last executing test programs: 24m13.586181522s ago: executing program 2 (id=316): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x10, 0x3f8, 0x0, 0x1}, 0x37}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) epoll_create1(0x0) syz_io_uring_setup(0x1eb1, &(0x7f0000000480)={0x0, 0x100000, 0x1, 0x1, 0x24f}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x5}, 0x0, 0x0) 24m11.700547714s ago: executing program 2 (id=322): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4000009e}]}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400002b26a74168491edcd237a824a0ac2bc7003a0001d4f3933a0ad7"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000100)={0x3, 0xc, {0x57, 0x8000, 0x10, {0x1ff, 0x5}, {0x10, 0x3}, @ramp={0xff, 0xd, {0x45, 0x5d, 0x0, 0x5}}}, {0x53, 0x1, 0x0, {0x4, 0x400}, {0x8000, 0xffff}, @const={0x5d1, {0x2, 0x4901, 0xa, 0x5e87}}}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x1000) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r4, 0xe6}, 0x8) 24m11.477602704s ago: executing program 2 (id=323): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/consoles\x00', 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) eventfd2(0x2, 0x0) (async) syz_io_uring_setup(0x117, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3a6}, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d}, 0x14}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=0x0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) r7 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r7, &(0x7f0000000000), 0xd4ba103) (async) ioctl$TCSBRKP(r7, 0x5425, 0x100) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r5, 0x439, 0xfffffffd, 0x20000, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc463fec5ae11600b}, 0x4004000) 24m11.208487909s ago: executing program 2 (id=324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0xfffffffd, 0xfffffffffffffffd, 0x55, 0x8, 0x1000006, 0x4}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2, 0x1) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10250c0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="865f69643d0000000000", @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000200,default_permissions,smackfsdef=,euid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x6000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2712, 0x0, &(0x7f0000000400)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="31000000bf589f8024001280110001006272651fe47d97e09e5f736ce18265000000e7000c4465809f10", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b80)={0x104, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000680)={@flat=@handle={0x73682a85, 0x100}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/141, 0x8d, 0x1, 0x29}, @flat=@binder={0x73622a85, 0xb, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000780)={@flat, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/121, 0x79, 0x2, 0x3d}, @fda={0x66646185, 0x5, 0x1, 0xd}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x40}, @clear_death, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x1, 0x0, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000000800)=""/173, 0xad, 0x0, 0x30}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000940)={0x0, 0x20, 0x48}}, 0x40}, @enter_looper], 0x88, 0x0, &(0x7f0000000ac0)="c6741ec9fc361c147480ee9ea63c784ba271ca3fdde86af84abc4a32c3491deb0216b8d3312a7ba91af2d93d576f20f08062018521b381347bffdc3615a35fde1921322012e0f3041bc522e3630c114de3a2adbc549b7fca5634cee6a727b185ffcca78b3cbda55021ec25d3e12ceacfe828dbd4f82973467234c297a4d2a7b5995a208aae523f05"}) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109023800010000000009040000037105"], 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000500)={{0x9, 0x10}, 'port0\x00', 0x9, 0x10, 0x4, 0x6, 0x3, 0x5, 0x8001}) r9 = dup(r8) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 24m7.572990693s ago: executing program 2 (id=344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 24m6.981002459s ago: executing program 2 (id=348): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a000000009c1100fe8000000000004000000000000000aafe8000000000000000000000000000aa4e1d4e20"], 0x0) 24m6.208998001s ago: executing program 32 (id=348): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a000000009c1100fe8000000000004000000000000000aafe8000000000000000000000000000aa4e1d4e20"], 0x0) 8.604771312s ago: executing program 3 (id=8152): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, 0x0) socket(0xa, 0x800, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000001, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0x98, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x6c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x54, 0x7, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x81}, 0x800) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) listen(r10, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x0, 0x3c5e, 0x1, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0xfd, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x100071, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x7ff, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x21, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0x5, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x2, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x4800, 0x6, 0x7, 0x8040, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x7, 0x9, 0x6, 0x9, 0x1, 0x7, 0x8, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x8, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0x1000bf, 0x2, 0x3ff, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x80009, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x4, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x4, 0x10080, 0x5, 0x8, 0x30b1d694, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 7.000564893s ago: executing program 5 (id=8158): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x40010, r0, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x400440) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000028000480240001800b000100"], 0x7c}, 0x1, 0x0, 0xfff5, 0x4000050}, 0x24044010) 6.8804404s ago: executing program 5 (id=8159): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x140, 0x2b8, 0xb0000010, 0x140, 0x5c8f0200, 0x238, 0x3a8, 0x3a8, 0x238, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x700, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@addrtype1={{0x28}, {0xcd0, 0x108, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x400, 0x1c, 0xfffffff9, 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x43, 0x1}}}, 0x49) sendmsg$tipc(r1, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000080)={0x0, 0x18}, 0x19}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000060a0b04000000000000000002000000300004802c0001800a00010071756575650000001c0002800600024000060000060001400003000006000340240000000900010073797a30000000000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x400c5}, 0x40) 6.629060843s ago: executing program 5 (id=8161): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000280)={0x50, 0x0, 0xd, {0x7, 0x2b, 0x0, 0x800000, 0x0, 0x6, 0xe9f, 0xffffffff, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000000010104000000000000000002000006240001801400018008000100e02f000108000200ac1414000c00028005000100000000002c0002801400018008000100e000000108000200e00000010c00028005000100006309d030955796f10000000800074000000000040006"], 0x70}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000300800000000000000400000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001000000000000002b000000f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = open_tree(r1, &(0x7f0000000300)='./cgroup\x00', 0x89901) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x100) move_mount(r9, 0x0, r10, 0x0, 0x46) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x100003, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {0xfff3, 0xfff9}, {0xd}}}, 0x24}}, 0x4) r12 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r12, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x5, 0x2}, 0xff19, 0x6, 0x1, 0x0, 0x1, 0x101, 0x0}) clock_gettime(0x0, 0x0) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r13, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000020000, {0x7, 0x2b, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.348904877s ago: executing program 3 (id=8164): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00\x00\x00 \x00', 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000180)="cf", 0x1}], 0x3, 0x0, 0x0, 0x800}], 0x1, 0x40001) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYRESDEC, @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e0010300052406000005240000000d240f"], 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x483, 0x0, 0x7}]}) r6 = syz_usb_connect$uac1(0x5, 0xcf, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x120, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0x5, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x26}, [@feature_unit={0x11, 0x24, 0x6, 0x6, 0x4, 0x5, [0xa, 0x6, 0x1, 0x3, 0x8]}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0xb, 0x4, "be239624"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x5, 0xfd, "8f2c", 'V'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x7f, 0xd, {0x7, 0x25, 0x1, 0x1c, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0xfff5, 0x4, "86dd90ba21b0645c"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x40, 0x2, 0x35, 0xa6}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0x9, 'b\\'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x5, 0x5, 0xc}, @as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x30, 0x2, {0x7, 0x25, 0x1, 0x8, 0xa5, 0x8}}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x2, 0xc5, 0xfa, 0x10, 0x1}, 0x266, &(0x7f0000000480)={0x5, 0xf, 0x266, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xea, "2b22f8f5961ce9ff5642001046f1ac4f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0xf, 0x37a}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x5, 0xb}, @generic={0xc6, 0x10, 0xa, "44ba818fa4ddc50e7988696618b215c1bc397afa86ff1c0543406794370ed79d9273cfac22ddda8598c6ad1ce4fa76851ede36db49a8e378dcc49bdc5173a6d1e5e70e9bef0b310b656ed614c7445db41b5f78520390cc62dc3b6c527e138bd236c2f2814b30d5a4a04939e1984e1dd1bef7ab68a91b141bfd508093e17056fe76364c9a82e818de8b38df115284722d4f6df99ddcb98f8d1b7062c1443d810c9965b2d696ac718d970210c60100f4970aa18a7f82719fa7b4fc73928085043bb2437d"}, @generic={0x91, 0x10, 0x4, "85bb7754e821c997ba0e91274e903d9b462232c6cbcab6c6c04d418deb1f2fe13732557dc53346b7921dc07cbb1a7bef3d94c25134e6b34b58b4bb9b7a5c02ee7cf03f7ba39e8d4163ff994587370f50f9e3d8b09f49d6efc6b06c6afe0e7a818a23c6d8eb3a9e6f2ef5b7ae37d51c8f2f7e8f5bab844f2b15aedcffcdf2602ae40ed851368c069873f8f4783d38"}, @generic={0xe5, 0x10, 0x2, "a18165a7f1c22afdec854fe7cdf4a08b6770aad4b857b5829a7b0145c1b1bd58290bfa1c07ec334a9fb2dc717969e372cd4bb9f64682ad0da03b073c37ad481cab9458abdcb56e5227cd0d76e195e5206d8c502176b286e8580f28c5f3ce5dcfb487480d2fc7a2ae59aa27e9bb31a24473ba9099819196577d8e90560f22198819c2abd88834244ae5897b410e93db9128a4cd309fa7282c234ab9e78bffd8b7ac90fc2a49e375b1b098d93dea0552452da5f7a7b7f65009462ff7d2c31ac683a7277f26477525245621c59c187ded2062bafd6b79d55060dc43a398a92d7e64c87a"}]}, 0x1, [{0xb5, &(0x7f0000000140)=@string={0xb5, 0x3, "dfeed46adb7de9b7e1c375ba61d327abae9c331d4771f795f10d953c50be02f1c5a13da59f84988df03b9c0765c4f7056b6481bc5dbe6a87135b149288ae3ef07b2fb660fcbc46d09b8e0454a30080c8f8e57b0350174b4ecb80683bc52751e81ce4b5034c9aebc8a794fe97e9783f91a9bf7a4c2102b3cca813eed881f61a52d02139a776e2c58d547b1c3164214bc5f22eec8b983fbaa7d8910d3c78b2601cce378fe114c93d728782b69f6467165094ada6"}}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a00001000028009001480040006"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$uac1(r6, &(0x7f0000000380)={0x14, &(0x7f0000000240)={0x0, 0x1, 0xa2, {0xa2, 0x31, "db230a79422b126dcaf098712543185e4125b795c3bfe5d00f650486d3cbea6f26ab3c8f1b6135114e950663bf9c43f862e347a4e622073ff864f480411375f9166e61c41b5a98bd6027bb51ce2c692d2cb2d06b2c1b2976fc4e83ad9c19245cc2159623337194d696453901159b207d4f23e163df024c74d0c20580ecefa48336aaa4268389094a37e6130c0a5f35ef5767ca20c6a4b330a3cd722923ca8adb"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, &(0x7f0000000900)={0x44, &(0x7f0000000700)={0x0, 0x9, 0x9d, "6a29faa689aca33c7d2e0f611916a23f3318bec391d9ab9cec4c237e69289f1db75f75393850559665a50b5e0501232c74244b0382fb606ebd0a3fcc18c212591e1cda627b19d5687761ba1daf4ea93b9ace951fb02c2815973b65af3f8738f2be018b3842356d9ef11b4c2cd48fe46a2b4f54596662a5bc82156322fa9140335552c63abd4572e0ebed3ade518b3e757048b452a6e6219118cafbfa01"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x82}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000007c0)={0x20, 0x81, 0x1, "f7"}, &(0x7f0000000980)={0x20, 0x82, 0x2, "e16c"}, &(0x7f0000000840)={0x20, 0x83, 0x3, "93ebe7"}, &(0x7f0000000880)={0x20, 0x84, 0x2, '\x00\x00'}, &(0x7f00000008c0)={0x20, 0x85, 0x3}}) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0}, 0x0) 6.158285192s ago: executing program 5 (id=8167): semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000000000009050a"], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x140d, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x4) read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x2008040) pread64(r3, 0x0, 0x0, 0xadc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800cef010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8], 0xb4}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') writev(r10, &(0x7f0000000340)=[{0x0, 0xff0f}, {&(0x7f0000000080)="2d0360c642", 0x5}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) 4.918458047s ago: executing program 1 (id=8170): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="ff0700000000000002004e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000100000000000000"], 0x90) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000084002, 0x0) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x6, "ff0f000000000000f5a72d866b638cb3a49cf0ffdefe00"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) r7 = inotify_init1(0x80000) fremovexattr(r7, 0x0) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000540)=0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x78}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000440)={[0x74b6, 0xe1, 0xfffffffffffffffa, 0x7, 0x2, 0x8, 0x8, 0x7ff, 0x10001, 0xfffffffffffffff3, 0x0, 0x8, 0xffffffffffffff0e, 0x0, 0x2, 0xa], 0x6000, 0x10200}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000080)=@arm64={0x10, 0x2, 0xff, '\x00', 0x400006}) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r8, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 4.633074768s ago: executing program 1 (id=8172): syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) (async) r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10007}, [@FRA_SRC={0x8, 0x2, @rand_addr=0x64010101}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10007}, [@FRA_SRC={0x8, 0x2, @rand_addr=0x64010101}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000180)={0x40, 0xc, 0x2, "8504"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x3) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f0000000040)={0x0, 0xd, 0x55, {0x55, 0x8, "f8cab2661fb799a7a0e47c02b01608ee70f6082180f3e749d83549f26cbe13db41840fcfa3366caaf570f367b301957ed22aabc92c2cfaf80c8f8041731fab72018079a3ff94f53d558dd7e811a1610d7c9f5c"}}, 0x0}, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x82, 0x2, "bd18"}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x85, 0x3, '\n^O'}}) 3.569767483s ago: executing program 4 (id=8182): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.319593232s ago: executing program 4 (id=8186): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0x1014e2, 0x4, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], 0x0}, 0x94) unshare(0x28000600) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000005001000050000000500000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="d108ffeb000000000000000000000000000000000000000000000000ae4d3cbe6e5336140a55f541bdba25de3e003f2b8094fe57f05b11b86469e361eabe0abb2a362fa37cf54e15f5b80fbcde9d017f4055d96f5a0b0f3b0ad73f24bb6211444bcb5a888ecc59de3194ada4e4578be4f9f0ad9b3f6628a73eaee36a6bd4baa4abe9c8ea1c3b3cd4799df3c683d2"], 0x50) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x4007, 0x10, 0x6, 0xa0, 0x1}) read$midi(r0, &(0x7f0000000380)=""/153, 0x99) unshare(0x6020400) r4 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x88) openat$cgroup_int(r5, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x200006, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1ff, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x8000, 0x1, 0x8, 0x4c74, 0x80000000, 0xcf15c0f, 0x4, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x8, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8800012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x4, 0x30, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x8001, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0xfffffffa, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0xc, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x6, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x7, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000005, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x2, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x4, 0x6, 0x2, 0x5, 0xe7, 0x6, 0x18, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0xffff, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xb1, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x41, 0x6c19, 0x0, 0x80004, 0x5, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) bind$alg(0xffffffffffffffff, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) 3.184501903s ago: executing program 0 (id=8187): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x8, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)='\x00 I\x00\x00\x00', 0x0, 0x7, 0x3, 0x2, 0x0}) 3.183577901s ago: executing program 3 (id=8188): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000100001002cbd70002000000000000000", @ANYRES32=0x0, @ANYBLOB="13019757c0200000140003006e657464657673696d300000000000000500110004000000200016801c00018018000c"], 0x5c}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x3b) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_open_procfs(0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040)=0x800000a, 0x34) pselect6(0x40, &(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1c, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) r4 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r4, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r4) inotify_init() r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@deltaction={0x48, 0x18, 0x1, 0x70bd29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2.765302792s ago: executing program 0 (id=8189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xf, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004865}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d00000000000100000000000000014100a1ff1c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.336658534s ago: executing program 5 (id=8190): syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) socket(0x10, 0x803, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000000012", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.140985398s ago: executing program 4 (id=8191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42bfffe800000000033fc0000000000000010ff020000000000000000000000000001", @ANYRES64], 0x340a) 2.057106624s ago: executing program 0 (id=8192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB], 0x38}}, 0x0) 1.970121727s ago: executing program 4 (id=8193): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b92010024001280090001f0626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 1.888754572s ago: executing program 3 (id=8194): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000380)={r1, &(0x7f00000001c0)='\x00', 0x90c92591319b6534, &(0x7f0000000200)={@_ha_fsid={[0x401, 0x5]}, {0xa547, 0x2, 0xe, 0x8}}, 0xffffffff, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000300)=0x8000}) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) (async) r5 = syz_io_uring_setup(0x7a6, &(0x7f0000000140)={0x0, 0x5885, 0x2000, 0x200000, 0x3ba}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) syz_open_pts(r8, 0x10000) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) readv(r9, &(0x7f0000002240)=[{&(0x7f00000010c0)=""/110, 0x6e}], 0x1) (async) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0x4000}, 0xc) (async) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) (async) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000100)=0x3ff, 0x4) recvmsg(r0, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000000000)=""/195, 