last executing test programs: 8.618449655s ago: executing program 1 (id=3997): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 7.924187486s ago: executing program 1 (id=4004): landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x2010, 0xffffffffffffffff, 0xec776000) r0 = syz_io_uring_setup(0xeff, &(0x7f0000000080)={0x0, 0x3, 0xc00, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x2, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, r4}}) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8, 0xfff, 0xe00000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0129bd7000fedbdf25080000000c009900020000007700000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048010}, 0x4000000) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="03030000000000000000ffff00000000000003000000"], 0x1c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r9, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000006c0)=[{0xa, '\x00', @data=0x3a6, 0x8}, {0x25, '\x00', @buffer={"1a1ce1ba1b497db100000400", 0x20}, 0x33}, {0x2b, '\x00', @data=0x7c7, 0x9b10}, {0x3e, '\x00', @st={0x4, [{0x2, @svalue=0x80000000d}, {0x1, @svalue=0x7}, {0x1, @uvalue=0xb}, {0x2, @uvalue=0x100000001}]}, 0x2}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ptrace$pokeuser(0x6, 0x0, 0x2, 0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) r10 = syz_usb_connect$lan78xx(0x5, 0x2e, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r10, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r10, 0x0, 0x0) syz_usb_control_io$lan78xx(r10, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r10, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000409b24733f91896a8232000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r10, 0x0, 0x0) 5.928396939s ago: executing program 3 (id=4010): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000880)=[{0x0, 0x2001, 0x36, &(0x7f0000000040)="310effe2d13e03ce32538a798a56ff148c0bd8086264365a63372dbf5e90c79d0aa9390f757f2d891b8a44a6e911703abcd29b87422a"}], 0x1}) 4.698648974s ago: executing program 1 (id=4014): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x72, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x7ffffffd}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x14004400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf250100000005000500d6000000"], 0x1c}}, 0x40480d0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4000, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {0x0, 0x7f}, {0x0, 0x0, 0x3, '\x00', 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5}, {0x20}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x40}]}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xa0000) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4048aecb, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f00000000c0)=[{0x8138}], 0x1, 0x9, 0x20, 0x0, 0x0, 0x3f}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x29000, 0x0) 4.510734799s ago: executing program 0 (id=4015): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) socket(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0x3) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0), &(0x7f0000000000)) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x40, 0x6, 0xb1, {0xb1, 0xb, "5657d5841a63151956c01c89b3a7ec883f515efd4823ea0138341106566af27ca13ceaf2cd70ff66f59004b23bc10b886622dd05926bd6ed297a8f25e4469d0b953bd8213d7fb00f7f042d3c06f92e1e04e9c3df1ca16ee0ff9a201bc15256597f6e1a8335a82e32b83739347325dd1dc9c7dfad821b76f9d38f94d9b487d921a90ed40751f89c605c1d7c0e4bcbdcffde8572e21add914972eb7afb2a2612e4fb72b8f15201165868327d8e3d4f83"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f0000000200)={0x0, 0x22, 0x11, {[@local=@item_4={0x3, 0x2, 0x9, "2cd63905"}, @local, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x8, "79f6fb29"}, @global=@item_4={0x3, 0x1, 0xa, "c509b953"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x66}}}}, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x20, 0x0, 0xe9, "9db370e72b642653f40c35d4bf149315ab503dd1c835a5f8b462f99bdae641c0337afcc7f5e3cea25ebe902abbd8708f26e382e1bcd0c41d0bed6f9328a51147cebfe01ca0e43a8ed2e8d99859b89ecc974d37e43c5599f942c4c7f343b44a07029312add3fe5dcd6e766ee165696e29f66c39b98e6a6222f6fe1d72d6838da6943a8cd8ee858779e3fb8ebd2e9e4845c3392829199859602795c741aadeeebb00e20959d0a721b55516822c3042c6f9e42124abe1c7ebf8a28608e381859756fc12dbe95ede3e87b513b939d6c62d240751039aca0c96a5591c94aae9ea3897f4342ffaecf6573534"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000540)={0x20, 0x1, 0x4a, "3062875f357f2e1493fbed62846489aa7eda9aa11d3df73acea4f46651e7dad7beca0d284f2e64e93b6aa60437bf36336e1c4c2f2f49aa6479f92219e9fe20e5826c6ce3d8c469d14f7f"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x60}}) 4.447264764s ago: executing program 4 (id=4016): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x2, 0x0, 0xe, 0x8000000000000006}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="fa9edf91a4f6cc64789f7000004ed93c4a8284f3", @ANYRES32=0x0, @ANYBLOB="08000000000001004000128009000100766c616e0000000030000280060001000200000006000100020000001c0004800c00010005000000000800000c0001008100000081ffffff08000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 3.982172337s ago: executing program 4 (id=4018): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x178, 0xffffff7a, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'pimreg0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x0, 0x8}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x1, 0x8, 'netbios-ns\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x800, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) r5 = dup(r3) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5821a0000002c9b92ea54c3bee8915d424c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x4084) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x40, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f0000000600), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, &(0x7f00000007c0)={0x0, 0x1, 0x4, r8, 0x6}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 3.836064237s ago: executing program 2 (id=4019): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="000000007d974addd6b7023e00"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x1b0, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x144, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bond0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "0500"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085000000c2000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdee}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl(r6, 0xbffff004, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) 3.596788235s ago: executing program 3 (id=4020): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x8450) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0xe4e9d491f1d177a3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000680)={&(0x7f0000000440)=[{&(0x7f0000000180)="6a8c11d672761a5123af9a2e339c2dc98a07de6ab5b9b5cf847dac13c7d46bc480fd56a6b83febc4949f0416b2bac50e92fca94ac7f0a315c2105f463a7fd106c68147ab4be5c8dc021e06b597a76ead2bf6dbafbd32e0c4f580dd500a49c5cae05276", 0x63}, {&(0x7f0000000340)="9b072163a8265b73780c576c4b4d1cf20dc9409e1e7bbea97ed90c5b0f461328ef431a3565c9bb37b70c2f318d5f385095c64532f7ede2a80d2223b43bf2ac82ea4a7e00d265f01cb309bf396ecaac85e40e3078", 0x54}, {&(0x7f00000003c0)="e08591aa31d861cfb5dd0090c81bc2d04da6194d4e3a532fc999b2076b96aa5b6d8fb4e8472a8641947867f16987afe58498387021b64b7f3424b55014364e68238471c8374f8553a5de4e95f6cef29eaa", 0x51}], 0x3, 0x9, 0x0, 0x3, 0x1, 0xfffffffffffff58d, 0x3, 0x6b}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(0xffffffffffffffff) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x3500}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 3.534503237s ago: executing program 2 (id=4021): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x40000cb, 0x12141, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x1) (async) listen(r0, 0x1) r2 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0xfe}}], 0x2, 0x404c444) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) accept4(r0, 0xfffffffffffffffd, &(0x7f0000000000)=0xd, 0x80800) (async) r4 = accept4(r0, 0xfffffffffffffffd, &(0x7f0000000000)=0xd, 0x80800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc1}) 2.902425289s ago: executing program 1 (id=4022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000118, 0x0, 0xfffffffffffffff8}]}) 2.902210014s ago: executing program 1 (id=4023): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@bridge_newneigh={0x3c, 0x1c, 0x300, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x10, 0x48, 0xa}, [@NDA_PORT={0x6, 0x6, 0x4e24}, @NDA_SRC_VNI={0x8, 0xb, 0x1}, @NDA_NH_ID={0x8}, @NDA_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84000}, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=@newnexthop={0x2c, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP={0x4}, @NHA_BLACKHOLE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008840}, 0x20000040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.889098811s ago: executing program 1 (id=4024): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d80)={@cgroup, 0xffffffffffffffff, 0xb, 0x68}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES64=r3], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0xf00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x33, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r8, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000300)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x43, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000680)={r8, 0x0, 0x25, 0x1, @val=@tracing={r9, 0x7}}, 0x20) 2.605129588s ago: executing program 3 (id=4025): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) 2.590683246s ago: executing program 2 (id=4026): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000000000000000000000000041a9e5", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.143555195s ago: executing program 4 (id=4027): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x448e0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a300000000014000380080002400000000008000140000000001400"], 0x68}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000170a0108000000000000000002000008090002007379fa32000000000900010073797a3000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1440}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x15) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="54000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="99c0020000440000200012800b00010065727370616e00001000428004001200060011004e240000140003006e696376663000000000000000000000ba2b641848ad734da9b3f3c5864cb4a8cbe23f9aba27ee00bd01874c8f182da6f3aed33338e10d4c18c9ce8d55bd926351ee6c2c06e729ad73e69bfe238cc9f092c8dfdc6f07dfd2bfb9c599bdcc533f8b4b7ef411912f640a4ed2051c912bc3f1e55d12da73a4ba0101ca556657d210150e08af16c999b724401767a68fd7ce1125808b6cf1bc9edac24da26515042cc95022037797759b14902e59ec1b3f3705833dd6ecbb002ff3e9468507499cfa9d55404cc88c1497acfabe180a"], 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.08638122s ago: executing program 2 (id=4028): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) 1.97623072s ago: executing program 2 (id=4029): r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='caif0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0xc, 0x8001, 0x21, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0x970, 0x1000, 0x3, 0x1a5}) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe800000000000000000000000000026", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008"], 0xd4}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='6'], 0x20}}, 0x0) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000780001062abd700000008ec207"], 0x18}], 0x1, 0x0, 0x0, 0x2000}, 0x4000880) 1.838600326s ago: executing program 2 (id=4030): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000880)=[{0x0, 0x2001, 0x36, &(0x7f0000000040)="310effe2d13e03ce32538a798a56ff148c0bd8086264365a63372dbf5e90c79d0aa9390f757f2d891b8a44a6e911703abcd29b87422a"}], 0x1}) 1.590344609s ago: executing program 3 (id=4031): unshare(0x2a020480) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="6c66b8ae008ec865da00b8010000000f01d90f01df0fc7360f320fae8f00a0000066b81f018ee8b9840b00000f32", 0x2e}], 0x1, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xac85, 0x1040, 0x8, 0xc4, 0x0, r0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001500)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000500)={r6, "681bcebac9290f13d239b063b625f133"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000000010000000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.36698146s ago: executing program 3 (id=4032): openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x100) write$dsp(r1, &(0x7f0000000240)=' ', 0x1) close(r1) 1.264006679s ago: executing program 0 (id=4033): openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x100) write$dsp(r1, &(0x7f0000000240)=' ', 0x1) close(r1) 941.999003ms ago: executing program 4 (id=4034): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@bridge_newneigh={0x3c, 0x1c, 0x300, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x10, 0x48, 0xa}, [@NDA_PORT={0x6, 0x6, 0x4e24}, @NDA_SRC_VNI={0x8, 0xb, 0x1}, @NDA_NH_ID={0x8}, @NDA_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84000}, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=@newnexthop={0x2c, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP={0x4}, @NHA_BLACKHOLE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008840}, 0x20000040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 845.993157ms ago: executing program 4 (id=4035): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x8450) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0xe4e9d491f1d177a3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000680)={&(0x7f0000000440)=[{&(0x7f0000000180)="6a8c11d672761a5123af9a2e339c2dc98a07de6ab5b9b5cf847dac13c7d46bc480fd56a6b83febc4949f0416b2bac50e92fca94ac7f0a315c2105f463a7fd106c68147ab4be5c8dc021e06b597a76ead2bf6dbafbd32e0c4f580dd500a49c5cae05276", 0x63}, {&(0x7f0000000340)="9b072163a8265b73780c576c4b4d1cf20dc9409e1e7bbea97ed90c5b0f461328ef431a3565c9bb37b70c2f318d5f385095c64532f7ede2a80d2223b43bf2ac82ea4a7e00d265f01cb309bf396ecaac85e40e3078", 0x54}, {&(0x7f00000003c0)="e08591aa31d861cfb5dd0090c81bc2d04da6194d4e3a532fc999b2076b96aa5b6d8fb4e8472a8641947867f16987afe58498387021b64b7f3424b55014364e68238471c8374f8553a5de4e95f6cef29eaa", 0x51}], 0x3, 0x9, 0x0, 0x3, 0x1, 0xfffffffffffff58d, 0x3, 0x6b}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(0xffffffffffffffff) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x3500}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 636.680833ms ago: executing program 3 (id=4036): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRESOCT], 0x0) socket(0x2a, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000001000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 606.544092ms ago: executing program 0 (id=4037): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) 554.024929ms ago: executing program 0 (id=4038): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 409.963687ms ago: executing program 0 (id=4039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18080000000000000000000000fffe0018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 388.923802ms ago: executing program 0 (id=4040): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000c8bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001bc0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x24, 0x2, [@TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x54b0}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2000, 0x8, 0x4}, {0x2, 0x3, 0x3}}}]}]}]}}]}, 0x54}}, 0x20000084) syz_usb_connect$uac2(0x2, 0xfe, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x499, 0x101f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x3, 0x1, 0x2, 0x0, 0x5, {0x8, 0xb, 0x1, 0x1, 0x1, 0x8, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x3, 0x4f, 0x5}, [@input_terminal={0x10, 0x24, 0x2, 0x5, 0x400, 0x4, 0x2, 0x1, 0x4b55, 0x60, 0x2, 0x9}, @selector_unit={0x8, 0x24, 0xb, 0x9, 0x3, "c84812"}, @multiply_unit={0x7, 0x24, 0xc, 0x0, 0x2, 0x1, 0x5}, @extension_unit={0xb, 0x24, 0x9, 0x5, 0x7, 0x7, "39edb43d"}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0xb, "c6a8c36ca423"}, @sample_rate={0x11, 0x24, 0xd, 0x2, 0x3, 0x6, [0x1, 0x3, 0x0, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x10, 0x8, 0x5, {0x8, 0x25, 0x1, 0x83, 0xc, 0x81, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x3, 0x5, 0x65, "a6ebc302"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x8, 0x12, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x7f}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc0, 0x3, 0x8, 0x8, "", "f9568a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0xc7, 0x6, '1', "89fca5"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x7fff, 0x5, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x35, 0x0, 0x8, {0x8, 0x25, 0x1, 0x2, 0x0, 0xe, 0x5}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x140, 0x9, 0xd6, 0x6, 0x8, 0x2}, 0x25, &(0x7f0000000700)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x1a, 0x5, 0x3, 0xf, 0x5d, [0xc0c0, 0x3fc0, 0xc0, 0xc00f, 0xffc00f]}]}, 0x5, [{0xb9, &(0x7f0000000740)=@string={0xb9, 