T5888] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 334.221163][ T5888] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 334.247338][ T5888] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 334.269458][ T5888] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 334.288770][ T5888] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 334.310772][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 334.407911][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 334.459012][ T5888] usb 3-1: string descriptor 0 read error: -22 [ 334.474768][ T5888] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 334.492392][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.502600][ T5888] usb 3-1: config 0 descriptor?? [ 334.515536][ T5888] hub 3-1:0.0: bad descriptor, ignoring hub [ 334.524262][ T5888] hub 3-1:0.0: probe with driver hub failed with error -5 [ 334.851932][T10589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.861139][T10589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.269904][ T1625] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 336.454339][ T1625] usb 4-1: Using ep0 maxpacket: 32 [ 336.499517][ T5888] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 336.514800][T10625] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1398'. [ 336.524676][ T1625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.543605][ T1625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.548292][T10625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1398'. [ 336.573842][ T1625] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 336.592417][ T1625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.617672][ T1625] usb 4-1: config 0 descriptor?? [ 336.679769][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 336.694383][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.714551][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.796466][ T5888] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 336.845612][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.871956][ T5888] usb 2-1: config 0 descriptor?? [ 337.037895][ T1625] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 337.057523][ T1625] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 337.249070][ T1625] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 337.347283][ T5888] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 337.359309][ T5888] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 337.572051][ T1625] ft260 0003:0403:6030.000A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 337.719985][ T5888] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 337.751265][ T24] usb 3-1: USB disconnect, device number 28 [ 337.769149][ T1625] ft260 0003:0403:6030.000A: failed to retrieve status: -32, no wakeup [ 337.920146][ T5888] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 338.155616][ T5888] ft260 0003:0403:6030.000B: failed to retrieve status: -32, no wakeup [ 338.175341][T10608] i2c i2c-1: adapter quirk: too many messages (addr 0x0006, size 0, read) [ 338.330050][ T5888] usb 4-1: reset high-speed USB device number 24 using dummy_hcd [ 338.370923][T10618] ft260 0003:0403:6030.000A: ft260_i2c_read: failed with -38 [ 338.380006][ T5895] usb 2-1: USB disconnect, device number 17 [ 339.118304][ T1625] usb 4-1: USB disconnect, device number 24 [ 339.387360][T10671] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1414'. [ 339.578825][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1416'. [ 339.608952][T10678] netlink: 460 bytes leftover after parsing attributes in process `syz.5.1418'. [ 339.813829][T10689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1422'. [ 340.349020][ T1625] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 340.529695][ T1625] usb 6-1: Using ep0 maxpacket: 32 [ 340.550826][ T1625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.578074][ T1625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.643661][T10700] program syz.4.1425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.670010][ T1625] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 340.718782][ T1625] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.875547][ T1625] usb 6-1: config 0 descriptor?? [ 341.390565][ T1625] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 341.399472][ T1625] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 341.510065][T10718] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1433'. [ 341.566797][T10718] libceph: resolve '0..' (ret=-3): failed [ 341.582938][ T1625] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 341.948726][ T1625] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 341.976374][T10724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1436'. [ 342.151891][ T1625] ft260 0003:0403:6030.000C: failed to retrieve status: -32, no wakeup [ 342.366067][T10688] ft260 0003:0403:6030.000C: ft260_i2c_read: failed with -38 [ 342.376100][ T5888] usb 6-1: USB disconnect, device number 10 [ 342.399694][ T1625] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 342.569454][ T1625] usb 3-1: Using ep0 maxpacket: 32 [ 342.591094][ T1625] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 342.604078][ T1625] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 342.613425][ T1625] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 342.634953][ T1625] usb 3-1: Product: syz [ 342.639150][ T1625] usb 3-1: Manufacturer: syz [ 342.669515][ T1625] usb 3-1: SerialNumber: syz [ 342.682117][ T1625] usb 3-1: config 0 descriptor?? [ 342.706578][T10729] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 342.802983][T10747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1447'. [ 342.897716][T10751] program syz.4.1446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.539470][ T1625] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 343.711398][ T1625] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.722443][ T1625] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 343.742325][ T1625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.883038][ T1625] usb 4-1: config 0 descriptor?? [ 344.186790][ T1625] pwc: Askey VC010 type 2 USB webcam detected. [ 344.426934][ T1625] pwc: recv_control_msg error -32 req 02 val 2b00 [ 344.462166][ T1625] pwc: recv_control_msg error -32 req 02 val 2700 [ 344.509881][ T1625] pwc: recv_control_msg error -32 req 02 val 2c00 [ 344.540115][ T1625] pwc: recv_control_msg error -32 req 04 val 1000 [ 344.554801][ T1625] pwc: recv_control_msg error -32 req 04 val 1300 [ 344.570089][ T1625] pwc: recv_control_msg error -32 req 04 val 1400 [ 344.585735][ T1625] pwc: recv_control_msg error -32 req 02 val 2000 [ 344.631193][ T1625] pwc: recv_control_msg error -32 req 02 val 2100 [ 344.650252][ T1625] pwc: recv_control_msg error -32 req 04 val 1500 [ 344.679894][ T1625] pwc: recv_control_msg error -32 req 02 val 2500 [ 344.696589][ T1625] pwc: recv_control_msg error -32 req 02 val 2400 [ 344.723374][ T1625] pwc: recv_control_msg error -32 req 02 val 2600 [ 344.759470][ T29] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 344.799585][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 344.909481][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 344.927446][ T29] usb 2-1: config 0 has no interfaces? [ 344.938612][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 344.948260][ T1625] pwc: recv_control_msg error -71 req 02 val 2800 [ 344.959806][ T29] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 344.971318][ T29] usb 2-1: Manufacturer: syz [ 344.975668][ T1625] pwc: recv_control_msg error -71 req 04 val 1100 [ 345.008448][ T29] usb 2-1: config 0 descriptor?? [ 345.014224][ T1625] pwc: recv_control_msg error -71 req 04 val 1200 [ 345.043327][ T1625] pwc: Registered as video103. [ 345.044819][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1459'. [ 345.051920][ T1625] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 345.081309][ T1625] usb 4-1: USB disconnect, device number 25 [ 345.120766][ T5911] usb 3-1: USB disconnect, device number 29 [ 346.067859][T10809] dummy0: entered allmulticast mode [ 346.990081][ T5908] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 347.057221][T10824] fuse: Unknown parameter '0x00000000000000080000000000000000000000000000000000000000' [ 347.205703][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 347.217851][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.228267][ T5908] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 347.241000][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.254643][ T5908] usb 4-1: config 0 descriptor?? [ 347.340215][ T29] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 347.407371][ T5911] usb 2-1: USB disconnect, device number 18 [ 347.504782][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.520323][ T29] usb 3-1: config 0 has no interfaces? [ 347.547867][ T29] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 347.559645][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.568904][ T29] usb 3-1: Product: syz [ 347.579201][ T29] usb 3-1: Manufacturer: syz [ 347.590852][ T29] usb 3-1: SerialNumber: syz [ 347.614627][ T29] usb 3-1: config 0 descriptor?? [ 347.685783][ T5908] elan 0003:04F3:0755.000D: failed to start in urb: -90 [ 347.691838][T10839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1481'. [ 347.742010][ T5908] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 347.904954][T10815] netlink: 'syz.3.1471': attribute type 1 has an invalid length. [ 347.923021][T10815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.963659][ T24] usb 4-1: USB disconnect, device number 26 [ 348.068128][T10844] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 348.188948][T10850] program syz.1.1483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.527445][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1488'. [ 349.133824][T10862] netlink: 460 bytes leftover after parsing attributes in process `syz.4.1490'. [ 349.903916][ T5908] usb 3-1: USB disconnect, device number 30 [ 350.314990][T10885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1499'. [ 350.410043][T10888] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1500'. [ 350.545466][ T5911] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 350.609947][ T5911] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 350.930994][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 351.189997][ T24] usb 2-1: config 0 has no interfaces? [ 351.198281][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.209244][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 351.217589][ T24] usb 2-1: SerialNumber: syz [ 351.237730][ T24] usb 2-1: config 0 descriptor?? [ 351.590107][ T24] usb 2-1: USB disconnect, device number 19 [ 351.650544][T10919] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1514'. [ 351.892401][T10929] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1517'. [ 352.017317][T10930] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1517'. [ 352.103938][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1517'. [ 353.452246][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1524'. [ 353.901952][T10965] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1530'. [ 353.955971][T10966] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1530'. [ 354.009233][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1530'. [ 354.066617][T10972] Set syz1 is full, maxelem 237 reached [ 355.592140][T10998] program syz.3.1536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.301473][ T29] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 356.321735][ T29] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 356.589469][ T5888] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 356.796793][ T5888] usb 6-1: config 0 has no interfaces? [ 356.817167][ T5888] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.838356][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 356.859695][ T5888] usb 6-1: SerialNumber: syz [ 356.877383][ T5888] usb 6-1: config 0 descriptor?? [ 357.141584][ T29] usb 6-1: USB disconnect, device number 11 [ 358.091351][T11052] program syz.4.1557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.429964][ T5911] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 359.481344][ T5911] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 359.679823][ T5908] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 359.860114][ T5908] usb 4-1: config 0 has no interfaces? [ 359.878132][ T5908] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 359.913377][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 359.944171][ T5908] usb 4-1: SerialNumber: syz [ 360.003051][ T5908] usb 4-1: config 0 descriptor?? [ 360.636633][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 360.780396][T11071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1564'. [ 360.831735][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 360.863487][T11082] fuse: Bad value for 'fd' [ 360.877687][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1567'. [ 360.908073][T11082] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1567'. [ 