0xc3}, {0x0}], 0x2}, 0x2) 1.857961528s ago: executing program 0 (id=8195): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.809137772s ago: executing program 4 (id=8196): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f000034d000/0x3000)=nil, 0x3000, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x3e, &(0x7f00000002c0)) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES8=r3], 0x1c}}, 0x4004050) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000034) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x30) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, &(0x7f0000000300)='skcipher\x00', 0x0, 0x0, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x0, &(0x7f0000000e00)}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 1.786138127s ago: executing program 0 (id=8197): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x4000000, 0x0, 0x240448d5}, 0x8000002) 1.754229832s ago: executing program 3 (id=8198): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f00000006c0)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000000000000000000042fe800000000000000001a000000000aa4e200e22"], 0x0) 1.448044946s ago: executing program 3 (id=8199): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380)=0x0) sched_setscheduler(r3, 0x5, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r7, 0x0, 0x40008) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000180)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r9, 0x0, 0x0, 0x2030, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 1.447882935s ago: executing program 1 (id=8200): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000002000001ffffffff0000000000000000000000004e210000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) 1.381093168s ago: executing program 0 (id=8201): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0x1014e2, 0x4, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], 0x0}, 0x94) unshare(0x28000600) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000005001000050000000500000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="d108ffeb000000000000000000000000000000000000000000000000ae4d3cbe6e5336140a55f541bdba25de3e003f2b8094fe57f05b11b86469e361eabe0abb2a362fa37cf54e15f5b80fbcde9d017f4055d96f5a0b0f3b0ad73f24bb6211444bcb5a888ecc59de3194ada4e4578be4f9f0ad9b3f6628a73eaee36a6bd4baa4abe9c8ea1c3b3cd4799df3c683d2"], 0x50) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x4007, 0x10, 0x6, 0xa0, 0x1}) read$midi(r0, &(0x7f0000000380)=""/153, 0x99) unshare(0x6020400) r4 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x88) openat$cgroup_int(r5, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x200006, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1ff, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x8000, 0x1, 0x8, 0x4c74, 0x80000000, 0xcf15c0f, 0x4, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x8, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8800012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x4, 0x30, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x8001, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0xfffffffa, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0xc, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x6, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x7, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000005, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x2, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x4, 0x6, 0x2, 0x5, 0xe7, 0x6, 0x18, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0xffff, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xb1, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x41, 0x6c19, 0x0, 0x80004, 0x5, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) bind$alg(0xffffffffffffffff, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) 1.380904642s ago: executing program 1 (id=8202): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4001000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000020011a80400002803c0001800800210000000000080018"], 0x140}, 0x1, 0xdc00}, 0x0) 1.360526659s ago: executing program 1 (id=8203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x40000000000035, 0xfff, 0x0, 0x40000000000180, 0xffffffffffffffff, 0x80000000, 0x0, 0x9, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x3, 0x4, 0x8], 0x25000, 0x344}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000300)="36400f0f1d45310000bfc74424002db81497c744240200800000c7442406000000000f011c240f01d1c482fd3293000000000f32420f09490fc7988bb5e6dbc40205aeeac461fc52ddc441855d21c481f950d8"}], 0x1, 0x0, 0x0, 0xffffffffffffffd6) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 187.033047ms ago: executing program 5 (id=8204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) close(0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@delchain={0x2fac, 0x65, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xb}, {0x4, 0x8}, {0xfff3, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1534, 0x2, [@TCA_BPF_ACT={0x14e0, 0x1, [@m_sample={0x9c, 0x7, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xffffffff}]}, {0x5e, 0x6, "64ce0a538e6689ed2563a0acda992ac35162cc802848d0cf44a53585b37fda5e4f8646592a9931e7b78b66c9fcce30879767f84ec1b0f4a64a13950b8344eab190a4d029f0e756d2b2a7cfb409e0b7141cbfcab11e0d86c4306c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0xd0, 0x12, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1ff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x133}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}]}, {0x6b, 0x6, "557ebe0379500e590232511886b0ad49928a403629dd2ae72c780180f62e43ed451f9e49a39434da0681ff1d9c4e2e2df9f99a95c86c66d8bf6e8bf9cb73cbc02b1cc63b7cd6e020e3a3652a709fdbf21dc7a41453038282fc547d9122ab7b9587b31d923b3fc7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x16c, 0x15, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffb36, 0x6, 0x3, 0x401, 0x5}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7fffffff, 0x0, 0xffff, 0x40}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x6e6e3f93, 0x3, 0xfffffff8, 0x1}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x4, 0x6, 0x3, 0x1000}, 0x6468fa05d92813c4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xb, 0x8, 0x5, 0x6}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8, 0x3, 0xffff2c0a}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0x20000000, 0x4, 0x1000}, 0x2, r3}}]}, {0x5e, 0x6, "4a8800d60ebcfdd30c67d055ff705c10816740a3fce585c26ba4e3e78af484f9aee91f99bf2fe65a5b66d807395c70b49b1b07b44330548062a161f75845cff23909d1fde59aa1afcd7a13f9dc50f6b22177eb4f08d8191459d7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0xa8, 0x4, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0xfffff567, 0x4, 0x2}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xa8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x4, 0x20000000, 0x10d, 0x5}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xc}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffff}]}, {0xb, 0x6, "6b5ae93d8b2e36"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xf4, 0xe, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7fff, 0x200, 0x8, 0xf, 0x10000}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0xaed0, 0x3, 0x8001, 0xd179}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x5b, 0x6, "d91438d523fd0e5803e9e5c76754573e2962c1c6cf76376d6388ddee7a429f4ae82f2d5081c1b16953f838a67bdd26124bfe32da909e9898824156214a5cd3f0f8c5e0a204c46673a369734c0b17f725b6bf2f4d660668"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x1068, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xfff2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xfff0}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0xfffffff3, 0x2, 0x2, 0x9}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x4, 0xc, 0xe, 0xfffffff2}, {0x646c, 0xc6, 0x0, 0x515}]}}, @TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8}]}}, @filter_kind_options=@f_flower={{0xb}, {0x21c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e20}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0xe}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_OPTS={0x1cc, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x69}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xe0}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x54, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xe4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x1d}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20000}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x18}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xc4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xe5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x937}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x186}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x11}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1ff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8008}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7fff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf}]}]}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff, 0xff, 0x0, 0xfa3ed902bb64e3e]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @filter_kind_options=@f_fw={{0x7}, {0x17f4, 0x2, [@TCA_FW_ACT={0x17dc, 0x4, [@m_csum={0x104, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x676, 0x7, 0x0, 0x200}, 0x5}}]}, {0xb9, 0x6, "a977ea761d16e4d6cb22366cf657722da5b258c4fd47090767d3f3050ad202f2f8f44eb3c4c3c73f6130160c1d970d1421487c1b7d5698ff0e321344f31f2acb8eb280f0972026ee97f15f318dc2a2cfc4718946f4fc06ead685425a2e70b96f3ecd568a53e99039f75893ebd749dd0af920e8a60e83bf6a14ae27ca388fbc7596e3ae2d2b6dda2c091a50451b603b5bd661d87a526d3e6f6b86d736fd512b2cc47b3949033d5dbc4ced0e55b610e493435925546f"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_csum={0x140, 0x4, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1021, 0x10000000, 0x200, 0x1}, 0x49}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x7, 0x80000000}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa0000000, 0x5, 0xffffffffeffffffd, 0x8, 0x1}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8000, 0x2, 0x0, 0x8001}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe84, 0x3, 0x5, 0x0, 0x8000}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x306, 0x20000000, 0x80, 0xf2f}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x10000000, 0x2, 0x101}, 0xc}}]}, {0x4f, 0x6, "5b8266f4cb6b8da61583b6887a97931ff438546afb4b4ca3d36edaea2fc45eca16cd12bca3d5fddef031c3600bb6c382fddc78ed3c283db05fb0752645fe048739cdf0789a993a8106886c"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x110, 0x3, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xc6, 0x6, "917321e72e8b8e5e47a8c00214274541d426aef1cb9eca7d33c47d287f9cb342ac00e41d66594f6698cf6a4eba1b787265ab551e458fc0676db4c3fa5dbdb3f11e2c0f212360d225963d83cac2e0300704c32cd4ed546bf6cbd1faaf1cb8322c82bda57f2dddf54c8a49263d83ed45ee49f82c8158d492208fe6c6f018c11344c784a174ab4939fd3ea571f842dc8c3404199046f02ddb7bc5647e59cd15412424955aa3c356e13059e524b315ed397933330a3d1acc23e47fc017edbc412140a3bd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x50, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xa}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffff7, 0x0, 0x20000000, 0xffffffff, 0xfffffff5}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_nat={0x200, 0x1c, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x1, 0xfb0, 0x1}, @empty, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9b51, 0x9, 0x8, 0x10, 0x2}, @multicast1, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0xacfb, 0xffffffffffffffff, 0x7}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0x2d, 0x10000000, 0x5, 0xd9c5}, @private=0xa010101, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5d53, 0x2, 0xffffffffffffffff, 0x7, 0x85ac}, @private=0xa010101, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x95, 0xffff, 0x1, 0x49, 0x9}, @multicast1, @local, 0xff000000, 0x1}}]}, {0xe6, 0x6, "ca60287ce216562d54d949b8702d50fa4e58c7c10613d11ef3183bec7c941b2d1aae99e6d16565e3bbaa61682e99c2f77282e3f912a11fddd5b352019412a45a9891ff8216a2fa00e760362f27753916ed5db789833d75385d2c2e72e3693a74818f0d5e7fe134af4c8d60353e4a6481659d1d9f3a67cf5efff7705e118b31f9872ad9247870c774d40d85c680560a6143031e052fcb41debf6aaf940abf354fae6d6c2af408814e7e2b16dc8db053daf609819bbcb0890ca0e4da4fe4c52b12cf4e640ea6db31562f34924c88d47486f4d739990384390358168f873115062bf126"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0xb0, 0x5, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}]}, {0x80, 0x6, "abcb2f45bebeff50d4c0609e6e55fa6970a51f54bd88830010565ba4df5c32523834e35025ab81365c0a9b64a62f2822e90aa30e6a8324b144893863afbd2766d32abe459f4b800d2da12312850a46c109dd615caf978daf8aa5bef029fd869f2e32332d0119980fa6bcb40139dc2ea1d6b31bf784f2f7ff5418e3a5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x1074, 0x8, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x80}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7f}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x40000}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x110, 0xc, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x14d5, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x9, 0x5, 0x9, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1794, 0xf7aef107dd72cfb7}}]}, {0xb3, 0x6, "d081a8fded59f21ec79323b1d7bb46f5d468eecc0f77ea8c6fd00cc303689c9137241d9741cdf18af168534e85990c1f64512930aaf850bde9e5f90f1f32089526d64240c2cd8c4c6f63c97f2dcf6f4400bab93b0144e84ea71e226cf61b4f9c2d08b510074ba995c87ddfb89683bcc68abeba30a225a78a93ab3ea82cd206a3bfd1ed2587227f00cea026752bbefc6efdac897b76804fa4ef326fe2da5e7bb16d4684e1783db240a7c41451c86f8f"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'virt_wifi0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0xf0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x2fac}}, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x2, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f0000000200)=0xfd, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 103.802403ms ago: executing program 1 (id=8205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB], 0x38}}, 0x0) 0s ago: executing program 4 (id=8206): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x10, 0x0, 0x1, 0x0, 0x0, 0x8, 0x30015}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010003904000000000000001571000000", @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214000200fc02"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): skipping remainder of the config [ 1525.527055][ T8259] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1525.556775][T24377] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1525.606090][T24377] usb 5-1: config 2 has no interface number 0 [ 1525.617919][T24377] usb 5-1: config 2 interface 207 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1525.676722][ T8259] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input127 [ 1525.685282][T24377] usb 5-1: config 2 interface 207 has no altsetting 0 [ 1525.699057][ T8259] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1525.719111][T24377] usb 5-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=95.7e [ 1525.725586][ T8259] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1525.728621][T24377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.743947][T24377] usb 5-1: Product: syz [ 1525.748228][T24377] usb 5-1: Manufacturer: syz [ 1525.752870][T24377] usb 5-1: SerialNumber: syz [ 1525.755629][T24340] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 1525.778095][ T8259] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1525.805530][ T8259] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1525.825472][ T8259] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1525.846050][ T8259] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1525.865378][ T8259] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1525.885496][ T8259] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1525.903990][ T1399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.905346][T24340] usb 2-1: device descriptor read/64, error -71 [ 1525.915488][ T1399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.921673][ T8259] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1525.940738][ T1402] Option '[¢ yò$ [ 1525.940738][ T1402] ÿø>ÖÚŽœáTkõ­­SÆ@SœV•ÿfhJ' to dns_resolver key: bad/missing value [ 1525.953990][ T1402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7664'. [ 1525.963650][ T8259] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1525.975165][ T24] usb 6-1: USB disconnect, device number 66 [ 1525.991015][T24377] qmi_wwan 5-1:2.207: skipping garbage [ 1525.991044][ T8259] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1526.007445][T24377] qmi_wwan 5-1:2.207: skipping garbage [ 1526.007621][ T8259] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1526.022465][T24377] qmi_wwan 5-1:2.207: bogus CDC Union: master=3, slave=0 [ 1526.044167][T24377] qmi_wwan 5-1:2.207: probe with driver qmi_wwan failed with error -22 [ 1526.050397][T24340] usb usb2-port1: attempt power cycle [ 1526.068467][ T8259] usb 4-1: USB disconnect, device number 49 [ 1526.109943][T24377] usb 5-1: USB disconnect, device number 40 [ 1526.119175][ T1404] loop5: detected capacity change from 0 to 7 [ 1526.148641][ T1404] Dev loop5: unable to read RDB block 7 [ 1526.159452][ T1404] loop5: unable to read partition table [ 1526.186329][ T1404] loop5: partition table beyond EOD, truncated [ 1526.194881][ T1404] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1526.415969][T24340] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 1526.446042][T24340] usb 2-1: device descriptor read/8, error -71 [ 1526.554249][ T24] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 1526.570859][ T24] hid-generic 0000:0000:0000.005F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1526.602667][ T1411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7672'. [ 1526.695337][T24340] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 1526.738612][T24340] usb 2-1: device descriptor read/8, error -71 [ 1526.750060][ T5148] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 1526.797041][ T24] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1526.855702][T24340] usb usb2-port1: unable to enumerate USB device [ 1526.981610][ T24] usb 6-1: config 0 has no interfaces? [ 1526.998811][T24371] usb 1-1: USB disconnect, device number 14 [ 1527.010241][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1527.027320][ T1423] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1527.129482][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1527.184356][ T24] usb 6-1: SerialNumber: syz [ 1527.206307][ T24] usb 6-1: config 0 descriptor?? [ 1527.376205][T24377] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1527.384199][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1527.535309][ T24] usb 4-1: device descriptor read/64, error -71 [ 1527.555267][T24377] usb 5-1: Using ep0 maxpacket: 8 [ 1527.812114][T24377] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.825805][T24377] usb 5-1: config 0 has no interfaces? [ 1527.838509][T24377] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1527.847700][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1527.855464][T24377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.864947][T24377] usb 5-1: Product: syz [ 1527.869946][T24377] usb 5-1: Manufacturer: syz [ 1527.875729][T24377] usb 5-1: SerialNumber: syz [ 1527.918685][T24377] usb 5-1: config 0 descriptor?? [ 1527.997207][ T24] usb 4-1: device descriptor read/64, error -71 [ 1528.105560][ T24] usb usb4-port1: attempt power cycle [ 1528.218081][ T1437] syzkaller1: entered promiscuous mode [ 1528.258395][ T1437] syzkaller1: entered allmulticast mode [ 1528.535303][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1528.587119][ T24] usb 4-1: device descriptor read/8, error -71 [ 1528.825432][ T24] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1528.846270][ T24] usb 4-1: device descriptor read/8, error -71 [ 1528.956098][ T24] usb usb4-port1: unable to enumerate USB device [ 1529.363248][ T1454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7688'. [ 1529.381115][ T1459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7689'. [ 1529.395701][ T1454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7688'. [ 1529.498899][ T24] usb 6-1: USB disconnect, device number 67 [ 1530.210018][T24340] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1530.415265][T24340] usb 1-1: Using ep0 maxpacket: 16 [ 1530.426050][T24340] usb 1-1: config 0 has no interfaces? [ 1530.439434][T24340] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1530.461181][T24340] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1530.552514][T24340] usb 