last executing test programs: 15m33.074324865s ago: executing program 32 (id=1320): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 14m47.897608884s ago: executing program 33 (id=1724): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xfffffffdffffffff) 14m18.255403832s ago: executing program 34 (id=1965): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x601, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x3b, 0x0, 0x2800000000000}]}) 12m47.0312622s ago: executing program 35 (id=2982): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000000c0)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 12m46.355896481s ago: executing program 36 (id=2989): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 12m31.053529586s ago: executing program 37 (id=3061): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 12m9.464149462s ago: executing program 38 (id=3247): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0xe4880) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001100000228bd7000fadbdf25fc020000000000000000000000000000000004d6020033"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a886ddb96648e58200339644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 11m44.816380779s ago: executing program 39 (id=3440): r0 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) unshare(0x2020480) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x4}, 0x0, 0x0, 0x0) 11m25.312950999s ago: executing program 40 (id=3593): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 10m48.88039591s ago: executing program 41 (id=3895): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004"], 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m32.51625121s ago: executing program 4 (id=4018): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) 10m32.284138886s ago: executing program 4 (id=4021): ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0x4e) 10m31.804307566s ago: executing program 4 (id=4025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x6f, 0x3, 0x80, 0x40, 0x29, 0x0, 0x2e, 0x19}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0xc0}, {0xdddd1000, 0x10000, 0xe, 0x9, 0x3, 0x8, 0xfe, 0x9, 0x5, 0xab, 0x5, 0x81}, {0x3000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0xff, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0x9, 0x3, 0x7, 0x7, 0xab, 0x7f, 0x9e, 0x9, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x11, 0x40, 0xfd}, {0xeeed4004, 0x2, 0x0, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x5000, 0x1000, 0x8, 0x5, 0xf, 0x7, 0xff, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x70000, 0x242101, 0xb, 0x0, 0xa000, [0x6840000000000000, 0x4, 0x5a, 0x100]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x45, 0x0, 0x0) 10m31.038347807s ago: executing program 4 (id=4027): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 10m29.960749405s ago: executing program 4 (id=4037): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000000)=@svm={0x1, 0x1, 0x1080, {0xdddd1000}, {"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"}}) 10m29.404333229s ago: executing program 4 (id=4043): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) 10m28.901414528s ago: executing program 42 (id=4043): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) 10m17.844508572s ago: executing program 6 (id=4117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff02000000000000000000000000000104"], 0xfdef) 10m17.340273034s ago: executing program 6 (id=4119): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x10000009, 0xff7ffffb, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f00000000c0)) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) 10m17.069468652s ago: executing program 6 (id=4121): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x12, r1, 0xfffff000) fcntl$getownex(r1, 0x10, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x4, 0x9800, 0x0, 0x0}, {0xe, 0x0, 0x0, 0x0}], 0x2}) 10m15.571750181s ago: executing program 6 (id=4136): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 10m15.416303026s ago: executing program 6 (id=4139): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f0000000080)='./bus\x00') write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 10m15.140175127s ago: executing program 6 (id=4141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x890601920000, 0x140000000000000, 0x100000008, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffff804, 0x7fb, 0x8, 0x3, 0x10002, 0x1000000000007, 0x2, 0x1, 0x8], 0x0, 0x4fb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m14.675647102s ago: executing program 43 (id=4141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x890601920000, 0x140000000000000, 0x100000008, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffff804, 0x7fb, 0x8, 0x3, 0x10002, 0x1000000000007, 0x2, 0x1, 0x8], 0x0, 0x4fb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m57.899589563s ago: executing program 0 (id=6020): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000680)=[{0x7f, 0xa200, 0x4, &(0x7f00000007c0)="6e8ed970"}], 0x1}) 5m54.78808977s ago: executing program 0 (id=6038): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x40003, 0x2) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xbb8) 5m52.817126981s ago: executing program 0 (id=6048): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = syz_clone(0x2004080, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000340)=r3, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 5m51.840028348s ago: executing program 0 (id=6053): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 5m50.947572371s ago: executing program 0 (id=6056): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x7, 0x5000, 0x1000, &(0x7f0000fec000/0x1000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m47.999600943s ago: executing program 0 (id=6070): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) accept$unix(r0, 0x0, 0x0) shutdown(r0, 0x0) 5m47.435894656s ago: executing program 44 (id=6070): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) accept$unix(r0, 0x0, 0x0) shutdown(r0, 0x0) 5m38.610545681s ago: executing program 3 (id=6110): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000c80)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 5m37.319766049s ago: executing program 3 (id=6117): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000300)="b81b010f00d09a81008500baf80c66b8c0991f8c66efbafc0cedf30fc7b20f00ba2000b004ee0f01c26766c7442400000000006766c74424025d4700006766c744240600000000670f011424f3d93b64640f086766c7442400030000006766c7442402b2a600006766c744240600000000670f011424", 0x76}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x69, 0x0, 0x0, 0x0, 0x10, 0x7, 0x0, 0x88, 0x9, 0x0, 0x0, 0x0, 0x31, 0x83, 0x0, 0x2, 0x0, '\x00', 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5m36.569914702s ago: executing program 3 (id=6120): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x80800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000890000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0x2d93, 0x51, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x101}) 5m35.668810701s ago: executing program 3 (id=6124): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r3, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) 5m35.473346429s ago: executing program 3 (id=6125): socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x198c, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x30}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m34.780345953s ago: executing program 3 (id=6127): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf64(r2, 0x0, 0x51) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x60) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5m33.9599907s ago: executing program 45 (id=6127): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf64(r2, 0x0, 0x51) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x60) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4m3.902040652s ago: executing program 5 (id=6486): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x191c) 4m1.428997281s ago: executing program 5 (id=6489): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000005c0)={0x20, 0xc, 0x1, "bf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0xe, 0x1, "a5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m57.825066769s ago: executing program 5 (id=6507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da867100090506"], 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r2, 0xfffffffffffffffd, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) close(0x3) 3m56.318651962s ago: executing program 5 (id=6516): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 3m55.241573983s ago: executing program 5 (id=6520): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3m54.863404818s ago: executing program 5 (id=6522): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101290000090519"], 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 3m54.261215647s ago: executing program 46 (id=6522): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101290000090519"], 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 10.375666053s ago: executing program 8 (id=7358): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r2, 0xfffffffffffffff5, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0xa8, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000880}, 0x48000) 10.129940965s ago: executing program 9 (id=7360): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 9.364788864s ago: executing program 7 (id=7362): unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0xd, 0xfffffffe, 0x70}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0xc, 0xa, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) 8.683571367s ago: executing program 1 (id=7363): socket$netlink(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000600)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) read$FUSE(r4, &(0x7f0000000540)={0x2020}, 0xfffffccf) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x16) 7.514692292s ago: executing program 8 (id=7364): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0xc040) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x40043d14, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, 0x0, 0x22) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mbind(&(0x7f0000e49000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080)=0x7, 0x1, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) 7.513908841s ago: executing program 9 (id=7375): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x21) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x1000003, 0x1, 0x4ddf, 0x2}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 7.279998929s ago: executing program 7 (id=7365): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000140)={0x40, 0x9, 0xcf, {0xcf, 0x1, "083ae30f40706dfad4e4eff690651d940e902b9f40534e9ea4cc949164e6f3eaafeb7c04f2bba68fa16f605e9fc609dad0a81d6822c2be01d10944c8c54aba0b748935301216336464b2334f4b403bf3dcf8ef6d5d4f7a616efdf424bd309c76fa7d670b05f7627009e65ef7b036f9b839b8997917e506a677b7203fa7bd33432a6b9084dd8d411627dc6096452a605b785b89cc29f7d262cd85fa480b7c0618069bc37d1cdbfee79c319db6f5d1736dc327d42218f32caa581c097d42fe2a082df0e5876dcbea76b231cd264a"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f00000002c0)={0x0, 0x22, 0x8, {[@global=@item_012={0x0, 0x1, 0x2}, @global=@item_4={0x3, 0x1, 0x9, "4b44b003"}, @main=@item_012={0x1, 0x0, 0x8, "cd"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x80, 0x1, {0x22, 0xa6f}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0x17, 0x10, "20e147865ba92e31aea6e4f64451f612"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0xd7, "0663d49f11fc67ec83cb671b3dab6771410827f56bafc6fcc3c70e2e2e106c428f2e5bb6b27fe90c542e2ae944c324f0c5e3274e29a1cc9c10143446cbf5de7e75fd92f964d3ccbaf2fe57f5154ccd419b7ce49a45e47eb1a90e5ef7506b6a7b5322878452f064c7e82643b7d298d59831df0be54b9344db5f5fe34b4321531f96a51fb61e5c815406da8c69ed022b7f1a720425c0b8afd44a18d4111e8c55f7ede1f1e1ab87a6237de69099de5bbddd4a1b86c0894858aee7696bf5da8c49189289b3a0acbbf2bd27540a849d13c3fd81a9658e000b22"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x4}}) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000940)={0xd, "95bc9233a0ffadb335984bb3280b7840ca36304441bfb8b79ebdfe0534843f462a2e51c23b47519839c74c89785759d861f0cbab603459d543d8937b4693682b"}) write$hidraw(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000780)={0x20, 0x13, 0x29, "e437b99eec508d53f6a3e8be9a92ac72bff60f5fe9d4dabef50edf810c0cf6123c9ad0fbca181f1f81"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000840)={0x20, 0x1, 0x4f, "f65e2be80caa7aefb0982792b99da40a6c907be3b2f999c30daf096e38b9a2ae91d32dc646fecb2fbc073ae177aba60b6189ab1c255591cc9c48140013d9e1d0ffb7a5b42991d0a9b48e6a5b2fa0c4"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x40}}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x8000) r2 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r2, &(0x7f0000000180), 0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) syz_usb_control_io(r0, 0x0, 0x0) 5.07781408s ago: executing program 1 (id=7369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xed5, 0x5, 0xffffff7f, 0x7fff}, 0xff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r7, 0x3c}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="d4", 0x1}], 0x1}, 0x4011) 4.57770135s ago: executing program 8 (id=7370): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x7ffffe2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4.494615777s ago: executing program 1 (id=7371): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r2, r2, 0x0, 0x40000f63c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000180)={0x300}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000400)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioprio_set$uid(0x3, 0x0, 0x0) 4.316587768s ago: executing program 8 (id=7373): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xffff, r0, 0x0}]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.231678425s ago: executing program 2 (id=7374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 4.153362643s ago: executing program 8 (id=7376): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556", 0x6f}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428", 0xdf}, {&(0x7f00000011c0)}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.676337037s ago: executing program 7 (id=7377): getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 3.658861229s ago: executing program 2 (id=7378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x8001, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0x8000e, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 3.586937653s ago: executing program 9 (id=7379): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)='T', 0x1}], 0x1}, 0x4004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.532120547s ago: executing program 2 (id=7380): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') read$FUSE(r0, &(0x7f0000002e40)={0x2020}, 0x2020) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.136095647s ago: executing program 8 (id=7381): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r2 = userfaultfd(0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 3.135753144s ago: executing program 1 (id=7382): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x10001, 0x10000000, 0x9, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 2.962906206s ago: executing program 1 (id=7383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX]) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 2.362325739s ago: executing program 9 (id=7384): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x7ffffe2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.200736259s ago: executing program 1 (id=7385): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="400cbe"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.166854818s ago: executing program 2 (id=7386): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @empty}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r4}}, 0x48) 2.021170489s ago: executing program 9 (id=7387): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, 0x0, 0x0) capset(0x0, 0x0) eventfd2(0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4054) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) unshare(0x66000080) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r4 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 1.672829502s ago: executing program 7 (id=7388): ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x4, 0xc, '\x00', [@generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x400, 0xb]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0xf, "e80ee304ecb784ec4655260cecea14"}]}}}, @hoplimit={{0x14}}, @hopopts={{0xa0, 0x29, 0x36, {0x5e, 0x10, '\x00', [@generic={0xff, 0x3f, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c2"}, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x4, 0x966, 0xfffffffffffffff8]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3}}]}}}], 0x150}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.012358277s ago: executing program 7 (id=7389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x6, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x33, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r4, &(0x7f0000000680)="bbbbb9a94bf668884d1ab9754029684b3fbb03000000000000024f0a086ccd507dbf1f035d6f6503", 0x28, 0x4000800, &(0x7f00000001c0)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) 413.204519ms ago: executing program 7 (id=7390): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4", 0xc}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x148, 0x29, 0x36, {0x5e, 0x25, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x320}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 275.580834ms ago: executing program 2 (id=7391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x7fffffff, 0x6, 0x0, 0x401}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) 68.607637ms ago: executing program 2 (id=7392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$sock(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000018c0)}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="260f882b000000430f1bd9460f2355c402d1aa045af2440f07460f01c566baf80cb8b0439287ef66bafc0ced430f01bf470000003ef3410fc7720248b80b83f09c6f777d3a0f23d00f21f835000000080f23f8", 0x53}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0xf0000000, 0x79d}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x2, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x5, 0x7, 0x9, 0x3, 0x15, "4bf8269dc8c718c9d46b6fed87700d14836709"}) 0s ago: executing program 9 (id=7393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xf}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x8000b}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): promiscuous mode [ 954.182011][ T5832] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 954.271687][T27692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 954.404193][T27699] vlan2: entered allmulticast mode [ 954.427292][T27699] bond4: entered allmulticast mode [ 954.458388][ T5832] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 954.470638][ T5832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.499110][ T5832] usb 10-1: Product: syz [ 954.503943][ T5890] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 954.518736][ T5832] usb 10-1: Manufacturer: syz [ 954.535015][ T5832] usb 10-1: SerialNumber: syz [ 954.552683][T27700] bond4: (slave bridge3): making interface the new active one [ 954.587699][T27700] bridge3: entered promiscuous mode [ 954.729244][T27700] bridge3: entered allmulticast mode [ 954.749755][T27700] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 954.932217][ T5890] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 954.962470][ T5890] em28xx 9-1:0.0: board has no eeprom [ 954.980835][ T5832] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 955.005840][ T5832] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 955.307677][ T5890] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 955.315822][ T5890] em28xx 9-1:0.0: dvb set to bulk mode. [ 955.324029][ T5916] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 955.344158][T25150] em28xx 9-1:0.0: Binding DVB extension [ 955.717551][T27723] syz.1.6731 (27723): drop_caches: 1 [ 955.750828][ T5916] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 955.764941][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.103378][T27723] syz.1.6731 (27723): drop_caches: 1 [ 956.304340][ T5916] usb 3-1: config 0 descriptor?? [ 956.403254][ T5832] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 956.955656][T27677] em28xx 9-1:0.0: writing to i2c device at 0x482c failed (error=-5) [ 957.510717][T15065] usb 9-1: USB disconnect, device number 40 [ 957.518250][T15065] em28xx 9-1:0.0: Disconnecting em28xx [ 957.688820][ T5832] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 957.770934][ T5832] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 957.797131][T25150] em28xx 9-1:0.0: Registering input extension [ 957.819165][ T5832] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 957.828627][T15065] em28xx 9-1:0.0: Closing input extension [ 957.877949][ T5832] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 957.923495][T15065] em28xx 9-1:0.0: Freeing device [ 957.930573][ T5832] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 957.943199][T27739] syzkaller1: entered promiscuous mode [ 957.966684][T27739] syzkaller1: entered allmulticast mode [ 957.979237][ T5832] usb 10-1: USB disconnect, device number 23 [ 958.425264][T27747] netlink: 45 bytes leftover after parsing attributes in process `syz.9.6737'. [ 958.897255][T15065] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 959.177516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 959.248061][T15065] usb 9-1: Using ep0 maxpacket: 16 [ 959.298285][T15065] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.341257][T15065] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.386250][T15065] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 959.421118][T15065] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.924200][T15065] mcp2221 0003:04D8:00DD.0059: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 959.977617][ T30] audit: type=1326 audit(1776077238.027:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27759 comm="syz.9.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe659c819 code=0x7ffc0000 [ 960.097788][ T5916] usb 3-1: Cannot set autoneg [ 960.107678][ T5916] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 960.150965][ T5916] usb 3-1: USB disconnect, device number 109 [ 960.229507][T27764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6742'. [ 960.374632][T27764] syz_tun (unregistering): left allmulticast mode [ 960.413413][ T30] audit: type=1326 audit(1776077238.027:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27759 comm="syz.9.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe659c819 code=0x7ffc0000 [ 960.438139][ T30] audit: type=1326 audit(1776077238.037:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27759 comm="syz.9.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0fe659c819 code=0x7ffc0000 [ 960.529198][ T30] audit: type=1326 audit(1776077238.037:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27759 comm="syz.9.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe659c819 code=0x7ffc0000 [ 960.659429][ T30] audit: type=1326 audit(1776077238.067:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27759 comm="syz.9.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0fe659c819 code=0x7ffc0000 [ 960.734999][ T30] audit: type=1326 audit(1776077238.067:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27759 comm="syz.9.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe659c819 code=0x7ffc0000 [ 960.767336][ T30] audit: type=1326 audit(1776077238.067:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27759 comm="syz.9.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0fe659c819 code=0x7ffc0000 [ 960.815091][T27769] random: crng reseeded on system resumption [ 960.887594][T27769] Unrecognized hibernate image header format! [ 960.903990][T27769] PM: hibernation: Image mismatch: architecture specific data [ 960.929430][ T30] audit: type=1326 audit(1776077238.067:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27759 comm="syz.9.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe659c819 code=0x7ffc0000 [ 960.998612][ T30] audit: type=1326 audit(1776077238.067:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27759 comm="syz.9.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0fe659c819 code=0x7ffc0000 [ 961.115123][ T30] audit: type=1326 audit(1776077238.067:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27759 comm="syz.9.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe659c819 code=0x7ffc0000 [ 961.235848][ T5832] usb 9-1: reset high-speed USB device number 41 using dummy_hcd [ 962.827380][T25151] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 963.007236][T25151] usb 10-1: Using ep0 maxpacket: 16 [ 963.026576][T25151] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 963.081139][T25151] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 963.115944][T25151] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.739946][T25151] usb 10-1: Product: syz [ 963.744260][T25151] usb 10-1: Manufacturer: syz [ 963.790568][T25151] usb 10-1: SerialNumber: syz [ 963.829134][T25151] usb 10-1: config 0 descriptor?? [ 963.857427][T27797] xt_hashlimit: max too large, truncated to 1048576 [ 963.868139][T25151] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 963.890200][T15065] usb 9-1: USB disconnect, device number 41 [ 963.931860][T25151] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 963.990070][T27799] netlink: 'syz.2.6752': attribute type 1 has an invalid length. [ 964.210216][T27802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6752'. [ 964.362222][T27802] bond5 (unregistering): Released all slaves [ 964.624059][T25151] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 965.037864][T25151] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 965.054769][T25151] em28xx 10-1:0.0: board has no eeprom [ 966.159586][T25151] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 966.173574][T25151] em28xx 10-1:0.0: dvb set to bulk mode. [ 966.182887][T15065] em28xx 10-1:0.0: Binding DVB extension [ 966.297196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 967.198236][T27783] em28xx 10-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 967.230084][ T5903] usb 10-1: USB disconnect, device number 24 [ 967.296536][ T5903] em28xx 10-1:0.0: Disconnecting em28xx [ 967.325616][T15065] em28xx 10-1:0.0: Registering input extension [ 967.367666][ T5903] em28xx 10-1:0.0: Closing input extension [ 967.406196][ T5903] em28xx 10-1:0.0: Freeing device [ 967.482100][ T13] bridge_slave_1: left allmulticast mode [ 967.492268][ T13] bridge_slave_1: left promiscuous mode [ 967.509586][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.538109][ T13] bridge_slave_0: left allmulticast mode [ 967.557803][ T13] bridge_slave_0: left promiscuous mode [ 967.563736][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.376584][ T13] bond1 (unregistering): (slave bridge1): Releasing active interface [ 968.452559][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.494459][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.524031][ T13] bond0 (unregistering): Released all slaves [ 968.538812][ T13] bond1 (unregistering): Released all slaves [ 968.592358][ T13] bond2 (unregistering): (slave veth1_to_team): Removing an active aggregator [ 968.606701][ T13] bond2 (unregistering): (slave veth1_to_team): Releasing backup interface [ 968.629203][ T13] bond2 (unregistering): Released all slaves [ 968.652277][ T13] bond3 (unregistering): Released all slaves [ 968.689150][ T13] bond4 (unregistering): Released all slaves [ 968.789756][T27850] syzkaller0: entered promiscuous mode [ 968.795387][T27850] syzkaller0: entered allmulticast mode [ 969.180327][ T9] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 969.384965][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 969.425072][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 969.435863][ T9] usb 3-1: config 0 has no interface number 0 [ 969.444866][ T9] usb 3-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 969.468336][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 969.486919][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.505616][ T9] usb 3-1: Product: syz [ 969.511233][ T9] usb 3-1: Manufacturer: syz [ 969.515852][ T9] usb 3-1: SerialNumber: syz [ 969.536910][ T9] usb 3-1: config 0 descriptor?? [ 969.569317][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 969.583284][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 969.934356][ T9] usb 3-1: USB disconnect, device number 110 [ 972.303746][ T5903] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 972.357843][T15065] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 972.402092][ T13] tipc: Left network mode [ 972.475469][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 972.493434][ T5903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.507256][T15065] usb 2-1: Using ep0 maxpacket: 16 [ 972.516286][ T5903] usb 3-1: config 0 has no interfaces? [ 972.545524][ T5903] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 972.556230][T15065] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 972.576112][T15065] usb 2-1: config 0 has no interface number 0 [ 972.591550][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.610352][T15065] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 972.623669][ T5903] usb 3-1: config 0 descriptor?? [ 972.639426][T15065] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.669239][T15065] usb 2-1: Product: syz [ 972.674961][T15065] usb 2-1: Manufacturer: syz [ 972.680527][T15065] usb 2-1: SerialNumber: syz [ 972.692354][T15065] usb 2-1: config 0 descriptor?? [ 972.719974][T15065] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 972.859359][ T5916] usb 3-1: USB disconnect, device number 111 [ 973.100391][ T13] hsr_slave_0: left promiscuous mode [ 973.111678][ T13] hsr_slave_1: left promiscuous mode [ 973.118392][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.126361][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.143562][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.161073][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.708776][T15065] gspca_spca1528: reg_w err -110 [ 973.723757][ T13] veth1_macvtap: left promiscuous mode [ 973.729480][T15065] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 973.739166][ T13] veth0_macvtap: left promiscuous mode [ 973.746502][ T13] veth1_vlan: left promiscuous mode [ 973.762362][ T13] veth0_vlan: left promiscuous mode [ 974.232785][T27911] netlink: 'syz.9.6780': attribute type 2 has an invalid length. [ 974.409020][T15065] usb 2-1: USB disconnect, device number 44 [ 974.825047][ T13] team0 (unregistering): Port device team_slave_1 removed [ 975.224300][T27911] ‚#{6c: entered promiscuous mode [ 975.293032][T27919] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 975.305290][T27919] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 975.358105][T27915] tipc: Enabled bearer , priority 0 [ 975.621219][T27930] block device autoloading is deprecated and will be removed. [ 975.882490][T27935] syzkaller0: entered promiscuous mode [ 975.888102][T27935] syzkaller0: entered allmulticast mode [ 976.469700][T16118] tipc: Resetting bearer [ 976.490901][ T5916] tipc: Node number set to 513996084 [ 977.241968][T27955] syz.8.6791 (27955): drop_caches: 1 [ 977.827991][ T5883] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 977.915654][T27955] syz.8.6791 (27955): drop_caches: 1 [ 978.077551][ T5883] usb 2-1: config 0 has no interfaces? [ 978.083183][ T5883] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 978.097293][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.128286][ T5883] usb 2-1: config 0 descriptor?? [ 978.362921][ T5883] usb 2-1: USB disconnect, device number 45 [ 978.818525][T27974] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6799'. [ 978.887588][ T5883] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 979.088110][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short [ 979.119045][ T5883] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 979.497845][ T5883] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 979.871831][ T5883] usb 2-1: string descriptor 0 read error: -22 [ 979.917678][ T5883] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 979.937280][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.257185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 980.313182][ T5883] usb 2-1: Can't get UAC3 power state for id 10 [ 980.933493][ T5883] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 981.982072][T25150] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 982.169872][T25150] usb 9-1: Using ep0 maxpacket: 16 [ 982.177854][T25150] usb 9-1: config 0 has no interfaces? [ 982.183422][T25150] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 982.217545][T25150] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.288443][T25150] usb 9-1: config 0 descriptor?? [ 982.619003][T28013] syzkaller0: entered promiscuous mode [ 982.635643][T27997] kvm: kvm [27995]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 982.660283][T28013] syzkaller0: entered allmulticast mode [ 982.700943][T27997] kvm: kvm [27995]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 982.733525][ T5883] usb 2-1: USB disconnect, device number 46 [ 982.855597][T25150] usb 9-1: USB disconnect, device number 42 [ 983.274758][T28024] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 983.335025][T28024] kvm: pic: non byte read [ 983.371042][T28024] kvm: pic: single mode not supported [ 983.371129][T28024] kvm: pic: non byte read [ 983.416346][T28024] kvm: pic: non byte read [ 983.433139][T28024] kvm: pic: non byte read [ 983.454962][T28024] kvm: pic: non byte read [ 983.502061][T28024] kvm: pic: non byte read [ 983.529130][T28024] kvm: pic: level sensitive irq not supported [ 983.529269][T28024] kvm: pic: non byte read [ 983.596861][T28024] kvm: pic: non byte read [ 984.657377][T15065] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 984.885731][T15065] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 984.905994][T15065] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.931261][T15065] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 984.952198][T15065] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.013384][T15065] usbtmc 2-1:16.0: bulk endpoints not found [ 987.251528][T25150] usb 2-1: USB disconnect, device number 47 [ 987.631218][T28078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 987.689970][T28081] bond2: (slave ip6gretap1): making interface the new active one [ 987.703557][T28081] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 988.390691][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 988.390706][ T30] audit: type=1804 audit(1776077266.447:818): pid=28096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.6829" name="bus" dev="ramfs" ino=152887 res=1 errno=0 [ 990.567333][ T5916] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 990.746378][ T5916] usb 3-1: config 0 has no interfaces? [ 990.782514][ T5916] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 990.817527][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.868461][ T5916] usb 3-1: config 0 descriptor?? [ 991.165024][ T5916] usb 3-1: USB disconnect, device number 112 [ 991.617274][ T5916] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 991.959369][ T5916] usb 3-1: config 0 has no interfaces? [ 991.965145][ T5916] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 991.984825][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.000257][ T5916] usb 3-1: config 0 descriptor?? [ 992.238664][ T5916] usb 3-1: USB disconnect, device number 113 [ 993.057513][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.063863][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.431848][ T5883] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 993.677272][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 