0x3, "620aee84326a29b7cefca077fab692c420a93d4d67e0a40c17469674d5c7abb89b112fb799b1a2e52a54b2424c644528d83d6dbf216b0ab4e7bff697e9493f6fa5a1e3c91531b0067c6b32fefb7ea4b0e47a13ceea8a5dd961b2c96402f3b5a5c794364106a7f51f6b69c8fa2a9f6eb1bc946e15d776bdb198ea0c6a5d3359b7cba8fcf2c41778f05db99ca9c5504c332d75f0a6a479c2ff96843c2a881c29f7abf3662ac3581971d1bc2d0ea574aff670256d99062d97"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000840)=@lang_id={0x4}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x448}}, {0xe6, &(0x7f00000008c0)=@string={0xe6, 0x3, "5c1fb0a80e70765b9b3ac5956220bb081660f57f488a74600fcb0b7d608acdfc16b6bc1e09483a4ab3feff9f68775c9f907971388d5fde7abc5ce5127b94a7f2473128f6a0c0d04ce778770b5bfe909c75e6e657757c2a0be69c63977ea0139f7e94534fa8352abd0e68acb186fbbad01ef24f092baaf82daae761792580ea69b128e238f6809b6baf0ed4980d3d53d06b944c1db98ebb25cc7d83ec1c885633c2168583887c846a251f1861b3afebf1a3fcfb62aa131e56d6ef5edb8bb4362106c853328a1464c2013a3f0a87ae940b3282d175649ecacc2fa11e26ef1bc1d7608fb2c9"}}]}) r6 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09d0200fb0a010000000000f5ffff0200", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c7f00", [0x4, 0x5]}}) r8 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001280)={r6, 0x200, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r8) syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000040)=ANY=[@ANYRESHEX=r7, @ANYRES8=r8], 0x0) 0s ago: executing program 4 (id=4041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000002b"], 0x50) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000800)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00ca65244327b8f1ee04"], 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r5], 0x64}, 0x1, 0x0, 0x0, 0x20000015}, 0x44080) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$I2C_FUNCS(r7, 0x705, &(0x7f0000000280)=0x3) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r10, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000001940)=""/4111, 0x100f}, {&(0x7f0000000700)=""/192, 0xc0}, {&(0x7f0000003cc0)=""/204, 0xcc}], 0x5}, 0x9}], 0x7, 0x10122, 0x0) kernel console output (not intermixed with test programs): 4928] usb 2-1: device descriptor read/8, error -71 [ 836.525806][T14928] usb usb2-port1: unable to enumerate USB device [ 836.958621][T18500] netlink: 'syz.3.3550': attribute type 1 has an invalid length. [ 836.981356][T18500] bond8: entered promiscuous mode [ 836.988726][T18500] bond8: entered allmulticast mode [ 836.994238][T18500] 8021q: adding VLAN 0 to HW filter on device bond8 [ 837.045349][T14928] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 837.235214][T14928] usb 5-1: Using ep0 maxpacket: 32 [ 837.247150][T14928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.270530][T14928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.281819][T14928] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 837.305357][T14928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.326479][T14928] usb 5-1: config 0 descriptor?? [ 837.344625][T14928] hub 5-1:0.0: USB hub found [ 837.539901][T14928] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 837.919579][T18518] loop3: detected capacity change from 0 to 7 [ 837.934039][T18518] Dev loop3: unable to read RDB block 7 [ 837.940397][T18518] loop3: AHDI p3 p4 [ 837.950903][T18518] loop3: partition table partially beyond EOD, truncated [ 837.970110][T14928] hid-generic 0003:046D:C31C.0040: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 837.984108][T18518] loop3: p3 start 1702000233 is beyond EOD, truncated [ 838.186171][ T8087] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 838.276269][ T30] audit: type=1326 audit(1776826567.034:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18531 comm="syz.2.3561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd600b9c819 code=0x0 [ 838.345089][T14928] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 838.386574][ T8087] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 838.404653][ T8087] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.431557][ T8087] usb 4-1: config 0 has no interface number 0 [ 838.444030][ T8087] usb 4-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 838.466616][ T8087] usb 4-1: config 0 interface 200 has no altsetting 0 [ 838.478692][ T8087] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 838.488062][ T8087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.495089][T14928] usb 2-1: Using ep0 maxpacket: 32 [ 838.496620][ T8087] usb 4-1: Product: syz [ 838.503427][T14928] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 838.506512][ T8087] usb 4-1: Manufacturer: syz [ 838.513809][T14928] usb 2-1: config 0 has no interface number 0 [ 838.519243][ T8087] usb 4-1: SerialNumber: syz [ 838.531959][T14928] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 838.561681][T14928] usb 2-1: config 0 interface 85 has no altsetting 0 [ 838.578152][ T8087] usb 4-1: config 0 descriptor?? [ 838.591864][T14928] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 838.614862][T14928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.632265][T14928] usb 2-1: Product: syz [ 838.641302][T14928] usb 2-1: Manufacturer: syz [ 838.646981][T18537] fuse: Bad value for 'fd' [ 838.653032][T14928] usb 2-1: SerialNumber: syz [ 838.670477][T14928] usb 2-1: config 0 descriptor?? [ 838.857081][ T8087] usbhid 4-1:0.200: couldn't find an input interrupt endpoint [ 838.878534][ T8087] usb 4-1: USB disconnect, device number 123 [ 839.188304][ T5917] usb 5-1: USB disconnect, device number 68 [ 839.333227][T18524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.355519][T18524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.391514][T18545] tipc: Started in network mode [ 839.398594][T18545] tipc: Node identity fe332b19432d, cluster identity 4711 [ 839.406387][T18545] tipc: Enabled bearer , priority 0 [ 839.517525][T18545] tipc: Disabling bearer [ 839.573042][T14928] appletouch 2-1:0.85: Failed to request geyser raw mode [ 839.583575][T14928] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 839.614163][T14928] usb 2-1: USB disconnect, device number 84 [ 839.619064][T18555] loop3: detected capacity change from 0 to 7 [ 839.630389][T18555] Dev loop3: unable to read RDB block 7 [ 839.636855][T18555] loop3: AHDI p3 p4 [ 839.641657][T18555] loop3: partition table partially beyond EOD, truncated [ 839.658134][T18555] loop3: p3 start 1702000233 is beyond EOD, truncated [ 839.795120][ T5917] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 839.857562][T18564] netlink: 'syz.4.3572': attribute type 21 has an invalid length. [ 839.865813][T18564] IPv6: NLM_F_CREATE should be specified when creating new route [ 839.873916][T18564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 839.883058][T18564] IPv6: NLM_F_CREATE should be set when creating new route [ 839.890492][T18564] IPv6: NLM_F_CREATE should be set when creating new route [ 839.897749][T18564] IPv6: NLM_F_CREATE should be set when creating new route [ 839.985094][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 839.992284][ T5917] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 840.000747][ T5917] usb 4-1: config 0 has no interface number 0 [ 840.006988][ T5917] usb 4-1: config 0 interface 184 has no altsetting 0 [ 840.018330][ T5917] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 840.027554][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.035603][ T5917] usb 4-1: Product: syz [ 840.040182][ T5917] usb 4-1: Manufacturer: syz [ 840.044791][ T5917] usb 4-1: SerialNumber: syz [ 840.053602][ T5917] usb 4-1: config 0 descriptor?? [ 840.145138][T14928] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 840.200158][T18567] syzkaller0: entered promiscuous mode [ 840.207461][T18567] syzkaller0: entered allmulticast mode [ 840.263850][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 840.275910][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 840.286436][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 840.297317][ T5917] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 840.316680][T14928] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 840.326014][T14928] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 840.337248][T14928] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 840.348775][T14928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 840.366309][T14928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 840.396163][T14928] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 840.407189][T14928] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 840.415327][T14928] usb 5-1: Product: syz [ 840.419668][T14928] usb 5-1: Manufacturer: syz [ 840.432643][T14928] cdc_wdm 5-1:1.0: skipping garbage [ 840.438553][T14928] cdc_wdm 5-1:1.0: skipping garbage [ 840.454349][T14928] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 840.462313][T14928] cdc_wdm 5-1:1.0: Unknown control protocol [ 840.596287][T18575] fuse: fd is not a fuse device [ 840.655994][ T8087] usb 4-1: USB disconnect, device number 124 [ 840.752760][T18575] netlink: 'syz.1.3575': attribute type 11 has an invalid length. [ 840.988638][T18591] syzkaller0: entered promiscuous mode [ 841.002586][T18591] syzkaller0: entered allmulticast mode [ 841.159918][T14928] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 841.195920][T14928] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 841.219830][T14928] usb 5-1: USB disconnect, device number 69 [ 841.320912][T18607] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3584'. [ 841.422260][T18610] IPv6: NLM_F_CREATE should be specified when creating new route [ 841.422260][T18609] IPv6: NLM_F_CREATE should be specified when creating new route [ 841.530318][T18609] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 841.549072][T18610] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 841.562933][T18609] File: /dev/nullb0 PID: 18609 Comm: syz.1.3585 [ 841.577732][T18610] File: /dev/nullb0 PID: 18610 Comm: syz.1.3585 [ 841.800782][T18617] netlink: 'syz.4.3587': attribute type 1 has an invalid length. [ 841.855392][T18617] bond5: entered promiscuous mode [ 841.860527][T18617] bond5: entered allmulticast mode [ 841.866356][T18617] 8021q: adding VLAN 0 to HW filter on device bond5 [ 842.094062][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3590'. [ 842.107603][T18626] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3590'. [ 842.235271][T14928] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 842.407078][T14928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.417439][T14928] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 842.427313][T14928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.440056][T14928] usb 5-1: config 0 descriptor?? [ 842.463549][T14928] pwc: Askey VC010 type 2 USB webcam detected. [ 842.566843][ T5917] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 842.725211][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 842.738161][ T5917] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 842.759221][ T5917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 842.797346][ T5917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 842.835979][ T5917] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 842.855270][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.866032][ T5917] usb 4-1: Product: syz [ 842.870505][ T5917] usb 4-1: Manufacturer: syz [ 842.875759][T14928] pwc: recv_control_msg error -32 req 02 val 2b00 [ 842.883213][T14928] pwc: recv_control_msg error -32 req 02 val 2700 [ 842.900876][ T5917] usb 4-1: SerialNumber: syz [ 842.911360][T14928] pwc: recv_control_msg error -32 req 02 val 2c00 [ 842.925512][ T5917] usb 4-1: 0:2 : does not exist [ 842.936028][T14928] pwc: recv_control_msg error -32 req 04 val 1000 [ 842.950919][T14928] pwc: recv_control_msg error -32 req 04 val 1300 [ 842.966175][T14928] pwc: recv_control_msg error -32 req 04 val 1400 [ 842.983259][T14928] pwc: recv_control_msg error -32 req 02 val 2000 [ 843.002515][T14928] pwc: recv_control_msg error -32 req 02 val 2100 [ 843.424487][T14928] pwc: recv_control_msg error -32 req 02 val 2400 [ 843.455264][T14928] pwc: recv_control_msg error -71 req 02 val 2600 [ 843.480412][T14928] pwc: recv_control_msg error -71 req 02 val 2900 [ 843.503101][T14928] pwc: recv_control_msg error -71 req 02 val 2800 [ 843.517424][T14928] pwc: recv_control_msg error -71 req 04 val 1100 [ 843.527791][T14928] pwc: recv_control_msg error -71 req 04 val 1200 [ 843.544255][T14928] pwc: Registered as video103. [ 843.560508][T14928] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input78 [ 843.624231][T14928] usb 5-1: USB disconnect, device number 70 [ 843.708580][T18656] netlink: 'syz.0.3598': attribute type 1 has an invalid length. [ 843.740385][T18656] bond5: entered promiscuous mode [ 843.746958][T18656] bond5: entered allmulticast mode [ 843.753272][T18656] 8021q: adding VLAN 0 to HW filter on device bond5 [ 843.771755][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3596'. [ 843.795993][T18658] random: crng reseeded on system resumption [ 843.875433][ T8087] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 844.048880][ T8087] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 844.072515][ T8087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.094024][ T8087] usb 2-1: Product: syz [ 844.104906][ T8087] usb 2-1: Manufacturer: syz [ 844.117050][ T8087] usb 2-1: SerialNumber: syz [ 844.204081][ T8087] usb 2-1: config 0 descriptor?? [ 844.347913][T18639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.365500][T18639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.418404][ T8087] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 844.553104][ T5917] usb 4-1: USB disconnect, device number 125 [ 845.143470][T18671] loop2: detected capacity change from 0 to 7 [ 845.160456][T18671] Dev loop2: unable to read RDB block 7 [ 845.166977][T18671] loop2: unable to read partition table [ 845.173591][T18671] loop2: partition table beyond EOD, truncated [ 845.183019][T18671] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 845.308173][T18674] netlink: 'syz.3.3604': attribute type 3 has an invalid length. [ 845.348962][T18676] xt_hashlimit: size too large, truncated to 1048576 [ 846.644725][ T8087] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 846.861561][T14928] usb 2-1: USB disconnect, device number 85 [ 847.417238][T18734] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3613'. [ 847.453883][ T30] audit: type=1400 audit(1776826576.204:1517): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=18726 comm="syz.4.3613" [ 847.694689][T18738] netlink: 'syz.1.3617': attribute type 1 has an invalid length. [ 847.742901][T18738] 8021q: adding VLAN 0 to HW filter on device bond3 [ 847.959139][T18740] xt_hashlimit: size too large, truncated to 1048576 [ 847.966724][T18738] bond3: (slave gretap2): making interface the new active one [ 847.983327][T18738] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 849.943404][T18793] syz_tun: entered allmulticast mode [ 850.131916][T18800] syzkaller0: entered promiscuous mode [ 850.145114][T18800] syzkaller0: entered allmulticast mode [ 850.676738][T18821] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 850.773578][T18826] vti0: entered promiscuous mode [ 850.785246][T18826] vti0: entered allmulticast mode [ 851.097906][T18834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3648'. [ 851.151621][T18834] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.202410][T18834] bridge_slave_1 (unregistering): left allmulticast mode [ 851.202430][T18834] bridge_slave_1 (unregistering): left promiscuous mode [ 851.202491][T18834] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.223495][T18835] program syz.3.3648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 851.499735][T18837] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 851.543087][T18837] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 851.556083][T18840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3649'. [ 851.597623][T18840] 8021q: adding VLAN 0 to HW filter on device bond9 [ 851.637061][T18840] macvlan2: entered promiscuous mode [ 851.649184][T18840] macvlan2: entered allmulticast mode [ 851.661711][T18840] bond9: entered promiscuous mode [ 851.673969][T18840] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 851.693490][T18840] bond9: left promiscuous mode [ 851.795120][T14927] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 851.986316][T14927] usb 5-1: Using ep0 maxpacket: 16 [ 851.993652][T14927] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.011114][T14927] usb 5-1: config 0 interface 0 has no altsetting 0 [ 852.018689][T14927] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 852.029679][T14927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.048905][T14927] usb 5-1: config 0 descriptor?? [ 852.125303][T17630] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 852.225151][ T5917] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 852.385055][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 852.399038][ T5917] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 852.421285][ T5917] usb 4-1: config 0 has no interface number 0 [ 852.435901][ T5917] usb 4-1: config 0 interface 12 has no altsetting 0 [ 852.455183][ T5917] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 852.464356][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.472776][ T5917] usb 4-1: Product: syz [ 852.477045][ T5917] usb 4-1: Manufacturer: syz [ 852.482043][ T5917] usb 4-1: SerialNumber: syz [ 