1-1: Manufacturer: syz [ 1530.665831][T24340] usb 1-1: config 0 descriptor?? [ 1530.824316][T24371] usb 5-1: USB disconnect, device number 41 [ 1531.188564][ T1472] netlink: 'syz.0.7690': attribute type 1 has an invalid length. [ 1531.456097][ T1472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1531.515250][ T1474] bond0: (slave gretap1): making interface the new active one [ 1531.543623][ T1474] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1532.017481][ T1494] binder: 1491:1494 unknown command 32768 [ 1532.049941][ T1494] binder: 1491:1494 ioctl c0306201 2000000003c0 returned -22 [ 1532.163868][ T1500] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1532.206024][ T1500] syzkaller0: entered promiscuous mode [ 1532.262391][ T1500] syzkaller0: entered allmulticast mode [ 1532.281918][ T1503] tipc: Enabled bearer , priority 0 [ 1532.334107][ T1499] tipc: Resetting bearer [ 1532.458995][ T1499] tipc: Disabling bearer [ 1532.709697][T24340] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 1532.736828][T24340] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1532.827014][ T5148] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1532.886263][T24371] usb 1-1: USB disconnect, device number 15 [ 1532.942570][ T5193] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1533.107446][ T5193] usb 2-1: config 0 has no interfaces? [ 1533.115079][ T5193] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1533.138157][ T5193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1533.156244][T26660] bond0 (unregistering): (slave gretap1): Releasing active interface [ 1533.182348][ T5193] usb 2-1: SerialNumber: syz [ 1533.206005][ T5193] usb 2-1: config 0 descriptor?? [ 1533.232723][T26660] bond0 (unregistering): Released all slaves [ 1533.258936][ T1530] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1533.457651][ T1531] tipc: Enabled bearer , priority 0 [ 1533.531943][ T1528] tipc: Resetting bearer [ 1533.550878][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1533.616244][ T1526] tipc: Disabling bearer [ 1533.725300][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1533.808369][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.862734][ T24] usb 1-1: config 0 has no interfaces? [ 1533.956964][ T24] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1533.994945][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.056563][ T24] usb 1-1: Product: syz [ 1534.155542][ T24] usb 1-1: Manufacturer: syz [ 1534.193873][ T24] usb 1-1: SerialNumber: syz [ 1534.276342][ T24] usb 1-1: config 0 descriptor?? [ 1535.235661][ T5193] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1535.400537][ T5193] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1535.427833][ T5193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.463258][ T5193] usb 5-1: Product: syz [ 1535.486918][ T5193] usb 5-1: Manufacturer: syz [ 1535.500117][ T5193] usb 5-1: SerialNumber: syz [ 1535.523960][ T5193] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1535.550833][T24340] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1535.629043][ T24] usb 2-1: USB disconnect, device number 45 [ 1535.815499][ T5193] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1535.976235][ T5193] usb 6-1: Using ep0 maxpacket: 32 [ 1535.990175][ T5193] usb 6-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1536.062210][ T5193] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.071286][ T5193] usb 6-1: Product: syz [ 1536.085624][ T5193] usb 6-1: Manufacturer: syz [ 1536.103012][ T5193] usb 6-1: SerialNumber: syz [ 1536.209604][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1536.228580][ T5193] usb 6-1: config 0 descriptor?? [ 1536.397985][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.409543][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1536.422369][ T24] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1536.431783][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.443001][ T24] usb 2-1: Product: syz [ 1536.449427][ T24] usb 2-1: Manufacturer: syz [ 1536.454088][ T24] usb 2-1: SerialNumber: syz [ 1536.457350][ T5193] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1536.464171][ T24] usb 2-1: config 0 descriptor?? [ 1536.481447][T24371] usb 1-1: USB disconnect, device number 16 [ 1536.653508][T24340] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1536.662126][T24340] ath9k_htc: Failed to initialize the device [ 1536.703079][ T24] usb 2-1: USB disconnect, device number 46 [ 1536.774929][T24340] usb 5-1: ath9k_htc: USB layer deinitialized [ 1537.001739][T24340] usb 5-1: USB disconnect, device number 42 [ 1537.043294][ T8261] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1537.071864][ T1586] tipc: Enabled bearer , priority 0 [ 1537.083061][ T1586] tipc: Resetting bearer [ 1537.105002][ T5193] usb 6-1: reset high-speed USB device number 68 using dummy_hcd [ 1537.117197][ T1585] tipc: Disabling bearer [ 1537.205580][ T8261] usb 1-1: Using ep0 maxpacket: 16 [ 1537.226680][ T8261] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 1024 [ 1537.252829][ T8261] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 1537.272591][ T8261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.295010][ T8261] usb 1-1: Product: syz [ 1537.299865][ T8261] usb 1-1: Manufacturer: syz [ 1537.304550][ T8261] usb 1-1: SerialNumber: syz [ 1537.437863][ T1597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7730'. [ 1537.447155][ T1597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7730'. [ 1537.497572][ T1597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7730'. [ 1537.506739][ T1597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7730'. [ 1537.543800][ T8261] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1537.551848][ T8261] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1537.595673][ T8261] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 1537.653258][ T8261] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1537.674191][ T5193] usb 6-1: [UEAGLE-ATM] interface 1 not found [ 1537.684918][ T8259] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 1537.701947][ T5193] ueagle-atm 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1537.715651][ T8261] usb 1-1: USB disconnect, device number 17 [ 1537.724410][ T1597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7730'. [ 1537.741078][ T8259] hid-generic 0000:0000:0000.0061: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1537.741744][ T1597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7730'. [ 1537.777163][ T5193] usb 6-1: USB disconnect, device number 68 [ 1537.795858][T32540] udevd[32540]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1537.910628][ T1610] loop5: detected capacity change from 0 to 7 [ 1537.922337][ T1610] Dev loop5: unable to read RDB block 7 [ 1537.928485][ T1610] loop5: unable to read partition table [ 1537.934516][ T1610] loop5: partition table beyond EOD, truncated [ 1537.940951][T24340] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1537.949644][ T1610] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1538.112359][T24340] usb 5-1: config 0 has no interfaces? [ 1538.126515][T24340] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1538.163522][T24340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1538.227628][T24340] usb 5-1: SerialNumber: syz [ 1538.237635][T24340] usb 5-1: config 0 descriptor?? [ 1538.401613][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1538.401644][ T30] audit: type=1326 audit(1774738370.059:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.0.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35c39c799 code=0x7ffc0000 [ 1538.460397][ T1620] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1538.480097][ T30] audit: type=1326 audit(1774738370.059:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.0.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa35c39c799 code=0x7ffc0000 [ 1538.693704][ T30] audit: type=1326 audit(1774738370.059:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.0.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35c39c799 code=0x7ffc0000 [ 1538.915711][T24371] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1539.115157][ T30] audit: type=1326 audit(1774738370.059:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.0.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa35c39c799 code=0x7ffc0000 [ 1539.155456][T24371] usb 4-1: Using ep0 maxpacket: 8 [ 1539.166347][T24371] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.207994][ T30] audit: type=1326 audit(1774738370.059:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.0.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35c39c799 code=0x7ffc0000 [ 1539.211679][T24371] usb 4-1: config 0 has no interfaces? [ 1539.306596][ T30] audit: type=1326 audit(1774738370.059:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.0.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa35c39e007 code=0x7ffc0000 [ 1539.380203][ T1638] lo: entered allmulticast mode [ 1539.388932][ T30] audit: type=1326 audit(1774738370.059:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.0.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa35c35cfce code=0x7ffc0000 [ 1539.413520][ T1638] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1539.519145][ T1638] ip6tnl1: entered allmulticast mode [ 1539.537779][ T1638] bridge0: entered allmulticast mode [ 1539.552261][ T1638] bridge1: entered allmulticast mode [ 1539.563527][T24371] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1539.579016][ T1638] ip6gre1: entered allmulticast mode [ 1539.588832][T24371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.611477][T24371] usb 4-1: Product: syz [ 1539.616295][ T24] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1539.634115][ T30] audit: type=1326 audit(1774738370.059:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.0.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa35c35cfce code=0x7ffc0000 [ 1539.637582][T24371] usb 4-1: Manufacturer: syz [ 1539.712087][ T30] audit: type=1326 audit(1774738370.059:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.0.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa35c35cfce code=0x7ffc0000 [ 1539.797554][T24371] usb 4-1: SerialNumber: syz [ 1539.803598][ T24] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 1539.812242][ T24] usb 2-1: config 2 has no interface number 0 [ 1539.821658][T24371] usb 4-1: config 0 descriptor?? [ 1539.826870][ T24] usb 2-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 1539.838399][ T24] usb 2-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1539.851082][ T24] usb 2-1: config 2 interface 88 has no altsetting 0 [ 1539.864200][ T24] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1539.873502][ T30] audit: type=1326 audit(1774738370.059:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.0.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa35c35cfce code=0x7ffc0000 [ 1539.930081][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.938599][ T24] usb 2-1: Product: syz [ 1539.943177][ T24] usb 2-1: Manufacturer: syz [ 1539.949026][ T24] usb 2-1: SerialNumber: syz [ 1539.958980][ T1635] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1539.966969][ T1635] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1540.175478][ T1634] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1540.203650][ T1634] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1540.445587][T24340] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1540.481664][ T24] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1540.507092][ T24] asix 2-1:2.88: probe with driver asix failed with error -71 [ 1540.522922][ T24] usb 2-1: USB disconnect, device number 47 [ 1540.595529][T24340] usb 6-1: Using ep0 maxpacket: 16 [ 1540.602704][T24340] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1540.617092][T24340] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1540.631198][T24340] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1540.645347][T24340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.667679][T24340] usb 6-1: config 0 descriptor?? [ 1540.684023][T24371] usb 5-1: USB disconnect, device number 43 [ 1540.932501][ T1658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7752'. [ 1540.943097][ T1659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7751'. [ 1540.995610][ T1659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7751'. [ 1541.096981][T24340] nzxt-smart2 0003:1E71:2009.0062: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 1541.110442][ T1663] [U] vv [ 1541.255463][ T1670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7756'. [ 1541.279897][ T1670] vlan0: entered promiscuous mode [ 1541.467499][T24340] usb 4-1: USB disconnect, device number 54 [ 1541.560820][T24371] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 1541.616057][T24371] hid-generic 0000:0000:0000.0063: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1541.715052][ T24] usb 6-1: USB disconnect, device number 69 [ 1541.808048][T24371] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1542.006169][T24377] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1542.040804][T24371] usb 1-1: config 0 has no interfaces? [ 1542.065778][T24371] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1542.075407][T24371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1542.083516][T24371] usb 1-1: SerialNumber: syz [ 1542.093733][T24371] usb 1-1: config 0 descriptor?? [ 1542.188307][T24377] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 1542.214436][T24377] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.240574][T24377] usb 2-1: config 1 has no interface number 0 [ 1542.260151][T24377] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 1542.292338][T24377] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1542.320389][T24377] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1542.339491][T24377] usb 2-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 1542.391299][T24377] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1542.406222][T24377] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 1542.414638][T24377] usb 2-1: Manufacturer: syz [ 1542.442980][T24377] usb 2-1: SerialNumber: syz [ 1543.158435][T24377] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1543.536046][T24377] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 1543.571161][T24377] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1543.589131][T24377] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.615155][T24377] usb 6-1: config 8 has no interface number 0 [ 1543.625930][T24377] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1543.645792][T24377] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1543.679014][T24377] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1543.688855][T24377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.698210][T24377] usb 6-1: Product: syz [ 1543.702593][T24377] usb 6-1: Manufacturer: syz [ 1543.707609][T24377] usb 6-1: SerialNumber: syz [ 1543.834595][ T1727] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1543.931489][ T1729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.945138][ T1729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.964999][T24377] usb 6-1: USB disconnect, device number 70 [ 1544.165554][T24340] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1544.315271][T24340] usb 5-1: Using ep0 maxpacket: 8 [ 1544.331344][T24340] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.350355][T24340] usb 5-1: config 0 has no interfaces? [ 1544.363663][T24340] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1544.381655][T24340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.396221][T24340] usb 5-1: Product: syz [ 1544.400426][T24340] usb 5-1: Manufacturer: syz [ 1544.405038][T24340] usb 5-1: SerialNumber: syz [ 1544.432564][T24340] usb 5-1: config 0 descriptor?? [ 1544.479587][T24377] usb 1-1: USB disconnect, device number 18 [ 1544.584870][ T1737] __nla_validate_parse: 1 callbacks suppressed [ 1544.584886][ T1737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7775'. [ 1544.603531][ T1737] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7775'. [ 1544.616799][ T1737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7775'. [ 1544.628413][ T1737] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7775'. [ 1544.640669][ T1737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7775'. [ 1544.692405][ T1737] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1544.728606][T24340] usb 2-1: USB disconnect, device number 48 [ 1545.205316][T24340] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 1545.217309][ T1751] loop5: detected capacity change from 0 to 2640 [ 1545.243972][ T1751] buffer_io_error: 360 callbacks suppressed [ 1545.243992][ T1751] Buffer I/O error on dev loop5, logical block 0, async page read [ 1545.264244][ T1751] Buffer I/O error on dev loop5, logical block 0, async page read [ 1545.290322][ T1751] Buffer I/O error on dev loop5, logical block 0, async page read [ 1545.358946][T24340] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1545.371440][T24340] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1545.372540][ T1753] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1545.387790][ T1751] loop5: unable to read partition table [ 1545.396860][T24340] usb 2-1: config 0 has no interface number 0 [ 1545.412668][T24340] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1545.426648][ T1752] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 1545.435605][T24340] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1545.458903][T24340] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1545.460691][ T1751] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 1545.496295][T24340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.511228][ T1752] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 1545.533508][ T1752] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 1545.557965][T24340] usb 2-1: config 0 descriptor?? [ 1545.573503][ T1752] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 1545.632107][ T1752] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 1545.667073][ T1752] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 1546.090087][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.096667][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.111651][T24377] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 1546.138191][T24377] hid-generic 0000:0000:0000.0064: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1546.366654][ T5193] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1546.389679][ T1771] x_tables: duplicate underflow at hook 1 [ 1546.406138][ T8261] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1546.537651][ T5193] usb 4-1: config 0 has no interfaces? [ 1546.544703][ T5193] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1546.554555][ T5193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1546.563780][ T5193] usb 4-1: SerialNumber: syz [ 1546.573832][ T5193] usb 4-1: config 0 descriptor?? [ 1546.579511][ T8261] usb 1-1: Using ep0 maxpacket: 16 [ 1546.587453][ T8261] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 1546.598099][ T8261] usb 1-1: config 0 has no interface number 0 [ 1546.604398][ T8261] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1546.615052][ T8261] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 1546.628154][ T8261] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1546.638521][ T8261] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 1546.651359][ T8261] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1546.660683][ T8261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.669299][ T8261] usb 1-1: Product: syz [ 1546.673575][ T8261] usb 1-1: Manufacturer: syz [ 1546.678239][ T8261] usb 1-1: SerialNumber: syz [ 1546.685594][ T8259] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1546.695006][ T8261] usb 1-1: config 0 descriptor?? [ 1546.701064][ T1766] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1546.837140][ T8259] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.848208][ T8259] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1546.858466][ T8259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.870484][ T8259] usb 6-1: config 0 descriptor?? [ 1546.880967][ T8259] pwc: Askey VC010 type 2 USB webcam detected. [ 1547.041468][ T1778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.050564][ T1778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.064134][T24377] usb 5-1: USB disconnect, device number 44 [ 1547.278703][ T8259] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1547.286228][ T8259] pwc: recv_control_msg error -32 req 02 val 2700 [ 1547.293615][ T8259] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1547.304908][ T8259] pwc: recv_control_msg error -32 req 04 val 1000 [ 1547.312754][ T8259] pwc: recv_control_msg error -32 req 04 val 1300 [ 1547.324309][ T8259] pwc: recv_control_msg error -32 req 04 val 1400 [ 1547.336541][ T8259] pwc: recv_control_msg error -32 req 02 val 2000 [ 1547.345786][ T8259] pwc: recv_control_msg error -32 req 02 val 2100 [ 1547.357420][ T8259] pwc: recv_control_msg error -32 req 04 val 1500 [ 1547.410170][ T8259] pwc: recv_control_msg error -71 req 02 val 2500 [ 1547.418240][ T8259] pwc: recv_control_msg error -71 req 02 val 2400 [ 1547.430169][ T8259] pwc: recv_control_msg error -71 req 02 val 2600 [ 1547.439779][ T8259] pwc: recv_control_msg error -71 req 02 val 2900 [ 1547.452524][ T8259] pwc: recv_control_msg error -71 req 02 val 2800 [ 1547.462110][ T8259] pwc: recv_control_msg error -71 req 04 val 1100 [ 1547.469717][ T8259] pwc: recv_control_msg error -71 req 04 val 1200 [ 1547.485765][ T8259] pwc: Registered as video103. [ 1547.519495][ T8259] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input129 [ 1547.570390][ T8259] usb 6-1: USB disconnect, device number 71 [ 1547.614416][ T1788] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7791'. [ 1547.629879][ T1788] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7791'. [ 1547.741276][ T1790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7791'. [ 1547.889020][T24340] usb 2-1: USB disconnect, device number 49 [ 1548.315481][T24377] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1548.477940][T24377] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.493347][T24377] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1548.506197][T24377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1548.517967][T24377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1548.528261][T24377] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1548.567553][T24377] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1548.595022][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1548.595044][ T30] audit: type=1326 audit(1774738380.319:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1798 comm="syz.5.