361.154222][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 361.163879][ T10] usb 2-1: config 4 interface 0 has no altsetting 0 [ 361.181282][ T10] usb 2-1: string descriptor 0 read error: -22 [ 361.187725][ T10] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 361.207249][ T10] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 361.312375][ T10] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 361.353190][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 361.416528][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 361.432540][ T10] usb 2-1: media controller created [ 361.469926][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.506880][T11075] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 361.513522][T11075] usb 2-1: dvb_usb_au6610: wlen=83, aborting [ 362.288260][ T5908] usb 4-1: USB disconnect, device number 27 [ 362.640131][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 363.186518][T11111] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 363.446397][ T10] usb 2-1: USB disconnect, device number 20 [ 364.499533][ T10] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 364.670899][ T10] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 364.702200][ T10] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 364.727513][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 364.738895][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 364.752184][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.794333][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 364.816267][ T10] usb 2-1: string descriptor 0 read error: -22 [ 364.822994][ T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 364.833905][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.849546][ T10] usb 2-1: config 0 descriptor?? [ 364.890137][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 364.936200][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 365.671261][T11151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.680352][T11151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.975805][T11176] program syz.5.1601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.850528][ T29] usb 2-1: USB disconnect, device number 21 [ 368.924885][T11206] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1610'. [ 370.669951][ T10] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 370.852089][ T10] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 370.867296][ T10] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 370.937614][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 370.972601][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 370.984662][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 370.998348][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 371.016213][ T10] usb 4-1: string descriptor 0 read error: -22 [ 371.023308][ T10] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 371.032981][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.054737][ T10] usb 4-1: config 0 descriptor?? [ 371.063556][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 371.071059][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 371.382789][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.393940][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.616621][T11248] binder: 11247:11248 ioctl 4008ae89 200000000100 returned -22 [ 371.876591][T11253] syzkaller1: entered promiscuous mode [ 371.912454][T11253] syzkaller1: entered allmulticast mode [ 372.178058][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 372.178076][ T30] audit: type=1326 audit(1773424473.557:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.5.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3e59c799 code=0x7ffc0000 [ 372.357840][ T30] audit: type=1326 audit(1773424473.557:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.5.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3e59c799 code=0x7ffc0000 [ 372.554633][ T30] audit: type=1326 audit(1773424473.557:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.5.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fca3e59c799 code=0x7ffc0000 [ 372.580999][ T30] audit: type=1326 audit(1773424473.557:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.5.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3e59c799 code=0x7ffc0000 [ 372.767614][ T30] audit: type=1326 audit(1773424473.557:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.5.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3e59c799 code=0x7ffc0000 [ 372.961539][ T30] audit: type=1326 audit(1773424473.557:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.5.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca3e55cfce code=0x7ffc0000 [ 373.076104][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1635'. [ 373.087248][T11271] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.159479][ T30] audit: type=1326 audit(1773424473.567:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.5.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3e59c799 code=0x7ffc0000 [ 373.303648][ T30] audit: type=1326 audit(1773424473.567:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.5.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3e59c799 code=0x7ffc0000 [ 373.370265][T11278] binder: 11277:11278 ioctl 4008ae89 200000000100 returned -22 [ 373.429453][ T30] audit: type=1326 audit(1773424473.567:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.5.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fca3e59c799 code=0x7ffc0000 [ 373.585205][ T30] audit: type=1326 audit(1773424473.567:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.5.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3e59c799 code=0x7ffc0000 [ 373.624763][ T10] usb 4-1: USB disconnect, device number 28 [ 374.257084][T11293] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1642'. [ 374.279488][ T1625] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 374.442636][ T1625] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 374.450974][ T1625] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.518800][ T1625] usb 2-1: config 0 has no interface number 0 [ 374.555746][ T1625] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 374.574361][ T1625] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 374.586157][ T1625] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 374.598092][ T1625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.607039][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.617169][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.626748][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.648985][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.657774][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.666822][ T1625] usb 2-1: config 0 descriptor?? [ 374.687820][T11289] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 374.738308][ T1625] ldusb 2-1:0.55: Interrupt in endpoint not found [ 375.378136][T11305] chnl_net:caif_netlink_parms(): no params data found [ 375.549950][T11320] fuse: Bad value for 'fd' [ 375.558053][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1649'. [ 375.751455][T11320] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1649'. [ 375.828963][T11305] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.899853][T11305] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.920388][T11305] bridge_slave_0: entered allmulticast mode [ 375.941996][T11305] bridge_slave_0: entered promiscuous mode [ 375.957951][T11305] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.978154][T11305] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.998496][T11305] bridge_slave_1: entered allmulticast mode [ 376.019840][T11305] bridge_slave_1: entered promiscuous mode [ 376.049605][ T29] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 376.120873][T11305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.146056][T11305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.211180][ T29] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 376.219819][ T29] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 376.256001][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 376.280917][T11305] team0: Port device team_slave_0 added [ 376.287754][ T29] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 376.290850][T11305] team0: Port device team_slave_1 added [ 376.327002][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.359669][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 376.391941][ T29] usb 5-1: string descriptor 0 read error: -22 [ 376.399711][ T29] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 376.426794][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.447451][ T29] usb 5-1: config 0 descriptor?? [ 376.466140][ T29] hub 5-1:0.0: bad descriptor, ignoring hub [ 376.475027][ T29] hub 5-1:0.0: probe with driver hub failed with error -5 [ 376.489657][T11305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.501582][T11305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.576520][T11305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.607974][T11305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.618162][T11305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.645824][T11305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.719566][ T5829] Bluetooth: hci5: command tx timeout [ 376.728505][T11305] hsr_slave_0: entered promiscuous mode [ 376.735598][T11305] hsr_slave_1: entered promiscuous mode [ 376.742516][T11305] debugfs: 'hsr0' already exists in 'hsr' [ 376.748425][T11305] Cannot create hsr debugfs directory [ 376.790583][T11335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.799813][T11335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.880300][T11334] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1653'. [ 376.899569][ T5888] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 377.201677][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 377.217952][ T5888] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 377.242748][ T5888] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 377.252043][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 377.266687][ T5888] usb 6-1: Product: syz [ 377.276143][ T5888] usb 6-1: Manufacturer: syz [ 377.306013][ T10] usb 2-1: USB disconnect, device number 22 [ 377.340692][ T5888] usb 6-1: SerialNumber: syz [ 377.364474][ T5888] usb 6-1: config 0 descriptor?? [ 377.386180][T11331] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 377.450726][ T5908] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 377.488158][T11305] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 377.524958][T11305] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 377.541575][T11305] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 377.553685][T11305] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 377.629756][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 377.638555][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.649831][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.668615][ T5908] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 377.713116][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.782709][ T5908] usb 4-1: config 0 descriptor?? [ 377.782968][T11305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.836757][T11305] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.900477][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.907631][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.951997][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.959234][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.148936][T11305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.205819][ T5908] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 378.217175][ T5908] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 378.320632][T11305] veth0_vlan: entered promiscuous mode [ 378.343682][T11305] veth1_vlan: entered promiscuous mode [ 378.384846][T11305] veth0_macvtap: entered promiscuous mode [ 378.413909][ T5908] ft260 0003:0403:6030.0011: chip code: 0000 0000 [ 378.415486][T11305] veth1_macvtap: entered promiscuous mode [ 378.446388][T11305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.466485][T11305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.499846][ T8120] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.514103][ T8120] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.527317][ T8120] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.538728][ T8120] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.563815][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.571788][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.614910][ T5908] ft260 0003:0403:6030.0011: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 378.799654][ T5829] Bluetooth: hci5: command tx timeout [ 379.071943][ T5908] ft260 0003:0403:6030.0011: failed to retrieve status: -71 [ 379.133068][ T5908] ft260 0003:0403:6030.0011: failed to reset I2C controller: -71 [ 379.151821][ T8120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.162581][ T5908] usb 4-1: USB disconnect, device number 29 [ 379.168520][ T8120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.242481][ T8115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.251127][ T8115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.589769][ T10] usb 6-1: USB disconnect, device number 12 [ 379.749747][ T5911] usb 5-1: USB disconnect, device number 27 [ 379.853634][T11366] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1663'. [ 380.553919][ T5911] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 380.608858][T11396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.720616][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 380.738961][ T5911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 380.761054][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 380.772676][ T5911] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 380.800689][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 380.814402][ T5911] usb 4-1: Product: syz [ 380.829996][ T5911] usb 4-1: Manufacturer: syz [ 380.834657][ T5911] usb 4-1: SerialNumber: syz [ 380.856529][ T5911] usb 4-1: config 0 descriptor?? [ 380.869594][T11387] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 380.880004][ T5829] Bluetooth: hci5: command tx timeout [ 380.950513][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 380.995234][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.006826][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.035890][T11405] input: syz0 as /devices/virtual/input/input21 [ 381.049608][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 381.118050][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.158463][ T10] usb 2-1: config 0 descriptor?? [ 381.603268][ T10] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 381.619669][ T10] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 381.799732][T11417] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1681'. [ 381.860876][ T10] ft260 0003:0403:6030.0012: chip code: 0000 0000 [ 382.061333][ T10] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 382.474032][ T10] ft260 0003:0403:6030.0012: failed to retrieve status: -71 [ 382.488689][ T10] ft260 0003:0403:6030.0012: failed to reset I2C controller: -71 [ 382.633164][ T10] usb 2-1: USB disconnect, device number 23 [ 382.663631][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1684'. [ 382.800519][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 382.800537][ T30] audit: type=1326 audit(1773424484.197:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 382.830092][ T30] audit: type=1326 audit(1773424484.197:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 382.858409][ T30] audit: type=1326 audit(1773424484.197:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 382.885609][ T30] audit: type=1326 audit(1773424484.197:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 382.963858][ T5829] Bluetooth: hci5: command tx timeout [ 382.992294][ T30] audit: type=1326 audit(1773424484.197:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 383.176883][ T30] audit: type=1326 audit(1773424484.197:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 383.203369][ T30] audit: type=1326 audit(1773424484.197:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 383.243541][ T29] usb 4-1: USB disconnect, device number 30 [ 383.244013][ T30] audit: type=1326 audit(1773424484.197:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.4.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 384.026942][ T5911] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 384.129616][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 384.145047][ T5911] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 384.161706][ T5911] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 384.254397][ T5908] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 384.284755][ T5911] hid-generic 0003:0004:0000.0013: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 384.321273][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 384.469479][ T5908] usb 7-1: Using ep0 maxpacket: 32 [ 384.469931][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.476897][ T5908] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 384.549119][ T5908] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 384.565154][T11459] fido_id[11459]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 384.605954][ T5908] usb 7-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=da.59 [ 384.616897][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.672774][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.678279][ T5908] usb 7-1: Product: syz [ 384.693219][ T5908] usb 7-1: Manufacturer: syz [ 384.730213][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 384.739294][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.769427][ T5908] usb 7-1: SerialNumber: syz [ 384.788728][ T10] usb 2-1: config 0 descriptor?? [ 384.818606][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 385.000661][T11451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.008405][T11451] IPv6: NLM_F_CREATE should be set when creating new route [ 385.145605][T11451] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.153359][T11451] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.472488][T11451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.696796][T11451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.763943][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 386.063750][ T8127] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.077132][ T5908] usb 7-1: USB disconnect, device number 2 [ 386.097039][ T8127] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.165245][ T8127] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.174437][ T8127] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.444236][ T30] audit: type=1326 audit(1773424487.777:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3e59c799 code=0x7ffc0000 [ 386.515297][ T30] audit: type=1326 audit(1773424487.777:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.5.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3e59c799 code=0x7ffc0000 [ 386.537156][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1710'. [ 386.695366][T11531] IPVS: length: 528 != 8 [ 387.141371][T11492] usb 2-1: USB disconnect, device number 24 [ 388.509495][ T5895] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 388.699423][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 388.712772][ T5895] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 388.829550][ T5895] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.854032][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.864931][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.888586][ T5895] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.949051][ T5895] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 388.968399][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.355190][T11571] netlink: 'syz.6.1724': attribute type 3 has an invalid length. [ 389.609767][ T5895] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 389.759927][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 389.777129][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.801568][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.867779][ T5895] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 389.908899][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.951713][ T5895] usb 5-1: config 0 descriptor?? [ 390.400575][ T5895] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 391.229476][ T5895] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 391.249237][ T5881] usb 2-1: USB disconnect, device number 25 [ 391.415855][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 391.421121][T11490] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 391.431982][ T5895] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 391.446003][ T5895] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 391.459429][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 391.474173][ T5895] usb 4-1: Product: syz [ 391.479737][ T5895] usb 4-1: Manufacturer: syz [ 391.570406][ T5895] usb 4-1: SerialNumber: syz [ 391.581296][ T5895] usb 4-1: config 0 descriptor?? [ 391.590339][T11588] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 391.659465][T11490] usb 7-1: Using ep0 maxpacket: 32 [ 391.673439][T11490] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.703219][T11490] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.723341][T11490] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 391.750823][T11490] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.776794][T11490] usb 7-1: config 0 descriptor?? [ 392.371502][T11490] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 392.396965][T11490] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 392.561013][T11490] ft260 0003:0403:6030.0014: chip code: 0000 0000 [ 392.606257][T11613] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1737'. [ 392.761724][T11490] ft260 0003:0403:6030.0014: failed to retrieve system status [ 392.777081][T11490] ft260 0003:0403:6030.0014: probe with driver ft260 failed with error -32 [ 392.832217][T11490] usb 5-1: USB disconnect, device number 28 [ 393.011740][T11621] program syz.5.1739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.807510][ T5895] usb 4-1: USB disconnect, device number 31 [ 394.089707][T11632] binder: 11628:11632 unknown command 813332851 [ 394.117965][T11632] binder: 11628:11632 ioctl c0306201 200000000080 returned -22 [ 394.236129][ T5910] usb 7-1: USB disconnect, device number 3 [ 394.640356][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 394.859677][T11492] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 394.913469][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 394.913487][ T30] audit: type=1326 audit(1773424496.317:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6c39c799 code=0x7ffc0000 [ 394.972046][ T30] audit: type=1326 audit(1773424496.317:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6c39c799 code=0x7ffc0000 [ 395.019505][ T30] audit: type=1326 audit(1773424496.347:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2b6c39c799 code=0x7ffc0000 [ 395.041088][T11492] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.065008][T11492] usb 7-1: config 0 has no interfaces? [ 395.077725][T11492] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.086847][ T30] audit: type=1326 audit(1773424496.347:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6c39c799 code=0x7ffc0000 [ 395.086891][ T30] audit: type=1326 audit(1773424496.347:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6c39c799 code=0x7ffc0000 [ 395.159556][ T30] audit: type=1326 audit(1773424496.397:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2b6c39c799 code=0x7ffc0000 [ 395.211862][T11657] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1748'. [ 395.227276][T11492] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.236790][T11492] usb 7-1: Product: syz [ 395.256324][T11492] usb 7-1: Manufacturer: syz [ 395.261091][ T30] audit: type=1326 audit(1773424496.397:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6c39c799 code=0x7ffc0000 [ 395.283506][T11492] usb 7-1: SerialNumber: syz [ 395.290172][T11492] usb 7-1: config 0 descriptor?? [ 395.316683][ T30] audit: type=1326 audit(1773424496.407:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6c39c799 code=0x7ffc0000 [ 395.479469][ T5895] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 395.608240][T11671] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1754'. [ 395.639451][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 395.649772][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 395.740034][ T5895] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 395.767612][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.097779][ T5895] usb 6-1: config 0 descriptor?? [ 396.117412][ T5895] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 397.107759][T11692] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1762'. [ 397.160276][T11694] geneve1: entered allmulticast mode [ 397.265477][ T5895] IPVS: starting estimator thread 0... [ 397.431032][ T5881] usb 7-1: USB disconnect, device number 4 [ 397.452618][T11698] IPVS: using max 37 ests per chain, 88800 per kthread [ 398.408083][T11492] usb 6-1: USB disconnect, device number 13 [ 400.669452][T11492] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 400.825666][T11492] usb 2-1: Using ep0 maxpacket: 8 [ 400.875522][T11492] usb 2-1: unable to get BOS descriptor or descriptor too short [ 400.916482][T11492] usb 2-1: config 4 interface 0 has no altsetting 0 [ 400.948845][T11492] usb 2-1: string descriptor 0 read error: -22 [ 400.966487][T11492] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 401.063400][T11492] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 401.169126][T11492] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 401.198481][T11492] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 401.240936][T11492] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 401.248695][T11492] usb 2-1: media controller created [ 