852.498568][T14927] nzxt-smart2 0003:1E71:2009.0042: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 852.500632][ T5917] usb 4-1: config 0 descriptor?? [ 852.900183][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3650'. [ 852.918201][T14927] usb 5-1: USB disconnect, device number 71 [ 852.993040][T18857] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 853.325127][ T8084] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 853.495925][ T8084] usb 2-1: no configurations [ 853.501389][ T8084] usb 2-1: can't read configurations, error -22 [ 853.655582][ T8084] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 853.802004][T18871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 853.847301][ T8084] usb 2-1: no configurations [ 853.869391][ T8084] usb 2-1: can't read configurations, error -22 [ 853.890372][ T8084] usb usb2-port1: attempt power cycle [ 854.246447][ T8084] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 854.289870][ T8084] usb 2-1: no configurations [ 854.300223][ T8084] usb 2-1: can't read configurations, error -22 [ 854.445898][ T8084] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 854.477055][ T8084] usb 2-1: no configurations [ 854.483568][ T8084] usb 2-1: can't read configurations, error -22 [ 854.503540][ T8084] usb usb2-port1: unable to enumerate USB device [ 854.809004][T18853] syz.3.3654 (18853): drop_caches: 2 [ 854.833576][ T5917] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 854.853507][ T5917] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 854.868123][ T5917] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 854.882769][ T5917] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 854.912580][ T5917] usb 4-1: USB disconnect, device number 126 [ 855.299967][T18896] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3660'. [ 855.925109][T14927] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 856.077082][T14927] usb 5-1: unable to get BOS descriptor or descriptor too short [ 856.096894][T14927] usb 5-1: not running at top speed; connect to a high speed hub [ 856.119720][T14927] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.137668][T14927] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 856.159222][T14927] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 856.168763][T14927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.177046][T14927] usb 5-1: Product: syz [ 856.181337][T14927] usb 5-1: Manufacturer: syz [ 856.187308][T14927] usb 5-1: SerialNumber: syz [ 856.438747][T14927] usb 5-1: 0:2 : does not exist [ 856.450987][T14927] usb 5-1: unit 4 not found! [ 856.460656][T14927] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 856.468752][T14927] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 856.478419][T14927] usb 5-1: [5] FU [HMD Audio Playback Volume] ch = 1, val = 0/1/1 [ 856.498909][T14927] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 856.551665][T14927] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 856.587114][T14927] usb 5-1: USB disconnect, device number 72 [ 856.587267][T18940] deleting an unspecified loop device is not supported. [ 856.621141][T18521] udevd[18521]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 856.750543][T18954] loop2: detected capacity change from 0 to 7 [ 856.759116][T18954] Dev loop2: unable to read RDB block 7 [ 856.764719][T18954] loop2: unable to read partition table [ 856.774027][T18954] loop2: partition table beyond EOD, truncated [ 856.780574][T18954] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 857.206592][T14927] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 857.365075][T14927] usb 5-1: Invalid ep0 maxpacket: 64 [ 857.505363][T14927] usb 5-1: new low-speed USB device number 74 using dummy_hcd [ 857.523060][T18982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 857.607032][T18984] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000003' [ 857.661856][T18984] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3688'. [ 857.671351][T14927] usb 5-1: Invalid ep0 maxpacket: 64 [ 857.678608][T14927] usb usb5-port1: attempt power cycle [ 858.025301][T14927] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 858.055752][T14927] usb 5-1: Invalid ep0 maxpacket: 64 [ 858.185981][T14927] usb 5-1: new low-speed USB device number 76 using dummy_hcd [ 858.216351][T14927] usb 5-1: Invalid ep0 maxpacket: 64 [ 858.222756][T14927] usb usb5-port1: unable to enumerate USB device [ 858.305433][ T8089] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 858.516325][ T8089] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.538524][ T8089] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 858.581101][ T8089] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12389, setting to 8 [ 858.616272][ T8089] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 858.656594][ T8089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.698454][ T8089] hub 3-1:1.0: bad descriptor, ignoring hub [ 858.704915][ T8089] hub 3-1:1.0: probe with driver hub failed with error -5 [ 858.718007][ T8089] cdc_wdm 3-1:1.0: skipping garbage [ 858.732418][ T8089] cdc_wdm 3-1:1.0: skipping garbage [ 858.743903][ T8089] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 859.065408][ T8089] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 859.205096][ T8089] usb 4-1: device descriptor read/64, error -71 [ 859.327550][T14928] usb 3-1: USB disconnect, device number 39 [ 859.465181][ T8089] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 859.595180][ T8089] usb 4-1: device descriptor read/64, error -71 [ 859.705698][ T8089] usb usb4-port1: attempt power cycle [ 859.819885][T19018] kernel read not supported for file /eth0 (pid: 19018 comm: syz.2.3698) [ 859.829849][ T30] audit: type=1800 audit(1776826588.594:1518): pid=19018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3698" name="eth0" dev="mqueue" ino=88381 res=0 errno=0 [ 859.994117][T19023] geneve2: entered promiscuous mode [ 860.001999][T17628] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 44419 - 0 [ 860.016664][T17628] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 44419 - 0 [ 860.026766][T17628] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 44419 - 0 [ 860.047720][T17628] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 44419 - 0 [ 860.065131][ T8089] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 860.107431][ T8089] usb 4-1: device descriptor read/8, error -71 [ 860.355154][ T8089] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 860.386709][ T8089] usb 4-1: device descriptor read/8, error -71 [ 860.505363][ T8089] usb usb4-port1: unable to enumerate USB device [ 860.645355][T14927] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 860.805112][T14927] usb 2-1: Using ep0 maxpacket: 32 [ 860.812500][T14927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.823718][T14927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.833598][T14927] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 860.842883][T14927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.853648][T14927] usb 2-1: config 0 descriptor?? [ 860.863399][T14927] hub 2-1:0.0: USB hub found [ 861.062326][T14927] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 861.141785][T19047] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3708'. [ 861.475763][T14927] hid-generic 0003:046D:C31C.0043: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 861.781896][T19056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.790905][T19056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.878206][ T8087] usb 2-1: USB disconnect, device number 90 [ 861.932508][T19058] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3710'. [ 861.962917][T19058] bond10: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 861.985343][T19058] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3710'. [ 861.994544][T19058] bond10: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 862.175096][ T5917] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 862.285470][T14927] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 862.325064][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 862.332177][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.343601][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.353791][ T5917] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 862.363458][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.374123][ T5917] usb 5-1: config 0 descriptor?? [ 862.436131][T14927] usb 4-1: Using ep0 maxpacket: 16 [ 862.443703][T14927] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 862.452449][T14927] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 862.463601][T14927] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 862.476751][T14927] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 862.486002][T14927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.499011][T14927] usb 4-1: config 0 descriptor?? [ 862.516595][T14927] pxrc 4-1:0.0: Could not find endpoint [ 862.523565][T14927] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 862.722698][T19063] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3712'. [ 862.747294][ T29] usb 4-1: USB disconnect, device number 5 [ 862.788067][T19060] syzkaller1: entered promiscuous mode [ 862.801192][T19060] syzkaller1: entered allmulticast mode [ 862.828048][T19060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.840851][T19060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.891978][ T5917] usbhid 5-1:0.0: can't add hid device: -71 [ 862.920400][ T5917] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 862.938291][ T5917] usb 5-1: USB disconnect, device number 77 [ 863.373513][T19071] netlink: 'syz.1.3715': attribute type 3 has an invalid length. [ 863.478566][T19078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3717'. [ 863.551794][T19077] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 863.568622][T19083] netlink: 'syz.4.3718': attribute type 1 has an invalid length. [ 863.784744][T19083] bond6: entered promiscuous mode [ 863.810414][T19083] bond6: entered allmulticast mode [ 863.829272][T19083] 8021q: adding VLAN 0 to HW filter on device bond6 [ 863.846330][T19089] netlink: 'syz.1.3719': attribute type 1 has an invalid length. [ 864.010652][T19089] bond4: entered promiscuous mode [ 864.027791][T19089] bond4: entered allmulticast mode [ 864.043560][T19089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 864.636355][T19097] syzkaller0: entered promiscuous mode [ 864.653437][T19097] syzkaller0: entered allmulticast mode [ 864.674909][ T8089] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 864.845172][ T8089] usb 5-1: device descriptor read/64, error -71 [ 864.885146][T14927] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 864.966942][T14928] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 865.045122][T14927] usb 4-1: Using ep0 maxpacket: 32 [ 865.054391][T14927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.065894][T14927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.097817][T14927] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 865.106997][T14927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.119303][T14927] usb 4-1: config 0 descriptor?? [ 865.125175][ T8089] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 865.136278][T14928] usb 2-1: Using ep0 maxpacket: 16 [ 865.137409][T14927] hub 4-1:0.0: USB hub found [ 865.143595][T14928] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 865.180267][T14928] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 865.195687][T14928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 865.230794][T14928] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 865.246563][T14928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.269470][T14928] usb 2-1: config 0 descriptor?? [ 865.311123][ T8089] usb 5-1: device descriptor read/64, error -71 [ 865.316250][T14928] pxrc 2-1:0.0: Could not find endpoint [ 865.324206][T14928] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 865.369784][T14927] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 865.434720][ T8089] usb usb5-port1: attempt power cycle [ 865.506569][T19102] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3724'. [ 865.807239][T14927] hid-generic 0003:046D:C31C.0044: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 865.827463][ T8089] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 865.896821][ T8089] usb 5-1: device descriptor read/8, error -71 [ 866.065353][ T30] audit: type=1326 audit(1776826594.814:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd600b9c819 code=0x7ffc0000 [ 866.110893][ T30] audit: type=1326 audit(1776826594.824:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd600b9c819 code=0x7ffc0000 [ 866.136580][ T30] audit: type=1326 audit(1776826594.894:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd600b9c819 code=0x7ffc0000 [ 866.162231][ T30] audit: type=1326 audit(1776826594.924:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd600b9c819 code=0x7ffc0000 [ 866.185153][ T8089] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 866.185345][ T30] audit: type=1326 audit(1776826594.924:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd600b9c819 code=0x7ffc0000 [ 866.219615][ T30] audit: type=1326 audit(1776826594.944:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd600b9c819 code=0x7ffc0000 [ 866.219835][T19107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.242744][ T30] audit: type=1326 audit(1776826594.944:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd600b9c819 code=0x7ffc0000 [ 866.274751][ T30] audit: type=1326 audit(1776826594.944:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd600b9c819 code=0x7ffc0000 [ 866.274866][ T8089] usb 5-1: device descriptor read/8, error -71 [ 866.304900][T19107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.322773][ T30] audit: type=1326 audit(1776826594.974:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd600b9c819 code=0x7ffc0000 [ 866.346146][ T30] audit: type=1326 audit(1776826595.034:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd600b9c819 code=0x7ffc0000 [ 866.407836][T14928] usb 4-1: USB disconnect, device number 6 [ 866.418393][ T8089] usb usb5-port1: unable to enumerate USB device [ 867.302990][ T29] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 867.497256][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 867.504842][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.517373][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.527722][ T29] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 867.539645][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.556485][ T29] usb 4-1: config 0 descriptor?? [ 867.571004][ T29] hub 4-1:0.0: USB hub found [ 867.674652][T19118] netlink: 'syz.4.3729': attribute type 1 has an invalid length. [ 867.778506][ T29] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 867.807931][T19121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3729'. [ 867.829467][ T29] hid-generic 0003:046D:C31C.0045: item fetching failed at offset 0/1 [ 867.840838][ T29] hid-generic 0003:046D:C31C.0045: probe with driver hid-generic failed with error -22 [ 868.135475][ T29] usb 4-1: USB disconnect, device number 7 [ 869.059885][T19130] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 869.268759][T19118] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 869.287053][T14927] usb 2-1: USB disconnect, device number 91 [ 869.377799][T19123] macvlan4: entered promiscuous mode [ 869.390839][T19123] macvlan4: entered allmulticast mode [ 869.398916][T19123] bridge3: port 1(macvlan4) entered blocking state [ 869.416440][T19123] bridge3: port 1(macvlan4) entered disabled state [ 869.511538][T19144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 869.837262][T14927] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 869.995258][T14927] usb 4-1: Using ep0 maxpacket: 32 [ 870.011169][T14927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.031251][T14927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.051543][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.060065][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.075386][T14927] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 870.096436][T14927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.134369][T19155] syz_tun: entered allmulticast mode [ 870.142560][T19154] syz_tun: left allmulticast mode [ 870.164488][T14927] usb 4-1: config 0 descriptor?? [ 870.185801][T14927] hub 4-1:0.0: USB hub found [ 870.392460][T14927] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 870.607951][T19164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 870.693838][T19153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3737'. [ 870.874025][T14927] hid-generic 0003:046D:C31C.0046: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 871.084842][T19173] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 871.155281][ T8077] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 871.165671][T19177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.211351][T19177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.258010][ T29] usb 4-1: USB disconnect, device number 8 [ 871.340267][ T8077] usb 2-1: Using ep0 maxpacket: 16 [ 871.347585][ T8077] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 871.361101][ T8077] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 871.377545][ T8077] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 871.391761][ T8077] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 871.404283][ T8077] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.416813][ T8077] usb 2-1: config 0 descriptor?? [ 871.433013][ T8077] pxrc 2-1:0.0: Could not find endpoint [ 871.443171][ T8077] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 871.472951][T19182] netlink: 'syz.4.3745': attribute type 1 has an invalid length. [ 871.508735][T19182] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 871.519989][T19182] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 871.556491][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3745'. [ 871.572096][T19186] 8021q: adding VLAN 0 to HW filter on device bond7 [ 871.597794][T19182] macvlan4: entered promiscuous mode [ 871.603228][T19182] macvlan4: entered allmulticast mode [ 871.609434][T19182] bond7: entered promiscuous mode [ 871.614915][T19182] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 871.629465][T19182] bond7: left promiscuous mode [ 871.652823][T19170] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3742'. [ 871.772677][T14927] usb 2-1: USB disconnect, device number 92 [ 872.165269][ T8085] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 872.225270][ T29] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 872.320133][ T8085] usb 3-1: unable to get BOS descriptor or descriptor too short [ 872.334349][ T8085] usb 3-1: config 9 has an invalid interface number: 242 but max is 0 [ 872.342762][ T8085] usb 3-1: config 9 has no interface number 0 [ 872.349087][ T8085] usb 3-1: config 9 interface 242 has no altsetting 0 [ 872.362964][ T8085] usb 3-1: New USB device found, idVendor=0af0, idProduct=7041, bcdDevice=d0.f9 [ 872.372724][ T8085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.389916][ T8085] usb 3-1: Product: syz [ 872.390041][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 872.405096][ T8085] usb 3-1: Manufacturer: syz [ 872.410625][ T8085] usb 3-1: SerialNumber: syz [ 872.417035][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.445179][ T29] usb 4-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 872.482032][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.496151][ T29] usb 4-1: config 0 descriptor?? [ 872.695671][ T8089] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 872.709780][ T8085] usb 3-1: USB disconnect, device number 40 [ 872.795218][ T8077] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 872.825227][ T8089] usb 5-1: device descriptor read/64, error -71 [ 872.939974][ T29] wacom 0003:056A:5012.0047: unknown main item tag 0x0 [ 872.947334][ T29] wacom 0003:056A:5012.0047: unknown main item tag 0x0 [ 872.954349][ T29] wacom 0003:056A:5012.0047: unknown main item tag 0x0 [ 872.961592][ T29] wacom 0003:056A:5012.0047: unknown main item tag 0x0 [ 872.968995][ T29] wacom 0003:056A:5012.0047: unknown main item tag 0x0 [ 872.976392][ T29] wacom 0003:056A:5012.0047: unknown main item tag 0x0 [ 872.983424][ T29] wacom 0003:056A:5012.0047: unknown main item tag 0x0 [ 872.992312][ T8077] usb 2-1: unable to get BOS descriptor or descriptor too short [ 873.000614][ T29] wacom 0003:056A:5012.0047: unknown main item tag 0x0 [ 873.008352][ T29] wacom 0003:056A:5012.0047: unknown main item tag 0x0 [ 873.016574][ T8077] usb 2-1: not running at top speed; connect to a high speed hub [ 873.025227][ T29] wacom 0003:056A:5012.0047: unknown main item tag 0x0 [ 873.033054][ T8077] usb 2-1: config 4 has an invalid interface number: 23 but max is 0 [ 873.043556][ T29] wacom 0003:056A:5012.0047: reserved main item tag 0xd [ 873.050734][ T8077] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 873.063435][ T29] wacom 0003:056A:5012.0047: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 873.065093][ T8089] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 873.072746][ T8077] usb 2-1: config 4 has no interface number 0 [ 873.091586][ T8077] usb 2-1: config 4 interface 23 altsetting 5 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 873.103308][ T8077] usb 2-1: config 4 interface 23 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.113804][ T8077] usb 2-1: config 4 interface 23 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 873.126938][ T8077] usb 2-1: config 4 interface 23 has no altsetting 0 [ 873.136946][ T8077] usb 2-1: New USB device found, idVendor=087d, idProduct=5704, bcdDevice=ce.19 [ 873.148215][ T8077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.156511][ T8077] usb 2-1: Product: syz [ 873.160716][ T8077] usb 2-1: Manufacturer: syz [ 873.165648][ T8077] usb 2-1: SerialNumber: syz [ 873.205358][ T8089] usb 5-1: device descriptor read/64, error -71 [ 873.224118][T19199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.236305][T19199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.304174][T19215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3756'. [ 873.316605][ T8089] usb usb5-port1: attempt power cycle [ 873.381888][ T8077] kaweth 2-1:4.23: couldn't find required endpoints [ 873.407047][ T8077] usb 2-1: USB disconnect, device number 93 [ 873.496449][ T29] usb 4-1: USB disconnect, device number 9 [ 873.606661][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3757'. [ 873.622014][T19217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.632629][T19217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3757'. [ 873.655353][ T8089] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 873.676087][ T8089] usb 5-1: device descriptor read/8, error -71 [ 873.915208][ T8089] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 873.936869][ T8089] usb 5-1: device descriptor read/8, error -71 [ 874.055330][ T8089] usb usb5-port1: unable to enumerate USB device [ 874.217504][ T8084] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 874.389041][ T8084] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 874.398397][ T8084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.406508][ T8084] usb 2-1: Product: syz [ 874.410989][ T8084] usb 2-1: Manufacturer: syz [ 874.415854][ T8084] usb 2-1: SerialNumber: syz [ 874.455152][ T8077] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 874.475220][ T29] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 874.605647][ T8077] usb 4-1: Using ep0 maxpacket: 32 [ 874.612414][ T8077] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.623656][ T8077] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.633890][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 874.639584][ T8077] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 874.649821][ T8077] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.661766][ T8077] usb 4-1: config 0 descriptor?? [ 874.674280][ T29] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 874.684175][ T29] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 874.696288][ T8077] hub 4-1:0.0: USB hub found [ 874.705280][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.718260][ T29] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 874.727646][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.738609][ T29] usb 3-1: config 0 descriptor?? [ 874.747791][ T29] pxrc 3-1:0.0: Could not find endpoint [ 874.756203][ T29] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 874.840032][ T8084] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 874.852200][ T8084] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 874.887950][ T8077] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 874.952692][T19230] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3762'. [ 874.965547][ T29] usb 3-1: USB disconnect, device number 41 [ 875.304830][ T8077] hid-generic 0003:046D:C31C.0048: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 875.353944][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3764'. [ 875.364047][T19236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3764'. [ 876.078150][ T8084] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 876.501834][ T8084] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 876.527276][ T8077] usb 4-1: USB disconnect, device number 10 [ 876.543701][ T8084] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 876.581181][ T8084] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 876.635656][ T8084] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 876.662653][ T8084] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 876.663233][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3767'. [ 876.702320][ T8084] usb 2-1: USB disconnect, device number 94 [ 876.962882][T19252] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3766'. [ 877.156091][ T8085] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 877.180140][T19262] syz_tun: entered allmulticast mode [ 877.186457][T19261] syz_tun: left allmulticast mode [ 877.310102][ T8085] usb 5-1: unable to get BOS descriptor or descriptor too short [ 877.376050][ T8085] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 877.392267][ T8085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.429557][ T8085] usb 5-1: Product: syz [ 877.442710][ T8085] usb 5-1: Manufacturer: syz [ 877.455224][ T8085] usb 5-1: SerialNumber: syz [ 877.566539][ T29] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 877.688641][ T8085] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 877.706368][ T8085] usb 5-1: MIDIStreaming interface descriptor not found [ 877.729541][ T29] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 877.737551][ T29] usb 4-1: can't read configurations, error -61 [ 877.815288][ T8085] usb 5-1: USB disconnect, device number 86 [ 877.875068][ T29] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 877.985088][T14928] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 878.039354][ T29] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 878.049355][ T29] usb 4-1: can't read configurations, error -61 [ 878.057250][ T29] usb usb4-port1: attempt power cycle [ 878.145151][T14928] usb 3-1: Using ep0 maxpacket: 16 [ 878.156652][T14928] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 878.187741][T14928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.209946][T14928] usb 3-1: config 0 descriptor?? [ 878.246294][T14928] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 878.395601][ T29] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 878.419211][ T29] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 878.433011][ T29] usb 4-1: can't read configurations, error -61 [ 878.465420][ T8085] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 878.575160][ T29] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 878.597584][ T29] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 878.605570][ T29] usb 4-1: can't read configurations, error -61 [ 878.615899][ T29] usb usb4-port1: unable to enumerate USB device [ 878.635091][ T8085] usb 2-1: Using ep0 maxpacket: 16 [ 878.642119][ T8085] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 878.650675][ T8085] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 878.661583][ T8085] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.674587][ T8085] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 878.683698][ T8085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.696841][ T8085] usb 2-1: config 0 descriptor?? [ 878.705699][ T8085] pxrc 2-1:0.0: Could not find endpoint [ 878.711934][ T8085] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 878.913560][T19277] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3776'. [ 878.927468][ T29] usb 2-1: USB disconnect, device number 95 [ 878.989579][T19286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3778'. [ 879.054937][T19284] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3775'. [ 879.135169][T14928] gspca_sonixj: reg_w1 err -110 [ 879.140787][T14928] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 879.425101][T14928] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 879.472290][T19292] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3781'. [ 879.576221][T14928] usb 5-1: Using ep0 maxpacket: 32 [ 879.583179][T14928] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 879.595809][T14928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 879.602709][T14928] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 879.611989][T14928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.623073][T14928] usb 5-1: config 0 descriptor?? [ 879.755295][ T8084] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 879.841535][T19290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.850581][T19290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.885881][ T8084] usb 2-1: device descriptor read/64, error -71 [ 880.125195][ T8084] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 880.255185][ T8084] usb 2-1: device descriptor read/64, error -71 [ 880.365389][ T8084] usb usb2-port1: attempt power cycle [ 880.415610][T19301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.437783][T19301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.470039][T14928] corsair-cpro 0003:1B1C:0C10.0049: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 880.707727][T14928] corsair-cpro 0003:1B1C:0C10.0049: probe with driver corsair-cpro failed with error -71 [ 880.718412][ T8084] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 880.755754][ T8084] usb 2-1: device descriptor read/8, error -71 [ 880.915186][ T29] usb 5-1: USB disconnect, device number 87 [ 880.995245][ T8084] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 881.026173][ T8084] usb 2-1: device descriptor read/8, error -71 [ 881.145376][ T8084] usb usb2-port1: unable to enumerate USB device [ 881.489436][T19310] syz_tun: entered allmulticast mode [ 881.498242][T19309] syz_tun: left allmulticast mode [ 882.050526][T19324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3789'. [ 882.265208][ T8084] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 882.427313][ T8084] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 882.441133][ T8084] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 882.454055][ T8084] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 882.465148][ T8084] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.478545][T19321] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 882.503483][ T8084] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 882.770109][T19319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.786990][T19319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.935518][ T8091] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 883.115146][ T8091] usb 2-1: Using ep0 maxpacket: 16 [ 883.124877][ T8091] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 64 [ 883.135471][ T8091] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 32 [ 883.149438][ T8091] usb 2-1: config 1 interface 0 has no altsetting 0 [ 883.159447][ T8091] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 883.170076][ T8091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.181555][ T8091] usb 2-1: Product: 틜힮倔뢜ꖸ쾵䙷忢᱗䣱ྒྷ䀶䝰ວ球落п佖폨¹ધᙧ갬῿췝῟刟┽뇄㡲ᩣﶖ䖛瓸犑㍲㠽떶䔬㋃錫봈琗⹠륭뭨謃푌뚕蝈ꆝꠀ럶쒥瘂⺵Ᏻ璃嬐ႈ荸Ẩﯽⳕ㼛톀৓쎇⎍╟⃳닳౶㭼潆䡦೵셾斥瞔荾眘䛺>쳱⡋韙櫩泣撿⮍୎甐凸 [ 883.229189][ T8091] usb 2-1: Manufacturer: 䓔轱掘⁷跞೴冧ꙮ퓫휨隟®⨬㌾賦ߖ쨤冕꬯ܸḊ咒ﻴĢ뙭苹框큕ꨍ鿽퀄䇊摓煂㱎ሗ鲆࠯̘洄酭䉏ﵚ멝㿷蛢㸾چᔉ끅静ꇮ븲Ч禗漀䊕᢬乖沋듷呅溾瘅홑辭㹅ﵷ [ 883.284662][ T8091] usb 2-1: SerialNumber: syz [ 883.296576][T19330] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 883.305585][T19330] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 883.385141][ T8089] usb 3-1: USB disconnect, device number 42 [ 883.518291][ T8091] usblp0: Disabling reads from problematic bidirectional printer [ 883.782454][T19341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.795444][T19341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.884766][ T8091] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 100 if 0 alt 7 proto 2 vid 0x03F0 pid 0x0004 [ 883.919629][ T8091] usb 2-1: USB disconnect, device number 100 [ 883.949234][ T8091] usblp0: removed [ 884.136506][T17626] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 884.461283][T19349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 884.563554][T19346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3795'. [ 884.573341][T19346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3795'. [ 884.582591][T19346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3795'. [ 884.600358][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3795'. [ 884.611079][T19346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3795'. [ 884.629722][T19346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3795'. [ 884.776728][T19362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3800'. [ 884.815872][ T8091] usb 5-1: USB disconnect, device number 88 [ 885.135141][ T8084] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 885.225094][ T29] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 885.275329][ T8091] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 885.285547][ T8084] usb 3-1: Using ep0 maxpacket: 8 [ 885.292365][ T8084] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 885.302680][ T8084] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.335360][ T8084] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 885.357558][ T8084] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input82 [ 885.379930][ T29] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 885.407526][ T29] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 885.420203][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.431191][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 885.448951][ T29] usb 2-1: config 0 has no interface number 0 [ 885.455882][ T29] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 885.466185][ T8091] usb 5-1: Using ep0 maxpacket: 16 [ 885.472262][ T29] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 885.487592][ T8091] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.500230][ T8091] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.511875][ T29] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 885.522109][ T8091] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 885.532218][ T29] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 885.545735][ T8091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.554216][ T29] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 885.563789][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.593905][ T29] usb 2-1: config 0 descriptor?? [ 885.608173][ T29] gspca_main: spca561-2.14.0 probing abcd:cdee [ 885.992306][ T8091] hid_parser_main: 443 callbacks suppressed [ 885.992323][ T8091] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0 [ 886.006715][ T29] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 886.031521][ T29] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 886.054616][ T8091] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0 [ 886.069141][ T29] usb 2-1: MIDIStreaming interface descriptor not found [ 886.080941][ T8091] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0 [ 886.095663][ T8091] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0 [ 886.110612][ T8091] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0 [ 886.181121][ T8091] mcp2221 0003:04D8:00DD.004A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 886.300881][ T29] usb 2-1: USB disconnect, device number 101 [ 886.497683][ T8091] usb 5-1: USB disconnect, device number 89 [ 886.913283][T19388] loop2: detected capacity change from 0 to 7 [ 886.932998][T19388] Dev loop2: unable to read RDB block 7 [ 886.952505][T19388] loop2: unable to read partition table [ 886.966947][T19388] loop2: partition table beyond EOD, truncated [ 886.985329][T19388] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 887.316435][T19395] netlink: 'syz.1.3809': attribute type 1 has an invalid length. [ 887.340064][T19395] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3809'. [ 887.512380][T19399] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3810'. [ 887.544308][T19396] libceph: resolve ' [ 887.544308][T19396] -&fYǝa2i [ 887.544308][T19396] .?