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763f39c799 code=0x7ffc0000 [ 1548.601532][T24377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1548.633487][T24377] usb 5-1: Product: syz [ 1548.638767][ T30] audit: type=1326 audit(1774738380.319:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1798 comm="syz.5.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f763f39c799 code=0x7ffc0000 [ 1548.639275][T24377] usb 5-1: Manufacturer: syz [ 1548.670041][T24377] usb 5-1: SerialNumber: syz [ 1548.675938][ T30] audit: type=1326 audit(1774738380.319:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1798 comm="syz.5.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763f39c799 code=0x7ffc0000 [ 1548.680467][T24377] usb 5-1: config 0 descriptor?? [ 1548.720668][ T30] audit: type=1326 audit(1774738380.319:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1798 comm="syz.5.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f763f39c799 code=0x7ffc0000 [ 1548.763053][ T30] audit: type=1326 audit(1774738380.319:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1798 comm="syz.5.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763f39c799 code=0x7ffc0000 [ 1548.825068][ T30] audit: type=1326 audit(1774738380.319:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1798 comm="syz.5.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f763f39e007 code=0x7ffc0000 [ 1548.850591][ T30] audit: type=1326 audit(1774738380.319:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1798 comm="syz.5.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f763f35cfce code=0x7ffc0000 [ 1548.874193][ T30] audit: type=1326 audit(1774738380.319:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1798 comm="syz.5.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f763f35cfce code=0x7ffc0000 [ 1548.898175][ T30] audit: type=1326 audit(1774738380.319:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1798 comm="syz.5.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f763f35cfce code=0x7ffc0000 [ 1548.940529][T24377] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1549.009832][T24377] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1549.032860][ T30] audit: type=1326 audit(1774738380.319:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1798 comm="syz.5.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f763f35cfce code=0x7ffc0000 [ 1549.084369][T24371] usb 4-1: USB disconnect, device number 55 [ 1549.103121][ T1803] binder: 1802:1803 ioctl c0306201 2000000001c0 returned -14 [ 1549.309955][T24377] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1549.318846][T24377] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1549.372324][T24377] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1549.388648][T24373] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 1549.411249][ T8261] qcserial 1-1:0.49: Qualcomm USB modem converter detected [ 1549.454934][ T8261] usb 1-1: USB disconnect, device number 19 [ 1549.490953][ T8261] qcserial 1-1:0.49: device disconnected [ 1549.558780][T24373] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1549.572284][T24373] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1549.584781][T24373] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 1549.597038][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1549.629459][T24373] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1549.639409][T24373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.657311][ T1803] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1549.686464][ T1811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7798'. [ 1549.789589][ T24] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1549.799121][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.815107][ T24] usb 4-1: Product: syz [ 1549.827120][ T24] usb 4-1: Manufacturer: syz [ 1549.841021][ T24] usb 4-1: SerialNumber: syz [ 1549.851881][ T24] usb 4-1: config 0 descriptor?? [ 1549.871241][ T1803] binder: 1802:1803 ioctl c0306201 2000000001c0 returned -14 [ 1549.881248][ T24] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 056 [ 1549.902282][ T1814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.912289][T24377] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1549.922828][T24377] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1549.932809][ T1814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.942043][T24377] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 1549.954312][T24373] usb 2-1: string descriptor 0 read error: -71 [ 1549.970680][T24377] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1550.069562][ T24] (null): failure reading functionality [ 1550.088417][ T24] i2c i2c-1: failure reading functionality [ 1550.133468][ T24] i2c i2c-1: connected i2c-tiny-usb device [ 1550.169666][T24373] usb 2-1: USB disconnect, device number 50 [ 1550.409756][ T24] usb 4-1: USB disconnect, device number 56 [ 1550.605432][T24377] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1550.765420][T24377] usb 1-1: Using ep0 maxpacket: 8 [ 1550.777577][T24377] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.792588][T24377] usb 1-1: config 0 has no interfaces? [ 1550.803287][T24377] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1550.813563][T24377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.822235][T24377] usb 1-1: Product: syz [ 1550.827180][T24377] usb 1-1: Manufacturer: syz [ 1550.832658][T24377] usb 1-1: SerialNumber: syz [ 1550.841498][T24377] usb 1-1: config 0 descriptor?? [ 1551.243666][T24371] usb 5-1: USB disconnect, device number 45 [ 1551.777271][T24371] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 1551.797072][T24371] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1552.005772][ T8261] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1552.035105][ T1858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7811'. [ 1552.048706][ T1858] bond0: left allmulticast mode [ 1552.057543][ T1858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.165139][ T1856] syz.1.7810 (1856): drop_caches: 2 [ 1552.176019][ T8261] usb 4-1: config 0 has no interfaces? [ 1552.185858][ T8261] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1552.204789][ T8261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1552.222957][ T8261] usb 4-1: SerialNumber: syz [ 1552.253695][ T8261] usb 4-1: config 0 descriptor?? [ 1552.315590][T24371] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1552.597230][T24371] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1552.606907][T24371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.617765][T24371] usb 2-1: config 0 descriptor?? [ 1552.628156][T24371] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1553.050248][T24371] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 1553.294482][ T8261] usb 1-1: USB disconnect, device number 20 [ 1553.545300][ T1856] syz.1.7810 (1856): drop_caches: 2 [ 1553.652103][T24371] gspca_cpia1: usb_control_msg 02, error -71 [ 1553.659500][T24371] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1553.679084][T24371] usb 2-1: USB disconnect, device number 51 [ 1553.838106][ T1890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1554.712304][T24340] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1554.749425][ T8261] usb 4-1: USB disconnect, device number 57 [ 1554.765824][ T1915] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1554.895391][T24340] usb 1-1: Using ep0 maxpacket: 8 [ 1554.908735][T24340] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1554.934998][T24340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.960165][T24340] usb 1-1: Product: syz [ 1554.994889][T24340] usb 1-1: Manufacturer: syz [ 1555.010233][T24340] usb 1-1: SerialNumber: syz [ 1555.040702][T24340] usb 1-1: config 0 descriptor?? [ 1555.075447][ T5193] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1555.107463][T24340] gspca_main: se401-2.14.0 probing 047d:5003 [ 1555.197686][ T1921] loop5: detected capacity change from 0 to 7 [ 1555.216466][T30326] Dev loop5: unable to read RDB block 7 [ 1555.222326][T30326] loop5: unable to read partition table [ 1555.231686][T30326] loop5: partition table beyond EOD, truncated [ 1555.244207][ T1921] Dev loop5: unable to read RDB block 7 [ 1555.252551][ T5193] usb 2-1: Using ep0 maxpacket: 8 [ 1555.270218][ T5193] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.285743][ T1921] loop5: unable to read partition table [ 1555.299160][ T1905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.315825][ T1905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.327269][ T1905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.337446][ T1921] loop5: partition table beyond EOD, truncated [ 1555.340708][ T1905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.343711][ T1921] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1555.361211][ T5193] usb 2-1: config 0 has no interfaces? [ 1555.412379][ T5193] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1555.421424][ T1905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.425858][ T5193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.438753][ T5193] usb 2-1: Product: syz [ 1555.443042][ T5193] usb 2-1: Manufacturer: syz [ 1555.471958][ T1925] netlink: 184 bytes leftover after parsing attributes in process `syz.5.7832'. [ 1555.481447][ T1925] openvswitch: netlink: Flow actions attr not present in new flow. [ 1555.491993][ T1925] kernel profiling enabled (shift: 63) [ 1555.497722][ T1925] profiling shift: 63 too large [ 1555.585836][ T1905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.595032][ T1905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.641441][ T5193] usb 2-1: SerialNumber: syz [ 1555.679912][ T1905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.707355][ T5193] usb 2-1: config 0 descriptor?? [ 1555.737711][ T1905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.831319][ T1905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.292717][ T1931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7835'. [ 1556.340531][T24340] usb 1-1: reset high-speed USB device number 21 using dummy_hcd [ 1556.880641][ T24] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1556.920644][ T24] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1557.065496][T24371] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1557.160939][ T8261] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1557.275511][T24371] usb 5-1: Using ep0 maxpacket: 16 [ 1557.284680][T24371] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.314563][T24371] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1557.345727][T24371] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1557.357625][ T8261] usb 4-1: config 0 has no interfaces? [ 1557.361759][T24371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.389513][T24371] usb 5-1: Product: syz [ 1557.394123][ T8261] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1557.402338][T24371] usb 5-1: Manufacturer: syz [ 1557.403771][ T8261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1557.408711][T24371] usb 5-1: SerialNumber: syz [ 1557.423611][ T8261] usb 4-1: SerialNumber: syz [ 1557.439926][T24340] gspca_se401: read req failed req 0x06 error -19 [ 1557.451862][T24340] usb 1-1: USB disconnect, device number 21 [ 1557.458376][ T8261] usb 4-1: config 0 descriptor?? [ 1557.474409][ T1953] FAULT_INJECTION: forcing a failure. [ 1557.474409][ T1953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.492272][ T1953] CPU: 1 UID: 0 PID: 1953 Comm: syz.5.7842 Tainted: G L syzkaller #0 PREEMPT(full) [ 1557.492305][ T1953] Tainted: [L]=SOFTLOCKUP [ 1557.492318][ T1953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1557.492329][ T1953] Call Trace: [ 1557.492338][ T1953] [ 1557.492347][ T1953] dump_stack_lvl+0xe8/0x150 [ 1557.492380][ T1953] should_fail_ex+0x412/0x560 [ 1557.492414][ T1953] _copy_from_user+0x2d/0xb0 [ 1557.492438][ T1953] do_sock_getsockopt+0x165/0x3f0 [ 1557.492468][ T1953] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1557.492492][ T1953] ? __fget_files+0x3a0/0x420 [ 1557.492520][ T1953] ? __fget_files+0x2a/0x420 [ 1557.492556][ T1953] __x64_sys_getsockopt+0x1a4/0x240 [ 1557.492589][ T1953] do_syscall_64+0x14d/0xf80 [ 1557.492614][ T1953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.492634][ T1953] ? clear_bhb_loop+0x40/0x90 [ 1557.492659][ T1953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.492678][ T1953] RIP: 0033:0x7f763f39c799 [ 1557.492698][ T1953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.492715][ T1953] RSP: 002b:00007f764025c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1557.492738][ T1953] RAX: ffffffffffffffda RBX: 00007f763f616090 RCX: 00007f763f39c799 [ 1557.492753][ T1953] RDX: 0000000000000071 RSI: 0000000000000084 RDI: 0000000000000004 [ 1557.492766][ T1953] RBP: 00007f764025c090 R08: 00002000000002c0 R09: 0000000000000000 [ 1557.492779][ T1953] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 1557.492792][ T1953] R13: 00007f763f616128 R14: 00007f763f616090 R15: 00007f763f73fa48 [ 1557.492823][ T1953] [ 1557.725599][T24340] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1557.782669][T24371] usb 5-1: 0:2 : does not exist [ 1557.793128][T24371] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1557.837407][T24371] usb 5-1: USB disconnect, device number 46 [ 1557.867762][T32536] udevd[32536]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1557.889208][T24340] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1557.899148][T24340] usb 1-1: can't read configurations, error -61 [ 1558.035333][T24340] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1558.187465][T24340] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1558.195358][T24340] usb 1-1: can't read configurations, error -61 [ 1558.202183][T24340] usb usb1-port1: attempt power cycle [ 1558.333403][ T1957] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1558.349854][ T1957] syzkaller0: entered promiscuous mode [ 1558.370226][ T1957] syzkaller0: entered allmulticast mode [ 1558.394142][ T1957] tipc: Enabled bearer , priority 0 [ 1558.424012][ T1956] tipc: Resetting bearer [ 1558.478296][ T24] usb 2-1: USB disconnect, device number 52 [ 1558.492271][ T1956] tipc: Disabling bearer [ 1558.546577][T24340] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1558.629168][T24340] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1558.637322][T24340] usb 1-1: can't read configurations, error -61 [ 1558.661678][ T1964] loop5: detected capacity change from 0 to 7 [ 1558.674640][T32536] Dev loop5: unable to read RDB block 7 [ 1558.688260][T32536] loop5: unable to read partition table [ 1558.694115][T32536] loop5: partition table beyond EOD, truncated [ 1558.711885][ T1964] Dev loop5: unable to read RDB block 7 [ 1558.722597][ T1964] loop5: unable to read partition table [ 1558.729893][ T1964] loop5: partition table beyond EOD, truncated [ 1558.736784][ T1964] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1558.785287][T24340] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1558.828932][T24340] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1558.845439][T24340] usb 1-1: can't read configurations, error -61 [ 1558.855973][T24340] usb usb1-port1: unable to enumerate USB device [ 1558.955795][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1558.984661][ T1971] netlink: 'syz.5.7850': attribute type 1 has an invalid length. [ 1559.008773][ T1971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1559.033349][ T1971] vlan2: entered promiscuous mode [ 1559.039077][ T1971] bond1: entered promiscuous mode [ 1559.044340][ T1971] vlan2: entered allmulticast mode [ 1559.050845][ T1971] bond1: entered allmulticast mode [ 1559.081205][ T3567] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1559.090453][ T3567] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1559.099938][ T3567] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1559.124299][ T1971] bond1: (slave bridge2): making interface the new active one [ 1559.155610][ T1971] bridge2: entered promiscuous mode [ 1559.155848][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1559.161042][ T1971] bridge2: entered allmulticast mode [ 1559.173798][ T1971] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1559.174384][ T24] usb 2-1: config 164 has an invalid interface number: 245 but max is 0 [ 1559.193846][ T3567] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1559.225525][ T24] usb 2-1: config 164 has no interface number 0 [ 1559.231883][ T24] usb 2-1: config 164 interface 245 has no altsetting 0 [ 1559.264619][ T24] usb 2-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 1559.285545][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.293736][ T24] usb 2-1: Product: syz [ 1559.305455][ T24] usb 2-1: Manufacturer: syz [ 1559.310249][ T24] usb 2-1: SerialNumber: syz [ 1559.535413][ T24] usb-storage 2-1:164.245: USB Mass Storage device detected [ 1559.606076][ T24] usb 2-1: USB disconnect, device number 53 [ 1559.692569][ T8261] usb 4-1: USB disconnect, device number 58 [ 1560.070064][ T1988] lo: entered allmulticast mode [ 1560.080208][ T1988] bond0: entered allmulticast mode [ 1560.108097][ T1988] bridge_slave_0: left promiscuous mode [ 1560.114035][ T1988] bridge_slave_0: entered allmulticast mode [ 1560.127401][ T1988] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1560.140929][ T1988] geneve1: entered allmulticast mode [ 1560.153733][ T1988] mac80211_hwsim hwsim133 wlan5: entered allmulticast mode [ 1560.163865][ T1988] mac80211_hwsim hwsim134 wlan6: entered allmulticast mode [ 1560.176128][ T1988] mac80211_hwsim hwsim135 wlan7: entered allmulticast mode [ 1560.186434][ T1988] ip6gre1: entered allmulticast mode [ 1560.197699][ T1988] mac80211_hwsim hwsim139 wlan8: entered allmulticast mode [ 1560.207688][ T1988] mac80211_hwsim hwsim140 wlan9: entered allmulticast mode [ 1560.219165][ T1988] mac80211_hwsim hwsim147 wlan10: entered allmulticast mode [ 1560.228617][ T1988] gretap2: entered allmulticast mode [ 1560.238100][ T1988] mac80211_hwsim hwsim151 wlan11: entered allmulticast mode [ 1560.246331][ T1988] mac80211_hwsim hwsim153 wlan12: entered allmulticast mode [ 1560.254388][ T1988] mac80211_hwsim hwsim155 wlan13: entered allmulticast mode [ 1560.263360][ T1988] mac80211_hwsim hwsim156 wlan14: entered allmulticast mode [ 1560.271912][ T1988] mac80211_hwsim hwsim158 wlan15: entered allmulticast mode [ 1560.280112][ T1988] syztnl1: entered allmulticast mode [ 1560.287508][ T1988] bond2: entered allmulticast mode [ 1560.294755][ T1988] bridge3: entered allmulticast mode [ 1560.318987][ T1988] mac80211_hwsim hwsim161 wlan16: entered allmulticast mode [ 1560.330624][ T1988] vxlan1: entered allmulticast mode [ 1560.363939][ T1988] mac80211_hwsim hwsim162 wlan17: entered allmulticast mode [ 1560.387734][ T1988] bridge4: entered allmulticast mode [ 1560.400201][ T1988] mac80211_hwsim hwsim165 wlan18: entered allmulticast mode [ 1560.429863][ T1988] mac80211_hwsim hwsim168 wlan19: entered allmulticast mode [ 1560.486464][ T164] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.496562][ T164] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.518286][ T164] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.726662][ T2006] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1560.989945][ T164] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1561.079321][T24371] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1561.227469][ T2009] vlan2: entered promiscuous mode [ 1561.285824][T24371] usb 5-1: Using ep0 maxpacket: 8 [ 1561.313148][T24371] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.357654][T24371] usb 5-1: config 0 has no interfaces? [ 1561.443758][T24371] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1561.502241][T24371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.530733][T24371] usb 5-1: Product: syz [ 1561.588604][T24371] usb 5-1: Manufacturer: syz [ 1561.593481][T24371] usb 5-1: SerialNumber: syz [ 1561.624345][T24371] usb 5-1: config 0 descriptor?? [ 1561.653663][ T8261] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1561.690813][ T8261] hid-generic 0000:0000:0000.0067: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1561.762563][ T2023] netlink: 'syz.0.7861': attribute type 4 has an invalid length. [ 1561.926148][T24340] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1562.187814][T24340] usb 2-1: config 0 has no interfaces? [ 1562.200543][T24340] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1562.212431][ T2027] syzkaller0: entered promiscuous mode [ 1562.218311][T24340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1562.219722][ T2027] syzkaller0: entered allmulticast mode [ 1562.227080][T24340] usb 2-1: SerialNumber: syz [ 1562.246498][T24340] usb 2-1: config 0 descriptor?? [ 1562.430123][ T2027] tipc: Enabled bearer , priority 0 [ 1562.438860][ T2025] tipc: Resetting bearer [ 1562.458230][ T2025] tipc: Disabling bearer [ 1562.753479][ T2033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7865'. [ 1563.151439][ T2038] netlink: 'syz.0.7866': attribute type 10 has an invalid length. [ 1563.159522][ T2038] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1563.174472][ T2038] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1563.189182][ T2038] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1563.197700][ T2038] team0: Port device netdevsim0 added [ 1563.211071][ T2038] netlink: 'syz.0.7866': attribute type 10 has an invalid length. [ 1563.222850][ T2038] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1563.231695][ T2038] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1563.241498][ T2038] team0: Port device netdevsim0 removed [ 1563.251537][ T2038] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1563.277233][ T2038] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1563.547043][ T8261] usb 5-1: USB disconnect, device number 47 [ 1563.975325][ T8261] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1564.096527][ T2050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7870'. [ 1564.117757][ T2050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7870'. [ 1564.145533][ T8261] usb 5-1: Using ep0 maxpacket: 16 [ 1564.153953][ T8261] usb 5-1: config 0 has no interfaces? [ 1564.173115][ T8261] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1564.189400][ T8261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.210620][ T8261] usb 5-1: Product: syz [ 1564.221640][ T2050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7870'. [ 1564.232022][ T8261] usb 5-1: Manufacturer: syz [ 1564.237236][ T8261] usb 5-1: SerialNumber: syz [ 1564.242154][ T2050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7870'. [ 1564.260757][ T8261] usb 5-1: config 0 descriptor?? [ 1564.358104][ T2050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7870'. [ 1564.379939][ T2050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7870'. [ 1564.464966][ T2058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7872'. [ 1564.504098][ T2042] vlan2: entered promiscuous mode [ 1564.622593][ T8261] usb 2-1: USB disconnect, device number 54 [ 1564.674290][T24371] usb 5-1: USB disconnect, device number 48 [ 1565.181135][ T8261] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1565.232831][ T2079] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1565.299181][ T2082] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7878'. [ 1565.337876][ T8261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1565.350807][ T8261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1565.397177][ T8261] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1565.425236][ T8261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.439145][ T8261] usb 4-1: Product: syz [ 1565.453186][ T8261] usb 4-1: Manufacturer: syz [ 1565.462424][ T8261] usb 4-1: SerialNumber: syz [ 1565.481253][ T8261] usb 4-1: config 0 descriptor?? [ 1565.495517][ T8259] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1565.655315][ T8259] usb 1-1: Using ep0 maxpacket: 8 [ 1565.673145][ T8259] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.723826][ T8259] usb 1-1: config 0 has no interfaces? [ 1565.786608][ T8259] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1565.813768][ T8259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.846011][ T8259] usb 1-1: Product: syz [ 1565.850298][ T8259] usb 1-1: Manufacturer: syz [ 1565.895363][ T8259] usb 1-1: SerialNumber: syz [ 1565.926854][ T8259] usb 1-1: config 0 descriptor?? [ 1565.959273][ T8261] usb 4-1: USB disconnect, device number 59 [ 1566.135437][T24371] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1566.297235][T24371] usb 5-1: Using ep0 maxpacket: 8 [ 1566.311549][T24371] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1566.333794][T24371] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1566.370500][T24371] usb 5-1: Product: syz [ 1566.381965][T24371] usb 5-1: Manufacturer: syz [ 1566.398869][T24371] usb 5-1: SerialNumber: syz [ 1566.423015][T24371] usb 5-1: config 0 descriptor?? [ 1566.459243][T24371] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1566.676529][ T2109] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7885'. [ 1566.712505][ T2094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.726665][ T2094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.958068][T24371] gspca_zc3xx: reg_r err -71 [ 1566.968941][T24371] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1567.005610][T24371] usb 5-1: USB disconnect, device number 49 [ 1568.784932][ T8259] usb 1-1: USB disconnect, device number 26 [ 1568.818000][T24377] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1568.982238][ T2137] lo: entered allmulticast mode [ 1568.991731][ T2137] bond0: entered allmulticast mode [ 1568.999857][ T2137] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1569.010188][T24377] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.021022][T24377] usb 6-1: config 0 has no interfaces? [ 1569.029018][ T2137] ipvlan2: entered allmulticast mode [ 1569.031111][T24377] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1569.063350][T24377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.072041][ T2137] vxlan1: entered allmulticast mode [ 1569.089203][T24377] usb 6-1: config 0 descriptor?? [ 1569.103319][ T2137] vxlan2: entered allmulticast mode [ 1569.116987][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7896'. [ 1569.126686][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7896'. [ 1569.135089][ T2137] macvlan2: entered allmulticast mode [ 1569.165849][ T2137] geneve2: entered allmulticast mode [ 1569.171387][ T2137] bond2: entered allmulticast mode [ 1569.181614][ T2137] bond3: left promiscuous mode [ 1569.189582][ T2137] mac80211_hwsim hwsim164 wlan10: entered allmulticast mode [ 1569.221618][ T2137] mac80211_hwsim hwsim167 wlan11: entered allmulticast mode [ 1569.247150][ T2137] bond1: entered allmulticast mode [ 1569.252478][ T2137] bridge2: entered allmulticast mode [ 1569.276152][ T2137] mac80211_hwsim hwsim171 wlan12: entered allmulticast mode [ 1569.284985][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1569.294283][ T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1569.350183][T24377] usb 6-1: USB disconnect, device number 72 [ 1569.355015][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1569.355066][ T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1569.461786][ T2148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7898'. [ 1569.665557][ T8261] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1569.870203][ T8261] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1569.891742][ T8261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.905451][ T8261] usb 5-1: Product: syz [ 1569.919042][ T8261] usb 5-1: Manufacturer: syz [ 1569.925469][T24373] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1569.960012][T24371] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1570.027749][ T8261] usb 5-1: SerialNumber: syz [ 1570.081730][ T8261] usb 5-1: config 0 descriptor?? [ 1570.099812][T24373] usb 6-1: device descriptor read/64, error -71 [ 1570.118877][ T8261] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 050 [ 1570.139373][T24371] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1570.156867][T24371] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1570.175788][T24371] usb 1-1: Product: syz [ 1570.183932][T24371] usb 1-1: SerialNumber: syz [ 1570.203613][T24371] usb 1-1: config 0 descriptor?? [ 1570.356032][T24373] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1570.505850][T24373] usb 6-1: device descriptor read/64, error -71 [ 1570.523501][ T8261] (null): failure reading functionality [ 1570.536720][ T8261] i2c i2c-1: failure reading functionality [ 1570.559942][ T8261] i2c i2c-1: connected i2c-tiny-usb device [ 1570.615645][T24373] usb usb6-port1: attempt power cycle [ 1570.637394][T24377] usb 1-1: USB disconnect, device number 27 [ 1571.025267][T24373] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1571.137777][T24373] usb 6-1: device descriptor read/8, error -71 [ 1571.237044][ T2182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7910'. [ 1571.248662][ T2182] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7910'. [ 1571.260069][ T2182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7910'. [ 1571.276623][ T2182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7910'. [ 1571.289302][ T2182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7910'. [ 1571.416469][ T2189] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7911'. [ 1571.445506][T24373] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1571.555426][T24377] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1571.573167][T24373] usb 6-1: device descriptor read/8, error -71 [ 1571.697261][T24373] usb usb6-port1: unable to enumerate USB device [ 1571.715467][T24377] usb 4-1: Using ep0 maxpacket: 16 [ 1571.723276][T24377] usb 4-1: config 0 has no interfaces? [ 1571.732162][T24377] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1571.742188][T24377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.751081][T24377] usb 4-1: Product: syz [ 1571.757111][T24377] usb 4-1: Manufacturer: syz [ 1571.761847][T24377] usb 4-1: SerialNumber: syz [ 1571.773123][T24377] usb 4-1: config 0 descriptor?? [ 1571.830416][ T2197] bond0: entered allmulticast mode [ 1571.838487][ T2197] ip6tnl2: entered allmulticast mode [ 1571.843966][ T2197] mac80211_hwsim hwsim170 wlan4: entered allmulticast mode [ 1571.856524][ T2197] vlan2: left promiscuous mode [ 1571.861333][ T2197] bond1: left promiscuous mode [ 1571.868349][ T2197] bridge2: left promiscuous mode [ 1571.876163][ T2197] vxlan2: entered allmulticast mode [ 1571.886990][ T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1571.901503][ T12] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1571.911672][ T12] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1571.920745][ T12] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1572.033173][ T2185] vlan2: entered promiscuous mode [ 1572.140091][ T8261] usb 4-1: USB disconnect, device number 60 [ 1572.442737][ T5193] usb 5-1: USB disconnect, device number 50 [ 1572.680356][ T2221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7924'. [ 1572.947301][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1572.947349][ T30] audit: type=1326 audit(1774738404.659:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2226 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1573.025633][ T30] audit: type=1326 audit(1774738404.659:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2226 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1573.060470][ T2234] bridge_slave_0: left promiscuous mode [ 1573.066618][ T30] audit: type=1326 audit(1774738404.659:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2226 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1573.095735][ T2234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.105488][ T30] audit: type=1326 audit(1774738404.659:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2226 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1573.142813][ T2234] bridge_slave_1: left promiscuous mode [ 1573.151949][ T2234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.153393][ T30] audit: type=1326 audit(1774738404.669:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2226 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1573.198639][ T30] audit: type=1326 audit(1774738404.669:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2226 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff30ef9e007 code=0x7ffc0000 [ 1573.246576][ T2234] bond0: (slave bond_slave_0): Releasing backup interface [ 1573.278940][ T2234] bond0: (slave bond_slave_1): Releasing backup interface [ 1573.303184][ T30] audit: type=1326 audit(1774738404.669:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2226 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff30ef5cfce code=0x7ffc0000 [ 1573.303486][ T2234] team_slave_0: left promiscuous mode [ 1573.390401][ T2234] team0: Port device team_slave_0 removed [ 1573.395459][ T30] audit: type=1326 audit(1774738404.669:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2226 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff30ef5cfce code=0x7ffc0000 [ 1573.500413][ T2234] team_slave_1: left promiscuous mode [ 1573.507372][ T30] audit: type=1326 audit(1774738404.669:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2226 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff30ef5cfce code=0x7ffc0000 [ 1573.568657][ T30] audit: type=1326 audit(1774738404.669:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2226 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff30ef5cfce code=0x7ffc0000 [ 1573.601761][ T2234] team0: Port device team_slave_1 removed [ 1573.698929][ T2234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.740981][ T2234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.790658][ T2234] geneve2: left allmulticast mode [ 1573.796135][ T2234] geneve2: left promiscuous mode [ 1573.809801][ T2234] bridge2: port 1(geneve2) entered disabled state [ 1573.860583][T15530] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1573.870149][T15530] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1573.879529][T15530] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1573.943532][T15530] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1574.103380][ T2253] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1574.457656][ T2273] x_tables: ip6_tables: l2tp.0 match: invalid size 16 (kernel) != (user) 56 [ 1574.655531][ T8261] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1574.807456][ T8261] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.089858][ T8261] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1575.105575][T24377] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1575.149776][ T8261] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1575.168779][ T8261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.184330][ T8261] usb 6-1: Product: syz [ 1575.194475][ T8261] usb 6-1: Manufacturer: syz [ 1575.204618][ T8261] usb 6-1: SerialNumber: syz [ 1575.218021][ T8261] usb 6-1: config 0 descriptor?? [ 1575.240552][T24373] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1575.251403][T24373] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1575.265525][T24377] usb 2-1: Using ep0 maxpacket: 16 [ 1575.273159][T24377] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1575.304170][T24377] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.346762][T24377] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1575.379842][T24377] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1575.405567][T24377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.434044][T24377] usb 2-1: Product: syz [ 1575.439280][T24377] usb 2-1: Manufacturer: syz [ 1575.443956][T24377] usb 2-1: SerialNumber: syz [ 1575.474835][ T5193] usb 6-1: USB disconnect, device number 77 [ 1575.485799][T24373] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1575.658223][T24373] usb 5-1: config 0 has no interfaces? [ 1575.665365][T24373] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1575.685565][T24373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1575.694209][T24373] usb 5-1: SerialNumber: syz [ 1575.722114][T24373] usb 5-1: config 0 descriptor?? [ 1575.798066][ T2299] netlink: 'syz.3.7948': attribute type 8 has an invalid length. [ 1575.883716][ T2303] __nla_validate_parse: 8 callbacks suppressed [ 1575.883735][ T2303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7950'. [ 1575.899731][T24377] usb 2-1: 0:2 : does not exist [ 1575.924681][T24377] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1576.005923][T24377] usb 2-1: USB disconnect, device number 55 [ 1576.092896][T32536] udevd[32536]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1576.309035][ T2318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7954'. [ 1578.197909][ T8259] usb 5-1: USB disconnect, device number 51 [ 1578.336639][ T2353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7967'. [ 1578.423360][ T2359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7970'. [ 1578.435829][ T2359] netlink: 'syz.3.7970': attribute type 30 has an invalid length. [ 1578.481678][ T2364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7967'. [ 1578.506236][ T3567] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1578.636415][ T8259] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1578.652933][ T3567] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1578.664821][ T3567] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1578.675779][ T3567] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1578.696559][ T8261] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1578.789929][ T2371] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1578.808359][ T2371] syzkaller0: entered promiscuous mode [ 1578.814035][ T2371] syzkaller0: entered allmulticast mode [ 1578.820633][ T8259] usb 1-1: Using ep0 maxpacket: 16 [ 1578.838236][ T8259] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.850030][ T8259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1578.862622][ T8259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1578.873417][ T2371] tipc: Enabled bearer , priority 0 [ 1578.882299][ T8261] usb 5-1: Using ep0 maxpacket: 16 [ 1578.887993][ T8259] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1578.898239][ T5193] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1578.906243][ T2370] tipc: Resetting bearer [ 1578.906415][ T8259] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1578.927656][ T8259] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1578.936984][ T8261] usb 5-1: config 0 has no interfaces? [ 1578.943315][ T8259] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1578.952766][ T8259] usb 1-1: Manufacturer: syz [ 1578.958781][ T2370] tipc: Disabling bearer [ 1578.963022][ T8259] usb 1-1: config 0 descriptor?? [ 1578.973663][ T8261] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1578.984479][ T8261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.994018][ T8261] usb 5-1: Product: syz [ 1579.000875][ T8261] usb 5-1: Manufacturer: syz [ 1579.006383][ T8261] usb 5-1: SerialNumber: syz [ 1579.013409][ T8261] usb 5-1: config 0 descriptor?? [ 1579.088268][ T5193] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1579.097872][ T5193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.116711][ T5193] usb 4-1: config 0 descriptor?? [ 1579.129011][ T5193] cp210x 4-1:0.0: cp210x converter detected [ 1579.267276][ T2363] vlan2: entered promiscuous mode [ 1579.326091][ T2366] sg_write: data in/out 262111/70 bytes for SCSI command 0x0-- guessing data in; [ 1579.326091][ T2366] program syz.3.7973 not setting count and/or reply_len properly [ 1579.408958][T24377] usb 5-1: USB disconnect, device number 52 [ 1579.510489][ T2393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7980'. [ 1579.555702][ T8259] rc_core: IR keymap rc-hauppauge not found [ 1579.561892][ T5193] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 1579.572504][ T8259] Registered IR keymap rc-empty [ 1579.584575][ T8259] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1579.615377][ T8259] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1579.636869][ T8259] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1579.661184][ T8259] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input130 [ 1579.676090][ T2357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.677580][ T8259] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1579.696908][ T2357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.715819][ T8259] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1579.747038][ T8259] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1579.768362][ T8259] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1579.790694][ T5193] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1579.815757][ T8259] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1579.827493][ T2406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7984'. [ 1579.837213][ T2406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7984'. [ 1579.856122][ T8259] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1579.885889][ T8259] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1579.905969][ T8259] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1579.928251][ T8259] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1579.984534][ T5193] usb 4-1: USB disconnect, device number 61 [ 1579.998559][ T8259] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1580.012066][ T5193] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1580.050664][ T8259] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1580.078998][ T2414] binder: BINDER_SET_CONTEXT_MGR already set [ 1580.090523][ T5193] cp210x 4-1:0.0: device disconnected [ 1580.096480][ T2414] binder: 2412:2414 ioctl 4018620d 200000004a80 returned -16 [ 1580.105629][ T8259] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1580.144361][ T8259] usb 1-1: USB disconnect, device number 28 [ 1580.332173][ T2428] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1580.343029][ T2428] syzkaller0: entered promiscuous mode [ 1580.350108][ T2428] syzkaller0: entered allmulticast mode [ 1580.360880][ T2428] tipc: Enabled bearer , priority 0 [ 1580.369037][T24340] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1580.380796][ T2427] tipc: Resetting bearer [ 1580.416934][ T2427] tipc: Disabling bearer [ 1580.535628][T24340] usb 2-1: Using ep0 maxpacket: 32 [ 1580.546317][T24340] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1580.574210][T24340] usb 2-1: config 0 has no interface number 0 [ 1580.700642][ T2436] bridge_slave_0: entered promiscuous mode [ 1580.706739][ T2436] bridge_slave_0: left allmulticast mode [ 1580.713234][ T2436] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1580.764325][T24340] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1580.780709][T24340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.790828][T24340] usb 2-1: Product: syz [ 1580.798150][T24340] usb 2-1: Manufacturer: syz [ 1580.805469][T24340] usb 2-1: SerialNumber: syz [ 1580.822841][T24340] usb 2-1: config 0 descriptor?? [ 1580.841032][T24340] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1580.851569][T24340] usb 2-1: selecting invalid altsetting 1 [ 1580.862986][T24340] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1580.881358][T24340] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1580.901034][T24340] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1580.919346][T24340] usb 2-1: media controller created [ 1581.021333][T24340] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1581.305645][T24377] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1581.364821][T24340] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1581.479818][T24377] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1581.490483][T24377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.492241][T24340] usb 2-1: USB disconnect, device number 56 [ 1581.682696][T24377] usb 4-1: Product: syz [ 1581.697911][T24377] usb 4-1: Manufacturer: syz [ 1581.710667][T24377] usb 4-1: SerialNumber: syz [ 1581.769126][T24377] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1581.801977][T24373] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1581.848033][ T2458] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8000'. [ 1581.876597][ T2458] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8000'. [ 1582.005455][ T2460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8000'. [ 1582.292020][T24377] usb 4-1: USB disconnect, device number 62 [ 1582.615327][T24371] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1582.709618][ T2483] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8006'. [ 1582.725652][ T2483] bond0: left allmulticast mode [ 1582.734760][ T2483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.741863][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1582.776174][T24371] usb 2-1: Using ep0 maxpacket: 16 [ 1582.793471][T24371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1582.844918][T24371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.865597][T24371] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1582.887258][ T2490] syzkaller1: entered promiscuous mode [ 1582.958847][T24373] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1582.967840][T24373] ath9k_htc: Failed to initialize the device [ 1582.970178][ T2490] syzkaller1: entered allmulticast mode [ 1582.978218][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1582.984861][T24377] usb 4-1: ath9k_htc: USB layer deinitialized [ 1582.991438][T24371] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1583.003254][ T24] usb 1-1: config 0 has no interfaces? [ 1583.016332][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1583.032566][T24371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.049142][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.059475][T24371] usb 2-1: config 0 descriptor?? [ 1583.073020][ T24] usb 1-1: Product: syz [ 1583.086273][ T24] usb 1-1: Manufacturer: syz [ 1583.091077][ T24] usb 1-1: SerialNumber: syz [ 1583.128362][ T24] usb 1-1: config 0 descriptor?? [ 1583.163961][ T2491] tipc: Enabled bearer , priority 0 [ 1583.334041][T24371] usbhid 2-1:0.0: can't add hid device: -71 [ 1583.357775][ T2474] vlan0: entered promiscuous mode [ 1583.375752][T24371] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1583.448343][T24371] usb 2-1: USB disconnect, device number 57 [ 1583.487678][T24377] usb 1-1: USB disconnect, device number 29 [ 1583.862331][ T2517] vlan2: entered promiscuous mode [ 1584.295645][T24340] tipc: Node number set to 2361001732 [ 1584.474070][ T2523] tipc: Enabled bearer , priority 0 [ 1584.545935][ T2523] tipc: Resetting bearer [ 1584.705445][ T2522] tipc: Disabling bearer [ 1584.710210][ T2525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8020'. [ 1584.741909][ T2525] bond0: left allmulticast mode [ 1584.777185][ T2525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1585.323469][ T2553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8026'. [ 1585.353333][ T2553] netlink: 'syz.3.8026': attribute type 30 has an invalid length. [ 1586.195462][T24373] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1586.345509][T24373] usb 2-1: Using ep0 maxpacket: 16 [ 1586.352558][T24373] usb 2-1: config 0 has no interfaces? [ 1586.360088][T24373] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1586.379931][T24373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.416390][T24373] usb 2-1: Product: syz [ 1586.420628][T24373] usb 2-1: Manufacturer: syz [ 1586.514478][T24373] usb 2-1: SerialNumber: syz [ 1586.749105][T24373] usb 2-1: config 0 descriptor?? [ 1586.772736][ T2583] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1586.923285][ T2587] tipc: Enabled bearer , priority 0 [ 1587.128388][ T2584] nvme_fabrics: missing parameter 'transport=%s' [ 1587.187152][ T2581] tipc: Disabling bearer [ 1587.226972][ T2588] vlan2: entered promiscuous mode [ 1587.313968][ T2584] nvme_fabrics: missing parameter 'nqn=%s' [ 1587.362725][T24373] usb 2-1: USB disconnect, device number 58 [ 1587.627404][ T2602] syz.0.8038 (2602): drop_caches: 2 [ 1587.885561][T24373] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1587.961943][ T2613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8042'. [ 1588.000304][ T2613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8042'. [ 1588.035823][ T2613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8042'. [ 1588.049946][T24373] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1588.060619][T24373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.086266][ T2613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8042'. [ 1588.110012][T24373] usb 1-1: config 0 descriptor?? [ 1588.124013][T24373] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1588.267919][ T2618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8043'. [ 1588.336655][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1588.336675][ T30] audit: type=1326 audit(1774738419.959:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2614 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30179c799 code=0x7ffc0000 [ 1588.468321][ T30] audit: type=1326 audit(1774738419.959:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2614 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb30179c799 code=0x7ffc0000 [ 1588.514947][ T2621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8044'. [ 1588.534529][ T2621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8044'. [ 1588.544494][ T30] audit: type=1326 audit(1774738419.959:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2614 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30179c799 code=0x7ffc0000 [ 1588.588627][ T2621] vlan2: entered promiscuous mode [ 1588.596055][T24373] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 1588.634614][ T30] audit: type=1326 audit(1774738419.959:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2614 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30179c799 code=0x7ffc0000 [ 1588.669620][ T2623] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1588.711305][ T2623] syzkaller0: entered promiscuous mode [ 1588.717794][ T2623] syzkaller0: entered allmulticast mode [ 1588.738175][ T2623] tipc: Enabled bearer , priority 0 [ 1588.740952][ T30] audit: type=1326 audit(1774738419.959:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2614 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb30179c799 code=0x7ffc0000 [ 1588.775850][ T2622] tipc: Resetting bearer [ 1588.811581][ T30] audit: type=1326 audit(1774738419.959:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2614 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30179c799 code=0x7ffc0000 [ 1588.851366][ T2622] tipc: Disabling bearer [ 1588.865805][ T30] audit: type=1326 audit(1774738419.969:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2614 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb30179e007 code=0x7ffc0000 [ 1588.939721][ T30] audit: type=1326 audit(1774738419.969:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2614 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb30175cfce code=0x7ffc0000 [ 1589.007549][T24373] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 1589.039681][ T30] audit: type=1326 audit(1774738419.969:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2614 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb30175cfce code=0x7ffc0000 [ 1589.056669][ T2628] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 1589.138195][ T30] audit: type=1326 audit(1774738419.969:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2614 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb30175cfce code=0x7ffc0000 [ 1589.342068][ T2602] syz.0.8038 (2602): drop_caches: 2 [ 1589.384807][ T2634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8048'. [ 1589.431659][ T2634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8048'. [ 1589.466869][T24371] usb 1-1: USB disconnect, device number 30 [ 1589.560557][ T2634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8048'. [ 1589.751395][ T2651] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1589.777432][ T2650] syzkaller1: entered promiscuous mode [ 1589.784203][ T2650] syzkaller1: entered allmulticast mode [ 1590.058782][ T2670] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1590.133970][ T2676] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1590.197322][ T2676] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1590.285763][T24340] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1590.536662][T24340] usb 2-1: Using ep0 maxpacket: 32 [ 1590.703408][T24340] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1590.755631][T24340] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1590.786708][T24340] usb 2-1: config 0 interface 0 altsetting 252 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1590.813290][T24340] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1590.828439][T24340] usb 2-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 1590.893603][T24340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.961979][T24340] usb 2-1: config 0 descriptor?? [ 1591.363361][T24340] usb 2-1: string descriptor 0 read error: -71 [ 1591.406327][T24340] usbhid 2-1:0.0: can't add hid device: -71 [ 1591.423845][T24340] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1591.487539][T24340] usb 2-1: USB disconnect, device number 59 [ 1591.595419][T24373] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1591.758058][T24373] usb 6-1: Using ep0 maxpacket: 16 [ 1591.769840][T24373] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.781286][T24373] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.912233][T24373] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1591.949739][T24373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.985686][T24373] usb 6-1: config 0 descriptor?? [ 1592.125784][ T5193] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1592.263661][ T2699] xt_l2tp: v2 tid > 0xffff: 65537 [ 1592.298873][ T5193] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.309698][ T5193] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1592.329575][ T5193] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1592.339748][ T5193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1592.350487][ T5193] usb 1-1: SerialNumber: syz [ 1592.425998][T24373] usbhid 6-1:0.0: can't add hid device: -71 [ 1592.432102][T24373] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1592.520027][T24373] usb 6-1: USB disconnect, device number 78 [ 1592.676270][ T5193] usb 1-1: 0:2 : does not exist [ 1592.798458][ T2718] syzkaller1: entered promiscuous mode [ 1592.825308][ T2718] syzkaller1: entered allmulticast mode [ 1592.845603][ T5193] usb 1-1: USB disconnect, device number 31 [ 1593.053652][T32536] udevd[32536]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1593.063007][ T2726] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1593.084665][ T2724] No buffer was provided with the request [ 1593.292368][ T2733] loop5: detected capacity change from 0 to 7 [ 1593.301794][T32536] Dev loop5: unable to read RDB block 7 [ 1593.310487][ T2734] __nla_validate_parse: 9 callbacks suppressed [ 1593.310506][ T2734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8076'. [ 1593.327190][T32536] loop5: unable to read partition table [ 1593.333112][T32536] loop5: partition table beyond EOD, truncated [ 1593.340978][ T2733] Dev loop5: unable to read RDB block 7 [ 1593.349894][ T2734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8076'. [ 1593.358981][ T2733] loop5: unable to read partition table [ 1593.364892][ T2733] loop5: partition table beyond EOD, truncated [ 1593.374936][ T2733] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1593.385465][T24371] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1593.609343][T24371] usb 5-1: Using ep0 maxpacket: 16 [ 1593.638307][T24371] usb 5-1: config index 0 descriptor too short (expected 67, got 36) [ 1593.657142][T24371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.691174][T24371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1593.718327][T24371] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1593.735667][ T2734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8076'. [ 1593.740395][T24371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.766396][ T2744] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1593.777103][T24371] usb 5-1: config 0 descriptor?? [ 1593.805038][ T2744] syzkaller0: entered promiscuous mode [ 1593.937547][ T2744] syzkaller0: entered allmulticast mode [ 1595.211955][T24371] usbhid 5-1:0.0: can't add hid device: -71 [ 1595.223401][T24371] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1595.286841][T24371] usb 5-1: USB disconnect, device number 53 [ 1595.414983][ T2756] syz.1.8080 (2756): drop_caches: 2 [ 1595.682235][ T2766] lo: entered allmulticast mode [ 1595.698107][ T2766] bond0: entered allmulticast mode [ 1595.705559][T24373] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1595.778340][ T2766] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1595.839854][ T2766] ip6tnl3: entered allmulticast mode [ 1595.859858][ T2773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8087'. [ 1595.872834][ T2766] bridge2: entered allmulticast mode [ 1595.884055][ T2766] geneve2: entered allmulticast mode [ 1595.895337][T24373] usb 2-1: Using ep0 maxpacket: 8 [ 1595.911458][T24373] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1595.924077][T24373] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1595.944252][T24373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1595.965876][ T2766] bridge3: entered allmulticast mode [ 1595.967159][T24373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1595.991713][ T2766] mac80211_hwsim hwsim143 wlan6: entered allmulticast mode [ 1596.062382][ T2766] mac80211_hwsim hwsim159 wlan7: entered allmulticast mode [ 1596.129558][ T2766] mac80211_hwsim hwsim160 wlan8: entered allmulticast mode [ 1596.131223][T24373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1596.161840][T24373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1596.175438][T24373] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1596.188700][T24373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1596.196418][ T2766] ipvlan0: entered allmulticast mode [ 1596.200079][T24373] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1B, changing to 0xB [ 1596.219111][T24373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 32767, setting to 64 [ 1596.241751][ T2766] bridge4: entered allmulticast mode [ 1596.268634][ T2766] ipvlan2: entered allmulticast mode [ 1596.269758][T24373] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1596.293522][T24373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.310637][T24373] usb 2-1: Product: syz [ 1596.315287][ T2766] gretap1: entered allmulticast mode [ 1596.316257][T24373] usb 2-1: Manufacturer: syz [ 1596.325660][T24373] usb 2-1: SerialNumber: syz [ 1596.391075][ T2766] bridge5: entered allmulticast mode [ 1596.437060][T24373] usb 2-1: config 0 descriptor?? [ 1596.457022][T24373] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1596.540020][ T2766] vxlan0: entered allmulticast mode [ 1596.589438][ T524] udevd[524]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1596.605897][ T2766] mac80211_hwsim hwsim166 wlan9: entered allmulticast mode [ 1596.613354][ T2766] bond1: entered allmulticast mode [ 1596.628323][ T2766] vxlan1: entered allmulticast mode [ 1596.654631][ T2766] vxlan2: entered allmulticast mode [ 1596.676444][ T3567] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.685500][ T3567] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.735903][ T3567] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.755063][T24373] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1596.828593][ T3567] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.920656][ T2784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8089'. [ 1596.995449][T24373] usb 