995.877236][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short [ 995.887848][ T5883] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 995.905793][ T5883] usb 2-1: can't read configurations, error -71 [ 996.388610][T28175] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 996.527239][T15065] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 996.827238][T15065] usb 10-1: Using ep0 maxpacket: 32 [ 996.834561][T15065] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 996.844672][T15065] usb 10-1: config 0 has no interface number 0 [ 996.893505][T15065] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 996.906296][T15065] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 996.925925][T15065] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.934470][T15065] usb 10-1: Product: syz [ 996.938906][T15065] usb 10-1: Manufacturer: syz [ 997.021342][T15065] usb 10-1: SerialNumber: syz [ 997.155891][T15065] usb 10-1: config 0 descriptor?? [ 997.167922][T28171] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 997.207849][ T5903] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 997.357522][ T5903] usb 9-1: Using ep0 maxpacket: 32 [ 997.405427][T28171] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 997.415462][ T5903] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 997.437281][ T5903] usb 9-1: config 0 has no interface number 0 [ 997.469745][ T5903] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 997.479426][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.499235][ T5903] usb 9-1: Product: syz [ 997.503444][ T5903] usb 9-1: Manufacturer: syz [ 997.525204][ T5903] usb 9-1: SerialNumber: syz [ 997.560834][ T5903] usb 9-1: config 0 descriptor?? [ 997.574217][ T5903] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 997.783670][ T5903] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 997.813592][ T5903] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 998.282748][T28180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.303099][T28180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.335952][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 998.337131][ T5916] usb 9-1: USB disconnect, device number 43 [ 998.384687][ T5916] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 998.435813][ T5916] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 998.476006][ T5916] quatech2 9-1:0.51: device disconnected [ 998.953917][T28205] netlink: 'syz.2.6857': attribute type 1 has an invalid length. [ 998.985719][T28205] 8021q: adding VLAN 0 to HW filter on device bond5 [ 999.139265][T28205] vlan3: entered promiscuous mode [ 999.161758][T28205] bond5: entered promiscuous mode [ 999.172420][T28205] vlan3: entered allmulticast mode [ 999.189619][T28205] bond5: entered allmulticast mode [ 999.234749][T28207] bond5: (slave bridge4): making interface the new active one [ 999.250264][T28207] bridge4: entered promiscuous mode [ 999.265985][T28207] bridge4: entered allmulticast mode [ 999.277451][T28207] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 999.392768][T28212] netlink: 'syz.1.6859': attribute type 21 has an invalid length. [ 999.416029][T28212] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6859'. [ 999.445955][T28212] netlink: 'syz.1.6859': attribute type 1 has an invalid length. [ 999.454042][T28212] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6859'. [ 999.725065][T28220] syzkaller0: entered promiscuous mode [ 999.735860][T28220] syzkaller0: entered allmulticast mode [ 1000.437294][T15065] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1000.453657][T15065] asix 10-1:0.188: probe with driver asix failed with error -71 [ 1000.486291][T15065] usb 10-1: USB disconnect, device number 25 [ 1000.973312][T28235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6869'. [ 1001.014559][T28236] sctp: [Deprecated]: syz.8.6868 (pid 28236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1001.014559][T28236] Use struct sctp_sack_info instead [ 1001.176144][T28238] veth5: entered allmulticast mode [ 1001.218883][T28238] bond3: (slave veth5): Enslaving as an active interface with an up link [ 1001.280225][T28235] bond3 (unregistering): (slave veth5): Releasing backup interface [ 1001.293167][T28235] bond3 (unregistering): Released all slaves [ 1001.328315][T28240] syzkaller0: entered promiscuous mode [ 1001.334474][T28240] syzkaller0: entered allmulticast mode [ 1001.373134][T28251] fuse: Bad value for 'fd' [ 1001.847538][ T5916] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1001.994853][T28276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1002.032072][T28276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1002.067700][T28276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1002.199829][ T5916] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1002.246584][ T5916] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1002.268190][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.293106][ T5916] usb 2-1: Product: syz [ 1002.303349][ T5916] usb 2-1: Manufacturer: syz [ 1002.314461][ T5916] usb 2-1: SerialNumber: syz [ 1002.664553][T28261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.672353][T28261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.810238][ T30] audit: type=1326 audit(1776077280.867:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.2.6884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53b3b9c819 code=0x0 [ 1003.064763][T28261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.115186][T28261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.346062][T27300] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.357444][T27300] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.375449][T27300] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.397526][T27300] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.426876][T27300] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.446585][T27300] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.468294][T27300] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.487225][T27300] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.751475][ T5916] snd-usb-us122l 2-1:1.1: usb_set_interface error [ 1003.767900][ T5916] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1003.825609][ T5916] usb 2-1: USB disconnect, device number 50 [ 1003.884356][ T5821] udevd[5821]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 1003.920585][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1003.964263][ T5821] udevd[5821]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1004.151091][T28292] netlink: 92 bytes leftover after parsing attributes in process `syz.9.6887'. [ 1004.174965][T28292] netlink: 990 bytes leftover after parsing attributes in process `syz.9.6887'. [ 1004.373225][T28297] syzkaller0: entered promiscuous mode [ 1004.379075][T28297] syzkaller0: entered allmulticast mode [ 1004.894806][T28316] tipc: Enabled bearer , priority 0 [ 1004.907318][T15065] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1004.961153][T28311] syzkaller0: entered promiscuous mode [ 1004.966823][T28311] syzkaller0: entered allmulticast mode [ 1004.994518][T28311] tipc: Resetting bearer [ 1005.004790][T28310] tipc: Resetting bearer [ 1005.025318][T28310] tipc: Disabling bearer [ 1005.059145][T15065] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1005.070049][T15065] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1005.093148][T15065] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1005.105853][T15065] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1005.146278][T15065] usb 2-1: Product: syz [ 1005.173304][T15065] usb 2-1: Manufacturer: syz [ 1005.197995][T15065] usb 2-1: SerialNumber: syz [ 1005.216130][T15065] usb 2-1: config 0 descriptor?? [ 1005.223572][T28307] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1005.245654][T15065] usb 2-1: selecting invalid altsetting 0 [ 1005.439345][T28307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.457890][T28307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.502772][T15065] usb 2-1: USB disconnect, device number 51 [ 1007.108263][T28348] tipc: Enabling of bearer rejected, already enabled [ 1007.142060][T28348] tipc: Resetting bearer [ 1007.477558][T15065] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1007.485523][ T5832] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1007.637329][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 1007.644104][T15065] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.657367][T15065] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.670305][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.684804][T15065] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1007.694312][ T5832] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1007.706816][T15065] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.715296][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.733487][T15065] usb 9-1: config 0 descriptor?? [ 1007.745147][ T5832] usb 3-1: config 0 descriptor?? [ 1007.957689][T15065] usbhid 9-1:0.0: can't add hid device: -71 [ 1007.966858][T15065] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1007.989518][T15065] usb 9-1: USB disconnect, device number 44 [ 1008.186510][ T5832] corsair 0003:1B1C:1B02.005A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1008.383096][ T5832] corsair 0003:1B1C:1B02.005A: Failed to get K90 initial state (error -32). [ 1008.468006][T15065] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1008.514812][T25150] usb 3-1: USB disconnect, device number 114 [ 1008.552584][T28360] fido_id[28360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1008.648879][T15065] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.712268][T15065] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.850338][T15065] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1008.871731][T15065] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1008.892919][T15065] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.905639][T15065] usb 9-1: config 0 descriptor?? [ 1009.347876][T15065] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1009.941862][ C1] plantronics 0003:047F:FFFF.005B: Event data for report 0 was too short (4043 vs 2) [ 1010.156804][ T5903] usb 9-1: USB disconnect, device number 45 [ 1010.617294][T15065] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1010.807388][T15065] usb 10-1: Using ep0 maxpacket: 32 [ 1010.870298][T15065] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1010.878751][T15065] usb 10-1: config 0 has no interface number 0 [ 1010.889925][T15065] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1010.906186][T15065] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1010.917556][ T5916] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1010.927610][T15065] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.944795][T15065] usb 10-1: Product: syz [ 1010.955750][T15065] usb 10-1: Manufacturer: syz [ 1010.973456][T15065] usb 10-1: SerialNumber: syz [ 1011.018636][T15065] usb 10-1: config 0 descriptor?? [ 1011.077202][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 1011.090520][ T5916] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1011.100588][ T5916] usb 2-1: config 0 has no interface number 0 [ 1011.107257][ T5916] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1011.120679][ T5916] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1011.281157][ T5916] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1011.298207][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.334673][ T5916] usb 2-1: Product: syz [ 1011.373828][ T5916] usb 2-1: Manufacturer: syz [ 1011.575152][ T5916] usb 2-1: SerialNumber: syz [ 1011.650622][ T5916] usb 2-1: config 0 descriptor?? [ 1011.670612][T28399] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1011.679208][T28399] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1011.912080][T28399] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1011.919870][T28399] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1012.611289][ T5903] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1012.780963][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1012.795621][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1012.818296][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1013.642676][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1013.665175][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1013.676169][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1013.743670][ T5903] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1013.754324][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.773195][ T5903] usb 3-1: Product: syz [ 1013.777658][ T5903] usb 3-1: Manufacturer: syz [ 1013.782281][ T5903] usb 3-1: SerialNumber: syz [ 1013.811645][ T5903] usb 3-1: config 0 descriptor?? [ 1013.835493][ T5903] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 1013.861589][ T5903] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 1014.005890][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1014.033276][T15065] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1014.092674][T15065] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1014.101460][T15065] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1014.109426][T15065] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1014.124282][T15065] usb 10-1: USB disconnect, device number 26 [ 1014.136442][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1014.170866][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1014.197934][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1014.210008][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1014.269166][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1014.281829][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1014.292131][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1014.349212][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1014.473748][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1014.486902][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1014.529624][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1014.647882][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1014.662529][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1014.704240][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1014.859260][T28434] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6928'. [ 1014.868610][T28434] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6928'. [ 1014.945111][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1014.966260][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1015.080873][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1015.099931][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1015.169191][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1015.197898][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1015.212212][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1015.245281][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1015.305674][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1015.328992][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1015.369711][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1015.455598][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1015.493561][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1015.514101][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1015.543535][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1015.585002][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1015.600412][T28450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1015.615925][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1015.700102][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1015.711026][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1015.756090][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1015.812962][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1015.892286][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1015.923968][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1015.952335][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1015.979672][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1015.993382][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1016.047958][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1016.225030][T15065] usb 3-1: USB disconnect, device number 115 [ 1016.225521][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1016.376271][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1016.424814][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1016.437800][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1016.457332][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1016.518107][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1016.540699][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1016.556984][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1016.579176][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1016.591013][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1016.601788][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1016.618979][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1016.648864][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1016.672945][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1016.694126][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1016.718563][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1016.777622][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1016.810811][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1016.821575][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1016.832751][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1016.845085][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1016.856019][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1016.870851][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1016.883776][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1016.894556][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1016.915313][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1016.937710][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1016.948237][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1016.958895][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1016.970754][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1016.988278][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1016.998921][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1017.011010][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1017.021898][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1017.032989][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1017.045174][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1017.056132][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1017.076579][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1017.089439][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1017.100000][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1017.112715][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1017.129152][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1017.140335][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1017.151356][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1017.165113][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1017.176052][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1017.186446][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1017.198445][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1017.215717][ T5916] asix 2-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 1017.226490][ T5916] asix 2-1:0.251: probe with driver asix failed with error -5 [ 1017.253367][ T5916] usb 2-1: USB disconnect, device number 52 [ 1017.568381][ T5916] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1017.727342][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 1017.733741][ T5916] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1017.742226][ T5916] usb 2-1: config 0 has no interface number 0 [ 1017.748444][ T5916] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1017.759447][ T5916] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1017.771332][ T5916] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1017.782429][ T5916] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1017.795578][ T5916] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1017.805058][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.815172][ T5916] usb 2-1: config 0 descriptor?? [ 1017.828856][ T5916] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1018.069307][ T5916] usb 2-1: USB disconnect, device number 53 [ 1018.081684][ T5916] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1018.624530][T28458] tipc: Started in network mode [ 1018.629782][T28458] tipc: Node identity 080211000001, cluster identity 4711 [ 1018.637800][T28458] tipc: Enabled bearer , priority 0 [ 1018.651173][T28458] tipc: Resetting bearer [ 1018.719636][T28462] syzkaller0: entered promiscuous mode [ 1018.737459][T28462] syzkaller0: entered allmulticast mode [ 1019.118599][T28481] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6941'. [ 1019.306805][T28481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1019.354375][T28484] bond1: entered promiscuous mode [ 1019.374676][T28484] bond1: entered allmulticast mode [ 1019.404403][T28484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1019.433916][T28484] team0: Port device bond1 added [ 1019.640158][T28481] ip6gretap1: entered promiscuous mode [ 1020.009381][T28481] ip6gretap1: entered allmulticast mode [ 1020.238631][T28481] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1020.282161][ T5903] tipc: Node number set to 134418688 [ 1021.917696][ T30] audit: type=1800 audit(1776077299.957:820): pid=28513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6950" name="bus" dev="tmpfs" ino=3107 res=0 errno=0 [ 1022.935166][T28519] syzkaller0: entered promiscuous mode [ 1022.954107][T28519] syzkaller0: entered allmulticast mode [ 1023.092371][T28523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6954'. [ 1023.147636][ T5916] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1023.204542][T28525] binder: BINDER_SET_CONTEXT_MGR already set [ 1023.235697][T28525] binder: 28524:28525 ioctl 4018620d 200000000100 returned -16 [ 1023.251418][T28525] binder: BINDER_SET_CONTEXT_MGR already set [ 1023.261209][T28525] binder: 28524:28525 ioctl 4018620d 2000000002c0 returned -16 [ 1023.314287][ T5916] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1023.327564][ T5916] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.339308][ T5916] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1023.349593][ T5916] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1023.358007][ T5916] usb 10-1: Manufacturer: syz [ 1023.373608][ T5916] usb 10-1: config 0 descriptor?? [ 1023.522386][ T5916] rc_core: IR keymap rc-hauppauge not found [ 1023.531320][ T5916] Registered IR keymap rc-empty [ 1023.544309][ T5916] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1023.563078][ T5916] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input130 [ 1023.587815][ C0] igorplugusb 10-1:0.0: Error: urb status = -32 [ 1023.625921][ T5916] usb 10-1: USB disconnect, device number 27 [ 1024.296872][T28552] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6965'. [ 1024.636846][T28556] tipc: Started in network mode [ 1024.642029][T28556] tipc: Node identity 66b54fbbbd8a, cluster identity 4711 [ 1024.649424][T28556] tipc: Enabled bearer , priority 0 [ 1024.657900][ T5903] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1024.665899][T28556] syzkaller0: entered promiscuous mode [ 1024.671552][T28556] syzkaller0: entered allmulticast mode [ 1024.692568][T28556] tipc: Resetting bearer [ 1024.700300][T28555] tipc: Resetting bearer [ 1024.718077][T28555] tipc: Disabling bearer [ 1024.786176][T28554] kvm: kvm [28553]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1024.807519][T28554] kvm: kvm [28553]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1024.827695][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 1024.842464][ T5903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.879443][ T5903] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1024.896773][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.918860][ T5903] usb 3-1: Product: syz [ 1024.927080][ T5903] usb 3-1: Manufacturer: syz [ 1025.005083][ T5903] usb 3-1: SerialNumber: syz [ 1025.014980][ T5903] usb 3-1: config 0 descriptor?? [ 1025.030961][ T5903] cdc_phonet 3-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1025.211402][T28562] syz.1.6969 (28562): drop_caches: 2 [ 1025.218382][T28562] syz.1.6969 (28562): drop_caches: 2 [ 1025.388023][T28567] sctp: [Deprecated]: syz.2.6965 (pid 28567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1025.388023][T28567] Use struct sctp_sack_info instead [ 1025.605714][ T5903] usb 3-1: USB disconnect, device number 116 [ 1025.750416][T17634] Bluetooth: hci3: command 0x0406 tx timeout [ 1026.863600][T28584] tipc: Enabled bearer , priority 0 [ 1026.884376][T28584] syzkaller0: entered promiscuous mode [ 1026.903652][T28584] syzkaller0: entered allmulticast mode [ 1026.946238][T28584] tipc: Resetting bearer [ 1027.015671][T28583] tipc: Resetting bearer [ 1027.131603][T28583] tipc: Disabling bearer [ 1027.499229][T28594] syzkaller0: create flow: hash 926022531 index 2 [ 1027.537483][T15065] syzkaller0: tun_net_xmit 76 [ 1027.557402][ T5832] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1027.597660][ T5903] syzkaller0: tun_net_xmit 76 [ 1027.606313][T28599] syzkaller0: delete flow: hash 926022531 index 2 [ 1027.711628][ T5832] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1027.725277][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1027.756814][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1027.768783][ T5832] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1027.798686][ T5832] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1027.816865][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.855477][ T5832] usb 3-1: config 0 descriptor?? [ 1028.098130][T15065] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1028.308151][ T5832] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1028.401865][T15065] usb 9-1: Using ep0 maxpacket: 16 [ 1028.411935][T15065] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1028.446189][T15065] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1028.475839][T15065] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1028.510277][T15065] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.522696][T15065] usb 9-1: Product: syz [ 1028.536572][T15065] usb 9-1: Manufacturer: syz [ 1028.547740][T15065] usb 9-1: SerialNumber: syz [ 1028.567521][T15065] usb 9-1: config 0 descriptor?? [ 1028.605154][T15065] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1028.656222][T15065] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1029.152724][ T5832] usb 3-1: USB disconnect, device number 117 [ 1029.228453][T15065] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1029.245676][T15065] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1029.859532][T15065] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1029.890549][T15065] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1029.905462][T15065] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1029.922866][T15065] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1029.938058][T15065] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1030.366066][T15065] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1030.389167][T15065] usb 9-1: USB disconnect, device number 46 [ 1030.490247][ T5916] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1030.660316][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.684623][ T5916] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1030.707693][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.736823][ T5916] usb 3-1: config 0 descriptor?? [ 1031.167070][ T5916] ath6kl: Failed to read usb control message: -71 [ 1031.179839][ T5916] ath6kl: Unable to read the bmi data from the device: -71 [ 1031.247746][ T5916] ath6kl: Unable to recv target info: -71 [ 1031.281012][ T5916] ath6kl: Failed to init ath6kl core: -71 [ 1031.287569][ T5916] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1031.350011][ T5916] usb 3-1: USB disconnect, device number 118 [ 1031.663093][ T30] audit: type=1326 audit(1776077309.717:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28637 comm="syz.9.6992" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fe659c819 code=0x0 [ 1031.714581][T28639] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6992'. [ 1031.909536][T28643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6994'. [ 1032.092065][T28647] tipc: Enabled bearer , priority 0 [ 1032.101295][T28647] syzkaller0: entered promiscuous mode [ 1032.113183][T28647] syzkaller0: entered allmulticast mode [ 1032.169339][T28647] tipc: Resetting bearer [ 1032.207563][T28645] tipc: Resetting bearer [ 1032.235399][T28645] tipc: Disabling bearer [ 1032.732846][T28665] xt_hashlimit: max too large, truncated to 1048576 [ 1033.075622][T28669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7004'. [ 1033.150808][T28669] vlan4: entered promiscuous mode [ 1033.177261][T28669] team0: entered promiscuous mode [ 1033.182442][T28669] team_slave_0: entered promiscuous mode [ 1033.196568][T28669] team_slave_1: entered promiscuous mode [ 1033.313789][T28673] syzkaller0: entered promiscuous mode [ 1033.342079][T28673] syzkaller0: entered allmulticast mode [ 1033.573602][T28676] binder: BINDER_SET_CONTEXT_MGR already set [ 1033.593286][T28676] binder: 28675:28676 ioctl 4018620d 200000000100 returned -16 [ 1033.612261][T28676] binder: BINDER_SET_CONTEXT_MGR already set [ 1033.627775][T28676] binder: 28675:28676 ioctl 4018620d 200000004a80 returned -16 [ 1034.010102][T28690] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 1034.023717][T28689] netem: change failed [ 1034.135999][T28693] netdevsim netdevsim8 : renamed from netdevsim0 [ 1034.428834][ T5883] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1034.602515][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 1034.630443][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1034.652596][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1034.683932][ T5883] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1034.697283][ T5832] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 1034.706372][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.716370][ T5883] usb 3-1: Product: syz [ 1034.724693][ T5883] usb 3-1: Manufacturer: syz [ 1034.732771][ T5883] usb 3-1: SerialNumber: syz [ 1034.749611][ T5883] usb 3-1: config 0 descriptor?? [ 1034.774191][ T5883] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1034.790843][ T5883] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1034.880377][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1034.892029][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1034.924459][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1034.952468][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1034.995736][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1035.023028][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1035.051263][ T5832] usb 9-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1035.064054][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.079492][ T5832] usb 9-1: Product: syz [ 1035.083701][ T5832] usb 9-1: Manufacturer: syz [ 1035.101526][ T5832] usb 9-1: SerialNumber: syz [ 1035.145749][ T5832] usb 9-1: config 0 descriptor?? [ 1035.163122][ T5832] ti_usb_3410_5052 9-1:0.0: TI USB 5052 2 port adapter converter detected [ 1035.175897][ T5832] ti_usb_3410_5052 9-1:0.0: missing endpoints [ 1035.400043][ T5883] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1035.406828][ T5883] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1036.122178][ T5883] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1036.133529][ T5883] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1036.210904][ T5883] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1036.272197][ T5883] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1036.368144][T28730] netlink: 'syz.9.7024': attribute type 1 has an invalid length. [ 1036.443950][T28730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1036.469957][T28734] vlan1: entered allmulticast mode [ 1036.480645][T28734] bond1: entered allmulticast mode [ 1036.507643][ T5883] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 1036.525055][ T5883] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1036.555598][T28730] bond1: (slave geneve2): making interface the new active one [ 1036.564171][T28730] geneve2: entered allmulticast mode [ 1036.587091][T28730] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1036.615316][T28730] syz.9.7024 (28730) used greatest stack depth: 18312 bytes left [ 1036.703099][ T5883] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1036.769747][ T5883] usb 3-1: USB disconnect, device number 119 [ 1036.927710][T28739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1037.032070][T28739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1037.075461][T28739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1037.110308][T28739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7027'. [ 1037.292726][T28742] syzkaller0: entered promiscuous mode [ 1037.298510][T28742] syzkaller0: entered allmulticast mode [ 1037.455591][ T5883] usb 9-1: USB disconnect, device number 47 [ 1037.791017][T28757] TC_ACT_REPEAT abuse ? [ 1039.132113][ T30] audit: type=1804 audit(1776077316.567:822): pid=28770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.7036" name="bus" dev="ramfs" ino=157326 res=1 errno=0 [ 1039.487474][T28775] netlink: 'syz.2.7038': attribute type 10 has an invalid length. [ 1039.531454][T28775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.553562][T28775] bond0: (slave team0): Enslaving as an active interface with an up link [ 1039.939612][T28780] tipc: Enabled bearer , priority 0 [ 1039.947047][T28780] syzkaller0: entered promiscuous mode [ 1039.952840][T28780] syzkaller0: entered allmulticast mode [ 1040.270597][ T5916] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1040.439437][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1040.447950][ T5916] usb 3-1: not running at top speed; connect to a high speed hub [ 1040.473626][ T5916] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1040.506932][ T5916] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1040.547295][ T5916] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1040.560361][ T5916] usb 3-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40 [ 1040.599723][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.624312][ T5916] usb 3-1: Product: syz [ 1040.637843][ T5916] usb 3-1: Manufacturer: syz [ 1040.645726][ T5916] usb 3-1: SerialNumber: syz [ 1040.687106][T28782] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1040.734000][T28779] tipc: Resetting bearer [ 1040.831279][T28779] tipc: Disabling bearer [ 1040.983645][ T5916] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input132 [ 1041.018079][ T5178] bcm5974 3-1:1.0: could not read from device [ 1041.046356][ T5178] bcm5974 3-1:1.0: could not read from device [ 1041.109995][ T5178] bcm5974 3-1:1.0: could not read from device [ 1041.119259][ T5916] usb 3-1: USB disconnect, device number 120 [ 1041.142936][ T5178] bcm5974 3-1:1.0: could not read from device [ 1041.366554][T28802] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1044.958500][T28847] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7058'. [ 1049.937205][T28907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1050.141781][T28889] tipc: Enabled bearer , priority 0 [ 1050.180638][T28892] syzkaller0: entered promiscuous mode [ 1050.199823][T28892] syzkaller0: entered allmulticast mode [ 1050.268669][T28901] tipc: Resetting bearer [ 1050.278365][T28883] tipc: Resetting bearer [ 1050.311587][T28883] tipc: Disabling bearer [ 1053.611264][T28949] syzkaller0: entered promiscuous mode [ 1053.616819][T28949] syzkaller0: entered allmulticast mode [ 1054.423242][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.429846][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.442365][T28964] kAFS: unable to lookup cell 'ÿ' [ 1054.449001][T28964] kAFS: unable to lookup cell '(,c¾Ì' [ 1055.185866][ T30] audit: type=1326 audit(1776077333.237:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28969 comm="syz.1.