401.315458][T11492] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.327509][T11740] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 401.333867][T11740] usb 2-1: dvb_usb_au6610: wlen=83, aborting [ 401.475646][ T5895] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 401.689530][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 401.700136][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 401.990496][ T5895] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 402.056646][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.175284][ T5895] usb 6-1: config 0 descriptor?? [ 402.323237][ T5895] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 402.481009][T11492] zl10353_read_register: readreg error (reg=127, ret==0) [ 404.125890][T11492] usb 2-1: USB disconnect, device number 26 [ 404.448361][ T5881] usb 6-1: USB disconnect, device number 14 [ 405.999283][T11833] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1811'. [ 406.029501][ T5881] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 406.188540][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 407.051254][T11844] program syz.4.1814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.069584][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 407.109147][ T5881] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 407.123764][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.265666][ T5881] usb 6-1: config 0 descriptor?? [ 407.289910][ T5881] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 407.801243][T11865] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1822'. [ 409.232050][T11893] binder: 11892:11893 ioctl 4008ae89 200000000100 returned -22 [ 409.339466][T11490] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 409.499477][T11490] usb 4-1: Using ep0 maxpacket: 32 [ 409.507309][T11490] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 409.553514][T11490] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 409.561702][T11902] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1835'. [ 409.563051][T11490] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 409.589713][T11490] usb 4-1: Product: syz [ 409.594338][T11490] usb 4-1: Manufacturer: syz [ 409.617918][T11490] usb 4-1: SerialNumber: syz [ 409.632291][T11490] usb 4-1: config 0 descriptor?? [ 409.642272][T11889] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 409.753758][T11490] usb 6-1: USB disconnect, device number 15 [ 409.931220][T11918] binder: 11917:11918 ioctl 4008ae89 200000000100 returned -22 [ 411.463994][T11935] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1846'. [ 412.529167][ T5881] usb 4-1: USB disconnect, device number 32 [ 412.582986][T11952] binder: 11951:11952 ioctl 4008ae89 200000000100 returned -22 [ 413.109967][T11490] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 413.351468][T11490] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.363285][T11490] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.399228][T11490] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 413.431051][T11490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.504058][T11490] usb 4-1: config 0 descriptor?? [ 414.076302][T11490] elan 0003:04F3:0755.0015: failed to start in urb: -90 [ 414.102838][T11490] elan 0003:04F3:0755.0015: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 414.273999][T11490] usb 4-1: USB disconnect, device number 33 [ 414.521459][T11982] fido_id[11982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 414.810061][T11484] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 414.864059][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'. [ 415.002761][T11484] usb 6-1: Using ep0 maxpacket: 32 [ 415.209789][ T30] audit: type=1326 audit(1773424516.417:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 415.299699][ T5881] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 415.447538][T11484] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 415.513010][ T30] audit: type=1326 audit(1773424516.417:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 415.513259][T11484] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 415.565970][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 415.642984][T11484] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 415.650305][ T30] audit: type=1326 audit(1773424516.417:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 415.654669][T11484] usb 6-1: Product: syz [ 415.654769][ T5881] usb 4-1: unable to get BOS descriptor or descriptor too short [ 415.749786][T11484] usb 6-1: Manufacturer: syz [ 415.755341][T11484] usb 6-1: SerialNumber: syz [ 415.770099][ T30] audit: type=1326 audit(1773424516.417:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 415.795304][ T30] audit: type=1326 audit(1773424516.417:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 415.798839][T11484] usb 6-1: config 0 descriptor?? [ 415.818607][ T30] audit: type=1326 audit(1773424516.417:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 415.846163][ T30] audit: type=1326 audit(1773424516.417:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 415.868767][ T30] audit: type=1326 audit(1773424516.417:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 415.900159][ T5881] usb 4-1: config 4 interface 0 has no altsetting 0 [ 415.965295][ T5881] usb 4-1: string descriptor 0 read error: -22 [ 415.971979][ T5881] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 416.009664][T11985] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 416.026068][ T30] audit: type=1326 audit(1773424516.417:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 416.058665][ T5881] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 416.337641][ T30] audit: type=1326 audit(1773424516.417:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 416.897713][ T5881] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 416.968862][ T5881] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 417.006065][ T5881] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 417.036690][ T5881] usb 4-1: media controller created [ 417.197249][T11997] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 417.207628][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 417.245721][T11997] usb 4-1: dvb_usb_au6610: wlen=83, aborting [ 418.410589][T11484] usb 6-1: USB disconnect, device number 16 [ 418.750142][T12044] binder: 12041:12044 ioctl 4008ae89 200000000100 returned -22 [ 419.043894][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1881'. [ 419.399935][ T5881] zl10353_read_register: readreg error (reg=127, ret==0) [ 419.883391][ T5881] usb 4-1: USB disconnect, device number 34 [ 420.829660][ T5881] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 420.999722][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 421.040037][ T5908] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 421.207546][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.219944][ T5881] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 421.237913][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 421.263814][ T5881] usb 5-1: SerialNumber: syz [ 421.277085][T12090] binder: 12089:12090 ioctl 4008ae89 200000000100 returned -22 [ 421.289338][ T5881] usb 5-1: config 0 descriptor?? [ 421.316395][ T5881] uvcvideo 5-1:0.0: Found UVC 0.00 device (05ac:8501) [ 421.332818][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 421.348858][ T5881] uvcvideo 5-1:0.0: No valid video chain found. [ 421.364444][ T5908] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 421.383868][ T5908] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 421.393768][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 421.415091][ T5908] usb 6-1: Product: syz [ 421.426729][ T5908] usb 6-1: Manufacturer: syz [ 421.443687][ T5908] usb 6-1: SerialNumber: syz [ 421.466407][ T5908] usb 6-1: config 0 descriptor?? [ 421.482079][T12080] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 421.729664][T11490] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 421.880931][T11490] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 421.890303][T11490] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 421.933524][T11490] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 421.956858][T11490] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 421.980980][T11490] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 421.991993][T11490] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 422.011544][T11490] usb 4-1: string descriptor 0 read error: -22 [ 422.018158][T11490] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 422.027725][T11490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.039611][T11490] usb 4-1: config 0 descriptor?? [ 422.046886][T11490] hub 4-1:0.0: bad descriptor, ignoring hub [ 422.053493][T11490] hub 4-1:0.0: probe with driver hub failed with error -5 [ 423.106957][T11492] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 423.299602][T11492] usb 7-1: Using ep0 maxpacket: 8 [ 423.393448][T11492] usb 7-1: unable to get BOS descriptor or descriptor too short [ 423.421972][T11492] usb 7-1: config 4 interface 0 has no altsetting 0 [ 423.495998][T11492] usb 7-1: string descriptor 0 read error: -22 [ 423.509607][T11492] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 423.555031][T11492] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 423.582659][T11492] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 423.623351][T11492] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 423.687983][ T5908] usb 6-1: USB disconnect, device number 17 [ 423.698517][ T1625] usb 5-1: USB disconnect, device number 29 [ 423.741910][T11492] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 423.775738][T11492] usb 7-1: media controller created [ 423.792104][T12109] usb 7-1: dvb_usb_au6610: wlen=0, aborting [ 423.805735][T11492] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 423.955830][T12109] usb 7-1: dvb_usb_au6610: wlen=83, aborting [ 424.157439][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1898'. [ 424.689771][T12127] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1900'. [ 425.019731][T11490] usb 4-1: USB disconnect, device number 35 [ 425.052197][T11492] zl10353_read_register: readreg error (reg=127, ret==0) [ 425.214646][T12133] binder: 12132:12133 ioctl 4008ae89 200000000100 returned -22 [ 426.962946][T11492] usb 7-1: USB disconnect, device number 5 [ 427.307252][T12165] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1911'. [ 427.519981][ T5881] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 427.579458][ T5908] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 427.684788][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 427.692249][ T5881] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 427.712207][T12173] binder: 12172:12173 ioctl 4008ae89 200000000100 returned -22 [ 427.720512][ T5881] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 427.739602][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 427.769966][ T5908] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 427.778260][ T5908] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 427.807733][ T5908] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 427.816738][ T5881] usb 4-1: Product: syz [ 427.829772][ T5881] usb 4-1: Manufacturer: syz [ 427.834412][ T5881] usb 4-1: SerialNumber: syz [ 427.840209][ T5908] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 427.868463][ T5881] usb 4-1: config 0 descriptor?? [ 427.878353][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 427.897567][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 427.911034][T12160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 427.940736][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1916'. [ 427.957180][ T5908] usb 5-1: string descriptor 0 read error: -22 [ 427.963561][ T5908] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 427.973178][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.029487][ T5908] usb 5-1: config 0 descriptor?? [ 428.040159][ T5908] hub 5-1:0.0: bad descriptor, ignoring hub [ 428.046785][ T5908] hub 5-1:0.0: probe with driver hub failed with error -5 [ 428.679617][T11492] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 428.849449][T11492] usb 6-1: Using ep0 maxpacket: 8 [ 428.859089][T11492] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 428.867655][T11492] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 428.878450][T11492] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.918819][T11492] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 428.950011][T11492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.994358][T11492] usbtmc 6-1:16.0: bulk endpoints not found [ 429.444955][T12201] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1923'. [ 429.731969][T12208] binder: 12207:12208 ioctl 4008ae89 200000000100 returned -22 [ 429.977626][T12214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.985042][T12214] IPv6: NLM_F_CREATE should be set when creating new route [ 430.018771][ T5881] usb 4-1: USB disconnect, device number 36 [ 430.765296][ T5881] usb 5-1: USB disconnect, device number 30 [ 431.897009][ T5881] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 