1-1: Using ep0 maxpacket: 32 [ 1597.004609][T24373] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.015747][T24373] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1597.031730][T24373] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1597.060698][T24373] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1597.088972][T24373] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1597.100086][T24373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.114882][T24373] usb 1-1: Product: syz [ 1597.122861][T24373] usb 1-1: Manufacturer: syz [ 1597.132442][T24373] usb 1-1: SerialNumber: syz [ 1597.182585][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1597.229893][T24373] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input131 [ 1597.369439][ T2789] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8091'. [ 1597.385439][T24373] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1597.395413][T24373] (id 0x00) [ 1597.495253][T24373] rc_core: IR keymap rc-imon-pad not found [ 1597.501321][T24373] Registered IR keymap rc-empty [ 1597.507648][T24373] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1597.532856][T24373] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1597.586406][T24373] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1597.608336][T24373] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input132 [ 1597.657225][T24373] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:32> initialized [ 1597.781803][ T2799] imon:vfd_write: invalid payload size [ 1597.803771][ T2798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.874039][ T2798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.988934][T24373] usb 1-1: USB disconnect, device number 32 [ 1598.149316][ T2811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8095'. [ 1598.166073][ T2811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8095'. [ 1598.188283][ T2809] binder: 2808:2809 ioctl 5008 0 returned -22 [ 1598.206043][ T2809] binder: 2808:2809 ioctl c0306201 2000000003c0 returned -14 [ 1598.227094][ T2809] binder: 2808:2809 ioctl c0306201 200000000780 returned -14 [ 1598.393235][ T2822] netlink: 'syz.4.8097': attribute type 1 has an invalid length. [ 1598.710661][ T2833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8101'. [ 1598.770832][ T2833] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8101'. [ 1598.803984][ T2833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8101'. [ 1598.818798][ T2836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8102'. [ 1598.854600][ T2834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8101'. [ 1598.879787][ T2833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8101'. [ 1598.912714][ T2833] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1599.146551][T24373] usb 2-1: USB disconnect, device number 60 [ 1599.192610][ T2838] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1599.319791][ T2854] input: syz1 as /devices/virtual/input/input133 [ 1599.371944][ T2860] binder: BINDER_SET_CONTEXT_MGR already set [ 1599.391513][ T2860] binder: 2857:2860 ioctl 4018620d 200000000200 returned -16 [ 1600.387879][ T2889] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8118'. [ 1600.439753][ T2889] bond0: left allmulticast mode [ 1600.473732][ T2889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1600.475342][T24340] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1600.579798][ T2887] netlink: 'syz.0.8109': attribute type 5 has an invalid length. [ 1600.628903][ T2887] ip6erspan0: entered promiscuous mode [ 1600.661262][T24340] usb 5-1: Using ep0 maxpacket: 16 [ 1600.678108][T24340] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1600.688444][T24340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.704209][T24340] usb 5-1: Product: syz [ 1600.715085][T24340] usb 5-1: Manufacturer: syz [ 1600.727790][T24340] usb 5-1: SerialNumber: syz [ 1600.757260][T24340] usb 5-1: config 0 descriptor?? [ 1600.929547][ T2897] FAULT_INJECTION: forcing a failure. [ 1600.929547][ T2897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1600.961753][ T2897] CPU: 1 UID: 0 PID: 2897 Comm: syz.3.8122 Tainted: G L syzkaller #0 PREEMPT(full) [ 1600.961787][ T2897] Tainted: [L]=SOFTLOCKUP [ 1600.961795][ T2897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1600.961807][ T2897] Call Trace: [ 1600.961815][ T2897] [ 1600.961833][ T2897] dump_stack_lvl+0xe8/0x150 [ 1600.961867][ T2897] should_fail_ex+0x412/0x560 [ 1600.961903][ T2897] _copy_to_user+0x31/0xb0 [ 1600.961929][ T2897] tiocgwinsz+0x35/0x90 [ 1600.961951][ T2897] tty_ioctl+0x449/0xde0 [ 1600.961972][ T2897] ? __pfx_tty_ioctl+0x10/0x10 [ 1600.961991][ T2897] __se_sys_ioctl+0xfc/0x170 [ 1600.962019][ T2897] do_syscall_64+0x14d/0xf80 [ 1600.962042][ T2897] ? trace_irq_disable+0x3b/0x150 [ 1600.962060][ T2897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.962081][ T2897] ? clear_bhb_loop+0x40/0x90 [ 1600.962105][ T2897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.962124][ T2897] RIP: 0033:0x7fb30179c799 [ 1600.962143][ T2897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1600.962161][ T2897] RSP: 002b:00007fb302683028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1600.962183][ T2897] RAX: ffffffffffffffda RBX: 00007fb301a15fa0 RCX: 00007fb30179c799 [ 1600.962198][ T2897] RDX: 0000200000000440 RSI: 0000000000005413 RDI: 0000000000000004 [ 1600.962212][ T2897] RBP: 00007fb302683090 R08: 0000000000000000 R09: 0000000000000000 [ 1600.962224][ T2897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1600.962237][ T2897] R13: 00007fb301a16038 R14: 00007fb301a15fa0 R15: 00007fb301b3fa48 [ 1600.962270][ T2897] [ 1601.252270][ T2902] vlan2: entered promiscuous mode [ 1601.272890][ T2904] bridge_slave_0: entered promiscuous mode [ 1601.280280][ T2904] bridge_slave_0: left allmulticast mode [ 1601.287316][ T2904] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1601.444163][ T2911] loop5: detected capacity change from 0 to 2640 [ 1601.451967][ T2911] buffer_io_error: 323 callbacks suppressed [ 1601.451985][ T2911] Buffer I/O error on dev loop5, logical block 0, async page read [ 1601.485650][ T2913] blktrace: Concurrent blktraces are not allowed on loop4 [ 1601.535906][ T2911] Buffer I/O error on dev loop5, logical block 0, async page read [ 1601.681739][T24340] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1601.752419][T24340] usb 5-1: USB disconnect, device number 54 [ 1601.778710][ T2911] Buffer I/O error on dev loop5, logical block 0, async page read [ 1601.799147][ T2911] loop5: unable to read partition table [ 1601.805863][ T2915] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1601.814934][ T2911] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 1601.834418][ T2915] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 1601.846754][ T2911] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1601.876247][ T2915] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 1601.884831][ T2915] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 1601.902852][ T2915] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 1601.922437][ T2915] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 1602.001033][T24377] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1602.225515][T24377] usb 2-1: Using ep0 maxpacket: 32 [ 1602.505598][ T2920] netlink: 264 bytes leftover after parsing attributes in process `syz.0.8128'. [ 1602.705896][T24377] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 1602.755730][T24377] usb 2-1: config 4 has no interface number 0 [ 1602.761999][T24377] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.951865][T24377] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1603.003386][T24377] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1603.063070][T24377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.163670][T24377] hub 2-1:4.128: USB hub found [ 1604.495433][T24373] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1604.625324][T24373] usb 6-1: device descriptor read/64, error -71 [ 1604.865633][T24373] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1605.005509][T24373] usb 6-1: device descriptor read/64, error -71 [ 1605.116487][T24373] usb usb6-port1: attempt power cycle [ 1605.276082][T24377] hub 2-1:4.128: config failed, can't read hub descriptor (err -22) [ 1605.318583][ T2956] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1605.338003][ T2955] syzkaller1: entered promiscuous mode [ 1605.343535][ T2955] syzkaller1: entered allmulticast mode [ 1605.359464][T24377] usb 2-1: USB disconnect, device number 61 [ 1605.368932][ T2956] syzkaller0: entered promiscuous mode [ 1605.376097][ T2956] syzkaller0: entered allmulticast mode [ 1605.415633][ T2960] binder: BINDER_SET_CONTEXT_MGR already set [ 1605.421694][ T2960] binder: 2959:2960 ioctl 4018620d 200000000040 returned -16 [ 1605.468971][ T2960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8143'. [ 1605.485612][T24373] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1605.505692][ T2960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8143'. [ 1605.527952][ T2962] binder: BINDER_SET_CONTEXT_MGR already set [ 1605.533990][ T2962] binder: 2959:2962 ioctl 4018620d 200000000000 returned -16 [ 1605.539768][T24373] usb 6-1: device descriptor read/8, error -71 [ 1605.553971][ T2960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8143'. [ 1605.844054][ T2970] loop5: detected capacity change from 0 to 2640 [ 1605.865481][T24373] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1605.883942][ T2970] ldm_validate_partition_table(): Disk read failed. [ 1605.908921][T24373] usb 6-1: device descriptor read/8, error -71 [ 1605.915614][ T2970] Dev loop5: unable to read RDB block 0 [ 1605.942549][ T2970] loop5: unable to read partition table [ 1605.973140][ T2970] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 1606.035709][T24373] usb usb6-port1: unable to enumerate USB device [ 1606.977859][ T2977] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1607.126304][ T2983] syzkaller0: entered promiscuous mode [ 1607.131855][ T2983] syzkaller0: entered allmulticast mode [ 1607.247373][ T5193] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1607.426417][ T5193] usb 1-1: Using ep0 maxpacket: 8 [ 1607.437701][ T5193] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.465366][ T5193] usb 1-1: config 0 has no interfaces? [ 1607.475325][ T5193] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1607.484500][ T5193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.499862][ T5193] usb 1-1: Product: syz [ 1607.504426][ T5193] usb 1-1: Manufacturer: syz [ 1607.509680][ T5193] usb 1-1: SerialNumber: syz [ 1607.529354][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.539846][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.550742][ T5193] usb 1-1: config 0 descriptor?? [ 1607.555053][ T2996] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8154'. [ 1607.806102][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1607.806124][ T30] audit: type=1326 audit(1774738439.539:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2992 comm="syz.3.8152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30179c799 code=0x7ffc0000 [ 1607.859998][ T3002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8152'. [ 1607.869394][ T3002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8152'. [ 1607.894142][ T30] audit: type=1326 audit(1774738439.539:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2992 comm="syz.3.8152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30179c799 code=0x7ffc0000 [ 1608.079985][ T3011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8153'. [ 1608.089414][ T3011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8153'. [ 1608.098886][ T30] audit: type=1400 audit(1774738439.799:3886): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=2991 comm="syz.1.8153" [ 1609.148874][ T3025] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1609.409786][T24371] usb 1-1: USB disconnect, device number 33 [ 1609.483138][ T3032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8161'. [ 1609.506210][ T3032] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8161'. [ 1609.669026][ T3036] syzkaller0: entered promiscuous mode [ 1609.695131][ T3036] syzkaller0: entered allmulticast mode [ 1609.697552][ T3032] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1610.285231][ T5193] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1610.461810][ T5193] usb 4-1: device descriptor read/64, error -71 [ 1610.491599][ T3058] __nla_validate_parse: 8 callbacks suppressed [ 1610.491614][ T3058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8168'. [ 1610.622428][ T30] audit: type=1326 audit(1774738442.309:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1610.919558][T24371] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1610.976526][ T5193] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1610.988459][ T30] audit: type=1326 audit(1774738442.309:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1611.064215][ T30] audit: type=1326 audit(1774738442.309:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1611.109129][T24371] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1611.120711][T24371] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1611.139484][T24371] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1611.139527][ T5193] usb 4-1: device descriptor read/64, error -71 [ 1611.195433][ T30] audit: type=1326 audit(1774738442.309:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1611.195457][T24371] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1611.253826][ T5193] usb usb4-port1: attempt power cycle [ 1611.420979][ T30] audit: type=1326 audit(1774738442.309:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1611.457792][ T3068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.472837][ T30] audit: type=1326 audit(1774738442.309:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1611.503866][ T30] audit: type=1326 audit(1774738442.309:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.4.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1611.558118][ T3068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.575579][T24371] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1611.584684][T24371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.619004][T24371] usb 6-1: Product: syz [ 1611.623323][T24371] usb 6-1: Manufacturer: syz [ 1611.629460][ T3068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8172'. [ 1611.629686][T24371] usb 6-1: SerialNumber: syz [ 1611.667458][T24371] usb 6-1: config 0 descriptor?? [ 1611.685327][T24377] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1611.720597][ T5193] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1611.746683][ T5193] usb 4-1: device descriptor read/8, error -71 [ 1611.775993][T24371] iguanair 6-1:0.0: probe with driver iguanair failed with error -12 [ 1611.806709][ T3078] tipc: Enabled bearer , priority 0 [ 1611.816578][T24377] usb 2-1: device descriptor read/64, error -71 [ 1611.829748][ T3078] tipc: Resetting bearer [ 1611.853895][ T3077] tipc: Disabling bearer [ 1611.995276][ T5193] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1612.037885][ T5193] usb 4-1: device descriptor read/8, error -71 [ 1612.066003][T24377] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1612.185729][ T5193] usb usb4-port1: unable to enumerate USB device [ 1612.199014][ T3091] syzkaller0: entered promiscuous mode [ 1612.205464][T24377] usb 2-1: device descriptor read/64, error -71 [ 1612.212856][ T3091] syzkaller0: entered allmulticast mode [ 1612.306674][ T3047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8167'. [ 1612.316004][T24377] usb usb2-port1: attempt power cycle [ 1612.331327][ T3047] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8167'. [ 1612.364660][ T3047] vlan3: entered allmulticast mode [ 1612.392797][T24371] usb 6-1: USB disconnect, device number 83 [ 1612.492920][ T3099] vlan2: entered promiscuous mode [ 1612.546248][ T3103] loop5: detected capacity change from 0 to 2640 [ 1612.554626][ T3103] buffer_io_error: 667 callbacks suppressed [ 1612.554644][ T3103] Buffer I/O error on dev loop5, logical block 0, async page read [ 1612.572909][ T3103] Buffer I/O error on dev loop5, logical block 0, async page read [ 1612.581839][ T3103] Buffer I/O error on dev loop5, logical block 0, async page read [ 1612.590314][ T3103] Buffer I/O error on dev loop5, logical block 0, async page read [ 1612.600931][ T3103] Buffer I/O error on dev loop5, logical block 0, async page read [ 1612.615530][ T3103] loop5: unable to read partition table [ 1612.621762][ T3103] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 1612.640897][ T3104] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1612.650254][ T3104] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 1612.658879][T24377] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1612.668481][ T3103] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1612.677498][ T3104] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 1612.692038][ T3104] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 1612.705072][T24377] usb 2-1: device descriptor read/8, error -71 [ 1612.825000][ T3110] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1613.031969][T24377] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1613.065964][T24377] usb 2-1: device descriptor read/8, error -71 [ 1613.217877][T24377] usb usb2-port1: unable to enumerate USB device [ 1613.589171][ T3117] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1613.659452][ T3117] syzkaller0: entered promiscuous mode [ 1613.687371][ T3117] syzkaller0: entered allmulticast mode [ 1613.774241][ T3113] IPv6: NLM_F_CREATE should be specified when creating new route [ 1613.908585][ T3124] syzkaller0: entered promiscuous mode [ 1613.914097][ T3124] syzkaller0: entered allmulticast mode [ 1614.035608][ T8261] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1614.205904][ T8261] usb 6-1: Using ep0 maxpacket: 16 [ 1614.217943][ T3137] macvtap0: entered promiscuous mode [ 1614.231251][ T3137] macvtap0: entered allmulticast mode [ 1614.269625][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1614.269647][ T30] audit: type=1326 audit(1774738446.009:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3128 comm="syz.4.8196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1614.299855][ T8261] usb 6-1: config 0 has no interfaces? [ 1614.309603][ T8261] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1614.323486][ T8261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.358735][ T3141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8196'. [ 1614.607414][ T30] audit: type=1326 audit(1774738446.009:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3128 comm="syz.4.8196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1614.633631][ T8261] usb 6-1: Product: syz [ 1614.643536][ T8261] usb 6-1: Manufacturer: syz [ 1614.653410][ T8261] usb 6-1: SerialNumber: syz [ 1614.662411][ T30] audit: type=1326 audit(1774738446.009:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3128 comm="syz.4.8196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1614.691080][ T8261] usb 6-1: config 0 descriptor?? [ 1614.698251][ T30] audit: type=1326 audit(1774738446.009:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3128 comm="syz.4.8196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1614.969694][ T3120] vlan4: entered promiscuous mode [ 1615.205372][T24377] usb 6-1: USB disconnect, device number 84 [ 1615.314614][ T30] audit: type=1326 audit(1774738446.079:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3128 comm="syz.4.8196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1615.348864][ T30] audit: type=1326 audit(1774738446.079:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3128 comm="syz.4.8196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1615.374287][ T30] audit: type=1326 audit(1774738446.079:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3128 comm="syz.4.8196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1615.606118][ T30] audit: type=1326 audit(1774738446.079:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3128 comm="syz.4.8196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1615.679666][ T30] audit: type=1326 audit(1774738446.079:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3128 comm="syz.4.8196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1615.740768][ T30] audit: type=1326 audit(1774738446.079:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3128 comm="syz.4.8196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30ef9c799 code=0x7ffc0000 [ 1615.964517][ T3165] [ 1615.964531][ T3165] ===================================================== [ 1615.964541][ T3165] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1615.964556][ T3165] syzkaller #0 Tainted: G L [ 1615.964567][ T3165] ----------------------------------------------------- [ 1615.964575][ T3165] syz.5.8204/3165 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1616.002142][ T3165] ffff88805cfb3468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x150 [ 1616.002207][ T3165] [ 1616.002207][ T3165] and this task is already holding: [ 1616.002215][ T3165] ffffffff8effdb38 (kbd_event_lock){....