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93d9c819 code=0x7ffc0000 [ 1055.276118][ T30] audit: type=1326 audit(1776077333.237:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28969 comm="syz.1.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93d9c819 code=0x7ffc0000 [ 1055.463584][ T30] audit: type=1326 audit(1776077333.237:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28969 comm="syz.1.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf93d9c819 code=0x7ffc0000 [ 1055.551309][ T30] audit: type=1326 audit(1776077333.237:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28969 comm="syz.1.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93d9c819 code=0x7ffc0000 [ 1055.610583][ T30] audit: type=1326 audit(1776077333.237:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28969 comm="syz.1.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93d9c819 code=0x7ffc0000 [ 1055.716207][ T30] audit: type=1326 audit(1776077333.237:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28969 comm="syz.1.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf93d9c819 code=0x7ffc0000 [ 1055.777287][ T30] audit: type=1326 audit(1776077333.267:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28969 comm="syz.1.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93d9c819 code=0x7ffc0000 [ 1055.823642][ T30] audit: type=1326 audit(1776077333.267:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28969 comm="syz.1.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf93d9c819 code=0x7ffc0000 [ 1055.896363][ T30] audit: type=1326 audit(1776077333.267:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28969 comm="syz.1.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93d9c819 code=0x7ffc0000 [ 1055.977562][ T30] audit: type=1326 audit(1776077333.267:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28969 comm="syz.1.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf93d9c819 code=0x7ffc0000 [ 1056.159258][T28983] syzkaller0: entered promiscuous mode [ 1056.167244][T28983] syzkaller0: entered allmulticast mode [ 1056.267264][ T5903] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1056.368069][T28991] xt_hashlimit: max too large, truncated to 1048576 [ 1056.432063][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1056.451425][ T5903] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1056.463048][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.487627][ T5903] usb 3-1: Product: syz [ 1056.491921][ T5903] usb 3-1: Manufacturer: syz [ 1056.496533][ T5903] usb 3-1: SerialNumber: syz [ 1057.433283][T28981] tipc: Resetting bearer [ 1057.738926][ T5903] snd-usb-us122l 3-1:1.1: usb_set_interface error [ 1057.754977][ T5903] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1057.968828][ T5903] usb 3-1: USB disconnect, device number 121 [ 1057.996385][T28884] udevd[28884]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1058.831349][T29011] netlink: zone id is out of range [ 1058.855177][T29011] netlink: zone id is out of range [ 1058.866510][T29011] netlink: zone id is out of range [ 1058.880046][T29011] netlink: zone id is out of range [ 1058.886234][T29011] netlink: zone id is out of range [ 1058.894273][T29011] netlink: zone id is out of range [ 1058.907248][T29011] netlink: zone id is out of range [ 1058.917979][T29011] netlink: zone id is out of range [ 1058.927190][T29011] netlink: zone id is out of range [ 1058.957525][T29011] netlink: zone id is out of range [ 1059.041324][T29014] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 1059.049829][T29014] tipc: Resetting bearer [ 1059.068841][T29014] tipc: Enabling of bearer rejected, already enabled [ 1059.280242][T29022] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7102'. [ 1059.467235][T25150] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1059.637478][T25150] usb 10-1: Using ep0 maxpacket: 32 [ 1059.669081][T25150] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1059.690939][T25150] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1059.717222][T25150] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1059.747630][T25150] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1059.771965][T25150] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1059.802182][T25150] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1059.934551][T25150] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1059.954351][T25150] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.023373][T25150] usb 10-1: config 0 descriptor?? [ 1060.296307][T25150] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1060.312310][T25150] usb 10-1: USB disconnect, device number 28 [ 1060.381496][T25150] usblp0: removed [ 1060.684078][T29041] input: syz1 as /devices/virtual/input/input133 [ 1060.732644][T29041] netlink: 'syz.8.7109': attribute type 1 has an invalid length. [ 1060.834056][T29041] tun0: tun_chr_ioctl cmd 1074025681 [ 1060.871739][T25150] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1060.916374][T29045] syzkaller0: entered promiscuous mode [ 1060.926564][T29045] syzkaller0: entered allmulticast mode [ 1061.057569][T25150] usb 10-1: Using ep0 maxpacket: 32 [ 1061.086403][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1061.086420][ T30] audit: type=1326 audit(1776077339.127:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29048 comm="syz.8.7112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6779c819 code=0x7ffc0000 [ 1061.118297][T25150] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1061.206224][T25150] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1061.224726][T25150] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1061.267022][ T30] audit: type=1326 audit(1776077339.127:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29048 comm="syz.8.7112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6779c819 code=0x7ffc0000 [ 1061.290747][T25150] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1061.302048][T25150] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1061.316379][T25150] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1061.330479][ T30] audit: type=1326 audit(1776077339.127:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29048 comm="syz.8.7112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6779c819 code=0x7ffc0000 [ 1061.401166][T25150] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1061.431352][T25150] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.460834][ T30] audit: type=1326 audit(1776077339.127:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29048 comm="syz.8.7112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4e6779c819 code=0x7ffc0000 [ 1061.502601][T25150] usb 10-1: config 0 descriptor?? [ 1061.620747][ T30] audit: type=1326 audit(1776077339.237:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29048 comm="syz.8.7112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4e6775d04e code=0x7ffc0000 [ 1061.700507][ T30] audit: type=1326 audit(1776077339.237:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29048 comm="syz.8.7112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4e6775d04e code=0x7ffc0000 [ 1061.811437][ T30] audit: type=1326 audit(1776077339.237:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29048 comm="syz.8.7112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4e6775d04e code=0x7ffc0000 [ 1062.059401][T25150] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1062.083571][ T30] audit: type=1326 audit(1776077339.237:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29048 comm="syz.8.7112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4e6775d04e code=0x7ffc0000 [ 1062.171768][ T30] audit: type=1326 audit(1776077339.237:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29048 comm="syz.8.7112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4e6775d04e code=0x7ffc0000 [ 1062.272846][ T30] audit: type=1326 audit(1776077339.237:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29048 comm="syz.8.7112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4e6775d04e code=0x7ffc0000 [ 1062.587218][ T5903] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1062.765066][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1062.787503][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 1062.817165][ T5903] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1062.847722][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.933836][ T5903] usb 2-1: config 0 descriptor?? [ 1063.012096][T25150] usb 10-1: USB disconnect, device number 29 [ 1063.056733][T25150] usblp0: removed [ 1063.178609][T29076] netlink: 'syz.8.7113': attribute type 6 has an invalid length. [ 1063.186580][T29076] IPv6: NLM_F_CREATE should be specified when creating new route [ 1063.217146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 1063.287158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1063.451005][ T5903] ath6kl: Failed to submit usb control message: -71 [ 1063.467546][ T5903] ath6kl: unable to send the bmi data to the device: -71 [ 1063.484747][ T5903] ath6kl: Unable to send get target info: -71 [ 1063.967305][ T5903] ath6kl: Failed to init ath6kl core: -71 [ 1063.984681][ T5903] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1064.055531][ T5903] usb 2-1: USB disconnect, device number 54 [ 1064.699272][T29094] tipc: Failed to remove unknown binding: 66,0,0/0:3367001166/3367001168 [ 1064.699338][T29094] tipc: Failed to remove unknown binding: 66,0,0/0:3367001166/3367001167 [ 1064.699882][T29094] tipc: Failed to remove unknown binding: 66,0,0/0:3367001166/3367001168 [ 1064.699936][T29094] tipc: Failed to remove unknown binding: 66,0,0/0:3367001166/3367001167 [ 1066.107233][ T5903] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1066.347203][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 1067.956251][T29120] binder: 29117:29120 ioctl c0306201 200000000540 returned -14 [ 1068.664565][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1068.699491][ T5903] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1068.715929][ T5903] usb 3-1: can't read configurations, error -71 [ 1069.075639][T29139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7137'. [ 1069.380015][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1069.380036][ T30] audit: type=1804 audit(1776077347.437:872): pid=29136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.7133" name="/newroot/182/file1" dev="tmpfs" ino=964 res=1 errno=0 [ 1070.480912][T29159] netlink: 'syz.9.7143': attribute type 10 has an invalid length. [ 1070.494452][T29159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.695275][T25150] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1070.895961][T29159] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1071.038195][ T5832] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1071.057476][T25150] usb 9-1: Using ep0 maxpacket: 16 [ 1071.064110][T25150] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1071.192463][T25150] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1071.203435][T25150] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.218774][T25150] usb 9-1: Product: syz [ 1071.223041][T25150] usb 9-1: Manufacturer: syz [ 1071.227895][T25150] usb 9-1: SerialNumber: syz [ 1071.243551][T25150] usb 9-1: config 0 descriptor?? [ 1071.258764][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 1071.276221][ T5832] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1071.394863][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1071.446074][ T5832] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1071.449040][T25150] hub 9-1:0.0: bad descriptor, ignoring hub [ 1071.456064][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.467469][T25150] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1071.489790][ T5832] usb 3-1: Product: syz [ 1071.493309][T25150] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1071.500006][ T5832] usb 3-1: Manufacturer: syz [ 1071.531042][ T5832] usb 3-1: SerialNumber: syz [ 1071.579068][ T5832] usb 3-1: config 0 descriptor?? [ 1071.605244][ T5832] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1071.615257][ T5832] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1071.807133][T25150] usb 9-1: USB disconnect, device number 48 [ 1072.188545][T29186] syzkaller0: entered promiscuous mode [ 1072.194134][T29186] syzkaller0: entered allmulticast mode [ 1072.208371][ T5832] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1072.227788][ T5832] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1072.377580][T29189] netlink: 212 bytes leftover after parsing attributes in process `syz.8.7154'. [ 1072.882014][ T9] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1072.897383][ T5832] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1072.916719][ T5832] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1072.923866][ T5832] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1072.930898][ T5832] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1072.939138][ T5832] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1072.946389][ T5832] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1073.037439][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1073.045300][ T9] usb 9-1: config 0 has an invalid interface number: 10 but max is 0 [ 1073.057902][ T9] usb 9-1: config 0 has no interface number 0 [ 1073.067935][ T9] usb 9-1: config 0 interface 10 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1073.088639][ T9] usb 9-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 1073.105651][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.142229][ T9] usb 9-1: Product: syz [ 1073.169980][ T9] usb 9-1: Manufacturer: syz [ 1073.174617][ T9] usb 9-1: SerialNumber: syz [ 1073.183392][ T5832] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1073.192387][ T9] usb 9-1: config 0 descriptor?? [ 1073.198841][ T5832] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1073.213587][ T5832] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1073.226788][ T5832] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1073.301253][ T5832] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1073.349854][ T5832] usb 3-1: USB disconnect, device number 124 [ 1073.445392][ T9] usb 9-1: USB disconnect, device number 49 [ 1073.783197][T29204] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7160'. [ 1073.794487][T29204] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7160'. [ 1073.999632][T29212] syzkaller0: entered promiscuous mode [ 1074.014423][T29212] syzkaller0: entered allmulticast mode [ 1074.306816][T29216] geneve2: entered promiscuous mode [ 1074.862980][T29226] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1075.947335][T29240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7171'. [ 1076.331755][T29244] syzkaller0: entered promiscuous mode [ 1076.347016][T29244] syzkaller0: entered allmulticast mode [ 1076.757886][T29249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1078.197432][T29265] net_ratelimit: 106 callbacks suppressed [ 1078.197451][T29265] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1078.237243][ T5832] IPVS: starting estimator thread 0... [ 1078.347283][T29270] IPVS: using max 34 ests per chain, 81600 per kthread [ 1078.806512][T29280] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode [ 1078.849400][T29282] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1980170576 (3960341152 ns) > initial count (2789370162 ns). Using initial count to start timer. [ 1078.860149][T29280] tipc: Resetting bearer [ 1078.873228][T29280] tipc: Resetting bearer [ 1079.286022][T16118] IPVS: stop unused estimator thread 0... [ 1080.032747][T29305] tipc: Enabled bearer , priority 0 [ 1080.040410][T29305] syzkaller0: entered promiscuous mode [ 1080.046484][T29305] syzkaller0: entered allmulticast mode [ 1080.076709][T29305] tipc: Resetting bearer [ 1080.085622][T29304] tipc: Resetting bearer [ 1080.109539][T29304] tipc: Disabling bearer [ 1080.557370][ T5903] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1080.713068][ T5903] usb 10-1: config 0 has an invalid interface number: 84 but max is 0 [ 1080.727261][ T5903] usb 10-1: config 0 has no interface number 0 [ 1080.733603][ T5903] usb 10-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64 [ 1080.854853][ T5903] usb 10-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1080.877231][ T5903] usb 10-1: config 0 interface 84 has no altsetting 0 [ 1080.891889][ T5903] usb 10-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 1080.916252][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.948978][ T5903] usb 10-1: config 0 descriptor?? [ 1080.967859][T29313] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1080.989689][ T5903] option 10-1:0.84: GSM modem (1-port) converter detected [ 1081.147276][T29319] syzkaller0: entered promiscuous mode [ 1081.163364][T29319] syzkaller0: entered allmulticast mode [ 1082.062890][T29330] netlink: 'syz.8.7196': attribute type 10 has an invalid length. [ 1082.072869][T29330] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.088917][T29330] bond0: (slave team0): Enslaving as an active interface with an up link [ 1084.607504][T15065] usb 10-1: USB disconnect, device number 30 [ 1084.616912][T15065] option 10-1:0.84: device disconnected [ 1084.748872][T29358] binder: BINDER_SET_CONTEXT_MGR already set [ 1084.755005][T29358] binder: 29357:29358 ioctl 4018620d 200000000100 returned -16 [ 1084.788966][T29358] binder: BINDER_SET_CONTEXT_MGR already set [ 1084.795195][T29358] binder: 29357:29358 ioctl 4018620d 200000004a80 returned -16 [ 1085.273851][T29379] syzkaller0: entered promiscuous mode [ 1085.280015][T29379] syzkaller0: entered allmulticast mode [ 1086.223830][T29390] netlink: 'syz.9.7214': attribute type 1 has an invalid length. [ 1086.312465][T29390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1086.328178][T29394] vlan2: entered allmulticast mode [ 1086.333309][T29394] bond2: entered allmulticast mode [ 1086.367625][ T5916] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1086.867642][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 1086.884589][ T5916] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1086.896134][ T5916] usb 2-1: config 0 has no interface number 0 [ 1086.905889][ T5916] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1086.931350][T29390] bond2: (slave geneve3): making interface the new active one [ 1086.944174][T29390] geneve3: entered allmulticast mode [ 1086.956826][ T5916] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1086.968223][T29390] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1087.005885][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.014256][ T5916] usb 2-1: Product: syz [ 1087.024383][ T5916] usb 2-1: Manufacturer: syz [ 1087.029979][ T5916] usb 2-1: SerialNumber: syz [ 1087.050171][ T5916] usb 2-1: config 0 descriptor?? [ 1087.382743][T29409] netlink: 'syz.7.7220': attribute type 1 has an invalid length. [ 1087.407593][T29409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1087.423081][T29409] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1088.087306][T29409] bond2: entered allmulticast mode [ 1088.126806][T29412] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1089.034769][ T5916] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 1089.094229][ T5916] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1089.116489][ T5916] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1089.125678][ T5916] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1089.526449][ T5916] usb 2-1: USB disconnect, device number 55 [ 1090.185948][T29439] syzkaller0: entered promiscuous mode [ 1090.196132][T29439] syzkaller0: entered allmulticast mode [ 1090.917234][T15065] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1091.067466][T15065] usb 3-1: Using ep0 maxpacket: 8 [ 1091.076530][T15065] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1091.105870][T15065] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.140606][T15065] usb 3-1: config 0 has no interface number 0 [ 1091.153569][T15065] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1091.205829][T15065] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1091.260365][T15065] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1091.323736][T15065] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1091.364191][T15065] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1091.400560][T15065] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1091.430087][T15065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.462855][T15065] usb 3-1: config 0 descriptor?? [ 1092.022782][T15065] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input134 [ 1092.451900][T25150] usb 3-1: USB disconnect, device number 125 [ 1092.837582][T29469] bond_slave_0: entered promiscuous mode [ 1092.843309][T29469] bond_slave_1: entered promiscuous mode [ 1092.984230][T29469] vlan2: entered promiscuous mode [ 1093.032961][T29469] bond0: entered promiscuous mode [ 1093.181514][T29472] tipc: Failed to remove unknown binding: 66,0,0/134418688:2588172753/2588172755 [ 1093.243322][T29472] tipc: Failed to remove unknown binding: 66,0,0/134418688:2588172753/2588172754 [ 1093.300062][T29472] tipc: Failed to remove unknown binding: 66,0,0/134418688:2588172753/2588172755 [ 1093.403710][T29472] tipc: Failed to remove unknown binding: 66,0,0/134418688:2588172753/2588172754 [ 1093.885841][T29489] tipc: Enabled bearer , priority 0 [ 1093.909869][T29489] syzkaller0: entered promiscuous mode [ 1093.917512][T29489] syzkaller0: entered allmulticast mode [ 1093.946567][T29484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7243'. [ 1094.208682][T29499] tipc: Resetting bearer [ 1094.222368][T29485] tipc: Resetting bearer [ 1094.395527][T29485] tipc: Disabling bearer [ 1096.420015][T29525] netlink: 'syz.8.7254': attribute type 1 has an invalid length. [ 1096.449288][T25150] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1096.498255][T29525] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1096.515138][T29525] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1096.537934][T29530] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7254'. [ 1096.627838][ T5883] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1096.639286][T25150] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1096.718593][T29532] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7254'. [ 1096.729430][T25150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.746477][T29530] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 1096.755438][T25150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.769252][T25150] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1096.789675][ T5883] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1096.800019][ T5883] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.809247][T29532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1096.819128][T25150] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1096.829164][ T5883] usb 10-1: config 0 descriptor?? [ 1096.834287][T25150] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1096.845272][T25150] usb 3-1: Manufacturer: syz [ 1096.857767][ T5883] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1096.885155][T25150] usb 3-1: config 0 descriptor?? [ 1097.017638][ T5916] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1097.177072][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.192589][ T5916] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1097.222650][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.322365][ T5916] usb 2-1: config 0 descriptor?? [ 1097.328092][ T5883] cpia1 10-1:0.0: unexpected state after lo power cmd: 00 [ 1097.341315][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 1097.532142][T29523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.542385][T29523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.757618][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1097.764819][ T5883] gspca_cpia1: usb_control_msg 02, error -32 [ 1097.776578][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 1097.786836][ T5883] gspca_cpia1: usb_control_msg 02, error -71 [ 1097.798021][ T5883] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 1097.806167][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1097.815560][T25150] appleir 0003:05AC:8243.005D: item fetching failed at offset 0/1 [ 1097.827454][ T5832] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1097.838182][ T5883] usb 10-1: USB disconnect, device number 31 [ 1097.848553][T25150] appleir 0003:05AC:8243.005D: parse failed [ 1097.854970][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 1097.871472][T25150] appleir 0003:05AC:8243.005D: probe with driver appleir failed with error -22 [ 1097.883721][ T5916] pwc: recv_control_msg error -32 req 04 val 1300 [ 1097.893904][ T5916] pwc: recv_control_msg error -32 req 04 val 1400 [ 1097.908803][ T5916] pwc: recv_control_msg error -32 req 02 val 2000 [ 1097.930942][ T5916] pwc: recv_control_msg error -32 req 02 val 2100 [ 1097.939776][ T5916] pwc: recv_control_msg error -32 req 04 val 1500 [ 1097.949909][ T5916] pwc: recv_control_msg error -32 req 02 val 2500 [ 1097.967644][ T5916] pwc: recv_control_msg error -32 req 02 val 2400 [ 1097.974757][ T5916] pwc: recv_control_msg error -32 req 02 val 2600 [ 1097.983375][ T5916] pwc: recv_control_msg error -32 req 02 val 2900 [ 1097.999457][ T5832] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1098.008491][ T5832] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.018768][ T5832] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1098.028054][ T5832] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1098.052481][ T5832] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1098.068282][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1098.079716][ T5903] usb 3-1: USB disconnect, device number 126 [ 1098.106843][ T5832] usb 9-1: Product: syz [ 1098.113175][ T5832] usb 9-1: Manufacturer: syz [ 1098.131971][ T5832] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1098.194923][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 1098.202891][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 1098.213809][ T5916] pwc: Registered as video103. [ 1098.226825][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input135 [ 1098.252152][ T5916] usb 2-1: USB disconnect, device number 56 [ 1098.454138][T29541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.486759][T29541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.524651][ T5832] usb 9-1: USB disconnect, device number 50 [ 1098.582231][T29552] syzkaller0: entered promiscuous mode [ 1098.597895][T29552] syzkaller0: entered allmulticast mode [ 1098.872335][T29555] tipc: Enabling of bearer rejected, already enabled [ 1099.317286][ T5916] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1099.437794][T15065] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1099.468800][ T5916] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1099.479005][ T5916] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1099.507380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.508936][ T5916] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1099.541192][ T5916] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1099.566009][ T5916] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1099.590766][ T5916] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1099.601955][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1099.610864][ T5916] usb 10-1: Product: syz [ 1099.615376][ T5916] usb 10-1: Manufacturer: syz [ 1099.629205][T15065] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.639817][T15065] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1099.655526][ T5916] cdc_wdm 10-1:1.0: skipping garbage [ 1099.663084][ T5916] cdc_wdm 10-1:1.0: skipping garbage [ 1099.667475][T15065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.677702][ T5916] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1099.684146][ T5916] cdc_wdm 10-1:1.0: Unknown control protocol [ 1099.702003][T15065] usb 3-1: config 0 descriptor?? [ 1099.725757][T15065] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1099.946317][T29566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.965232][T29566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.015216][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1100.021931][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1100.028968][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1100.035800][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1100.042156][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1100.048849][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1100.057438][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1100.064148][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1100.077416][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1100.084227][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1100.097711][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1100.104448][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1100.111022][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1100.117760][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1100.124262][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1100.130991][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1100.137716][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1100.144434][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1100.150856][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1100.157574][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1100.448835][T25150] usb 10-1: USB disconnect, device number 32 [ 1100.456868][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1100.561325][ T5883] usb 3-1: USB disconnect, device number 127 [ 1101.230942][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.239624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.307506][T25150] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1101.458507][T25150] usb 2-1: Using ep0 maxpacket: 16 [ 1101.499233][T25150] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1101.529326][T25150] usb 2-1: config 0 has no interface number 0 [ 1101.536915][T25150] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.601160][T25150] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.643442][T25150] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1101.677291][ T5883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1101.704630][T25150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.770775][T25150] usb 2-1: config 0 descriptor?? [ 1101.817548][ T5916] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1101.949120][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 1102.023538][ T5883] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1102.037438][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.049732][ T5916] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1102.067279][ T5916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.096931][ T5883] usb 3-1: config 0 has no interface number 0 [ 1102.115200][ T5916] usb 10-1: config 0 descriptor?? [ 1102.121206][ T5883] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1102.169944][ T5916] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1102.187613][ T5883] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1102.202424][T25150] holtek_mouse 0003:04D9:A081.005E: item fetching failed at offset 5/8 [ 1102.221380][T25150] holtek_mouse 0003:04D9:A081.005E: hid parse failed: -22 [ 1102.239421][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.250147][T25150] holtek_mouse 0003:04D9:A081.005E: probe with driver holtek_mouse failed with error -22 [ 1102.272225][ T5883] usb 3-1: config 0 descriptor?? [ 1102.301264][ T5883] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 1103.151560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.532850][ T5916] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 1103.989210][T29611] tipc: Enabling of bearer rejected, already enabled [ 1104.006048][T29611] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 1104.015508][T29611] tipc: Resetting bearer [ 1104.198712][T29613] kvm: kvm [29612]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffcc0000c800 [ 1104.210389][T29613] kvm: kvm [29612]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffe500000000 [ 1104.229808][T29613] kvm: kvm [29612]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffd500000000 [ 1104.243779][T29613] kvm: kvm [29612]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffffffc000000000 [ 1104.462454][T25150] usb 2-1: USB disconnect, device number 57 [ 1104.599972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.608216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.616404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.624604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.642659][ T5903] usb 3-1: USB disconnect, device number 2 [ 1104.809951][T29621] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1104.826797][T29621] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1104.974704][T29623] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1104.992292][T29623] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1105.498260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.506479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.559257][T29628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.586467][T29628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.738283][ T5916] STV06xx 10-1:0.0: probe with driver STV06xx failed with error -71 [ 1105.747223][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.767393][ T5916] usb 10-1: USB disconnect, device number 33 [ 1105.857291][ T5903] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1106.007209][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 1106.017711][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1106.044027][ T5903] usb 3-1: config 1 has an invalid interface number: 255 but max is 2 [ 1106.059910][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.080544][ T5903] usb 3-1: config 1 has no interface number 2 [ 1106.086646][ T5903] usb 3-1: config 1 interface 255 has no altsetting 0 [ 1106.111969][ T5903] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1106.128717][ T5903] usb 3-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 1106.151149][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.167207][ T5903] usb 3-1: Product: syz [ 1106.172016][ T5903] usb 3-1: Manufacturer: syz [ 1106.181871][ T5903] usb 3-1: SerialNumber: syz [ 1106.443677][ T5903] usb 3-1: USB disconnect, device number 3 [ 1106.488827][T28884] udevd[28884]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1106.597424][ T5832] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1106.608904][T29647] syzkaller0: entered promiscuous mode [ 1106.614400][T29647] syzkaller0: entered allmulticast mode [ 1106.767425][ T5832] usb 2-1: Using ep0 maxpacket: 32 [ 1106.774496][ T5832] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1106.797475][ T5832] usb 2-1: config 0 has no interface number 0 [ 1106.813877][ T5832] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1106.831014][ T5832] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1106.842490][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.855420][ T5832] usb 2-1: Product: syz [ 1106.859907][ T5832] usb 2-1: Manufacturer: syz [ 1106.864719][ T5832] usb 2-1: SerialNumber: syz [ 1106.878068][ T5832] usb 2-1: config 0 descriptor?? [ 1106.893894][T29655] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7292'. [ 1106.903355][T29655] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7292'. [ 1106.914881][T29655] syzkaller0: entered promiscuous mode [ 1106.920731][T29655] syzkaller0: entered allmulticast mode [ 1107.047552][ T5916] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1107.075695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.083971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.573946][ T5916] usb 9-1: config 0 has no interfaces? [ 1107.702532][ T5916] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1107.711680][ T5916] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.720076][ T5916] usb 9-1: Product: syz [ 1107.724257][ T5916] usb 9-1: Manufacturer: syz [ 1107.728951][ T5916] usb 9-1: SerialNumber: syz [ 1107.736674][ T5916] usb 9-1: config 0 descriptor?? [ 1107.827207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.848817][T15065] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1108.011013][T15065] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.044183][T15065] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1108.082508][T15065] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1108.115269][ T5832] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 1108.125691][T15065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.133881][ T5832] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1108.155789][T15065] usb 3-1: Product: syz [ 1108.160813][ T5832] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1108.170901][T15065] usb 3-1: Manufacturer: syz [ 1108.175682][ T5832] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1108.182521][ T5916] usb 9-1: USB disconnect, device number 51 [ 1108.183823][T15065] usb 3-1: SerialNumber: syz [ 1108.220312][T15065] usb 3-1: config 0 descriptor?? [ 1108.225998][ T5832] usb 2-1: USB disconnect, device number 58 [ 1108.476223][T29660] qrtr: Invalid version 18 [ 1108.811295][ T5832] usb 3-1: USB disconnect, device number 4 [ 1108.980622][ T30] audit: type=1326 audit(1776077387.037:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29675 comm="syz.1.