&*&' (ret=-3): failed [ 887.855279][ T8091] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 887.873770][T19408] dlm: non-version read from control device 0 [ 887.958432][ T8089] usb 3-1: USB disconnect, device number 43 [ 888.045589][ T8091] usb 4-1: Using ep0 maxpacket: 32 [ 888.070949][ T8084] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 888.072783][ T8091] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.119762][ T8091] usb 4-1: config 0 has no interfaces? [ 888.152075][ T8091] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 888.185423][ T8091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.217257][ T8091] usb 4-1: Product: syz [ 888.228417][ T8091] usb 4-1: Manufacturer: syz [ 888.241680][ T8091] usb 4-1: SerialNumber: syz [ 888.255114][ T8084] usb 2-1: Using ep0 maxpacket: 32 [ 888.266071][ T8091] usb 4-1: config 0 descriptor?? [ 888.282820][ T8084] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 888.317242][ T8084] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 888.352547][ T8084] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 888.373298][ T8084] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 888.397790][ T8084] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.434447][ T8084] usb 2-1: config 0 descriptor?? [ 888.450069][T19406] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 888.468275][ T8084] hub 2-1:0.0: USB hub found [ 888.485433][ T8089] usb 4-1: USB disconnect, device number 15 [ 888.687359][ T8084] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 888.709585][ T8084] usbhid 2-1:0.0: can't add hid device: -71 [ 888.717042][ T8084] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 888.748342][ T8084] usb 2-1: USB disconnect, device number 102 [ 889.296505][T19424] loop2: detected capacity change from 0 to 7 [ 889.307378][T19424] Dev loop2: unable to read RDB block 7 [ 889.316457][T19424] loop2: unable to read partition table [ 889.325807][T19424] loop2: partition table beyond EOD, truncated [ 889.335517][T19424] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 889.435454][ T29] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 889.596687][ T29] usb 4-1: config index 0 descriptor too short (expected 90, got 45) [ 889.611727][ T29] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 889.622144][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.630691][ T29] usb 4-1: Product: syz [ 889.639359][ T29] usb 4-1: Manufacturer: syz [ 889.644084][ T29] usb 4-1: SerialNumber: syz [ 889.732430][T19439] loop3: detected capacity change from 0 to 7 [ 889.744116][T19439] Dev loop3: unable to read RDB block 7 [ 889.751303][T19439] loop3: AHDI p3 p4 [ 889.756698][T19439] loop3: partition table partially beyond EOD, truncated [ 889.764065][T19439] loop3: p3 start 1702000233 is beyond EOD, truncated [ 889.865676][ T8084] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 890.005107][ T8084] usb 2-1: device descriptor read/64, error -71 [ 890.083195][T19446] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3825'. [ 890.245075][ T8084] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 890.261747][ T29] (unnamed net_device) (uninitialized): Assigned a random MAC address: 56:ec:04:84:b2:e4 [ 890.367090][ T29] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 890.375094][ T8084] usb 2-1: device descriptor read/64, error -71 [ 890.408192][T19451] netlink: 'syz.4.3826': attribute type 2 has an invalid length. [ 890.427397][ T29] usb 4-1: USB disconnect, device number 16 [ 890.471937][T19451] !: entered promiscuous mode [ 890.487449][ T8084] usb usb2-port1: attempt power cycle [ 890.835230][ T8084] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 890.865544][ T8084] usb 2-1: device descriptor read/8, error -71 [ 891.116879][ T8084] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 891.155930][ T8084] usb 2-1: device descriptor read/8, error -71 [ 891.278318][ T8084] usb usb2-port1: unable to enumerate USB device [ 891.327782][ T30] kauditd_printk_skb: 181 callbacks suppressed [ 891.327801][ T30] audit: type=1326 audit(1776826620.084:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.4.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c799c819 code=0x7ffc0000 [ 891.366051][ T30] audit: type=1326 audit(1776826620.124:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.4.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c799c819 code=0x7ffc0000 [ 891.409851][ T30] audit: type=1326 audit(1776826620.124:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.4.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64c799c819 code=0x7ffc0000 [ 891.434378][ T30] audit: type=1326 audit(1776826620.124:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.4.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c799c819 code=0x7ffc0000 [ 891.458673][ T30] audit: type=1326 audit(1776826620.124:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.4.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c799c819 code=0x7ffc0000 [ 891.482390][ T30] audit: type=1326 audit(1776826620.124:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.4.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64c799c4ab code=0x7ffc0000 [ 891.493159][T19465] batadv_slave_1: entered promiscuous mode [ 891.512436][ T30] audit: type=1326 audit(1776826620.124:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.4.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64c799c4ab code=0x7ffc0000 [ 891.535597][ T30] audit: type=1326 audit(1776826620.124:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.4.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64c799c4ab code=0x7ffc0000 [ 891.558374][ T30] audit: type=1326 audit(1776826620.124:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.4.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64c799c4ab code=0x7ffc0000 [ 891.581133][ T30] audit: type=1326 audit(1776826620.124:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19459 comm="syz.4.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64c799c4ab code=0x7ffc0000 [ 891.611984][T19464] batadv_slave_1: left promiscuous mode [ 891.869945][T19475] tipc: Enabled bearer , priority 0 [ 891.924037][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 891.944877][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 891.957007][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 891.969695][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 891.978786][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 892.147375][T19474] tipc: Disabling bearer [ 892.379221][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3837'. [ 892.566650][T19497] tc_dump_action: action bad kind [ 892.574544][T19481] chnl_net:caif_netlink_parms(): no params data found [ 892.740608][T19481] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.748109][T19481] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.755785][T19481] bridge_slave_0: entered allmulticast mode [ 892.763804][T19481] bridge_slave_0: entered promiscuous mode [ 892.780289][T19481] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.803130][T19481] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.813819][T19481] bridge_slave_1: entered allmulticast mode [ 892.822720][T19481] bridge_slave_1: entered promiscuous mode [ 892.864453][T19505] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 893.068362][T19481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.425087][ T8089] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 893.596776][ T8089] usb 2-1: Using ep0 maxpacket: 32 [ 893.610233][ T8089] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.634549][ T8089] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.656214][ T8089] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 893.674710][ T8089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.702415][ T8089] usb 2-1: config 0 descriptor?? [ 893.724477][ T8089] hub 2-1:0.0: USB hub found [ 893.745096][ T8087] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 893.889567][ T8087] usb 4-1: device descriptor read/64, error -71 [ 893.898236][T19481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.925889][ T8089] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 894.016725][T19525] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 894.048519][ T5848] Bluetooth: hci3: command tx timeout [ 894.157824][ T8087] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 894.225856][T19481] team0: Port device team_slave_0 added [ 894.236304][T19481] team0: Port device team_slave_1 added [ 894.298723][ T8087] usb 4-1: device descriptor read/64, error -71 [ 894.319596][T19481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.338764][T19481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.375871][T19481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.388627][T19481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.395657][T19481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.422220][ T8087] usb usb4-port1: attempt power cycle [ 894.430357][T19481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.443461][ T8089] hid-generic 0003:046D:C31C.004B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 894.527375][T19481] hsr_slave_0: entered promiscuous mode [ 894.534303][T19481] hsr_slave_1: entered promiscuous mode [ 894.776262][ T8087] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 894.811118][ T8087] usb 4-1: device descriptor read/8, error -71 [ 894.909392][T19481] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.055091][ T8087] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 895.076495][ T8087] usb 4-1: device descriptor read/8, error -71 [ 895.121757][T19481] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.185841][ T8087] usb usb4-port1: unable to enumerate USB device [ 895.220024][T19481] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.311735][T19481] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.407241][T19534] usb 2-1: reset high-speed USB device number 107 using dummy_hcd [ 895.550399][T19541] loop2: detected capacity change from 0 to 7 [ 895.559682][T19541] Dev loop2: unable to read RDB block 7 [ 895.566732][T19541] loop2: unable to read partition table [ 895.572727][T19541] loop2: partition table beyond EOD, truncated [ 895.579997][T19541] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 895.704386][T10118] ip6gretap0 (unregistering): left promiscuous mode [ 895.731518][T10118] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 895.741110][T10118] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 895.750528][T10118] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 96:a7:ad:45:a3:a5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 895.801507][T19534] usbhid 2-1:0.0: reset_resume error -1 [ 895.811904][T10118] bond1 (unregistering): (slave ip6gretap2): Releasing backup interface [ 895.843117][T10118] bond1 (unregistering): (slave ip6gretap3): Releasing backup interface [ 895.897735][T10118] bond11 (unregistering): (slave erspan0): Releasing active interface [ 895.959129][T10118] gretap0 (unregistering): left promiscuous mode [ 895.988194][T10118] bond3 (unregistering): (slave gretap1): Releasing active interface [ 896.006973][ T8089] usb 2-1: USB disconnect, device number 107 [ 896.110892][T10118] bridge0 (unregistering): left promiscuous mode [ 896.126445][ T5848] Bluetooth: hci3: command tx timeout [ 896.166690][T19549] fuse: Unknown parameter 'roomode' [ 896.211713][T19553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3854'. [ 896.269469][T10118] bond16 (unregistering): (slave bridge3): Releasing backup interface [ 896.277863][T10118] bridge3 (unregistering): left promiscuous mode [ 896.317933][T19555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3854'. [ 896.334758][T10118] bond0 (unregistering): Released all slaves [ 896.346367][T10118] bond1 (unregistering): Released all slaves [ 896.360615][T10118] bond2 (unregistering): Released all slaves [ 896.382134][T10118] bond3 (unregistering): Released all slaves [ 896.399597][T10118] bond4 (unregistering): Released all slaves [ 896.413085][T10118] bond5 (unregistering): Released all slaves [ 896.436609][T10118] bond6 (unregistering): Released all slaves [ 896.486950][T10118] bond7 (unregistering): Released all slaves [ 896.536893][T10118] bond8 (unregistering): Released all slaves [ 896.597202][T10118] bond9 (unregistering): Released all slaves [ 896.635685][T10118] bond10 (unregistering): Released all slaves [ 896.684884][T10118] bond11 (unregistering): Released all slaves [ 896.721897][T10118] bond12 (unregistering): Released all slaves [ 896.781782][T19570] delete_channel: no stack [ 896.794701][T10118] bond13 (unregistering): Released all slaves [ 896.877872][T10118] bond14 (unregistering): Released all slaves [ 896.953815][T10118] bond15 (unregistering): Released all slaves [ 896.999813][T10118] bond16 (unregistering): Released all slaves [ 897.039847][T10118] bond17 (unregistering): Released all slaves [ 897.078541][T10118] bond18 (unregistering): Released all slaves [ 897.258664][T19557] macvlan4: entered promiscuous mode [ 897.264307][T19557] macvlan4: entered allmulticast mode [ 897.273450][T19557] bridge4: port 1(macvlan4) entered blocking state [ 897.282781][T19557] bridge4: port 1(macvlan4) entered disabled state [ 897.360755][ T8091] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 897.440312][T19570] hsr0: entered promiscuous mode [ 897.468809][T19570] macsec0: entered allmulticast mode [ 897.474393][T19570] hsr0: entered allmulticast mode [ 897.479885][T19570] hsr_slave_0: entered allmulticast mode [ 897.488178][T19570] hsr_slave_1: entered allmulticast mode [ 897.518674][ T8091] usb 4-1: config 0 has no interfaces? [ 897.527259][ T8091] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 897.536748][ T8091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.548495][ T8091] usb 4-1: config 0 descriptor?? [ 897.622087][T19570] hsr0: left allmulticast mode [ 897.626985][T19570] hsr_slave_0: left allmulticast mode [ 897.649377][T19570] hsr_slave_1: left allmulticast mode [ 897.701389][T10118] tipc: Left network mode [ 897.861681][T19571] kvm: kvm [19560]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 897.909837][T19571] kvm: kvm [19560]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 898.013675][T19584] loop2: detected capacity change from 0 to 7 [ 898.115217][T19584] Dev loop2: unable to read RDB block 7 [ 898.132592][T19585] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 19585 comm: syz.0.3859) [ 898.150291][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 898.150304][ T30] audit: type=1800 audit(1776826626.914:1793): pid=19585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3859" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=93599 res=0 errno=0 [ 898.225637][ T5848] Bluetooth: hci3: command tx timeout [ 898.240370][T19586] xt_TPROXY: Can be used only with -p tcp or -p udp [ 898.276042][T19584] loop2: unable to read partition table [ 898.305310][T19584] loop2: partition table beyond EOD, truncated [ 898.354025][T19584] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 898.413939][ T30] audit: type=1326 audit(1776826627.164:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.1.