432.101862][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 432.117272][ T5881] usb 2-1: config 0 has no interfaces? [ 432.125042][ T5881] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 432.134993][ T5881] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 432.144543][ T5881] usb 2-1: Manufacturer: syz [ 432.158058][ T5881] usb 2-1: config 0 descriptor?? [ 432.405506][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1936'. [ 432.443145][T11492] usb 6-1: USB disconnect, device number 18 [ 432.503442][ T1625] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 432.548218][T12254] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1944'. [ 433.019482][ T1625] usb 7-1: Using ep0 maxpacket: 32 [ 433.026660][ T1625] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 433.039422][ T1625] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 433.048902][ T1625] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 433.058553][ T1625] usb 7-1: Product: syz [ 433.066535][ T1625] usb 7-1: Manufacturer: syz [ 433.073134][ T1625] usb 7-1: SerialNumber: syz [ 433.097358][ T1625] usb 7-1: config 0 descriptor?? [ 433.106356][T12246] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 434.906344][ T5908] usb 2-1: USB disconnect, device number 27 [ 435.094807][ T1625] usb 7-1: USB disconnect, device number 6 [ 435.519823][T12291] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1955'. [ 436.514293][T12328] binder: BINDER_SET_CONTEXT_MGR already set [ 436.522490][T12328] binder: 12318:12328 ioctl 4018620d 200000000040 returned -16 [ 438.632109][T12374] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1986'. [ 438.645452][T12374] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1986'. [ 438.678247][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1986'. [ 439.539464][ T5908] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 439.741889][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.769058][ T5908] usb 4-1: config 0 has no interfaces? [ 439.795844][ T5908] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.819525][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.842073][ T5908] usb 4-1: Product: syz [ 439.858377][ T5908] usb 4-1: Manufacturer: syz [ 439.863093][ T5908] usb 4-1: SerialNumber: syz [ 439.875769][ T5908] usb 4-1: config 0 descriptor?? [ 440.002406][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.009062][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.022422][T12389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.029899][T12389] IPv6: NLM_F_CREATE should be set when creating new route [ 440.431961][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1993'. [ 441.413666][T12410] netlink: 'syz.1.1998': attribute type 72 has an invalid length. [ 441.446293][T12410] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 441.473326][T12410] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1998'. [ 441.516539][T12411] netlink: 'syz.1.1998': attribute type 72 has an invalid length. [ 441.560864][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1998'. [ 441.579577][T12411] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 441.597262][T12411] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1998'. [ 442.334755][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2004'. [ 442.598040][ T1625] usb 4-1: USB disconnect, device number 37 [ 442.668980][T12430] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2004'. [ 443.852535][T12449] netlink: 'syz.4.2011': attribute type 1 has an invalid length. [ 443.890688][T12449] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2011'. [ 443.919197][T12449] netlink: 'syz.4.2011': attribute type 1 has an invalid length. [ 443.947182][T12449] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2011'. [ 443.978993][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2011'. [ 444.689473][ T5881] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 444.751037][T12471] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2017'. [ 444.850948][ T5881] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.861267][ T5881] usb 6-1: config 0 has no interfaces? [ 444.883186][ T5881] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.903769][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.916691][ T5881] usb 6-1: Product: syz [ 444.938425][ T5881] usb 6-1: Manufacturer: syz [ 444.950989][ T5881] usb 6-1: SerialNumber: syz [ 444.964913][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2017'. [ 444.970089][ T5908] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 445.049798][ T5881] usb 6-1: config 0 descriptor?? [ 445.199542][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 445.208932][ T5908] usb 2-1: config 0 has no interfaces? [ 445.216870][ T5908] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 445.231643][ T5908] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 445.246217][ T5908] usb 2-1: Manufacturer: syz [ 445.276924][ T5908] usb 2-1: config 0 descriptor?? [ 445.947867][T12490] netlink: 'syz.3.2024': attribute type 1 has an invalid length. [ 445.977063][T12490] netlink: 'syz.3.2024': attribute type 1 has an invalid length. [ 446.190887][T12495] program syz.6.2025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 447.075340][T12507] syzkaller1: entered promiscuous mode [ 447.089654][T12507] syzkaller1: entered allmulticast mode [ 447.475127][ T5908] usb 6-1: USB disconnect, device number 19 [ 447.997699][T12522] __nla_validate_parse: 3 callbacks suppressed [ 447.997798][T12522] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2036'. [ 448.065001][T12522] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2036'. [ 448.106261][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2036'. [ 448.159128][T11490] usb 2-1: USB disconnect, device number 28 [ 448.201106][T12532] program syz.3.2037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.591044][T12539] binder: BINDER_SET_CONTEXT_MGR already set [ 448.597051][T12539] binder: 12528:12539 ioctl 4018620d 200000000040 returned -16 [ 448.631222][T12536] binder: 12528:12536 ioctl c0306201 0 returned -14 [ 450.169278][T12573] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2051'. [ 450.344452][T12577] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2051'. [ 450.418314][T12573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2051'. [ 450.437801][T12576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 450.649246][T12582] binder: 12579:12582 ioctl 4008ae89 200000000100 returned -22 [ 450.861310][T12587] input: syz0 as /devices/virtual/input/input22 [ 454.093141][T12623] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2066'. [ 454.103882][T12623] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2066'. [ 454.119849][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2066'. [ 454.415127][T12597] syz.1.2057 (12597): drop_caches: 2 [ 454.775872][T12648] input: syz0 as /devices/virtual/input/input23 [ 454.987315][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 454.987333][ T30] audit: type=1326 audit(1773424556.367:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 455.050146][ T30] audit: type=1326 audit(1773424556.367:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 455.140939][ T30] audit: type=1326 audit(1773424556.367:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 455.275657][ T30] audit: type=1326 audit(1773424556.367:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 455.756950][ T30] audit: type=1326 audit(1773424556.367:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 455.807763][ T30] audit: type=1326 audit(1773424556.367:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 455.837962][ T30] audit: type=1326 audit(1773424556.367:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 456.091613][ T30] audit: type=1326 audit(1773424556.367:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 456.178584][ T30] audit: type=1326 audit(1773424556.367:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 456.280092][ T30] audit: type=1326 audit(1773424556.367:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.4.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a99c799 code=0x7ffc0000 [ 456.849539][T11490] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 457.011243][T11490] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 457.020268][T11490] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 457.028543][T11490] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 457.038138][T11490] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 457.055732][T11490] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 457.077001][T11490] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 457.113807][T11490] usb 7-1: string descriptor 0 read error: -22 [ 457.122702][T11490] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 457.138152][T11490] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.172804][T11490] usb 7-1: config 0 descriptor?? [ 457.182600][T11490] hub 7-1:0.0: bad descriptor, ignoring hub [ 457.188822][T11490] hub 7-1:0.0: probe with driver hub failed with error -5 [ 457.743413][T12705] binder: 12695:12705 ioctl 4018620d 0 returned -22 [ 457.866871][T12707] syzkaller1: entered promiscuous mode [ 457.872553][T12707] syzkaller1: entered allmulticast mode [ 459.820832][T11484] usb 7-1: USB disconnect, device number 7 [ 461.281176][T12755] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2106'. [ 461.957463][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 461.957481][ T30] audit: type=1326 audit(1773424563.357:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.6.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 462.461203][ T30] audit: type=1326 audit(1773424563.427:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.6.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 462.535214][ T30] audit: type=1326 audit(1773424563.427:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.6.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 462.589493][ T30] audit: type=1326 audit(1773424563.427:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.6.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 462.701118][ T30] audit: type=1326 audit(1773424563.427:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.6.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 462.755783][ T30] audit: type=1326 audit(1773424563.437:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.6.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 462.853269][ T30] audit: type=1326 audit(1773424563.437:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.6.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 462.959547][ T30] audit: type=1326 audit(1773424563.437:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.6.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 462.982345][ T30] audit: type=1326 audit(1773424563.437:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.6.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 463.031989][ T30] audit: type=1326 audit(1773424563.437:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.6.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff5b3f9c799 code=0x7ffc0000 [ 463.165491][ T5908] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 463.194188][ T5908] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 463.661249][T11492] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 463.823326][T11492] usb 7-1: config 0 has no interfaces? [ 463.838409][T11492] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.871228][T11492] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 463.880567][T11492] usb 7-1: SerialNumber: syz [ 463.896533][T11492] usb 7-1: config 0 descriptor?? [ 464.208283][ T5881] usb 7-1: USB disconnect, device number 8 [ 464.694370][T12804] ªªªªªª: renamed from vlan0 [ 465.589096][T12816] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2124'. [ 466.378562][T12827] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 466.908215][T12838] syzkaller0: entered promiscuous mode [ 466.928328][T12838] syzkaller0: entered allmulticast mode [ 467.429472][ T1625] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 467.581879][ T1625] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 467.590508][ T1625] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 467.598763][ T1625] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 467.608422][ T1625] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 467.609465][ T5908] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 467.628078][ T1625] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 467.639520][ T1625] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 467.656697][ T1625] usb 4-1: string descriptor 0 read error: -22 [ 467.663998][ T1625] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 467.673932][ T1625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.684871][ T1625] usb 4-1: config 0 descriptor?? [ 467.701312][ T1625] hub 4-1:0.0: bad descriptor, ignoring hub [ 467.707492][ T1625] hub 4-1:0.0: probe with driver hub failed with error -5 [ 