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93d9c819 code=0x7ffc0000 [ 1109.052777][ T30] audit: type=1326 audit(1776077387.057:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29675 comm="syz.1.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93d9c819 code=0x7ffc0000 [ 1109.079221][ T30] audit: type=1326 audit(1776077387.057:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29675 comm="syz.1.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93d9c819 code=0x7ffc0000 [ 1109.102727][ T30] audit: type=1326 audit(1776077387.057:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29675 comm="syz.1.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7faf93d9c819 code=0x7ffc0000 [ 1109.153019][ T30] audit: type=1326 audit(1776077387.127:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29675 comm="syz.1.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf93d5d04e code=0x7ffc0000 [ 1109.180122][ T30] audit: type=1326 audit(1776077387.137:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29675 comm="syz.1.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf93d5d04e code=0x7ffc0000 [ 1109.231218][ T30] audit: type=1326 audit(1776077387.137:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29675 comm="syz.1.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf93d5d04e code=0x7ffc0000 [ 1109.238923][T29685] tipc: Enabling of bearer rejected, already enabled [ 1109.304011][ T30] audit: type=1326 audit(1776077387.157:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29675 comm="syz.1.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf93d5d04e code=0x7ffc0000 [ 1109.348434][T29688] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 1109.360246][ T30] audit: type=1326 audit(1776077387.197:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29675 comm="syz.1.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf93d5d04e code=0x7ffc0000 [ 1109.388477][ T30] audit: type=1326 audit(1776077387.197:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29675 comm="syz.1.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf93d5d04e code=0x7ffc0000 [ 1109.467331][T25151] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1109.631414][T29695] tipc: Enabling of bearer rejected, already enabled [ 1109.640543][T25151] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.651063][T25151] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1109.670184][T25151] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1109.684780][T25151] usb 10-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1109.694406][T25151] usb 10-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1109.703086][T25151] usb 10-1: Manufacturer: syz [ 1109.711997][T25151] usb 10-1: config 0 descriptor?? [ 1109.723673][T25151] smsusb:smsusb_probe: board id=9, interface number 0 [ 1109.732082][T25151] smsusb:smsusb_probe: Device initialized with return code -19 [ 1109.808116][ T5916] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1109.923460][T25150] usb 10-1: USB disconnect, device number 34 [ 1109.958301][ T5916] usb 9-1: Using ep0 maxpacket: 16 [ 1109.965040][ T5916] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.977707][ T5916] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.990720][ T5916] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1109.999826][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.017504][ T5883] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1110.190931][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.201881][ T5883] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1110.211563][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.228318][ T5883] usb 3-1: config 0 descriptor?? [ 1110.252536][ T5883] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1110.418194][T29705] syzkaller0: entered promiscuous mode [ 1110.423717][T29705] syzkaller0: entered allmulticast mode [ 1110.434147][ T5916] mcp2221 0003:04D8:00DD.005F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 1110.470003][T29698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.495374][T29698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.881097][T29703] kvm: kvm [29702]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1110.898378][T29703] kvm: kvm [29702]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1110.944802][T29715] syzkaller0: entered promiscuous mode [ 1110.958228][T29715] syzkaller0: entered allmulticast mode [ 1111.217403][ T5916] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1111.292045][T25150] usb 9-1: USB disconnect, device number 52 [ 1111.345965][ T5832] usb 3-1: USB disconnect, device number 5 [ 1111.412386][ T5916] usb 10-1: Using ep0 maxpacket: 32 [ 1111.451470][ T5916] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1111.468060][ T5916] usb 10-1: config 0 has no interface number 0 [ 1111.474304][ T5916] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1111.520621][ T5916] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1111.549493][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.576196][ T5916] usb 10-1: Product: syz [ 1111.611984][ T5916] usb 10-1: Manufacturer: syz [ 1111.617159][ T5916] usb 10-1: SerialNumber: syz [ 1111.646839][ T5916] usb 10-1: config 0 descriptor?? [ 1112.153144][ T5916] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1112.187181][ T5916] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1112.267314][ T5916] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1112.516948][ T5916] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1112.647464][ T5916] usb 10-1: USB disconnect, device number 35 [ 1113.331340][T29742] tipc: Enabled bearer , priority 0 [ 1113.348276][T29742] syzkaller0: entered promiscuous mode [ 1113.353872][T29742] syzkaller0: entered allmulticast mode [ 1113.598983][T29748] tipc: Resetting bearer [ 1113.640598][T29741] tipc: Resetting bearer [ 1113.719051][T29741] tipc: Disabling bearer [ 1114.133706][T29754] syzkaller0: entered promiscuous mode [ 1114.140231][T29754] syzkaller0: entered allmulticast mode [ 1114.257847][T25150] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1114.487502][T25150] usb 3-1: Using ep0 maxpacket: 32 [ 1114.619837][T25150] usb 3-1: config 0 has no interfaces? [ 1114.636375][T25150] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1114.661781][T25150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.758632][T25150] usb 3-1: Product: syz [ 1114.809139][T25150] usb 3-1: Manufacturer: syz [ 1114.814641][T25150] usb 3-1: SerialNumber: syz [ 1114.928912][T25150] usb 3-1: config 0 descriptor?? [ 1115.670731][T29763] tipc: Enabled bearer , priority 0 [ 1115.693870][T29763] syzkaller0: entered promiscuous mode [ 1115.712670][T29763] syzkaller0: entered allmulticast mode [ 1115.793721][T29763] tipc: Resetting bearer [ 1115.818246][T29761] tipc: Resetting bearer [ 1115.835632][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.843185][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.871774][T29761] tipc: Disabling bearer [ 1116.304237][T29777] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7327'. [ 1116.313453][T29777] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7327'. [ 1116.362131][T29775] tipc: Resetting bearer [ 1116.724312][T29775] tipc: Resetting bearer [ 1116.732868][T29777] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7327'. [ 1116.743221][T29777] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7327'. [ 1117.543023][T25151] usb 3-1: USB disconnect, device number 6 [ 1119.037512][T25151] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1119.210966][T29804] xt_hashlimit: size too large, truncated to 1048576 [ 1119.438242][T25151] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.450739][T25151] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1119.455062][T29805] ¾x9ÿ: renamed from bridge_slave_0 [ 1119.470378][T25151] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.503521][T25151] usb 9-1: config 0 descriptor?? [ 1119.516101][T25151] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1119.998684][T29813] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7338'. [ 1120.008048][T29813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7338'. [ 1120.095534][T29816] netlink: 'syz.2.7337': attribute type 15 has an invalid length. [ 1120.220076][T25151] usb 9-1: USB disconnect, device number 53 [ 1120.453428][T29818] syzkaller0: entered promiscuous mode [ 1120.491104][T29818] syzkaller0: entered allmulticast mode [ 1120.564494][T29818] tipc: Enabled bearer , priority 0 [ 1120.591488][T29817] tipc: Resetting bearer [ 1120.623609][T29817] tipc: Disabling bearer [ 1120.848077][ T5832] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1121.017252][ T5832] usb 10-1: Using ep0 maxpacket: 32 [ 1121.023847][ T5832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1121.049662][ T5832] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1121.072759][ T5832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1121.095490][ T5832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1121.125016][ T5832] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1121.134458][ T5832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.142980][ T5832] usb 10-1: Product: syz [ 1121.147729][ T5832] usb 10-1: Manufacturer: syz [ 1121.152525][ T5832] usb 10-1: SerialNumber: syz [ 1121.169581][ T5832] usb 10-1: config 0 descriptor?? [ 1121.183856][ T5832] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input136 [ 1121.525051][ T5832] usb 10-1: USB disconnect, device number 36 [ 1122.259641][T29847] netem: change failed [ 1122.557505][T29856] syzkaller0: entered promiscuous mode [ 1122.563176][T29856] syzkaller0: entered allmulticast mode [ 1122.667247][T25150] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1122.964434][T25150] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1123.040693][T25150] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1123.065668][T25150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.076766][T25150] usb 2-1: Product: syz [ 1123.081146][T25150] usb 2-1: Manufacturer: syz [ 1123.087260][T25150] usb 2-1: SerialNumber: syz [ 1124.076796][T29868] netlink: 'syz.9.7354': attribute type 1 has an invalid length. [ 1124.205590][T29868] bond3: entered promiscuous mode [ 1124.277014][T29871] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7354'. [ 1124.326927][T29868] bond3: entered allmulticast mode [ 1124.344155][T29868] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1124.437414][T29870] erspan1: entered allmulticast mode [ 1124.517316][T29870] bond3: (slave erspan1): making interface the new active one [ 1124.525187][T29870] erspan1: entered promiscuous mode [ 1124.538424][T29870] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 1124.563928][T29871] bond3 (unregistering): (slave erspan1): Releasing active interface [ 1124.628204][T29871] erspan1: left promiscuous mode [ 1124.648275][T29871] bond3 (unregistering): Released all slaves [ 1124.701575][T29874] tipc: Enabling of bearer rejected, already enabled [ 1125.819581][T25150] snd-usb-us122l 2-1:1.1: usb_set_interface error [ 1125.826521][T25150] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1125.876285][T25150] usb 2-1: USB disconnect, device number 59 [ 1126.263737][T28884] udevd[28884]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1126.392786][T29895] syzkaller0: entered promiscuous mode [ 1126.400964][T29895] syzkaller0: entered allmulticast mode [ 1126.464577][T29895] tipc: Enabled bearer , priority 0 [ 1126.486442][T29894] tipc: Resetting bearer [ 1126.508624][T29894] tipc: Disabling bearer [ 1127.649478][T29910] net_ratelimit: 1 callbacks suppressed [ 1127.649496][T29910] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1127.925068][T25151] IPVS: starting estimator thread 0... [ 1127.959319][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1127.966497][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1128.227273][T29912] IPVS: using max 39 ests per chain, 93600 per kthread [ 1128.857603][T25150] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1129.053162][T25150] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1129.277323][T25150] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.397641][T25150] usb 10-1: Product: syz [ 1129.407531][T25150] usb 10-1: Manufacturer: syz [ 1129.417293][T25150] usb 10-1: SerialNumber: syz [ 1129.456353][T29927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7367'. [ 1129.465718][T29927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7367'. [ 1129.481531][T29927] dummy0: entered promiscuous mode [ 1129.640856][T29916] binder: 29915:29916 ioctl 4018620d 0 returned -22 [ 1129.686283][T29927] dummy0: left promiscuous mode [ 1130.585696][T25150] rtl8150 10-1:1.0: couldn't reset the device [ 1130.598389][T25150] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 1131.060400][T29935] syzkaller0: entered promiscuous mode [ 1131.084336][T29935] syzkaller0: entered allmulticast mode [ 1131.873150][T29952] netlink: 'syz.2.7374': attribute type 13 has an invalid length. [ 1131.913610][T29952] mac80211_hwsim hwsim49 syzkaller0: Caught tx_queue_len zero misconfig [ 1132.449586][ T5916] usb 10-1: USB disconnect, device number 37 [ 1132.938694][T29971] syzkaller0: entered promiscuous mode [ 1132.945845][T29971] syzkaller0: entered allmulticast mode [ 1133.044713][T29962] kvm: kvm [29961]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100006929 [ 1133.129482][T29962] kvm: kvm [29961]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x7208 [ 1133.155248][T29962] kvm: kvm [29961]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1134.277489][ T5916] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1134.466238][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.481774][ T5916] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1134.517666][T25150] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1134.526154][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.630500][ T5916] usb 2-1: config 0 descriptor?? [ 1134.646982][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 1134.718197][T25150] usb 10-1: config 0 has no interfaces? [ 1134.913863][T25150] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1134.923651][T25150] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.954560][T25150] usb 10-1: Product: syz [ 1134.959537][T25150] usb 10-1: Manufacturer: syz [ 1134.969912][T25150] usb 10-1: SerialNumber: syz [ 1135.013394][T25150] usb 10-1: config 0 descriptor?? [ 1135.099039][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1135.115590][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 1135.133369][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1135.143570][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 1135.163247][ T5916] pwc: recv_control_msg error -32 req 04 val 1300 [ 1135.173705][ T5916] pwc: recv_control_msg error -32 req 04 val 1400 [ 1135.187906][ T5916] pwc: recv_control_msg error -32 req 02 val 2000 [ 1135.216006][T30000] syzkaller0: entered promiscuous mode [ 1135.248010][ T5916] pwc: recv_control_msg error -32 req 02 val 2100 [ 1135.268146][ T5916] pwc: recv_control_msg error -32 req 04 val 1500 [ 1135.286303][ T5916] pwc: recv_control_msg error -32 req 02 val 2500 [ 1135.292883][T30000] syzkaller0: entered allmulticast mode [ 1135.298916][ T5916] pwc: recv_control_msg error -32 req 02 val 2400 [ 1135.313336][ T5916] pwc: recv_control_msg error -32 req 02 val 2600 [ 1135.323713][ T5916] pwc: recv_control_msg error -32 req 02 val 2900 [ 1135.410552][T29990] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.487868][ T9] usb 10-1: USB disconnect, device number 38 [ 1135.552358][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 1135.559556][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 1135.569505][ T5916] pwc: Registered as video103. [ 1135.584433][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input137 [ 1135.641686][ T5916] usb 2-1: USB disconnect, device number 60 [ 1135.857312][T30007] netlink: 'syz.2.7391': attribute type 1 has an invalid length. [ 1136.020703][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1136.020721][ T30] audit: type=1326 audit(1776077414.077:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30010 comm="syz.2.7392" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53b3b9c819 code=0x0 [ 1136.089443][T30012] [ 1136.091844][T30012] ===================================================== [ 1136.098789][T30012] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1136.106250][T30012] syzkaller #0 Tainted: G L [ 1136.112276][T30012] ----------------------------------------------------- [ 1136.119212][T30012] syz.2.7392/30012 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1136.126928][T30012] ffff88802f310468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x150 [ 1136.135469][T30012] [ 1136.135469][T30012] and this task is already holding: [ 1136.142837][T30012] ffffffff8effe518 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd6/0x40d0 [ 1136.151468][T30012] which would create a new lock dependency: [ 1136.157357][T30012] (kbd_event_lock){..