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e99c819 code=0x7ffc0000 [ 898.450596][ T30] audit: type=1326 audit(1776826627.164:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.1.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e99c819 code=0x7ffc0000 [ 898.485665][ T30] audit: type=1326 audit(1776826627.194:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.1.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e99c819 code=0x7ffc0000 [ 898.631864][ T30] audit: type=1326 audit(1776826627.194:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.1.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e99c819 code=0x7ffc0000 [ 898.705653][ T30] audit: type=1326 audit(1776826627.194:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.1.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e99c819 code=0x7ffc0000 [ 898.833550][ T30] audit: type=1326 audit(1776826627.194:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.1.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5c8e99c819 code=0x7ffc0000 [ 898.889805][ T30] audit: type=1326 audit(1776826627.194:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.1.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e99c819 code=0x7ffc0000 [ 898.923480][ T30] audit: type=1326 audit(1776826627.194:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.1.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e99c819 code=0x7ffc0000 [ 898.953609][ T30] audit: type=1326 audit(1776826627.194:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.1.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8e99c819 code=0x7ffc0000 [ 899.058830][T19481] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 899.139403][T19481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 899.215622][T19481] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 899.232647][T19481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 899.257743][T19481] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 899.266206][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3864'. [ 899.292985][T19596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3864'. [ 899.306084][T19596] netlink: 'syz.1.3864': attribute type 6 has an invalid length. [ 899.318715][T19481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 899.343694][T19481] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 899.356790][T19481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 899.465174][T17626] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.500874][T17630] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.544907][T17630] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.579038][T17630] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.739457][T19608] input: syz1 as /devices/virtual/input/input84 [ 899.819140][T19610] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 899.841281][T19610] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3866'. [ 900.008997][T14928] usb 4-1: USB disconnect, device number 21 [ 900.135354][ T8091] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 900.238656][T19481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.261894][T10118] hsr_slave_0: left promiscuous mode [ 900.278958][T10118] hsr_slave_1: left promiscuous mode [ 900.285428][ T5848] Bluetooth: hci3: command tx timeout [ 900.295128][ T8091] usb 5-1: device descriptor read/64, error -71 [ 900.302653][T10118] veth0_macvtap: left promiscuous mode [ 900.312013][T10118] veth1_vlan: left promiscuous mode [ 900.317880][T10118] veth0_vlan: left promiscuous mode [ 900.386346][T19620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3870'. [ 900.443606][T10118] team0 (unregistering): Port device veth3 removed [ 900.508544][T19623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3870'. [ 900.561236][ T8091] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 900.635145][ T8087] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 900.695084][ T8091] usb 5-1: device descriptor read/64, error -71 [ 900.805512][ T8091] usb usb5-port1: attempt power cycle [ 900.835371][ T8087] usb 2-1: Using ep0 maxpacket: 16 [ 900.863012][ T8087] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 900.876869][ T8087] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 900.894708][ T8087] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 900.917899][ T8087] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 900.927968][ T8087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.941420][ T8087] usb 2-1: config 0 descriptor?? [ 900.969783][ T8087] pxrc 2-1:0.0: Could not find endpoint [ 900.976297][ T8087] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 901.012641][T19625] macvlan2: entered promiscuous mode [ 901.023963][T19625] macvlan2: entered allmulticast mode [ 901.029862][T19625] bridge5: port 1(macvlan2) entered blocking state [ 901.039836][T19625] bridge5: port 1(macvlan2) entered disabled state [ 901.061664][T19481] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.074022][T10117] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.081156][T10117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.100310][T10117] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.107480][T10117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.164864][ T8091] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 901.186615][ T8091] usb 5-1: device descriptor read/8, error -71 [ 901.198579][T19618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3871'. [ 901.219364][T19618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3871'. [ 901.264934][T19618] bridge0: entered promiscuous mode [ 901.276043][T19618] ip6gretap0: entered promiscuous mode [ 901.330784][ T8089] usb 2-1: USB disconnect, device number 108 [ 901.393673][T19481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.445329][ T8091] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 901.487987][ T8091] usb 5-1: device descriptor read/8, error -71 [ 901.587147][T19481] veth0_vlan: entered promiscuous mode [ 901.594403][T10118] IPVS: stop unused estimator thread 0... [ 901.605665][ T8091] usb usb5-port1: unable to enumerate USB device [ 901.621480][T19481] veth1_vlan: entered promiscuous mode [ 901.693818][T19481] veth0_macvtap: entered promiscuous mode [ 901.714160][T19481] veth1_macvtap: entered promiscuous mode [ 901.757936][T19481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.770085][T19481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.804453][T17626] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.828523][T17626] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.849411][T17626] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.877720][T17626] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.306885][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.335723][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.441727][T19645] sg_write: data in/out 491487/136 bytes for SCSI command 0x2-- guessing data in; [ 902.441727][T19645] program syz.0.3878 not setting count and/or reply_len properly [ 902.535273][ T8089] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 902.702345][ T8089] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 902.702646][T10117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.749024][ T8089] usb 4-1: config 0 has no interface number 0 [ 902.773243][ T8089] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 902.779199][T10117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.853004][ T8089] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 902.878111][ T8089] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 902.952510][ T8089] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 902.973820][ T8089] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 902.994546][ T8089] usb 4-1: Product: syz [ 903.008285][ T8089] usb 4-1: SerialNumber: syz [ 903.031339][ T8089] usb 4-1: config 0 descriptor?? [ 903.063853][ T8089] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 903.098692][ T8089] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input85 [ 903.111562][T19660] pim6reg1: entered promiscuous mode [ 903.127181][T19660] pim6reg1: entered allmulticast mode [ 903.267707][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 903.479449][T19634] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3874'. [ 903.485085][ T8091] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 903.495939][ T8085] usb 4-1: USB disconnect, device number 22 [ 903.543082][ T8085] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 903.660971][ T8091] usb 3-1: unable to get BOS descriptor or descriptor too short [ 903.687076][ T8091] usb 3-1: not running at top speed; connect to a high speed hub [ 903.707154][ T8091] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.731729][ T8091] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.44 [ 903.745219][ T8091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.755147][ T8091] usb 3-1: Product: syz [ 903.759376][ T8091] usb 3-1: Manufacturer: syz [ 903.764196][ T8091] usb 3-1: SerialNumber: syz [ 903.961207][T19677] loop3: detected capacity change from 0 to 7 [ 903.969592][T19677] Dev loop3: unable to read RDB block 7 [ 903.976554][T19677] loop3: AHDI p3 p4 [ 903.985680][T19677] loop3: partition table partially beyond EOD, truncated [ 904.005504][T19677] loop3: p3 start 1702000233 is beyond EOD, truncated [ 904.118636][ T8091] usb 3-1: USB disconnect, device number 44 [ 904.133578][T19683] FAULT_INJECTION: forcing a failure. [ 904.133578][T19683] name failslab, interval 1, probability 0, space 0, times 0 [ 904.158991][T19683] CPU: 1 UID: 0 PID: 19683 Comm: syz.1.3889 Tainted: G L syzkaller #0 PREEMPT(full) [ 904.159018][T19683] Tainted: [L]=SOFTLOCKUP [ 904.159024][T19683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 904.159036][T19683] Call Trace: [ 904.159043][T19683] [ 904.159051][T19683] dump_stack_lvl+0xe8/0x150 [ 904.159082][T19683] should_fail_ex+0x412/0x560 [ 904.159113][T19683] should_failslab+0xa8/0x100 [ 904.159138][T19683] __kmalloc_noprof+0xe8/0x760 [ 904.159160][T19683] ? copy_splice_read+0x16f/0xaa0 [ 904.159184][T19683] copy_splice_read+0x16f/0xaa0 [ 904.159221][T19683] ? __pfx_copy_splice_read+0x10/0x10 [ 904.159240][T19683] ? trace_kmalloc+0x2a/0xf0 [ 904.159258][T19683] ? look_up_lock_class+0x57/0x110 [ 904.159280][T19683] ? register_lock_class+0x31/0x2e0 [ 904.159307][T19683] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 904.159334][T19683] ? alloc_pipe_info+0x373/0x4d0 [ 904.159355][T19683] ? __pfx_copy_splice_read+0x10/0x10 [ 904.159372][T19683] splice_direct_to_actor+0x478/0xc70 [ 904.159405][T19683] ? __pfx_direct_splice_actor+0x10/0x10 [ 904.159432][T19683] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 904.159461][T19683] do_splice_direct+0x195/0x290 [ 904.159483][T19683] ? __pfx_do_splice_direct+0x10/0x10 [ 904.159503][T19683] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 904.159527][T19683] ? bpf_lsm_file_permission+0x9/0x20 [ 904.159549][T19683] ? security_file_permission+0x75/0x260 [ 904.159572][T19683] ? rw_verify_area+0x255/0x4d0 [ 904.159594][T19683] do_sendfile+0x535/0x7d0 [ 904.159619][T19683] ? __pfx_vfs_write+0x10/0x10 [ 904.159644][T19683] ? __pfx_do_sendfile+0x10/0x10 [ 904.159669][T19683] ? __fget_files+0x3a0/0x420 [ 904.159698][T19683] __se_sys_sendfile64+0x144/0x1a0 [ 904.159727][T19683] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 904.159760][T19683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.159780][T19683] do_syscall_64+0x15f/0xf80 [ 904.159801][T19683] ? trace_irq_disable+0x3b/0x140 [ 904.159825][T19683] ? clear_bhb_loop+0x40/0x90 [ 904.159847][T19683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.159866][T19683] RIP: 0033:0x7f5c8e99c819 [ 904.159884][T19683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.159900][T19683] RSP: 002b:00007f5c8f896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 904.159920][T19683] RAX: ffffffffffffffda RBX: 00007f5c8ec15fa0 RCX: 00007f5c8e99c819 [ 904.159934][T19683] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 904.159945][T19683] RBP: 00007f5c8f896090 R08: 0000000000000000 R09: 0000000000000000 [ 904.159956][T19683] R10: 000000000000021c R11: 0000000000000246 R12: 0000000000000001 [ 904.159967][T19683] R13: 00007f5c8ec16038 R14: 00007f5c8ec15fa0 R15: 00007f5c8ed3fa48 [ 904.159996][T19683] [ 904.592169][T19690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3892'. [ 904.825089][ T29] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 904.967859][T19707] syzkaller0: entered promiscuous mode [ 904.973542][T19707] syzkaller0: entered allmulticast mode [ 905.001308][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 905.010764][T19707] tipc: Started in network mode [ 905.016585][T19707] tipc: Node identity 6a86ccb37c35, cluster identity 4711 [ 905.026707][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 905.040264][T19707] tipc: Enabled bearer , priority 0 [ 905.048287][ T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 905.057996][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 905.067236][ T29] usb 4-1: SerialNumber: syz [ 905.278818][T19692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.289767][T19692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.303348][ T29] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 905.319444][ T29] usb 4-1: USB disconnect, device number 23 [ 905.494460][T19711] kernel read not supported for file / 7âW)sL_:Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 19711 comm: syz.4.3897) [ 905.509730][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 905.509746][ T30] audit: type=1800 audit(1776826634.274:1854): pid=19711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3897" name=20019C1437B3CFFCC3A25729EB739313EB014C5F3A9E1F518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=94601 res=0 errno=0 [ 905.553574][T19711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3897'. [ 905.564512][T19711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3897'. [ 905.615090][ T29] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 905.740382][T19704] tipc: Resetting bearer [ 905.806165][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 905.818318][ T29] usb 4-1: config 251 has an invalid descriptor of length 9, skipping remainder of the config [ 905.857060][T19704] tipc: Disabling bearer [ 905.872595][T19720] loop3: detected capacity change from 0 to 7 [ 905.887339][ T29] usb 4-1: config 251 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 905.926653][T19720] Dev loop3: unable to read RDB block 7 [ 905.945521][T19720] loop3: AHDI p3 p4 [ 905.960864][T19720] loop3: partition table partially beyond EOD, truncated [ 905.974792][ T29] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 905.999803][T19720] loop3: p3 start 1702000233 is beyond EOD, truncated [ 906.024469][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.077940][ T29] usb 4-1: Product: syz [ 906.093906][ T29] usb 4-1: Manufacturer: syz [ 906.108368][ T29] usb 4-1: SerialNumber: syz [ 906.181617][T19726] FAULT_INJECTION: forcing a failure. [ 906.181617][T19726] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 906.183381][T19718] vimc link validate: Scaler:src:16x16 (0x33424752, 9, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 906.228906][T19726] CPU: 0 UID: 0 PID: 19726 Comm: syz.0.3902 Tainted: G L syzkaller #0 PREEMPT(full) [ 906.228938][T19726] Tainted: [L]=SOFTLOCKUP [ 906.228944][T19726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 906.228956][T19726] Call Trace: [ 906.228963][T19726] [ 906.228971][T19726] dump_stack_lvl+0xe8/0x150 [ 906.228996][T19726] should_fail_ex+0x412/0x560 [ 906.229027][T19726] prepare_alloc_pages+0x22a/0x650 [ 906.229058][T19726] __alloc_frozen_pages_noprof+0x12f/0x380 [ 906.229086][T19726] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 906.229111][T19726] __alloc_pages_noprof+0x10/0x100 [ 906.229124][T19726] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 906.229139][T19726] ? __kmalloc_noprof+0x37d/0x760 [ 906.229152][T19726] ? copy_splice_read+0x16f/0xaa0 [ 906.229172][T19726] ? __kmalloc_noprof+0x1b8/0x760 [ 906.229197][T19726] copy_splice_read+0x19f/0xaa0 [ 906.229227][T19726] ? __pfx_copy_splice_read+0x10/0x10 [ 906.229246][T19726] ? trace_kmalloc+0x2a/0xf0 [ 906.229257][T19726] ? look_up_lock_class+0x57/0x110 [ 906.229270][T19726] ? register_lock_class+0x31/0x2e0 [ 906.229286][T19726] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 906.229301][T19726] ? alloc_pipe_info+0x373/0x4d0 [ 906.229322][T19726] ? __pfx_copy_splice_read+0x10/0x10 [ 906.229341][T19726] splice_direct_to_actor+0x478/0xc70 [ 906.229371][T19726] ? __pfx_direct_splice_actor+0x10/0x10 [ 906.229395][T19726] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 906.229422][T19726] do_splice_direct+0x195/0x290 [ 906.229443][T19726] ? __pfx_do_splice_direct+0x10/0x10 [ 906.229463][T19726] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 906.229485][T19726] ? bpf_lsm_file_permission+0x9/0x20 [ 906.229507][T19726] ? security_file_permission+0x75/0x260 [ 906.229533][T19726] ? rw_verify_area+0x255/0x4d0 [ 906.229558][T19726] do_sendfile+0x535/0x7d0 [ 906.229584][T19726] ? __pfx_vfs_write+0x10/0x10 [ 