467.793805][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 467.800760][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.818951][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.844300][ T5908] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 467.862718][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.883652][ T5908] usb 6-1: config 0 descriptor?? [ 468.335102][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 468.343006][ T5908] usbhid 6-1:0.0: can't add hid device: -71 [ 468.349020][ T5908] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 468.366504][ T5908] usb 6-1: USB disconnect, device number 20 [ 470.550044][ T1625] usb 4-1: USB disconnect, device number 38 [ 471.139715][T11490] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 471.319625][T11490] usb 5-1: Using ep0 maxpacket: 32 [ 471.348917][T11490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.381133][T11490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.406604][T11490] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 471.434553][T12929] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2158'. [ 471.468568][T11490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.540923][T11490] usb 5-1: config 0 descriptor?? [ 471.973206][T11490] usbhid 5-1:0.0: can't add hid device: -71 [ 471.973272][T11490] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 471.976080][T11490] usb 5-1: USB disconnect, device number 31 [ 472.369835][T12942] syzkaller1: entered promiscuous mode [ 472.369859][T12942] syzkaller1: entered allmulticast mode [ 472.748120][T12949] netlink: 388 bytes leftover after parsing attributes in process `syz.6.2163'. [ 474.195339][T12977] fuse: Bad value for 'fd' [ 474.256568][T12978] syzkaller1: entered promiscuous mode [ 474.419525][T12978] syzkaller1: entered allmulticast mode [ 475.369501][ T1625] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 475.443757][T12995] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2176'. [ 475.599445][ T1625] usb 5-1: Using ep0 maxpacket: 32 [ 475.609325][ T1625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.636783][ T1625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.651739][ T1625] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 475.662597][ T1625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.680792][ T1625] usb 5-1: config 0 descriptor?? [ 475.819512][T11498] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 475.986856][T11498] usb 7-1: config 0 has no interfaces? [ 475.994983][T11498] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 476.004900][T11498] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 476.013188][T11498] usb 7-1: SerialNumber: syz [ 476.029987][T11498] usb 7-1: config 0 descriptor?? [ 476.101321][ T1625] savu 0003:1E7D:2D5A.0017: unknown main item tag 0x0 [ 476.114842][ T1625] savu 0003:1E7D:2D5A.0017: unknown main item tag 0x0 [ 476.125570][ T1625] savu 0003:1E7D:2D5A.0017: unknown main item tag 0x0 [ 476.137887][ T1625] savu 0003:1E7D:2D5A.0017: unknown main item tag 0x0 [ 476.149885][ T1625] savu 0003:1E7D:2D5A.0017: unknown main item tag 0x0 [ 476.163064][ T1625] savu 0003:1E7D:2D5A.0017: unknown main item tag 0x0 [ 476.177111][ T1625] savu 0003:1E7D:2D5A.0017: unknown main item tag 0x0 [ 476.184203][ T1625] savu 0003:1E7D:2D5A.0017: unknown main item tag 0x0 [ 476.193916][ T1625] savu 0003:1E7D:2D5A.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 476.301889][ T1625] usb 5-1: USB disconnect, device number 32 [ 476.358631][T11498] usb 7-1: USB disconnect, device number 9 [ 476.563099][T13010] syzkaller1: entered promiscuous mode [ 476.584228][T13010] syzkaller1: entered allmulticast mode [ 477.158915][T13033] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2187'. [ 477.515379][T11490] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 477.878001][T11490] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 477.888289][T11490] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 477.930142][T11490] usb 2-1: Product: syz [ 477.934451][T11490] usb 2-1: Manufacturer: syz [ 477.939493][ T1625] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 477.986090][T11490] usb 2-1: SerialNumber: syz [ 478.015546][T11490] usb 2-1: config 0 descriptor?? [ 478.123797][ T1625] usb 7-1: config 0 has no interfaces? [ 478.130790][ T1625] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.159648][ T1625] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 478.179638][ T1625] usb 7-1: SerialNumber: syz [ 478.221256][ T1625] usb 7-1: config 0 descriptor?? [ 478.462334][ T1625] usb 7-1: USB disconnect, device number 10 [ 478.622523][T13047] syzkaller0: entered promiscuous mode [ 478.709783][T13047] syzkaller0: entered allmulticast mode [ 478.754414][T13048] syzkaller1: entered promiscuous mode [ 478.761518][T13048] syzkaller1: entered allmulticast mode [ 479.849063][T13065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2202'. [ 479.859671][T11498] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 479.869247][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2202'. [ 480.020533][T11498] usb 7-1: Using ep0 maxpacket: 32 [ 480.037084][T11498] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.059220][T11498] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.072941][T11498] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 480.082944][T11498] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.096174][T11498] usb 7-1: config 0 descriptor?? [ 480.453303][T13077] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2205'. [ 480.508241][T11498] savu 0003:1E7D:2D5A.0018: unknown main item tag 0x0 [ 480.515438][T11498] savu 0003:1E7D:2D5A.0018: unknown main item tag 0x0 [ 480.632188][ T5908] usb 2-1: USB disconnect, device number 29 [ 480.677872][T11498] savu 0003:1E7D:2D5A.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 480.743627][T11498] usb 7-1: USB disconnect, device number 11 [ 480.877690][T13079] fido_id[13079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 481.054947][T13085] syzkaller1: entered promiscuous mode [ 481.061920][T13085] syzkaller1: entered allmulticast mode [ 481.221545][ T5908] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 481.665836][ T5908] usb 4-1: config 0 has no interfaces? [ 481.729801][ T5908] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.775659][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 481.920308][ T5908] usb 4-1: SerialNumber: syz [ 481.939590][ T5908] usb 4-1: config 0 descriptor?? [ 482.257517][T11498] usb 4-1: USB disconnect, device number 39 [ 483.986854][T13127] syzkaller1: entered promiscuous mode [ 483.997511][T13127] syzkaller1: entered allmulticast mode [ 484.369790][ T1625] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 484.529540][ T1625] usb 4-1: Using ep0 maxpacket: 8 [ 484.544327][ T5895] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 484.554056][ T1625] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 484.562796][ T1625] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 484.573094][ T1625] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 484.589476][ T1625] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 484.599721][ T1625] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.934195][ T5895] usb 5-1: config 0 has no interfaces? [ 484.965339][ T5895] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.982254][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 485.005817][ T5895] usb 5-1: SerialNumber: syz [ 485.012287][ T1625] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 485.097863][ T5895] usb 5-1: config 0 descriptor?? [ 485.115975][ T1625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.419484][ T5908] usb 5-1: USB disconnect, device number 33 [ 487.523798][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 487.523811][ T30] audit: type=1326 audit(1773424588.927:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13178 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9447f9c799 code=0x7ffc0000 [ 487.579448][ T30] audit: type=1326 audit(1773424588.967:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13178 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9447f9c799 code=0x7ffc0000 [ 487.579541][T11498] usb 4-1: USB disconnect, device number 40 [ 487.623677][ T1625] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 487.669451][ T30] audit: type=1326 audit(1773424588.967:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13178 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9447f9c799 code=0x7ffc0000 [ 487.725613][ T30] audit: type=1326 audit(1773424588.967:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13178 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9447f9c799 code=0x7ffc0000 [ 487.755407][ T30] audit: type=1326 audit(1773424588.967:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13178 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9447f9c799 code=0x7ffc0000 [ 487.778684][ T30] audit: type=1326 audit(1773424588.967:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13178 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9447f9c799 code=0x7ffc0000 [ 487.851816][ T1625] usb 7-1: Using ep0 maxpacket: 16 [ 487.867995][ T1625] usb 7-1: config 0 has no interfaces? [ 487.876920][ T1625] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 487.889716][ T30] audit: type=1326 audit(1773424588.967:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13178 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9447f9c799 code=0x7ffc0000 [ 487.912907][ T1625] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 487.931490][ T1625] usb 7-1: Manufacturer: syz [ 487.943882][ T1625] usb 7-1: config 0 descriptor?? [ 487.949247][ T30] audit: type=1326 audit(1773424588.967:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13178 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9447f9c799 code=0x7ffc0000 [ 487.972473][ T5895] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 487.993774][ T30] audit: type=1326 audit(1773424588.967:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13178 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9447f5cfce code=0x7ffc0000 [ 488.054302][ T30] audit: type=1326 audit(1773424588.967:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13178 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9447f9c799 code=0x7ffc0000 [ 488.145209][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 488.157671][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 488.169298][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 488.183626][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 488.201523][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2237'. [ 488.214502][ T5895] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 488.225289][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.250330][ T5895] usb 5-1: config 0 descriptor?? [ 488.763479][ T5895] hid_parser_main: 6 callbacks suppressed [ 488.763562][ T5895] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 488.800355][ T5895] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 488.808253][ T5895] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 488.836579][ T5895] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 488.850402][ T5895] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 488.859120][ T5895] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 488.868164][ T5895] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 488.876719][ T5895] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 488.894597][ T5895] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 488.902696][ T5895] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 488.956837][ T5895] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 489.091109][T11484] usb 5-1: USB disconnect, device number 34 [ 489.128440][T13206] fido_id[13206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 489.443997][T13214] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2249'. [ 489.453804][T13214] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.792285][T13222] binder: 13221:13222 ioctl 4008ae89 200000000100 returned -22 [ 490.057345][T11490] usb 7-1: USB disconnect, device number 12 [ 490.659509][T11484] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 490.819551][T11484] usb 4-1: Using ep0 maxpacket: 32 [ 490.827839][T11484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.849850][T11484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.875569][T11484] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 490.896593][T11484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.994068][T11484] usb 4-1: config 0 descriptor?? [ 491.164181][T13254] binder: 13252:13254 ioctl 4008ae89 200000000100 returned -22 [ 491.206423][T13227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2253'. [ 491.215649][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2253'. [ 491.778818][T11484] ft260 0003:0403:6030.001A: chip code: 0000 0000 [ 491.978883][T11484] ft260 0003:0403:6030.001A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 492.183187][T11484] ft260 0003:0403:6030.001A: failed to retrieve status: -32, no wakeup [ 492.412546][T13237] ft260 0003:0403:6030.001A: ft260_i2c_read: failed with -38 [ 492.421835][T11484] usb 4-1: USB disconnect, device number 41 [ 493.063735][T13287] binder: 13284:13287 ioctl 4008ae89 200000000100 returned -22 [ 493.198424][T13296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2274'. [ 494.479485][ T1625] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 494.649453][ T1625] usb 6-1: Using ep0 maxpacket: 8 [ 494.657815][ T1625] usb 6-1: unable to get BOS descriptor or descriptor too short [ 494.668761][ T1625] usb 6-1: config 4 interface 0 has no altsetting 0 [ 494.683015][ T1625] usb 6-1: string descriptor 0 read error: -22 [ 494.689531][ T1625] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 494.698618][ T1625] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 494.827492][ T1625] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 494.842858][ T1625] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 494.860070][ T1625] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 494.876038][ T1625] usb 6-1: media controller created [ 494.938556][ T1625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 495.105386][T13328] IPVS: lc: FWM 3 0x00000003 - no destination available [ 495.320380][T11484] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 495.531297][T11484] usb 5-1: Using ep0 maxpacket: 32 [ 495.556294][T11484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.660594][T11484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.672448][T11484] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 495.682389][T11484] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.765543][T11484] usb 5-1: config 0 descriptor?? [ 496.002701][ T1625] zl10353_read_register: readreg error (reg=127, ret==0) [ 496.021754][T13312] usb 6-1: dvb_usb_au6610: wlen=0, aborting [ 496.056921][T13312] usb 6-1: dvb_usb_au6610: wlen=83, aborting [ 496.227722][T11484] hid_parser_main: 7 callbacks suppressed [ 496.227745][T11484] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 496.259912][T11484] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 496.421021][T11484] ft260 0003:0403:6030.001B: chip code: 0000 0000 [ 496.626638][T11484] ft260 0003:0403:6030.001B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 496.654874][T13347] syzkaller0: entered promiscuous mode [ 496.674707][T13347] syzkaller0: entered allmulticast mode [ 496.822404][T11484] ft260 0003:0403:6030.001B: failed to retrieve status: -32, no wakeup [ 497.122388][T11484] usb 5-1: USB disconnect, device number 35 [ 498.184701][T13372] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 498.410257][ T1625] usb 6-1: USB disconnect, device number 21 [ 498.429205][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 498.859655][ T1625] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 499.022250][ T1625] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 499.051200][T13384] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2302'. [ 499.086051][ T1625] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 499.305614][ T1625] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 499.341704][ T1625] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 499.371254][ T1625] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 499.399510][ T1625] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 499.446819][ T1625] usb 6-1: string descriptor 0 read error: -22 [ 499.481825][ T1625] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 499.499471][ T1625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.520020][ T1625] usb 6-1: config 0 descriptor?? [ 499.532323][ T1625] hub 6-1:0.0: bad descriptor, ignoring hub [ 499.555400][ T1625] hub 6-1:0.0: probe with driver hub failed with error -5 [ 500.039807][T13392] syzkaller0: entered promiscuous mode [ 500.046732][T13392] syzkaller0: entered allmulticast mode [ 500.558120][T13403] fuse: Bad value for 'fd' [ 501.446917][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.453503][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.828825][T11498] usb 6-1: USB disconnect, device number 22 [ 502.483480][T13439] fuse: Bad value for 'fd' [ 505.089485][T11498] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 505.272401][T11498] usb 2-1: Using ep0 maxpacket: 8 [ 505.331055][T11498] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 505.379613][T11498] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 505.427123][T11498] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.441230][T11498] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 505.539442][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2339'. [ 505.601998][T11498] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.796846][T11498] usbtmc 2-1:16.0: bulk endpoints not found [ 505.819910][ T5895] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 505.989453][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 506.019755][ T5895] usb 5-1: config 0 has no interfaces? [ 506.467733][ T5895] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 506.478502][ T5895] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 506.491267][ T5895] usb 5-1: Manufacturer: syz [ 506.620865][ T5895] usb 5-1: config 0 descriptor?? [ 506.949638][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2338'. [ 508.049658][ T5895] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 508.057183][ T5881] usb 2-1: USB disconnect, device number 30 [ 508.241467][ T5895] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.269622][ T5895] usb 7-1: config 0 has no interfaces? [ 508.283621][ T5895] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.295192][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.349083][ T5895] usb 7-1: Product: syz [ 508.359638][ T5895] usb 7-1: Manufacturer: syz [ 508.364346][ T5895] usb 7-1: SerialNumber: syz [ 508.402263][ T5895] usb 7-1: config 0 descriptor?? [ 508.465202][ T5881] usb 5-1: USB disconnect, device number 36 [ 508.627668][T11498] usb 7-1: USB disconnect, device number 13 [ 509.169768][T11498] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 509.356096][T11498] usb 5-1: Using ep0 maxpacket: 8 [ 509.363911][T11498] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 509.383405][T11498] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 509.405899][T11498] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.873708][T11498] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 509.917910][T11498] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.962763][T11498] usbtmc 5-1:16.0: bulk endpoints not found [ 510.189651][ T1625] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 510.349649][ T1625] usb 6-1: Using ep0 maxpacket: 16 [ 510.358245][ T1625] usb 6-1: config 0 has no interfaces? [ 510.365097][ T1625] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 510.374331][ T1625] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 510.407436][ T1625] usb 6-1: Manufacturer: syz [ 510.461236][ T1625] usb 6-1: config 0 descriptor?? [ 510.686551][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2359'. [ 510.770899][T13585] syzkaller0: entered promiscuous mode [ 510.794909][T13585] syzkaller0: entered allmulticast mode [ 510.939453][T11498] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 511.079664][T11484] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 511.099454][T11498] usb 7-1: Using ep0 maxpacket: 32 [ 511.106748][T11498] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.119195][T11498] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.138453][T11498] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 511.154350][T11498] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.165047][T11498] usb 7-1: config 0 descriptor?? [ 511.241005][T11484] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.251707][T11484] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 511.265030][T11484] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 511.274187][T11484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.284564][T11484] usb 2-1: config 0 descriptor?? [ 511.295822][T11484] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 511.578958][T11498] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 511.585906][T11498] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 511.593024][T11498] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 511.600251][T11498] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 511.607243][T11498] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 511.614267][T11498] savu 0003:1E7D:2D5A.001C: unbalanced collection at end of report description [ 511.624569][T11498] savu 0003:1E7D:2D5A.001C: parse failed [ 511.630499][T11498] savu 0003:1E7D:2D5A.001C: probe with driver savu failed with error -22 [ 511.784241][ T1625] usb 7-1: USB disconnect, device number 14 [ 512.206982][T11498] usb 5-1: USB disconnect, device number 37 [ 513.182613][T11490] usb 6-1: USB disconnect, device number 23 [ 513.847327][T11498] usb 2-1: USB disconnect, device number 31 [ 515.519713][ T31] INFO: task syz.2.1559:11048 blocked for more than 143 seconds. [ 515.527699][ T31] Tainted: G L syzkaller #0 [ 515.547844][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.574754][ T31] task:syz.2.1559 state:D stack:24960 pid:11048 tgid:11048 ppid:5839 task_flags:0x400040 flags:0x00080002 [ 515.574817][ T31] Call Trace: [ 515.574882][ T31] [ 515.574917][ T31] __schedule+0x15dd/0x52d0 [ 515.575035][ T31] ? __pfx___schedule+0x10/0x10 [ 515.575079][ T31] ? schedule+0x90/0x360 [ 515.575095][ T31] schedule+0x164/0x360 [ 515.575107][ T31] schedule_timeout+0xc3/0x2c0 [ 515.575122][ T31] ? finish_task_switch+0x240/0x920 [ 515.575142][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 515.575175][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 515.575191][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.575215][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.575253][ T31] ? wait_for_completion+0x274/0x5e0 [ 515.575266][ T31] wait_for_completion+0x2cc/0x5e0 [ 515.575284][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 515.575296][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.575312][ T31] restrict_one_thread_callback+0x320/0x570 [ 515.575389][ T31] task_work_run+0x1d9/0x270 [ 515.575411][ T31] ? __pfx_task_work_run+0x10/0x10 [ 515.575423][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 515.575439][ T31] get_signal+0x11eb/0x1330 [ 515.575456][ T31] ? __free_object+0x442/0x5e0 [ 515.575507][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 515.575519][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 515.575539][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 515.575567][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 515.575579][ T31] ? futex_wait_restart+0x1f5/0x470 [ 515.575612][ T31] exit_to_user_mode_loop+0x86/0x480 [ 515.575625][ T31] ? rcu_is_watching+0x15/0xb0 [ 515.575642][ T31] do_syscall_64+0x32d/0xf80 [ 515.575674][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.575708][ T31] ? clear_bhb_loop+0x40/0x90 [ 515.575730][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.575753][ T31] RIP: 0033:0x7f6ee199c799 [ 515.575777][ T31] RSP: 002b:00007f6ee1d3fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000db [ 515.575826][ T31] RAX: fffffffffffffdfc RBX: 0000000000057b79 RCX: 00007f6ee199c799 [ 515.575841][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6ee1c15fac [ 515.575854][ T31] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 515.575867][ T31] R10: 00007f6ee1d3fcb0 R11: 0000000000000246 R12: 00007f6ee1d3fcd0 [ 515.575881][ T31] R13: 00007f6ee1c15fac R14: 0000000000057bab R15: 00007f6ee1d3fcb0 [ 515.575901][ T31] [ 515.575907][ T31] INFO: task syz.2.1559:11049 blocked for more than 143 seconds. [ 515.575917][ T31] Tainted: G L syzkaller #0 [ 515.575924][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.575930][ T31] task:syz.2.1559 state:D stack:24384 pid:11049 tgid:11048 ppid:5839 task_flags:0x400140 flags:0x00080002 [ 515.575963][ T31] Call Trace: [ 515.575967][ T31] [ 515.575973][ T31] __schedule+0x15dd/0x52d0 [ 515.575998][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 515.576010][ T31] ? __pfx___schedule+0x10/0x10 [ 515.576026][ T31] ? schedule+0x90/0x360 [ 515.576038][ T31] schedule+0x164/0x360 [ 515.576050][ T31] schedule_timeout+0xc3/0x2c0 [ 515.576065][ T31] ? skb_recv_datagram+0x15a/0x190 [ 515.576122][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 515.576138][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.576154][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.576170][ T31] ? wait_for_completion+0x274/0x5e0 [ 515.576182][ T31] wait_for_completion+0x2cc/0x5e0 [ 515.576200][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 515.576212][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.576228][ T31] restrict_one_thread_callback+0x320/0x570 [ 515.576246][ T31] task_work_run+0x1d9/0x270 [ 515.576260][ T31] ? __pfx_task_work_run+0x10/0x10 [ 515.576273][ T31] ? security_file_permission+0x75/0x260 [ 515.576319][ T31] get_signal+0x11eb/0x1330 [ 515.576337][ T31] ? __pfx_vfs_read+0x10/0x10 [ 515.576373][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 515.576388][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 515.576404][ T31] ? ksys_read+0x242/0x270 [ 515.576420][ T31] exit_to_user_mode_loop+0x86/0x480 [ 515.576433][ T31] ? rcu_is_watching+0x15/0xb0 [ 515.576449][ T31] do_syscall_64+0x32d/0xf80 [ 515.576461][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.576473][ T31] ? clear_bhb_loop+0x40/0x90 [ 515.576486][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.576496][ T31] RIP: 0033:0x7f6ee199c799 [ 515.576506][ T31] RSP: 002b:00007f6ee27df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 515.576518][ T31] RAX: fffffffffffffe00 RBX: 00007f6ee1c15fa0 RCX: 00007f6ee199c799 [ 515.576526][ T31] RDX: 0000000000000043 RSI: 00002000000004c0 RDI: 0000000000000008 [ 515.576534][ T31] RBP: 00007f6ee1a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 515.576541][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.576548][ T31] R13: 00007f6ee1c16038 R14: 00007f6ee1c15fa0 R15: 00007f6ee1d3fa48 [ 515.576564][ T31] [ 515.576570][ T31] INFO: task syz.2.1559:11051 blocked for more than 143 seconds. [ 515.576579][ T31] Tainted: G L syzkaller #0 [ 515.576591][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.576596][ T31] task:syz.2.1559 state:D stack:28296 pid:11051 tgid:11048 ppid:5839 task_flags:0x400140 flags:0x00080006 [ 515.576631][ T31] Call Trace: [ 515.576635][ T31] [ 515.576641][ T31] __schedule+0x15dd/0x52d0 [ 515.576664][ T31] ? register_lock_class+0x31/0x2e0 [ 515.576679][ T31] ? __pfx___schedule+0x10/0x10 [ 515.576694][ T31] ? schedule+0x90/0x360 [ 515.576706][ T31] schedule+0x164/0x360 [ 515.576718][ T31] schedule_timeout+0xc3/0x2c0 [ 515.576734][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.576745][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 515.576760][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.576776][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.576792][ T31] ? wait_for_completion+0x274/0x5e0 [ 515.576804][ T31] wait_for_completion+0x2cc/0x5e0 [ 515.576821][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 515.576839][ T31] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 515.576859][ T31] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 515.576876][ T31] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 515.576915][ T31] ? landlock_put_ruleset+0x10/0xb0 [ 515.576941][ T31] __se_sys_landlock_restrict_self+0x540/0x810 [ 515.576972][ T31] do_syscall_64+0x14d/0xf80 [ 515.576988][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.577000][ T31] ? clear_bhb_loop+0x40/0x90 [ 515.577013][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.577024][ T31] RIP: 0033:0x7f6ee199c799 [ 515.577033][ T31] RSP: 002b:00007f6ee27be028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 515.577045][ T31] RAX: ffffffffffffffda RBX: 00007f6ee1c16090 RCX: 00007f6ee199c799 [ 515.577053][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000006 [ 515.577060][ T31] RBP: 00007f6ee1a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 515.577067][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.577074][ T31] R13: 00007f6ee1c16128 R14: 00007f6ee1c16090 R15: 00007f6ee1d3fa48 [ 515.577093][ T31] [ 515.577098][ T31] INFO: task syz.2.1559:11053 blocked for more than 143 seconds. [ 515.577108][ T31] Tainted: G L syzkaller #0 [ 515.577114][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.577119][ T31] task:syz.2.1559 state:D stack:27784 pid:11053 tgid:11048 ppid:5839 task_flags:0x400140 flags:0x00080006 [ 515.577153][ T31] Call Trace: [ 515.577157][ T31] [ 515.577163][ T31] __schedule+0x15dd/0x52d0 [ 515.577188][ T31] ? __pfx___schedule+0x10/0x10 [ 515.577204][ T31] ? schedule+0x90/0x360 [ 515.577216][ T31] schedule+0x164/0x360 [ 515.577227][ T31] schedule_timeout+0xc3/0x2c0 [ 515.577243][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.577254][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 515.577269][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.577285][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.577305][ T31] ? wait_for_completion+0x274/0x5e0 [ 515.577318][ T31] wait_for_completion+0x2cc/0x5e0 [ 515.577335][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 515.577350][ T31] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 515.577368][ T31] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 515.577387][ T31] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 515.577404][ T31] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 515.577437][ T31] ? landlock_put_ruleset+0x10/0xb0 [ 515.577452][ T31] __se_sys_landlock_restrict_self+0x540/0x810 [ 515.577470][ T31] do_syscall_64+0x14d/0xf80 [ 515.577482][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.577493][ T31] ? clear_bhb_loop+0x40/0x90 [ 515.577506][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.577516][ T31] RIP: 0033:0x7f6ee199c799 [ 515.577525][ T31] RSP: 002b:00007f6ee279d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 515.577537][ T31] RAX: ffffffffffffffda RBX: 00007f6ee1c16180 RCX: 00007f6ee199c799 [ 515.577545][ T31] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000006 [ 515.577551][ T31] RBP: 00007f6ee1a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 515.577558][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.577565][ T31] R13: 00007f6ee1c16218 R14: 00007f6ee1c16180 R15: 00007f6ee1d3fa48 [ 515.577581][ T31] [ 515.577591][ T31] INFO: task syz.2.1559:11056 blocked for more than 143 seconds. [ 515.577600][ T31] Tainted: G L syzkaller #0 [ 515.577606][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.577611][ T31] task:syz.2.1559 state:D stack:26480 pid:11056 tgid:11048 ppid:5839 task_flags:0x400040 flags:0x00080006 [ 515.577643][ T31] Call Trace: [ 515.577647][ T31] [ 515.577654][ T31] __schedule+0x15dd/0x52d0 [ 515.577678][ T31] ? __pfx___schedule+0x10/0x10 [ 515.577694][ T31] ? schedule+0x90/0x360 [ 515.577706][ T31] schedule+0x164/0x360 [ 515.577717][ T31] schedule_timeout+0xc3/0x2c0 [ 515.577733][ T31] ? futex_unqueue+0x22/0x240 [ 515.577745][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 515.577761][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.577777][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.577793][ T31] ? wait_for_completion+0x274/0x5e0 [ 515.577805][ T31] wait_for_completion+0x2cc/0x5e0 [ 515.577822][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 515.577834][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.577850][ T31] restrict_one_thread_callback+0x320/0x570 [ 515.577868][ T31] task_work_run+0x1d9/0x270 [ 515.577881][ T31] ? __pfx_task_work_run+0x10/0x10 [ 515.577893][ T31] ? __pfx_futex_wait+0x10/0x10 [ 515.577913][ T31] get_signal+0x11eb/0x1330 [ 515.577930][ T31] ? do_futex+0x333/0x420 [ 515.577947][ T31] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 515.577976][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 515.577999][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 515.578038][ T31] exit_to_user_mode_loop+0x86/0x480 [ 515.578061][ T31] ? rcu_is_watching+0x15/0xb0 [ 515.578081][ T31] do_syscall_64+0x32d/0xf80 [ 515.578095][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.578106][ T31] ? clear_bhb_loop+0x40/0x90 [ 515.578119][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.578130][ T31] RIP: 0033:0x7f6ee199c799 [ 515.578139][ T31] RSP: 002b:00007f6ee277c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 515.578151][ T31] RAX: fffffffffffffe00 RBX: 00007f6ee1c16278 RCX: 00007f6ee199c799 [ 515.578159][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6ee1c16278 [ 515.578167][ T31] RBP: 00007f6ee1c16270 R08: 0000000000000000 R09: 0000000000000000 [ 515.578174][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.578181][ T31] R13: 00007f6ee1c16308 R14: 00007f6ee1d3f960 R15: 00007f6ee1d3fa48 [ 515.578197][ T31] [ 515.578220][ T31] [ 515.578220][ T31] Showing all locks held in the system: [ 515.578261][ T31] 1 lock held by khungtaskd/31: [ 515.578269][ T31] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 515.578342][ T31] 2 locks held by getty/5581: [ 515.578374][ T31] #0: ffff888032a230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 515.578458][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 515.578494][ T31] 4 locks held by kworker/1:3/5881: [ 515.578500][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 515.578531][ T31] #1: ffffc90004507c40 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 515.578562][ T31] #2: ffff888025a98280 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_damage_work+0x125/0x750 [ 515.578642][ T31] #3: ffff888025bfa130 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x20/0x80 [ 515.578719][ T31] 4 locks held by syz-executor/9186: [ 515.578731][ T31] 1 lock held by syz.5.2374/13620: [ 515.578739][ T31] 5 locks held by syz.3.2381/13642: [ 515.578746][ T31] 1 lock held by syz.3.2381/13643: [ 515.578752][ T31] #0: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 515.578785][ T31] [ 515.578789][ T31] ============================================= [ 515.578789][ T31] [ 515.578798][ T31] NMI backtrace for cpu 1 [ 515.578812][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 515.578826][ T31] Tainted: [L]=SOFTLOCKUP [ 515.578830][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.578836][ T31] Call Trace: [ 515.578840][ T31] [ 515.578844][ T31] dump_stack_lvl+0xe8/0x150 [ 515.578866][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 515.578945][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 515.578964][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 515.578979][ T31] sys_info+0x135/0x170 [ 515.578991][ T31] watchdog+0xfd9/0x1030 [ 515.579009][ T31] ? watchdog+0x21a/0x1030 [ 515.579027][ T31] kthread+0x388/0x470 [ 515.579037][ T31] ? __pfx_watchdog+0x10/0x10 [ 515.579051][ T31] ? __pfx_kthread+0x10/0x10 [ 515.579061][ T31] ret_from_fork+0x51e/0xb90 [ 515.579079][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 515.579096][ T31] ? __switch_to+0xc7d/0x1450 [ 515.579117][ T31] ? __pfx_kthread+0x10/0x10 [ 515.579134][ T31] ret_from_fork_asm+0x1a/0x30 [ 515.579170][ T31] [ 515.579177][ T31] Sending NMI from CPU 1 to CPUs 0: [ 515.579207][ C0] NMI backtrace for cpu 0 [ 515.579221][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.579242][ C0] Tainted: [L]=SOFTLOCKUP [ 515.579248][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.579258][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 515.579277][ C0] Code: be 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 32 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 515.579291][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 515.579305][ C0] RAX: 0000000000aa1e45 RBX: ffffffff819a8c8a RCX: 0000000080000001 [ 515.579317][ C0] RDX: 0000000000000001 RSI: ffffffff8def61cd RDI: ffffffff8c27bc00 [ 515.579328][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 515.579340][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901196b0 [ 515.579355][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c929d8 [ 515.579364][ C0] FS: 0000000000000000(0000) GS:ffff888125460000(0000) knlGS:0000000000000000 [ 515.579376][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.579387][ C0] CR2: 00002000000021c0 CR3: 0000000033b92000 CR4: 00000000003526f0 [ 515.579402][ C0] Call Trace: [ 515.579408][ C0] [ 515.579414][ C0] default_idle+0x9/0x20 [ 515.579433][ C0] default_idle_call+0x72/0xb0 [ 515.579452][ C0] do_idle+0x1ba/0x5d0 [ 515.579474][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 515.579491][ C0] ? __pfx_do_idle+0x10/0x10 [ 515.579516][ C0] cpu_startup_entry+0x43/0x60 [ 515.579538][ C0] rest_init+0x2de/0x300 [ 515.579559][ C0] start_kernel+0x385/0x3d0 [ 515.579694][ C0] x86_64_start_reservations+0x24/0x30 [ 515.579737][ C0] x86_64_start_kernel+0x143/0x1c0 [ 515.579755][ C0] common_startup_64+0x13e/0x147 [ 515.579777][ C0] [ 515.602949][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 515.602976][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 515.603002][ T31] Tainted: [L]=SOFTLOCKUP [ 515.603009][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.603021][ T31] Call Trace: [ 515.603028][ T31] [ 515.603036][ T31] vpanic+0x56c/0xa60 [ 515.603065][ T31] ? __pfx___schedule+0x10/0x10 [ 515.603084][ T31] ? __pfx_vpanic+0x10/0x10 [ 515.603115][ T31] panic+0xc5/0xd0 [ 515.603136][ T31] ? __pfx_panic+0x10/0x10 [ 515.603161][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 515.603187][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 515.603216][ T31] watchdog+0x1023/0x1030 [ 515.603247][ T31] ? watchdog+0x21a/0x1030 [ 515.603276][ T31] kthread+0x388/0x470 [ 515.603295][ T31] ? __pfx_watchdog+0x10/0x10 [ 515.603319][ T31] ? __pfx_kthread+0x10/0x10 [ 515.603338][ T31] ret_from_fork+0x51e/0xb90 [ 515.603363][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 515.603383][ T31] ? __switch_to+0xc7d/0x1450 [ 515.603405][ T31] ? __pfx_kthread+0x10/0x10 [ 515.603424][ T31] ret_from_fork_asm+0x1a/0x30 [ 515.603461][ T31] [ 515.603775][ T31] Kernel Offset: disabled