-.}-{3:3} -> (&tty->flow.lock){....}-{3:3} [ 1136.165115][T30012] [ 1136.165115][T30012] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1136.174564][T30012] (kbd_event_lock){..-.}-{3:3} [ 1136.174590][T30012] [ 1136.174590][T30012] ... which became SOFTIRQ-irq-safe at: [ 1136.187143][T30012] lock_acquire+0xf0/0x2e0 [ 1136.191682][T30012] _raw_spin_lock+0x2e/0x40 [ 1136.196283][T30012] kbd_event+0xd6/0x40d0 [ 1136.200619][T30012] input_handle_events_default+0xd4/0x1a0 [ 1136.206435][T30012] input_pass_values+0x288/0x890 [ 1136.211458][T30012] input_event_dispose+0x330/0x6b0 [ 1136.216665][T30012] input_event+0x89/0xe0 [ 1136.220999][T30012] rc_keydown+0x62/0x1e0 [ 1136.225340][T30012] imon_incoming_packet+0x1ecb/0x31c0 [ 1136.230821][T30012] usb_rx_callback_intf0+0xba/0x210 [ 1136.236116][T30012] __usb_hcd_giveback_urb+0x376/0x540 [ 1136.241583][T30012] dummy_timer+0xbbd/0x4650 [ 1136.246174][T30012] __hrtimer_run_queues+0x53a/0xcc0 [ 1136.251469][T30012] hrtimer_run_softirq+0x182/0x5a0 [ 1136.256700][T30012] handle_softirqs+0x22a/0x870 [ 1136.261558][T30012] __irq_exit_rcu+0x5f/0x150 [ 1136.266238][T30012] irq_exit_rcu+0x9/0x30 [ 1136.270575][T30012] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1136.276298][T30012] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1136.282367][T30012] [ 1136.282367][T30012] to a SOFTIRQ-irq-unsafe lock: [ 1136.289561][T30012] (tasklist_lock){.+.+}-{3:3} [ 1136.289585][T30012] [ 1136.289585][T30012] ... which became SOFTIRQ-irq-unsafe at: [ 1136.302223][T30012] ... [ 1136.302230][T30012] lock_acquire+0xf0/0x2e0 [ 1136.309327][T30012] _raw_read_lock+0x36/0x50 [ 1136.313940][T30012] __do_wait+0xde/0x740 [ 1136.318202][T30012] do_wait+0x1e7/0x540 [ 1136.322364][T30012] kernel_wait+0xd6/0x1c0 [ 1136.326800][T30012] call_usermodehelper_exec_work+0xbe/0x230 [ 1136.332803][T30012] process_scheduled_works+0xb6e/0x18c0 [ 1136.338442][T30012] worker_thread+0xa53/0xfc0 [ 1136.343138][T30012] kthread+0x388/0x470 [ 1136.347300][T30012] ret_from_fork+0x51e/0xb90 [ 1136.352004][T30012] ret_from_fork_asm+0x1a/0x30 [ 1136.356890][T30012] [ 1136.356890][T30012] other info that might help us debug this: [ 1136.356890][T30012] [ 1136.367129][T30012] Chain exists of: [ 1136.367129][T30012] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1136.367129][T30012] [ 1136.379949][T30012] Possible interrupt unsafe locking scenario: [ 1136.379949][T30012] [ 1136.388264][T30012] CPU0 CPU1 [ 1136.393642][T30012] ---- ---- [ 1136.399030][T30012] lock(tasklist_lock); [ 1136.403276][T30012] local_irq_disable(); [ 1136.410027][T30012] lock(kbd_event_lock); [ 1136.416883][T30012] lock(&tty->flow.lock); [ 1136.423844][T30012] [ 1136.427481][T30012] lock(kbd_event_lock); [ 1136.431985][T30012] [ 1136.431985][T30012] *** DEADLOCK *** [ 1136.431985][T30012] [ 1136.440130][T30012] 5 locks held by syz.2.7392/30012: [ 1136.445322][T30012] #0: ffff88802c8e1118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1136.454484][T30012] #1: ffff88802c739230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1136.464599][T30012] #2: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1136.474287][T30012] #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1136.483858][T30012] #4: ffffffff8effe518 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd6/0x40d0 [ 1136.492927][T30012] [ 1136.492927][T30012] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1136.503322][T30012] -> (kbd_event_lock){..-.}-{3:3} { [ 1136.508534][T30012] IN-SOFTIRQ-W at: [ 1136.512510][T30012] lock_acquire+0xf0/0x2e0 [ 1136.518614][T30012] _raw_spin_lock+0x2e/0x40 [ 1136.524786][T30012] kbd_event+0xd6/0x40d0 [ 1136.530692][T30012] input_handle_events_default+0xd4/0x1a0 [ 1136.538070][T30012] input_pass_values+0x288/0x890 [ 1136.544691][T30012] input_event_dispose+0x330/0x6b0 [ 1136.551503][T30012] input_event+0x89/0xe0 [ 1136.557418][T30012] rc_keydown+0x62/0x1e0 [ 1136.563368][T30012] imon_incoming_packet+0x1ecb/0x31c0 [ 1136.570418][T30012] usb_rx_callback_intf0+0xba/0x210 [ 1136.577289][T30012] __usb_hcd_giveback_urb+0x376/0x540 [ 1136.584318][T30012] dummy_timer+0xbbd/0x4650 [ 1136.590473][T30012] __hrtimer_run_queues+0x53a/0xcc0 [ 1136.597336][T30012] hrtimer_run_softirq+0x182/0x5a0 [ 1136.604131][T30012] handle_softirqs+0x22a/0x870 [ 1136.610551][T30012] __irq_exit_rcu+0x5f/0x150 [ 1136.616805][T30012] irq_exit_rcu+0x9/0x30 [ 1136.622694][T30012] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1136.629981][T30012] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1136.637642][T30012] INITIAL USE at: [ 1136.641531][T30012] lock_acquire+0xf0/0x2e0 [ 1136.647521][T30012] _raw_spin_lock_irqsave+0x40/0x60 [ 1136.654297][T30012] vt_reset_unicode+0x2b/0x1a0 [ 1136.660620][T30012] reset_vc+0x68/0x1b0 [ 1136.666276][T30012] vc_init+0x70/0x4a0 [ 1136.671833][T30012] con_init+0x377/0x6a0 [ 1136.677561][T30012] console_init+0x10b/0x4d0 [ 1136.683646][T30012] start_kernel+0x22b/0x3d0 [ 1136.689729][T30012] x86_64_start_reservations+0x24/0x30 [ 1136.696777][T30012] x86_64_start_kernel+0x143/0x1c0 [ 1136.703475][T30012] common_startup_64+0x13e/0x147 [ 1136.710059][T30012] } [ 1136.712547][T30012] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1136.720426][T30012] [ 1136.720426][T30012] the dependencies between the lock to be acquired [ 1136.720435][T30012] and SOFTIRQ-irq-unsafe lock: [ 1136.733970][T30012] -> (tasklist_lock){.+.+}-{3:3} { [ 1136.739411][T30012] HARDIRQ-ON-R at: [ 1136.743654][T30012] lock_acquire+0xf0/0x2e0 [ 1136.750242][T30012] _raw_read_lock+0x36/0x50 [ 1136.756917][T30012] __do_wait+0xde/0x740 [ 1136.763244][T30012] do_wait+0x1e7/0x540 [ 1136.769502][T30012] kernel_wait+0xd6/0x1c0 [ 1136.776005][T30012] call_usermodehelper_exec_work+0xbe/0x230 [ 1136.784070][T30012] process_scheduled_works+0xb6e/0x18c0 [ 1136.791805][T30012] worker_thread+0xa53/0xfc0 [ 1136.798653][T30012] kthread+0x388/0x470 [ 1136.804890][T30012] ret_from_fork+0x51e/0xb90 [ 1136.811656][T30012] ret_from_fork_asm+0x1a/0x30 [ 1136.818618][T30012] SOFTIRQ-ON-R at: [ 1136.822868][T30012] lock_acquire+0xf0/0x2e0 [ 1136.829480][T30012] _raw_read_lock+0x36/0x50 [ 1136.836156][T30012] __do_wait+0xde/0x740 [ 1136.842495][T30012] do_wait+0x1e7/0x540 [ 1136.848749][T30012] kernel_wait+0xd6/0x1c0 [ 1136.855256][T30012] call_usermodehelper_exec_work+0xbe/0x230 [ 1136.863336][T30012] process_scheduled_works+0xb6e/0x18c0 [ 1136.871063][T30012] worker_thread+0xa53/0xfc0 [ 1136.877853][T30012] kthread+0x388/0x470 [ 1136.884092][T30012] ret_from_fork+0x51e/0xb90 [ 1136.890855][T30012] ret_from_fork_asm+0x1a/0x30 [ 1136.897799][T30012] INITIAL USE at: [ 1136.901959][T30012] lock_acquire+0xf0/0x2e0 [ 1136.908471][T30012] _raw_write_lock_irq+0x3d/0x50 [ 1136.915501][T30012] copy_process+0x247a/0x3cd0 [ 1136.922274][T30012] kernel_clone+0x248/0x8e0 [ 1136.928887][T30012] user_mode_thread+0x110/0x180 [ 1136.935871][T30012] rest_init+0x23/0x300 [ 1136.942134][T30012] start_kernel+0x385/0x3d0 [ 1136.948716][T30012] x86_64_start_reservations+0x24/0x30 [ 1136.956363][T30012] x86_64_start_kernel+0x143/0x1c0 [ 1136.963570][T30012] common_startup_64+0x13e/0x147 [ 1136.970592][T30012] INITIAL READ USE at: [ 1136.975176][T30012] lock_acquire+0xf0/0x2e0 [ 1136.982119][T30012] _raw_read_lock+0x36/0x50 [ 1136.989156][T30012] __do_wait+0xde/0x740 [ 1136.995843][T30012] do_wait+0x1e7/0x540 [ 1137.002442][T30012] kernel_wait+0xd6/0x1c0 [ 1137.009290][T30012] call_usermodehelper_exec_work+0xbe/0x230 [ 1137.017718][T30012] process_scheduled_works+0xb6e/0x18c0 [ 1137.025794][T30012] worker_thread+0xa53/0xfc0 [ 1137.032994][T30012] kthread+0x388/0x470 [ 1137.039576][T30012] ret_from_fork+0x51e/0xb90 [ 1137.046703][T30012] ret_from_fork_asm+0x1a/0x30 [ 1137.053997][T30012] } [ 1137.056807][T30012] ... key at: [] tasklist_lock+0x18/0x40 [ 1137.064866][T30012] ... acquired at: [ 1137.068928][T30012] _raw_read_lock+0x36/0x50 [ 1137.073600][T30012] send_sigurg+0x12b/0x420 [ 1137.078200][T30012] sk_send_sigurg+0x6c/0x2e0 [ 1137.082965][T30012] queue_oob+0x42c/0x4f0 [ 1137.087390][T30012] unix_stream_sendmsg+0xcb1/0xe80 [ 1137.092880][T30012] ____sys_sendmsg+0x972/0x9f0 [ 1137.097839][T30012] ___sys_sendmsg+0x2a5/0x360 [ 1137.102715][T30012] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1137.107826][T30012] do_syscall_64+0x14d/0xf80 [ 1137.112595][T30012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.118662][T30012] [ 1137.120985][T30012] -> (&f_owner->lock){....}-{3:3} { [ 1137.126364][T30012] INITIAL USE at: [ 1137.130430][T30012] lock_acquire+0xf0/0x2e0 [ 1137.136791][T30012] _raw_write_lock_irq+0x3d/0x50 [ 1137.143634][T30012] __f_setown+0x67/0x370 [ 1137.149786][T30012] generic_setlease+0xacf/0xff0 [ 1137.156543][T30012] do_fcntl_add_lease+0x35e/0x470 [ 1137.163482][T30012] fcntl_setlease+0x123/0x180 [ 1137.170070][T30012] do_fcntl+0x8b3/0x1a20 [ 1137.176222][T30012] __se_sys_fcntl+0xc8/0x150 [ 1137.182813][T30012] do_syscall_64+0x14d/0xf80 [ 1137.189331][T30012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.197135][T30012] INITIAL READ USE at: [ 1137.201656][T30012] lock_acquire+0xf0/0x2e0 [ 1137.208417][T30012] _raw_read_lock_irqsave+0x48/0x60 [ 1137.215985][T30012] send_sigio+0x38/0x370 [ 1137.222568][T30012] kill_fasync+0x24d/0x4d0 [ 1137.229346][T30012] lease_break_callback+0x26/0x30 [ 1137.236718][T30012] __break_lease+0x81c/0x1e80 [ 1137.243783][T30012] do_dentry_open+0x1010/0x14e0 [ 1137.250981][T30012] vfs_open+0x3b/0x340 [ 1137.257399][T30012] path_openat+0x2e08/0x3860 [ 1137.264341][T30012] do_file_open+0x23e/0x4a0 [ 1137.271184][T30012] do_sys_openat2+0x113/0x200 [ 1137.278204][T30012] __x64_sys_openat+0x138/0x170 [ 1137.285402][T30012] do_syscall_64+0x14d/0xf80 [ 1137.292344][T30012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.300573][T30012] } [ 1137.303234][T30012] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1137.312272][T30012] ... acquired at: [ 1137.316245][T30012] _raw_read_lock_irqsave+0x48/0x60 [ 1137.321630][T30012] send_sigio+0x38/0x370 [ 1137.326043][T30012] kill_fasync+0x24d/0x4d0 [ 1137.330653][T30012] lease_break_callback+0x26/0x30 [ 1137.335896][T30012] __break_lease+0x81c/0x1e80 [ 1137.340766][T30012] do_dentry_open+0x1010/0x14e0 [ 1137.345801][T30012] vfs_open+0x3b/0x340 [ 1137.350056][T30012] path_openat+0x2e08/0x3860 [ 1137.354851][T30012] do_file_open+0x23e/0x4a0 [ 1137.359532][T30012] do_sys_openat2+0x113/0x200 [ 1137.364403][T30012] __x64_sys_openat+0x138/0x170 [ 1137.369445][T30012] do_syscall_64+0x14d/0xf80 [ 1137.374211][T30012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.380283][T30012] [ 1137.382632][T30012] -> (&new->fa_lock){....}-{3:3} { [ 1137.388273][T30012] INITIAL USE at: [ 1137.392255][T30012] lock_acquire+0xf0/0x2e0 [ 1137.398449][T30012] _raw_write_lock_irq+0x3d/0x50 [ 1137.405128][T30012] fasync_remove_entry+0xf1/0x1c0 [ 1137.411982][T30012] __fput+0x8a5/0xa70 [ 1137.417721][T30012] task_work_run+0x1d9/0x270 [ 1137.424052][T30012] exit_to_user_mode_loop+0xed/0x480 [ 1137.431069][T30012] do_syscall_64+0x32d/0xf80 [ 1137.437423][T30012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.445140][T30012] INITIAL READ USE at: [ 1137.449567][T30012] lock_acquire+0xf0/0x2e0 [ 1137.456167][T30012] _raw_read_lock_irqsave+0x48/0x60 [ 1137.463535][T30012] kill_fasync+0x199/0x4d0 [ 1137.470125][T30012] snd_fasync_work_fn+0x162/0x210 [ 1137.477344][T30012] process_scheduled_works+0xb6e/0x18c0 [ 1137.485062][T30012] worker_thread+0xa53/0xfc0 [ 1137.491849][T30012] kthread+0x388/0x470 [ 1137.498110][T30012] ret_from_fork+0x51e/0xb90 [ 1137.504889][T30012] ret_from_fork_asm+0x1a/0x30 [ 1137.511851][T30012] } [ 1137.514435][T30012] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1137.523197][T30012] ... acquired at: [ 1137.527101][T30012] _raw_read_lock_irqsave+0x48/0x60 [ 1137.532495][T30012] kill_fasync+0x199/0x4d0 [ 1137.537102][T30012] __start_tty+0x18c/0x220 [ 1137.541710][T30012] tty_send_xchar+0x1d2/0x4d0 [ 1137.546560][T30012] tty_ioctl+0x9c5/0xde0 [ 1137.550984][T30012] __se_sys_ioctl+0xfc/0x170 [ 1137.555754][T30012] do_syscall_64+0x14d/0xf80 [ 1137.560531][T30012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.566598][T30012] [ 1137.568924][T30012] -> (&tty->flow.lock){....}-{3:3} { [ 1137.574228][T30012] INITIAL USE at: [ 1137.578123][T30012] lock_acquire+0xf0/0x2e0 [ 1137.584119][T30012] _raw_spin_lock_irqsave+0x40/0x60 [ 1137.590908][T30012] start_tty+0x20/0x70 [ 1137.596555][T30012] n_tty_set_termios+0xa7c/0x10c0 [ 1137.603170][T30012] tty_set_termios+0xdb3/0x1800 [ 1137.609630][T30012] set_termios+0x566/0x710 [ 1137.615615][T30012] tty_mode_ioctl+0x4a6/0x7d0 [ 1137.621876][T30012] tty_ioctl+0x9c5/0xde0 [ 1137.627685][T30012] __se_sys_ioctl+0xfc/0x170 [ 1137.633839][T30012] do_syscall_64+0x14d/0xf80 [ 1137.640090][T30012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.647548][T30012] } [ 1137.650043][T30012] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1137.658770][T30012] ... acquired at: [ 1137.662568][T30012] _raw_spin_lock_irqsave+0x40/0x60 [ 1137.667952][T30012] stop_tty+0x2f/0x150 [ 1137.672226][T30012] kbd_event+0x2ec1/0x40d0 [ 1137.676823][T30012] input_handle_events_default+0xd4/0x1a0 [ 1137.682921][T30012] input_pass_values+0x288/0x890 [ 1137.688031][T30012] input_event_dispose+0x330/0x6b0 [ 1137.693338][T30012] input_inject_event+0x1dd/0x340 [ 1137.698559][T30012] evdev_write+0x325/0x4c0 [ 1137.703148][T30012] vfs_write+0x29a/0xb90 [ 1137.707559][T30012] ksys_write+0x150/0x270 [ 1137.712056][T30012] do_syscall_64+0x14d/0xf80 [ 1137.716821][T30012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.722881][T30012] [ 1137.725202][T30012] [ 1137.725202][T30012] stack backtrace: [ 1137.731124][T30012] CPU: 1 UID: 0 PID: 30012 Comm: syz.2.7392 Tainted: G L syzkaller #0 PREEMPT(full) [ 1137.731144][T30012] Tainted: [L]=SOFTLOCKUP [ 1137.731150][T30012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1137.731165][T30012] Call Trace: [ 1137.731172][T30012] [ 1137.731179][T30012] dump_stack_lvl+0xe8/0x150 [ 1137.731201][T30012] __lock_acquire+0x2a94/0x2cf0 [ 1137.731228][T30012] lock_acquire+0xf0/0x2e0 [ 1137.731246][T30012] ? stop_tty+0x2f/0x150 [ 1137.731262][T30012] _raw_spin_lock_irqsave+0x40/0x60 [ 1137.731280][T30012] ? stop_tty+0x2f/0x150 [ 1137.731292][T30012] stop_tty+0x2f/0x150 [ 1137.731306][T30012] kbd_event+0x2ec1/0x40d0 [ 1137.731322][T30012] ? kernel_fpu_end+0x4f/0x80 [ 1137.731336][T30012] ? blake2s_compress+0x1e17/0x1eb0 [ 1137.731355][T30012] ? is_bpf_text_address+0x26/0x2b0 [ 1137.731372][T30012] ? __pfx_kbd_event+0x10/0x10 [ 1137.731386][T30012] ? kvm_sched_clock_read+0x11/0x20 [ 1137.731414][T30012] ? sched_clock+0x3f/0x60 [ 1137.731429][T30012] ? sched_clock_cpu+0x74/0x440 [ 1137.731451][T30012] ? __lock_acquire+0x6b5/0x2cf0 [ 1137.731470][T30012] ? __pfx_blake2s_compress+0x10/0x10 [ 1137.731488][T30012] ? __lock_acquire+0x6b5/0x2cf0 [ 1137.731510][T30012] ? __lock_acquire+0x6b5/0x2cf0 [ 1137.731529][T30012] ? __lock_acquire+0x6b5/0x2cf0 [ 1137.731551][T30012] ? __lock_acquire+0x6b5/0x2cf0 [ 1137.731570][T30012] ? lock_acquire+0xf0/0x2e0 [ 1137.731589][T30012] input_handle_events_default+0xd4/0x1a0 [ 1137.731609][T30012] ? input_pass_values+0x8d/0x890 [ 1137.731621][T30012] input_pass_values+0x288/0x890 [ 1137.731637][T30012] ? input_handle_event+0x70c/0xf30 [ 1137.731658][T30012] input_event_dispose+0x330/0x6b0 [ 1137.731680][T30012] input_inject_event+0x1dd/0x340 [ 1137.731700][T30012] ? input_inject_event+0xb6/0x340 [ 1137.731721][T30012] evdev_write+0x325/0x4c0 [ 1137.731737][T30012] ? __pfx_evdev_write+0x10/0x10 [ 1137.731753][T30012] ? bpf_lsm_file_permission+0x9/0x20 [ 1137.731772][T30012] ? security_file_permission+0x75/0x260 [ 1137.731793][T30012] ? rw_verify_area+0x255/0x4d0 [ 1137.731808][T30012] ? __pfx_evdev_write+0x10/0x10 [ 1137.731823][T30012] vfs_write+0x29a/0xb90 [ 1137.731841][T30012] ? __pfx_vfs_write+0x10/0x10 [ 1137.731856][T30012] ? __fget_files+0x2a/0x420 [ 1137.731870][T30012] ? __fget_files+0x2a/0x420 [ 1137.731882][T30012] ? __fget_files+0x3a0/0x420 [ 1137.731893][T30012] ? __fget_files+0x2a/0x420 [ 1137.731908][T30012] ksys_write+0x150/0x270 [ 1137.731924][T30012] ? __pfx_ksys_write+0x10/0x10 [ 1137.731943][T30012] do_syscall_64+0x14d/0xf80 [ 1137.731963][T30012] ? trace_irq_disable+0x3b/0x150 [ 1137.731975][T30012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.731990][T30012] ? clear_bhb_loop+0x40/0x90 [ 1137.732006][T30012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.732023][T30012] RIP: 0033:0x7f53b3b9c819 [ 1137.732038][T30012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.732051][T30012] RSP: 002b:00007f53b1df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1137.732066][T30012] RAX: ffffffffffffffda RBX: 00007f53b3e16090 RCX: 00007f53b3b9c819 [ 1137.732077][T30012] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000008 [ 1137.732087][T30012] RBP: 00007f53b3c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1137.732096][T30012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.732105][T30012] R13: 00007f53b3e16128 R14: 00007f53b3e16090 R15: 00007f53b3f3fa48 [ 1137.732121][T30012] [ 1138.239928][T30016] tipc: Enabled bearer , priority 0 [ 1138.249712][T30016] syzkaller0: entered promiscuous mode [ 1138.255309][T30016] syzkaller0: entered allmulticast mode [ 1138.263830][T30016] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1138.277008][T30016] tipc: Resetting bearer [ 1138.285277][T30015] tipc: Resetting bearer [ 1138.316553][T30015] tipc: Disabling bearer