906.229610][T19726] ? __pfx_do_sendfile+0x10/0x10 [ 906.229637][T19726] ? __fget_files+0x3a0/0x420 [ 906.229665][T19726] __se_sys_sendfile64+0x144/0x1a0 [ 906.229693][T19726] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 906.229727][T19726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.229746][T19726] do_syscall_64+0x15f/0xf80 [ 906.229774][T19726] ? trace_irq_disable+0x3b/0x140 [ 906.229797][T19726] ? clear_bhb_loop+0x40/0x90 [ 906.229819][T19726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.229838][T19726] RIP: 0033:0x7f91bf39c819 [ 906.229856][T19726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.229869][T19726] RSP: 002b:00007f91c0196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 906.229889][T19726] RAX: ffffffffffffffda RBX: 00007f91bf615fa0 RCX: 00007f91bf39c819 [ 906.229901][T19726] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 906.229910][T19726] RBP: 00007f91c0196090 R08: 0000000000000000 R09: 0000000000000000 [ 906.229920][T19726] R10: 000000000000021c R11: 0000000000000246 R12: 0000000000000001 [ 906.229930][T19726] R13: 00007f91bf616038 R14: 00007f91bf615fa0 R15: 00007f91bf73fa48 [ 906.229957][T19726] [ 906.593031][ T29] cdc_ether 4-1:251.0: probe with driver cdc_ether failed with error -22 [ 906.611783][T19728] binder: 19723:19728 ioctl 4018620d 0 returned -22 [ 906.643626][ T29] usb 4-1: USB disconnect, device number 24 [ 906.752329][T19729] pim6reg: entered allmulticast mode [ 906.787216][T19729] pim6reg: left allmulticast mode [ 907.171074][T19733] fuse: Bad value for 'fd' [ 908.035178][T19750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3909'. [ 908.134035][T19750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3909'. [ 908.164055][T19756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3910'. [ 908.267905][T19759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3910'. [ 908.306418][T19753] macvlan2: entered promiscuous mode [ 908.324165][T19753] macvlan2: entered allmulticast mode [ 908.422571][T19764] macvlan2: entered promiscuous mode [ 908.450151][T19764] macvlan2: entered allmulticast mode [ 908.474246][T19764] bridge6: port 1(macvlan2) entered blocking state [ 908.497922][T19764] bridge6: port 1(macvlan2) entered disabled state [ 908.587677][T19769] loop3: detected capacity change from 0 to 7 [ 908.604481][T19769] Dev loop3: unable to read RDB block 7 [ 908.627075][T19769] loop3: AHDI p3 p4 [ 908.639272][T19769] loop3: partition table partially beyond EOD, truncated [ 908.668428][T19769] loop3: p3 start 1702000233 is beyond EOD, truncated [ 910.334375][T19807] syz_tun: entered allmulticast mode [ 910.370263][T19805] syz_tun: left allmulticast mode [ 910.492434][T19819] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 910.631775][T19827] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3920'. [ 911.166038][T19841] loop3: detected capacity change from 0 to 7 [ 911.174735][T19841] Dev loop3: unable to read RDB block 7 [ 911.184056][T19841] loop3: AHDI p3 p4 [ 911.189144][T19841] loop3: partition table partially beyond EOD, truncated [ 911.197262][T19841] loop3: p3 start 1702000233 is beyond EOD, truncated [ 911.568195][T19857] netlink: 'syz.0.3932': attribute type 1 has an invalid length. [ 911.603449][T19859] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 911.662815][T19864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3930'. [ 911.776689][T19857] bond6: entered promiscuous mode [ 911.802595][T19857] bond6: entered allmulticast mode [ 911.818871][T19857] 8021q: adding VLAN 0 to HW filter on device bond6 [ 911.957506][ T8084] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 912.115463][T19872] netlink: 'syz.2.3935': attribute type 1 has an invalid length. [ 912.145194][ T8084] usb 2-1: Using ep0 maxpacket: 32 [ 912.167974][ T8084] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 912.179918][ T8084] usb 2-1: config 0 has no interface number 0 [ 912.186480][ T8084] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 912.197023][ T8084] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.246162][ T8084] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 912.290402][ T8084] usb 2-1: config 0 interface 196 has no altsetting 0 [ 912.327631][ T8084] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 912.346386][ T8084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.369982][ T8084] usb 2-1: Product: syz [ 912.382070][ T8084] usb 2-1: Manufacturer: syz [ 912.394087][ T8084] usb 2-1: SerialNumber: syz [ 912.409789][ T8084] usb 2-1: config 0 descriptor?? [ 912.426080][T19867] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 912.665503][T19867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.691951][T19867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.724299][T19867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.749558][T19867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.787980][ T8084] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 912.817310][ T8084] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 912.885201][ T8084] usb 2-1: USB disconnect, device number 109 [ 913.800323][T19902] netlink: 'syz.1.3941': attribute type 1 has an invalid length. [ 913.949694][T19902] 8021q: adding VLAN 0 to HW filter on device bond5 [ 914.127186][T19906] bond5: entered allmulticast mode [ 914.857423][T19926] netlink: 'syz.2.3943': attribute type 3 has an invalid length. [ 914.866073][T19926] netlink: 'syz.2.3943': attribute type 3 has an invalid length. [ 914.884594][T19926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3943'. [ 915.445151][T19939] syz_tun: entered allmulticast mode [ 915.466289][T19938] syz_tun: left allmulticast mode [ 915.689833][T19940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 916.029378][T14928] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 916.205224][T14928] usb 5-1: Using ep0 maxpacket: 16 [ 916.213694][T14928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 916.227497][T14928] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 916.241882][T14928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.253019][T14928] usb 5-1: Product: syz [ 916.257377][T14928] usb 5-1: Manufacturer: syz [ 916.263493][T14928] usb 5-1: SerialNumber: syz [ 916.270922][T14928] usb 5-1: config 0 descriptor?? [ 916.282284][T14928] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 916.293868][T14928] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 916.890154][T14928] em28xx 5-1:0.0: chip ID is em2765 [ 917.196612][ T8091] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 917.389012][ T8091] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 917.471235][ T8091] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.488088][ T8091] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 917.535692][ T8091] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 917.548778][T14928] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 917.565991][T14928] em28xx 5-1:0.0: board has no eeprom [ 917.588653][ T8091] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 917.618248][ T5917] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 917.684632][ T8091] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 917.698653][ T8091] usb 3-1: Product: syz [ 917.727993][ T8091] usb 3-1: Manufacturer: syz [ 917.756779][T14928] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 917.764861][T14928] em28xx 5-1:0.0: dvb set to bulk mode. [ 917.793772][ T8091] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 917.805172][ T5917] usb 4-1: device descriptor read/64, error -71 [ 917.816228][ T8077] em28xx 5-1:0.0: Binding DVB extension [ 917.895670][T14928] usb 5-1: USB disconnect, device number 94 [ 917.945631][T14928] em28xx 5-1:0.0: Disconnecting em28xx [ 918.059737][ T5917] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 918.094606][ T8077] em28xx 5-1:0.0: Registering input extension [ 918.101841][T14928] em28xx 5-1:0.0: Closing input extension [ 918.142967][T14928] em28xx 5-1:0.0: Freeing device [ 918.162645][ T8091] usb 3-1: USB disconnect, device number 45 [ 918.235140][ T5917] usb 4-1: device descriptor read/64, error -71 [ 918.355361][ T5917] usb usb4-port1: attempt power cycle [ 918.705163][ T5917] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 918.757055][ T5917] usb 4-1: device descriptor read/8, error -71 [ 919.007353][ T5917] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 919.043391][ T5917] usb 4-1: device descriptor read/8, error -71 [ 919.161554][ T5917] usb usb4-port1: unable to enumerate USB device [ 919.666041][T19997] syz_tun: entered allmulticast mode [ 919.673004][T19996] syz_tun: left allmulticast mode [ 920.021380][T20009] netlink: 'syz.0.3959': attribute type 5 has an invalid length. [ 920.061019][T20009] ip6erspan0: entered promiscuous mode [ 920.305207][ T8084] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 920.485133][ T8084] usb 5-1: Using ep0 maxpacket: 32 [ 920.520934][ T8084] usb 5-1: config 3 has no interfaces? [ 920.550196][ T8084] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=4e.3b [ 920.592562][ T8084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.629637][ T8084] usb 5-1: Product: syz [ 920.648742][ T8084] usb 5-1: Manufacturer: syz [ 920.672996][ T8084] usb 5-1: SerialNumber: syz [ 920.932970][ T8084] usb 5-1: USB disconnect, device number 95 [ 921.986699][ T8089] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 922.242211][ T8089] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.276392][ T8089] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 922.387049][ T8089] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 922.413856][ T8089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 922.469034][ T8089] usb 3-1: SerialNumber: syz [ 922.742170][ T8089] usb 3-1: 0:2 : does not exist [ 922.823601][ T8089] usb 3-1: USB disconnect, device number 46 [ 923.416809][T20061] netlink: 'syz.4.3973': attribute type 10 has an invalid length. [ 923.430733][T20061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 923.449950][T20061] team0: Port device netdevsim0 added [ 923.555431][ T8091] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 923.735294][ T8091] usb 3-1: Using ep0 maxpacket: 16 [ 923.759641][ T8091] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 923.785659][ T8091] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 923.812223][ T8091] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 923.838867][ T8091] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 923.858175][ T8091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.878066][ T8091] usb 3-1: config 0 descriptor?? [ 923.904605][ T8091] pxrc 3-1:0.0: Could not find endpoint [ 923.922831][ T8091] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 923.930650][ T5917] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 924.125318][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 924.133071][T20063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3974'. [ 924.143102][T20063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3974'. [ 924.153097][ T5917] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 924.164718][ T5917] usb 4-1: config 0 has no interface number 0 [ 924.171910][T20063] bridge0: entered promiscuous mode [ 924.179260][ T5917] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 924.189686][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.189736][T20063] ip6gretap0: entered promiscuous mode [ 924.200194][ T5917] usb 4-1: Product: syz [ 924.210512][ T5917] usb 4-1: Manufacturer: syz [ 924.216248][ T5917] usb 4-1: SerialNumber: syz [ 924.216601][T20063] debugfs: 'hsr1' already exists in 'hsr' [ 924.227264][T20063] Cannot create hsr debugfs directory [ 924.228300][ T5917] usb 4-1: config 0 descriptor?? [ 924.243118][T14928] usb 3-1: USB disconnect, device number 47 [ 924.278082][ T5917] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 924.287656][ T5917] usb 4-1: selecting invalid altsetting 1 [ 924.293423][ T5917] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 924.306957][ T5917] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 924.318545][ T5917] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 924.330124][ T5917] usb 4-1: media controller created [ 924.335120][ T8087] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 924.348646][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 924.431589][T20082] netlink: 'syz.0.3981': attribute type 1 has an invalid length. [ 924.457032][T20082] bond7: entered promiscuous mode [ 924.462136][T20082] bond7: entered allmulticast mode [ 924.468427][T20082] 8021q: adding VLAN 0 to HW filter on device bond7 [ 924.478338][ T30] audit: type=1326 audit(1776826653.234:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20069 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6a19c819 code=0x7ffc0000 [ 924.523557][ T30] audit: type=1326 audit(1776826653.234:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20069 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6a19c819 code=0x7ffc0000 [ 924.547018][ T8087] usb 5-1: Using ep0 maxpacket: 16 [ 924.553562][ T30] audit: type=1326 audit(1776826653.234:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20069 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b6a19c819 code=0x7ffc0000 [ 924.578563][ T8087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 924.588908][ T30] audit: type=1326 audit(1776826653.254:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20069 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6a19c819 code=0x7ffc0000 [ 924.612921][ T30] audit: type=1326 audit(1776826653.254:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20069 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6a19c819 code=0x7ffc0000 [ 924.636129][ T30] audit: type=1326 audit(1776826653.254:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20069 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b6a19c819 code=0x7ffc0000 [ 924.661784][ T8087] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 924.672263][ T8087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.680656][ T8087] usb 5-1: Product: syz [ 924.687371][ T8087] usb 5-1: Manufacturer: syz [ 924.693017][ T8087] usb 5-1: SerialNumber: syz [ 924.716863][ T8087] usb 5-1: config 0 descriptor?? [ 924.727506][ T8087] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 924.737145][ T8087] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 924.953556][ T30] audit: type=1326 audit(1776826653.704:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20069 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6a19c819 code=0x7ffc0000 [ 924.979204][ T30] audit: type=1326 audit(1776826653.704:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20069 comm="syz.3.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6a19c819 code=0x7ffc0000 [ 925.353393][ T8087] em28xx 5-1:0.0: chip ID is em2765 [ 925.406089][ T5917] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 925.416900][ T5917] zl10353_read_register: readreg error (reg=127, ret==-110) [ 925.435837][T20084] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 925.478045][T20095] input: syz0 as /devices/virtual/input/input88 [ 925.510282][ T5917] usb 4-1: USB disconnect, device number 29 [ 925.954608][T20114] loop3: detected capacity change from 0 to 7 [ 925.961808][T20114] Dev loop3: unable to read RDB block 7 [ 925.968444][T20114] loop3: AHDI p3 p4 [ 925.972724][T20114] loop3: partition table partially beyond EOD, truncated [ 925.987258][T20114] loop3: p3 start 1702000233 is beyond EOD, truncated [ 926.103659][T20119] netlink: 'syz.1.3993': attribute type 1 has an invalid length. [ 926.168256][ T8087] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 926.192701][T20119] bond6: entered promiscuous mode [ 926.213067][T20119] bond6: entered allmulticast mode [ 926.220075][ T8087] em28xx 5-1:0.0: board has no eeprom [ 926.241892][T20119] 8021q: adding VLAN 0 to HW filter on device bond6 [ 926.317466][ T8087] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 926.347666][ T8087] em28xx 5-1:0.0: dvb set to bulk mode. [ 926.372382][ T8084] em28xx 5-1:0.0: Binding DVB extension [ 926.426022][ T8087] usb 5-1: USB disconnect, device number 96 [ 926.470873][ T8087] em28xx 5-1:0.0: Disconnecting em28xx [ 926.585446][ T8084] em28xx 5-1:0.0: Registering input extension [ 926.610915][ T8087] em28xx 5-1:0.0: Closing input extension [ 926.624012][T20134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3997'. [ 926.745892][ T8084] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 926.748700][T20137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3997'. [ 926.758023][ T8087] em28xx 5-1:0.0: Freeing device [ 926.930677][T20134] macvlan2: entered promiscuous mode [ 926.933859][T20146] loop2: detected capacity change from 0 to 7 [ 926.937734][T20134] macvlan2: entered allmulticast mode [ 926.948617][ T8084] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 926.954640][T20145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4001'. [ 926.959344][ T8084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.968631][T20134] bridge3: port 1(macvlan2) entered blocking state [ 926.979646][ T8084] usb 4-1: config 0 descriptor?? [ 926.983375][T20134] bridge3: port 1(macvlan2) entered disabled state [ 926.988235][T20146] Dev loop2: unable to read RDB block 7 [ 927.008878][T20146] loop2: unable to read partition table [ 927.023022][T20146] loop2: partition table beyond EOD, truncated [ 