}-{3:3}, at: kbd_event+0xd6/0x40d0 [ 1616.002256][ T3165] which would create a new lock dependency: [ 1616.002264][ T3165] (kbd_event_lock){....}-{3:3} -> (&tty->flow.lock){....}-{3:3} [ 1616.040715][ T3165] [ 1616.040715][ T3165] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1616.050170][ T3165] (&dev->event_lock#2){..-.}-{3:3} [ 1616.050202][ T3165] [ 1616.050202][ T3165] ... which became SOFTIRQ-irq-safe at: [ 1616.063183][ T3165] lock_acquire+0xf0/0x2e0 [ 1616.067711][ T3165] _raw_spin_lock_irqsave+0x40/0x60 [ 1616.073009][ T3165] input_event+0x76/0xe0 [ 1616.077363][ T3165] xpad360_process_packet+0x1fe/0xdd0 [ 1616.082861][ T3165] xpad_irq_in+0x1583/0x25e0 [ 1616.087749][ T3165] __usb_hcd_giveback_urb+0x376/0x540 [ 1616.093220][ T3165] dummy_timer+0xbbd/0x45d0 [ 1616.097819][ T3165] __hrtimer_run_queues+0x53a/0xcc0 [ 1616.103115][ T3165] hrtimer_run_softirq+0x182/0x5a0 [ 1616.108321][ T3165] handle_softirqs+0x22a/0x870 [ 1616.113201][ T3165] __irq_exit_rcu+0x5f/0x150 [ 1616.117913][ T3165] irq_exit_rcu+0x9/0x30 [ 1616.122344][ T3165] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1616.128072][ T3165] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1616.134148][ T3165] refill_objects+0x166/0x3c0 [ 1616.138929][ T3165] __kmem_cache_alloc_bulk+0x3c/0x1a0 [ 1616.144413][ T3165] kmem_cache_alloc_bulk_noprof+0x4d3/0x7e0 [ 1616.150505][ T3165] __io_alloc_req_refill+0xb4/0x360 [ 1616.155806][ T3165] io_submit_sqes+0x1011/0x2400 [ 1616.160769][ T3165] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 1616.166487][ T3165] do_syscall_64+0x14d/0xf80 [ 1616.171187][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.177165][ T3165] [ 1616.177165][ T3165] to a SOFTIRQ-irq-unsafe lock: [ 1616.184267][ T3165] (tasklist_lock){.+.+}-{3:3} [ 1616.184295][ T3165] [ 1616.184295][ T3165] ... which became SOFTIRQ-irq-unsafe at: [ 1616.196921][ T3165] ... [ 1616.196929][ T3165] lock_acquire+0xf0/0x2e0 [ 1616.204100][ T3165] _raw_read_lock+0x36/0x50 [ 1616.208690][ T3165] __do_wait+0xde/0x740 [ 1616.212944][ T3165] do_wait+0x1e7/0x540 [ 1616.217100][ T3165] kernel_wait+0xd6/0x1c0 [ 1616.221526][ T3165] call_usermodehelper_exec_work+0xbe/0x230 [ 1616.227517][ T3165] process_scheduled_works+0xb6e/0x18c0 [ 1616.233157][ T3165] worker_thread+0xa53/0xfc0 [ 1616.237837][ T3165] kthread+0x388/0x470 [ 1616.242079][ T3165] ret_from_fork+0x51e/0xb90 [ 1616.246758][ T3165] ret_from_fork_asm+0x1a/0x30 [ 1616.251616][ T3165] [ 1616.251616][ T3165] other info that might help us debug this: [ 1616.251616][ T3165] [ 1616.261838][ T3165] Chain exists of: [ 1616.261838][ T3165] &dev->event_lock#2 --> kbd_event_lock --> tasklist_lock [ 1616.261838][ T3165] [ 1616.274883][ T3165] Possible interrupt unsafe locking scenario: [ 1616.274883][ T3165] [ 1616.283198][ T3165] CPU0 CPU1 [ 1616.288562][ T3165] ---- ---- [ 1616.293924][ T3165] lock(tasklist_lock); [ 1616.298166][ T3165] local_irq_disable(); [ 1616.304923][ T3165] lock(&dev->event_lock#2); [ 1616.312134][ T3165] lock(kbd_event_lock); [ 1616.318984][ T3165] [ 1616.322438][ T3165] lock(&dev->event_lock#2); [ 1616.327322][ T3165] [ 1616.327322][ T3165] *** DEADLOCK *** [ 1616.327322][ T3165] [ 1616.335462][ T3165] 5 locks held by syz.5.8204/3165: [ 1616.340569][ T3165] #0: ffff88802c21f118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1616.349885][ T3165] #1: ffff88802c158230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1616.360003][ T3165] #2: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1616.369695][ T3165] #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1616.379293][ T3165] #4: ffffffff8effdb38 (kbd_event_lock){....}-{3:3}, at: kbd_event+0xd6/0x40d0 [ 1616.388352][ T3165] [ 1616.388352][ T3165] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1616.398754][ T3165] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1616.404412][ T3165] IN-SOFTIRQ-W at: [ 1616.408483][ T3165] lock_acquire+0xf0/0x2e0 [ 1616.414750][ T3165] _raw_spin_lock_irqsave+0x40/0x60 [ 1616.421784][ T3165] input_event+0x76/0xe0 [ 1616.427874][ T3165] xpad360_process_packet+0x1fe/0xdd0 [ 1616.435088][ T3165] xpad_irq_in+0x1583/0x25e0 [ 1616.441663][ T3165] __usb_hcd_giveback_urb+0x376/0x540 [ 1616.448896][ T3165] dummy_timer+0xbbd/0x45d0 [ 1616.455233][ T3165] __hrtimer_run_queues+0x53a/0xcc0 [ 1616.462350][ T3165] hrtimer_run_softirq+0x182/0x5a0 [ 1616.469287][ T3165] handle_softirqs+0x22a/0x870 [ 1616.475879][ T3165] __irq_exit_rcu+0x5f/0x150 [ 1616.482307][ T3165] irq_exit_rcu+0x9/0x30 [ 1616.488406][ T3165] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1616.495967][ T3165] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1616.503900][ T3165] refill_objects+0x166/0x3c0 [ 1616.510405][ T3165] __kmem_cache_alloc_bulk+0x3c/0x1a0 [ 1616.517603][ T3165] kmem_cache_alloc_bulk_noprof+0x4d3/0x7e0 [ 1616.525408][ T3165] __io_alloc_req_refill+0xb4/0x360 [ 1616.532434][ T3165] io_submit_sqes+0x1011/0x2400 [ 1616.539210][ T3165] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 1616.546581][ T3165] do_syscall_64+0x14d/0xf80 [ 1616.553007][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.560764][ T3165] INITIAL USE at: [ 1616.564763][ T3165] lock_acquire+0xf0/0x2e0 [ 1616.570936][ T3165] _raw_spin_lock_irqsave+0x40/0x60 [ 1616.577881][ T3165] input_inject_event+0xa5/0x340 [ 1616.584562][ T3165] kbd_led_trigger_activate+0xbc/0x100 [ 1616.591759][ T3165] led_trigger_set+0x535/0x960 [ 1616.598263][ T3165] led_trigger_set_default+0x260/0x2a0 [ 1616.605459][ T3165] led_classdev_register_ext+0x787/0x9c0 [ 1616.612865][ T3165] input_leds_connect+0x517/0x790 [ 1616.619675][ T3165] input_register_device+0xd00/0x1160 [ 1616.626813][ T3165] atkbd_connect+0x731/0xa50 [ 1616.633140][ T3165] serio_driver_probe+0x82/0xd0 [ 1616.639733][ T3165] really_probe+0x267/0xaf0 [ 1616.646066][ T3165] __driver_probe_device+0x18c/0x320 [ 1616.653094][ T3165] driver_probe_device+0x4f/0x240 [ 1616.659857][ T3165] __driver_attach+0x34c/0x640 [ 1616.666362][ T3165] bus_for_each_dev+0x23b/0x2c0 [ 1616.672956][ T3165] serio_handle_event+0x20a/0xdd0 [ 1616.679725][ T3165] process_scheduled_works+0xb6e/0x18c0 [ 1616.687123][ T3165] worker_thread+0xa53/0xfc0 [ 1616.693467][ T3165] kthread+0x388/0x470 [ 1616.699289][ T3165] ret_from_fork+0x51e/0xb90 [ 1616.705623][ T3165] ret_from_fork_asm+0x1a/0x30 [ 1616.712132][ T3165] } [ 1616.714718][ T3165] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1616.723968][ T3165] -> (kbd_event_lock){....}-{3:3} { [ 1616.729186][ T3165] INITIAL USE at: [ 1616.733079][ T3165] lock_acquire+0xf0/0x2e0 [ 1616.739152][ T3165] _raw_spin_lock_irqsave+0x40/0x60 [ 1616.745914][ T3165] vt_reset_unicode+0x2b/0x1a0 [ 1616.752241][ T3165] reset_vc+0x68/0x1b0 [ 1616.757879][ T3165] vc_init+0x70/0x4a0 [ 1616.763427][ T3165] con_init+0x377/0x6a0 [ 1616.769151][ T3165] console_init+0x10b/0x4d0 [ 1616.775219][ T3165] start_kernel+0x22b/0x3d0 [ 1616.781287][ T3165] x86_64_start_reservations+0x24/0x30 [ 1616.788336][ T3165] x86_64_start_kernel+0x143/0x1c0 [ 1616.795010][ T3165] common_startup_64+0x13e/0x147 [ 1616.801514][ T3165] } [ 1616.804009][ T3165] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1616.811877][ T3165] ... acquired at: [ 1616.815706][ T3165] _raw_spin_lock+0x2e/0x40 [ 1616.820380][ T3165] kbd_event+0xd6/0x40d0 [ 1616.824794][ T3165] input_handle_events_default+0xd4/0x1a0 [ 1616.830714][ T3165] input_pass_values+0x288/0x890 [ 1616.835832][ T3165] input_event_dispose+0x330/0x6b0 [ 1616.841119][ T3165] input_inject_event+0x1dd/0x340 [ 1616.846321][ T3165] evdev_write+0x325/0x4c0 [ 1616.850912][ T3165] vfs_write+0x29a/0xb90 [ 1616.855329][ T3165] ksys_write+0x150/0x270 [ 1616.859834][ T3165] do_syscall_64+0x14d/0xf80 [ 1616.864603][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.870669][ T3165] [ 1616.872992][ T3165] [ 1616.872992][ T3165] the dependencies between the lock to be acquired [ 1616.873002][ T3165] and SOFTIRQ-irq-unsafe lock: [ 1616.886605][ T3165] -> (tasklist_lock){.+.+}-{3:3} { [ 1616.891995][ T3165] HARDIRQ-ON-R at: [ 1616.896248][ T3165] lock_acquire+0xf0/0x2e0 [ 1616.902925][ T3165] _raw_read_lock+0x36/0x50 [ 1616.909610][ T3165] __do_wait+0xde/0x740 [ 1616.915948][ T3165] do_wait+0x1e7/0x540 [ 1616.922220][ T3165] kernel_wait+0xd6/0x1c0 [ 1616.928731][ T3165] call_usermodehelper_exec_work+0xbe/0x230 [ 1616.936802][ T3165] process_scheduled_works+0xb6e/0x18c0 [ 1616.944524][ T3165] worker_thread+0xa53/0xfc0 [ 1616.951374][ T3165] kthread+0x388/0x470 [ 1616.957616][ T3165] ret_from_fork+0x51e/0xb90 [ 1616.964381][ T3165] ret_from_fork_asm+0x1a/0x30 [ 1616.971320][ T3165] SOFTIRQ-ON-R at: [ 1616.975563][ T3165] lock_acquire+0xf0/0x2e0 [ 1616.982153][ T3165] _raw_read_lock+0x36/0x50 [ 1616.988829][ T3165] __do_wait+0xde/0x740 [ 1616.995160][ T3165] do_wait+0x1e7/0x540 [ 1617.001404][ T3165] kernel_wait+0xd6/0x1c0 [ 1617.007907][ T3165] call_usermodehelper_exec_work+0xbe/0x230 [ 1617.016142][ T3165] process_scheduled_works+0xb6e/0x18c0 [ 1617.023871][ T3165] worker_thread+0xa53/0xfc0 [ 1617.030640][ T3165] kthread+0x388/0x470 [ 1617.036880][ T3165] ret_from_fork+0x51e/0xb90 [ 1617.043654][ T3165] ret_from_fork_asm+0x1a/0x30 [ 1617.050602][ T3165] INITIAL USE at: [ 1617.054757][ T3165] lock_acquire+0xf0/0x2e0 [ 1617.061265][ T3165] _raw_write_lock_irq+0x3d/0x50 [ 1617.068285][ T3165] copy_process+0x247a/0x3cd0 [ 1617.075046][ T3165] kernel_clone+0x248/0x8e0 [ 1617.081638][ T3165] user_mode_thread+0x110/0x180 [ 1617.088751][ T3165] rest_init+0x23/0x300 [ 1617.094996][ T3165] start_kernel+0x385/0x3d0 [ 1617.101585][ T3165] x86_64_start_reservations+0x24/0x30 [ 1617.109131][ T3165] x86_64_start_kernel+0x143/0x1c0 [ 1617.116415][ T3165] common_startup_64+0x13e/0x147 [ 1617.123528][ T3165] INITIAL READ USE at: [ 1617.128114][ T3165] lock_acquire+0xf0/0x2e0 [ 1617.135050][ T3165] _raw_read_lock+0x36/0x50 [ 1617.142081][ T3165] __do_wait+0xde/0x740 [ 1617.148929][ T3165] do_wait+0x1e7/0x540 [ 1617.155700][ T3165] kernel_wait+0xd6/0x1c0 [ 1617.162557][ T3165] call_usermodehelper_exec_work+0xbe/0x230 [ 1617.170971][ T3165] process_scheduled_works+0xb6e/0x18c0 [ 1617.179035][ T3165] worker_thread+0xa53/0xfc0 [ 1617.186156][ T3165] kthread+0x388/0x470 [ 1617.192747][ T3165] ret_from_fork+0x51e/0xb90 [ 1617.199865][ T3165] ret_from_fork_asm+0x1a/0x30 [ 1617.207151][ T3165] } [ 1617.209904][ T3165] ... key at: [] tasklist_lock+0x18/0x40 [ 1617.217955][ T3165] ... acquired at: [ 1617.222103][ T3165] _raw_read_lock+0x36/0x50 [ 1617.226870][ T3165] send_sigio+0x101/0x370 [ 1617.231377][ T3165] kill_fasync+0x24d/0x4d0 [ 1617.235964][ T3165] lease_break_callback+0x26/0x30 [ 1617.241168][ T3165] __break_lease+0x81c/0x1e80 [ 1617.246022][ T3165] vfs_truncate+0x449/0x540 [ 1617.250703][ T3165] do_sys_truncate+0xf3/0x1c0 [ 1617.255561][ T3165] __x64_sys_truncate+0x5b/0x70 [ 1617.260588][ T3165] do_syscall_64+0x14d/0xf80 [ 1617.265355][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.271425][ T3165] [ 1617.273747][ T3165] -> (&f_owner->lock){....}-{3:3} { [ 1617.279137][ T3165] INITIAL USE at: [ 1617.283209][ T3165] lock_acquire+0xf0/0x2e0 [ 1617.289544][ T3165] _raw_write_lock_irq+0x3d/0x50 [ 1617.296412][ T3165] __f_setown+0x67/0x370 [ 1617.302573][ T3165] do_fcntl+0x171c/0x1a20 [ 1617.309077][ T3165] __se_sys_fcntl+0xc8/0x150 [ 1617.315575][ T3165] do_syscall_64+0x14d/0xf80 [ 1617.322087][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.329938][ T3165] INITIAL READ USE at: [ 1617.334463][ T3165] lock_acquire+0xf0/0x2e0 [ 1617.341234][ T3165] _raw_read_lock_irqsave+0x48/0x60 [ 1617.348786][ T3165] send_sigio+0x38/0x370 [ 1617.355381][ T3165] kill_fasync+0x24d/0x4d0 [ 1617.362230][ T3165] sock_wake_async+0x137/0x160 [ 1617.369342][ T3165] sk_wake_async+0x184/0x280 [ 1617.376286][ T3165] unix_release_sock+0x74f/0xc80 [ 1617.383590][ T3165] unix_release+0x92/0xd0 [ 1617.390315][ T3165] sock_close+0xc3/0x240 [ 1617.396915][ T3165] __fput+0x44f/0xa70 [ 1617.403255][ T3165] task_work_run+0x1d9/0x270 [ 1617.410194][ T3165] get_signal+0x11eb/0x1330 [ 1617.417047][ T3165] arch_do_signal_or_restart+0xbc/0x830 [ 1617.424952][ T3165] exit_to_user_mode_loop+0x86/0x480 [ 1617.432618][ T3165] do_syscall_64+0x32d/0xf80 [ 1617.439563][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.447808][ T3165] } [ 1617.450477][ T3165] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1617.459503][ T3165] ... acquired at: [ 1617.463477][ T3165] _raw_read_lock_irqsave+0x48/0x60 [ 1617.468864][ T3165] send_sigio+0x38/0x370 [ 1617.473290][ T3165] kill_fasync+0x24d/0x4d0 [ 1617.477911][ T3165] sock_wake_async+0x137/0x160 [ 1617.482878][ T3165] sk_wake_async+0x184/0x280 [ 1617.487663][ T3165] unix_release_sock+0x74f/0xc80 [ 1617.492788][ T3165] unix_release+0x92/0xd0 [ 1617.497470][ T3165] sock_close+0xc3/0x240 [ 1617.501900][ T3165] __fput+0x44f/0xa70 [ 1617.506063][ T3165] task_work_run+0x1d9/0x270 [ 1617.510827][ T3165] get_signal+0x11eb/0x1330 [ 1617.515512][ T3165] arch_do_signal_or_restart+0xbc/0x830 [ 1617.521323][ T3165] exit_to_user_mode_loop+0x86/0x480 [ 1617.526791][ T3165] do_syscall_64+0x32d/0xf80 [ 1617.531559][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.537623][ T3165] [ 1617.539945][ T3165] -> (&new->fa_lock){....}-{3:3} { [ 1617.545165][ T3165] INITIAL USE at: [ 1617.549145][ T3165] lock_acquire+0xf0/0x2e0 [ 1617.555299][ T3165] _raw_write_lock_irq+0x3d/0x50 [ 1617.561974][ T3165] fasync_remove_entry+0xf1/0x1c0 [ 1617.568739][ T3165] sock_fasync+0x85/0xf0 [ 1617.574732][ T3165] __fput+0x8a5/0xa70 [ 1617.580480][ T3165] task_work_run+0x1d9/0x270 [ 1617.586823][ T3165] exit_to_user_mode_loop+0xed/0x480 [ 1617.593858][ T3165] do_syscall_64+0x32d/0xf80 [ 1617.600189][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.607993][ T3165] INITIAL READ USE at: [ 1617.612521][ T3165] lock_acquire+0xf0/0x2e0 [ 1617.619113][ T3165] _raw_read_lock_irqsave+0x48/0x60 [ 1617.626483][ T3165] kill_fasync+0x199/0x4d0 [ 1617.633080][ T3165] sock_wake_async+0x137/0x160 [ 1617.640023][ T3165] sk_wake_async+0x184/0x280 [ 1617.646791][ T3165] unix_release_sock+0x74f/0xc80 [ 1617.653905][ T3165] unix_release+0x92/0xd0 [ 1617.660406][ T3165] sock_close+0xc3/0x240 [ 1617.666822][ T3165] __fput+0x44f/0xa70 [ 1617.672979][ T3165] task_work_run+0x1d9/0x270 [ 1617.679739][ T3165] get_signal+0x11eb/0x1330 [ 1617.686419][ T3165] arch_do_signal_or_restart+0xbc/0x830 [ 1617.694151][ T3165] exit_to_user_mode_loop+0x86/0x480 [ 1617.701605][ T3165] do_syscall_64+0x32d/0xf80 [ 1617.708476][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.716549][ T3165] } [ 1617.719131][ T3165] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1617.727981][ T3165] ... acquired at: [ 1617.731864][ T3165] _raw_read_lock_irqsave+0x48/0x60 [ 1617.737234][ T3165] kill_fasync+0x199/0x4d0 [ 1617.741823][ T3165] __start_tty+0x18c/0x220 [ 1617.746419][ T3165] tty_send_xchar+0x1d2/0x4d0 [ 1617.751265][ T3165] tty_ioctl+0x9c5/0xde0 [ 1617.755678][ T3165] __se_sys_ioctl+0xfc/0x170 [ 1617.760443][ T3165] do_syscall_64+0x14d/0xf80 [ 1617.765209][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.771288][ T3165] [ 1617.773614][ T3165] -> (&tty->flow.lock){....}-{3:3} { [ 1617.778914][ T3165] INITIAL USE at: [ 1617.782807][ T3165] lock_acquire+0xf0/0x2e0 [ 1617.788877][ T3165] _raw_spin_lock_irqsave+0x40/0x60 [ 1617.795643][ T3165] start_tty+0x20/0x70 [ 1617.801282][ T3165] n_tty_set_termios+0xa7c/0x10c0 [ 1617.807870][ T3165] tty_set_termios+0xdb3/0x1800 [ 1617.814287][ T3165] set_termios+0x566/0x710 [ 1617.820367][ T3165] tty_mode_ioctl+0x4a6/0x7d0 [ 1617.826612][ T3165] tty_ioctl+0x9c5/0xde0 [ 1617.832473][ T3165] __se_sys_ioctl+0xfc/0x170 [ 1617.838715][ T3165] do_syscall_64+0x14d/0xf80 [ 1617.844872][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.852324][ T3165] } [ 1617.854840][ T3165] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1617.863520][ T3165] ... acquired at: [ 1617.867323][ T3165] _raw_spin_lock_irqsave+0x40/0x60 [ 1617.872694][ T3165] stop_tty+0x2f/0x150 [ 1617.876944][ T3165] kbd_event+0x2ec1/0x40d0 [ 1617.881533][ T3165] input_handle_events_default+0xd4/0x1a0 [ 1617.887429][ T3165] input_pass_values+0x288/0x890 [ 1617.892550][ T3165] input_event_dispose+0x330/0x6b0 [ 1617.897841][ T3165] input_inject_event+0x1dd/0x340 [ 1617.903041][ T3165] evdev_write+0x325/0x4c0 [ 1617.907716][ T3165] vfs_write+0x29a/0xb90 [ 1617.912158][ T3165] ksys_write+0x150/0x270 [ 1617.916660][ T3165] do_syscall_64+0x14d/0xf80 [ 1617.921425][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.927583][ T3165] [ 1617.929903][ T3165] [ 1617.929903][ T3165] stack backtrace: [ 1617.935792][ T3165] CPU: 0 UID: 0 PID: 3165 Comm: syz.5.8204 Tainted: G L syzkaller #0 PREEMPT(full) [ 1617.935815][ T3165] Tainted: [L]=SOFTLOCKUP [ 1617.935821][ T3165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1617.935832][ T3165] Call Trace: [ 1617.935841][ T3165] [ 1617.935848][ T3165] dump_stack_lvl+0xe8/0x150 [ 1617.935869][ T3165] __lock_acquire+0x2a94/0x2cf0 [ 1617.935896][ T3165] lock_acquire+0xf0/0x2e0 [ 1617.935913][ T3165] ? stop_tty+0x2f/0x150 [ 1617.935936][ T3165] _raw_spin_lock_irqsave+0x40/0x60 [ 1617.935952][ T3165] ? stop_tty+0x2f/0x150 [ 1617.935972][ T3165] stop_tty+0x2f/0x150 [ 1617.935993][ T3165] kbd_event+0x2ec1/0x40d0 [ 1617.936008][ T3165] ? kernel_fpu_end+0x4f/0x80 [ 1617.936022][ T3165] ? blake2s_compress+0x1e17/0x1eb0 [ 1617.936041][ T3165] ? __pfx_kbd_event+0x10/0x10 [ 1617.936056][ T3165] ? kvm_sched_clock_read+0x11/0x20 [ 1617.936072][ T3165] ? sched_clock+0x3f/0x60 [ 1617.936087][ T3165] ? sched_clock_cpu+0x74/0x440 [ 1617.936109][ T3165] ? __lock_acquire+0x6b5/0x2cf0 [ 1617.936129][ T3165] ? __pfx_blake2s_compress+0x10/0x10 [ 1617.936145][ T3165] ? __lock_acquire+0x6b5/0x2cf0 [ 1617.936165][ T3165] ? __lock_acquire+0x6b5/0x2cf0 [ 1617.936184][ T3165] ? __lock_acquire+0x6b5/0x2cf0 [ 1617.936205][ T3165] ? __lock_acquire+0x6b5/0x2cf0 [ 1617.936223][ T3165] ? lock_acquire+0xf0/0x2e0 [ 1617.936241][ T3165] input_handle_events_default+0xd4/0x1a0 [ 1617.936259][ T3165] ? input_pass_values+0x8d/0x890 [ 1617.936280][ T3165] input_pass_values+0x288/0x890 [ 1617.936304][ T3165] ? input_handle_event+0x70c/0xf30 [ 1617.936322][ T3165] input_event_dispose+0x330/0x6b0 [ 1617.936342][ T3165] input_inject_event+0x1dd/0x340 [ 1617.936361][ T3165] ? input_inject_event+0xb6/0x340 [ 1617.936380][ T3165] evdev_write+0x325/0x4c0 [ 1617.936396][ T3165] ? __pfx_evdev_write+0x10/0x10 [ 1617.936411][ T3165] ? bpf_lsm_file_permission+0x9/0x20 [ 1617.936429][ T3165] ? security_file_permission+0x75/0x260 [ 1617.936448][ T3165] ? rw_verify_area+0x255/0x4d0 [ 1617.936463][ T3165] ? __pfx_evdev_write+0x10/0x10 [ 1617.936477][ T3165] vfs_write+0x29a/0xb90 [ 1617.936495][ T3165] ? __pfx_vfs_write+0x10/0x10 [ 1617.936510][ T3165] ? __fget_files+0x2a/0x420 [ 1617.936532][ T3165] ? __fget_files+0x2a/0x420 [ 1617.936558][ T3165] ? __fget_files+0x3a0/0x420 [ 1617.936578][ T3165] ? __fget_files+0x2a/0x420 [ 1617.936601][ T3165] ksys_write+0x150/0x270 [ 1617.936618][ T3165] ? __pfx_ksys_write+0x10/0x10 [ 1617.936635][ T3165] ? __secure_computing+0xe1/0x2a0 [ 1617.936652][ T3165] do_syscall_64+0x14d/0xf80 [ 1617.936669][ T3165] ? trace_irq_disable+0x3b/0x150 [ 1617.936682][ T3165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.936697][ T3165] ? clear_bhb_loop+0x40/0x90 [ 1617.936713][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.936728][ T3165] RIP: 0033:0x7f763f39c799 [ 1617.936743][ T3165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.936756][ T3165] RSP: 002b:00007f764025c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1617.936773][ T3165] RAX: ffffffffffffffda RBX: 00007f763f616090 RCX: 00007f763f39c799 [ 1617.936785][ T3165] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000002 [ 1617.936796][ T3165] RBP: 00007f763f432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1617.936806][ T3165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1617.936815][ T3165] R13: 00007f763f616128 R14: 00007f763f616090 R15: 00007f763f73fa48 [ 1617.936831][ T3165] [ 1618.295377][ T3162] usb usb8: usbfs: process 3162 (syz.3.8199) did not claim interface 0 before use [ 1618.425893][ T3164] syzkaller0: entered promiscuous mode [ 1618.450738][ T3164] syzkaller0: entered allmulticast mode