927.033690][T20146] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 927.167814][ T8087] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 927.221127][ T8084] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 927.290867][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4003'. [ 927.355150][ T8087] usb 5-1: Using ep0 maxpacket: 32 [ 927.400106][ T8087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.450773][ T8087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.509847][ T8087] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 927.554820][ T8087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.616644][ T8087] usb 5-1: config 0 descriptor?? [ 927.655029][ T8087] hub 5-1:0.0: USB hub found [ 927.850715][ T8087] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 927.899148][ T8084] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 927.925745][ T8084] [drm] Initialized udl on minor 2 [ 928.175092][ T5917] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 928.271001][ T8087] hid-generic 0003:046D:C31C.004C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 928.288167][ T8084] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 928.340948][ T5917] usb 2-1: config index 0 descriptor too short (expected 45, got 28) [ 928.343331][ T8084] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 928.404945][ T8084] usb 4-1: USB disconnect, device number 30 [ 928.411537][ T5917] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 928.424647][ T8089] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 928.453579][ T5917] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 928.490257][ T8089] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 928.527986][ T5917] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 928.563598][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.582446][ T5917] usb 2-1: Product: syz [ 928.589719][ T5917] usb 2-1: Manufacturer: syz [ 928.597511][ T5917] usb 2-1: SerialNumber: syz [ 928.901629][T20167] fuse: fd is not a fuse device [ 929.455070][ T8087] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 929.466185][T20142] usb 5-1: reset high-speed USB device number 97 using dummy_hcd [ 929.605134][ T8087] usb 4-1: Using ep0 maxpacket: 16 [ 929.612345][ T8087] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 929.624451][ T8087] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 929.633649][ T8087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.642696][ T8087] usb 4-1: Product: syz [ 929.647290][ T8087] usb 4-1: Manufacturer: syz [ 929.651921][ T8087] usb 4-1: SerialNumber: syz [ 929.660294][ T8087] usb 4-1: config 0 descriptor?? [ 929.669835][ T8087] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 929.679122][ T8087] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 929.843800][T20142] usbhid 5-1:0.0: reset_resume error -1 [ 930.051611][ T8084] usb 5-1: USB disconnect, device number 97 [ 930.280331][ T8087] em28xx 4-1:0.0: chip ID is em2765 [ 930.295228][ T8084] usb 2-1: USB disconnect, device number 110 [ 930.442938][T20190] loop2: detected capacity change from 0 to 7 [ 930.458605][T20190] Dev loop2: unable to read RDB block 7 [ 930.471233][T20190] loop2: unable to read partition table [ 930.486573][T20190] loop2: partition table beyond EOD, truncated [ 930.504284][T20190] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 930.929675][ T8087] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 930.975146][ T8087] em28xx 4-1:0.0: board has no eeprom [ 931.055107][ T8087] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 931.069592][ T8087] em28xx 4-1:0.0: dvb set to bulk mode. [ 931.077705][ T8089] em28xx 4-1:0.0: Binding DVB extension [ 931.110094][ T8087] usb 4-1: USB disconnect, device number 31 [ 931.133095][ T8087] em28xx 4-1:0.0: Disconnecting em28xx [ 931.211134][ T8089] em28xx 4-1:0.0: Registering input extension [ 931.220575][ T8087] em28xx 4-1:0.0: Closing input extension [ 931.287939][ T8087] em28xx 4-1:0.0: Freeing device [ 931.494155][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.500793][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.403540][T20227] random: crng reseeded on system resumption [ 932.662661][T20232] loop2: detected capacity change from 0 to 7 [ 932.670508][T20232] Dev loop2: unable to read RDB block 7 [ 932.694389][T20232] loop2: unable to read partition table [ 932.747360][T20232] loop2: partition table beyond EOD, truncated [ 932.770336][T20232] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 933.216899][T20242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4029'. [ 933.585131][ T5917] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 933.745117][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 933.758611][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 933.791871][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 933.808705][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.818638][ T5917] usb 3-1: Product: syz [ 933.824478][ T5917] usb 3-1: Manufacturer: syz [ 933.824499][ T5917] usb 3-1: SerialNumber: syz [ 933.892487][ T5917] usb 3-1: config 0 descriptor?? [ 933.928885][ T5917] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 933.944063][ T5917] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 934.529700][ T5917] em28xx 3-1:0.0: chip ID is em2765 [ 934.589122][T20262] loop2: detected capacity change from 0 to 7 [ 934.596957][T20262] Dev loop2: unable to read RDB block 7 [ 934.603105][T20262] loop2: unable to read partition table [ 934.610381][T20262] loop2: partition table beyond EOD, truncated [ 934.620467][T20262] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 934.755987][T20266] loop2: detected capacity change from 0 to 7 [ 934.757805][ T8087] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 934.777348][T20266] Dev loop2: unable to read RDB block 7 [ 934.783127][T20266] loop2: AHDI p1 p2 p3 [ 934.787368][T20266] loop2: partition table partially beyond EOD, truncated [ 934.794752][T20266] loop2: p1 start 1601398130 is beyond EOD, truncated [ 934.801760][T20266] loop2: p2 start 1702059890 is beyond EOD, truncated [ 934.926793][ T8087] usb 4-1: Using ep0 maxpacket: 16 [ 934.938408][ T8087] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 934.947472][ T8087] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 934.958663][ T8087] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 934.971771][ T8087] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 934.981142][ T8087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.992422][ T8087] usb 4-1: config 0 descriptor?? [ 935.001626][ T8087] pxrc 4-1:0.0: Could not find endpoint [ 935.008730][ T8087] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 935.138442][ T5917] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 935.152725][ T5917] em28xx 3-1:0.0: board has no eeprom [ 935.207230][T20258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4036'. [ 935.216697][T20258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4036'. [ 935.225107][ T5917] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 935.233759][ T5917] em28xx 3-1:0.0: dvb set to bulk mode. [ 935.239727][T14928] em28xx 3-1:0.0: Binding DVB extension [ 935.250351][ T5917] usb 3-1: USB disconnect, device number 48 [ 935.251372][T20258] ip6gretap0: entered promiscuous mode [ 935.260339][ T5917] em28xx 3-1:0.0: Disconnecting em28xx [ 935.279548][T20258] debugfs: 'hsr1' already exists in 'hsr' [ 935.287371][T20258] Cannot create hsr debugfs directory [ 935.311140][ T8087] usb 4-1: USB disconnect, device number 32 [ 935.332601][T14927] [ 935.334940][T14927] ============================================ [ 935.341073][T14927] WARNING: possible recursive locking detected [ 935.347213][T14927] syzkaller #0 Tainted: G L [ 935.353171][T14927] -------------------------------------------- [ 935.359304][T14927] kworker/0:1/14927 is trying to acquire lock: [ 935.365437][T14927] ffff8880391c4fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 935.374486][T14927] [ 935.374486][T14927] but task is already holding lock: [ 935.381873][T14927] ffff88807b3e0fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 935.390901][T14927] [ 935.390901][T14927] other info that might help us debug this: [ 935.399027][T14927] Possible unsafe locking scenario: [ 935.399027][T14927] [ 935.406455][T14927] CPU0 [ 935.409741][T14927] ---- [ 935.412999][T14927] lock(&hsr->seqnr_lock); [ 935.417481][T14927] lock(&hsr->seqnr_lock); [ 935.421961][T14927] [ 935.421961][T14927] *** DEADLOCK *** [ 935.421961][T14927] [ 935.430081][T14927] May be due to missing lock nesting notation [ 935.430081][T14927] [ 935.438381][T14927] 13 locks held by kworker/0:1/14927: [ 935.443727][T14927] #0: ffff888031617d40 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 935.454405][T14927] #1: ffffc90002fb7c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 935.467515][T14927] #2: ffff888056b58530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 935.476713][T14927] #3: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 935.485683][ T8091] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 935.485973][T14927] #4: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 935.502539][T14927] #5: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 935.512433][T14927] #6: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 935.521552][T14927] #7: ffff88807b3e0fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 935.531011][T14927] #8: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 935.540470][T14927] #9: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 935.550383][T14927] #10: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1990 [ 935.559684][T14927] #11: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 935.569663][T14927] #12: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 935.578952][T14927] [ 935.578952][T14927] stack backtrace: [ 935.584822][T14927] CPU: 0 UID: 0 PID: 14927 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 935.584838][T14927] Tainted: [L]=SOFTLOCKUP [ 935.584842][T14927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 935.584851][T14927] Workqueue: mld mld_ifc_work [ 935.584866][T14927] Call Trace: [ 935.584872][T14927] [ 935.584878][T14927] dump_stack_lvl+0xe8/0x150 [ 935.584895][T14927] print_deadlock_bug+0x279/0x290 [ 935.584907][T14927] __lock_acquire+0x253f/0x2cf0 [ 935.584928][T14927] ? __lock_acquire+0x6b5/0x2cf0 [ 935.584943][T14927] ? skb_network_protocol+0x23d/0x400 [ 935.584955][T14927] ? hsr_dev_xmit+0x237/0x360 [ 935.584975][T14927] lock_acquire+0x106/0x350 [ 935.584996][T14927] ? hsr_dev_xmit+0x237/0x360 [ 935.585018][T14927] ? __pfx_netif_skb_features+0x10/0x10 [ 935.585033][T14927] ? lock_acquire+0x106/0x350 [ 935.585055][T14927] ? hsr_dev_xmit+0x237/0x360 [ 935.585075][T14927] _raw_spin_lock_bh+0x36/0x50 [ 935.585090][T14927] ? hsr_dev_xmit+0x237/0x360 [ 935.585112][T14927] hsr_dev_xmit+0x237/0x360 [ 935.585131][T14927] ? hsr_dev_xmit+0x2d/0x360 [ 935.585151][T14927] dev_hard_start_xmit+0x2cd/0x830 [ 935.585169][T14927] __dev_queue_xmit+0x14d9/0x3950 [ 935.585186][T14927] ? __dev_queue_xmit+0x2b6/0x3950 [ 935.585201][T14927] ? ebt_do_table+0x2665/0x2830 [ 935.585216][T14927] ? __local_bh_enable_ip+0xd0/0x130 [ 935.585238][T14927] ? ebt_do_table+0x2665/0x2830 [ 935.585257][T14927] ? __pfx___dev_queue_xmit+0x10/0x10 [ 935.585281][T14927] ? br_nf_post_routing+0x219/0xfe0 [ 935.585297][T14927] ? lock_acquire+0x106/0x350 [ 935.585322][T14927] br_dev_queue_push_xmit+0x370/0x4b0 [ 935.585345][T14927] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 935.585369][T14927] NF_HOOK+0x360/0x3f0 [ 935.585392][T14927] ? NF_HOOK+0xa2/0x3f0 [ 935.585413][T14927] ? __pfx_NF_HOOK+0x10/0x10 [ 935.585433][T14927] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 935.585453][T14927] ? lock_acquire+0x106/0x350 [ 935.585479][T14927] br_forward_finish+0xd3/0x130 [ 935.585500][T14927] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 935.585520][T14927] ? __pfx_br_forward_finish+0x10/0x10 [ 935.585544][T14927] NF_HOOK+0x360/0x3f0 [ 935.585567][T14927] ? NF_HOOK+0xa2/0x3f0 [ 935.585587][T14927] ? __pfx_NF_HOOK+0x10/0x10 [ 935.585609][T14927] ? __pfx_br_forward_finish+0x10/0x10 [ 935.585633][T14927] ? __skb_clone+0x483/0x7a0 [ 935.585647][T14927] ? br_handle_vlan+0x61/0x530 [ 935.585668][T14927] __br_forward+0x397/0x540 [ 935.585689][T14927] ? __pfx_br_forward_finish+0x10/0x10 [ 935.585713][T14927] br_flood+0x6ee/0xb80 [ 935.585738][T14927] ? br_dev_xmit+0x193/0x1990 [ 935.585757][T14927] br_dev_xmit+0x12bd/0x1990 [ 935.585775][T14927] ? br_dev_xmit+0x193/0x1990 [ 935.585794][T14927] ? __pfx_br_dev_xmit+0x10/0x10 [ 935.585814][T14927] ? netif_set_real_num_tx_queues+0x2f0/0xb10 [ 935.585844][T14927] dev_hard_start_xmit+0x2cd/0x830 [ 935.585879][T14927] __dev_queue_xmit+0x14d9/0x3950 [ 935.585899][T14927] ? __dev_queue_xmit+0x2b6/0x3950 [ 935.585915][T14927] ? trace_kmem_cache_alloc+0x29/0xe0 [ 935.585940][T14927] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 935.585959][T14927] ? __pfx___dev_queue_xmit+0x10/0x10 [ 935.585975][T14927] ? __asan_memcpy+0x40/0x70 [ 935.585991][T14927] ? __pskb_copy_fclone+0xb1a/0x1120 [ 935.586009][T14927] ? __asan_memcpy+0x40/0x70 [ 935.586025][T14927] ? __pskb_copy_fclone+0xb1a/0x1120 [ 935.586044][T14927] ? hsr_create_tagged_frame+0x500/0xe10 [ 935.586062][T14927] ? __asan_memmove+0x40/0x70 [ 935.586078][T14927] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 935.586094][T14927] ? hsr_addr_subst_dest+0x30d/0xa90 [ 935.586119][T14927] hsr_forward_skb+0x167e/0x2a80 [ 935.586137][T14927] ? ret_from_fork_asm+0x1a/0x30 [ 935.586154][T14927] ? hsr_forward_skb+0xbb/0x2a80 [ 935.586170][T14927] ? __pfx_hsr_forward_skb+0x10/0x10 [ 935.586186][T14927] ? do_raw_spin_lock+0x12b/0x2f0 [ 935.586207][T14927] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 935.586227][T14927] ? __pfx_netif_skb_features+0x10/0x10 [ 935.586244][T14927] ? hsr_dev_xmit+0x237/0x360 [ 935.586266][T14927] hsr_dev_xmit+0x242/0x360 [ 935.586287][T14927] ? hsr_dev_xmit+0x2d/0x360 [ 935.586308][T14927] dev_hard_start_xmit+0x2cd/0x830 [ 935.586326][T14927] __dev_queue_xmit+0x14d9/0x3950 [ 935.586342][T14927] ? __dev_queue_xmit+0x2b6/0x3950 [ 935.586358][T14927] ? ___neigh_create+0x1c5f/0x2250 [ 935.586382][T14927] ? __pfx___dev_queue_xmit+0x10/0x10 [ 935.586399][T14927] ? neigh_connected_output+0x1ea/0x460 [ 935.586421][T14927] ? eth_header+0x11b/0x200 [ 935.586438][T14927] ? __asan_memcpy+0x40/0x70 [ 935.586455][T14927] ? eth_header+0x11b/0x200 [ 935.586470][T14927] ? __pfx_eth_header+0x10/0x10 [ 935.586485][T14927] ? neigh_connected_output+0x3b6/0x460 [ 935.586509][T14927] ? ip6_output+0x126/0x550 [ 935.586530][T14927] ip6_output+0x340/0x550 [ 935.586550][T14927] ? __pfx_ip6_output+0x10/0x10 [ 935.586569][T14927] NF_HOOK+0x177/0x4f0 [ 935.586590][T14927] ? __pfx_NF_HOOK+0x10/0x10 [ 935.586611][T14927] ? __pfx_dst_output+0x10/0x10 [ 935.586630][T14927] ? lockdep_hardirqs_on+0x7a/0x110 [ 935.586648][T14927] ? __local_bh_enable_ip+0xd0/0x130 [ 935.586672][T14927] ? icmp6_dst_alloc+0x3a6/0x440 [ 935.586695][T14927] mld_sendpack+0x8b4/0xe40 [ 935.586722][T14927] ? mld_sendpack+0x213/0xe40 [ 935.586742][T14927] ? __pfx_mld_sendpack+0x10/0x10 [ 935.586768][T14927] mld_ifc_work+0x835/0xe70 [ 935.586790][T14927] ? process_scheduled_works+0xa70/0x1860 [ 935.586814][T14927] process_scheduled_works+0xb5d/0x1860 [ 935.586848][T14927] ? __pfx_process_scheduled_works+0x10/0x10 [ 935.586873][T14927] ? assign_work+0x3d5/0x5e0 [ 935.586896][T14927] worker_thread+0xa53/0xfc0 [ 935.586933][T14927] kthread+0x388/0x470 [ 935.586950][T14927] ? __pfx_worker_thread+0x10/0x10 [ 935.586971][T14927] ? __pfx_kthread+0x10/0x10 [ 935.586986][T14927] ret_from_fork+0x514/0xb70 [ 935.587010][T14927] ? __pfx_ret_from_fork+0x10/0x10 [ 935.587031][T14927] ? __switch_to+0xc79/0x1410 [ 935.587050][T14927] ? __pfx_kthread+0x10/0x10 [ 935.587066][T14927] ret_from_fork_asm+0x1a/0x30 [ 935.587085][T14927] [ 936.172222][T14928] em28xx 3-1:0.0: Registering input extension [ 936.187444][ T5917] em28xx 3-1:0.0: Closing input extension [ 936.212903][ T5917] em28xx 3-1:0.0: Freeing device [ 936.233783][T20224] PM: hibernation: Basic memory bitmaps freed [ 936.269550][ T5210] Dev loop2: unable to read RDB block 7 [ 936.276067][ T5210] loop2: AHDI p1 p2 p3 [ 936.281725][ T5210] loop2: partition table partially beyond EOD, truncated [ 936.292366][ T5210] loop2: p1 start 1601398130 is beyond EOD, truncated [ 936.299289][ T5210] loop2: p2 start 1702059890 is beyond EOD, truncated [ 936.356942][ T8091] usb 5-1: Using ep0 maxpacket: 16 [ 936.365397][ T8091] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 936.374465][ T8091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.383175][ T8091] usb 5-1: Product: syz [ 936.387458][ T8091] usb 5-1: Manufacturer: syz [ 936.393046][ T8091] usb 5-1: SerialNumber: syz [ 936.655888][ T8091] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 936.667137][ T8091] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 936.678002][ T8091] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 936.686683][ T8091] usb 5-1: media controller created [ 936.695811][ T8091] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 936.710425][ T8091] zl10353_read_register: readreg error (reg=127, ret==-71) [ 936.728485][ T8091] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 936.739569][ T8091] usb 5-1: USB disconnect, device number 98