last executing test programs: 3m42.413198349s ago: executing program 0 (id=1214): socket$can_j1939(0x1d, 0x2, 0x7) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m41.228425837s ago: executing program 0 (id=1218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0x4000, 0x4000}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008"], 0x6c}}, 0x0) 3m40.644489215s ago: executing program 0 (id=1223): syz_emit_vhci(0x0, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0xcd3, &(0x7f0000000400)={0x0, 0x5889, 0x1000, 0x0, 0xffeffc03}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x61, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x5887, 0x1000, 0x3, 0x36f}, &(0x7f0000001140)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x8000067f, 0x4, 0x0, 0x0) 3m38.855219328s ago: executing program 0 (id=1231): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0/file0\x00', 0x8) dup(r0) 3m37.579268386s ago: executing program 0 (id=1239): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6, 0x2}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x54}], 0x1, 0x41, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 3m34.050254168s ago: executing program 0 (id=1250): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0xec) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x200006, 0x0) splice(r5, 0x0, r2, 0x0, 0xa, 0x1) write(r3, &(0x7f0000000240)="c6", 0x1) 3m32.908628711s ago: executing program 32 (id=1250): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0xec) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x200006, 0x0) splice(r5, 0x0, r2, 0x0, 0xa, 0x1) write(r3, &(0x7f0000000240)="c6", 0x1) 18.550051086s ago: executing program 4 (id=1860): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 16.507909848s ago: executing program 4 (id=1864): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r4, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) 15.041446644s ago: executing program 4 (id=1866): socket$nl_route(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 8.105974602s ago: executing program 2 (id=1883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 7.205170114s ago: executing program 2 (id=1885): socket$igmp(0x2, 0x3, 0x2) timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x24004045) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) r5 = socket$inet(0x2, 0xa, 0x8001) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 6.936568635s ago: executing program 5 (id=1886): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x101002, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000480)={0x0, 0xcc12, 0x800, 0xffffffff, 0xbfdffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) userfaultfd(0x80001) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) 6.574355371s ago: executing program 4 (id=1887): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.17644031s ago: executing program 3 (id=1888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f8666bf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r5 = dup3(r4, r3, 0x0) recvmmsg$unix(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f0000003640)=""/4103, 0x1007}], 0x1}}], 0x1, 0x58ca2280, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x4, 0x9, 0x2, 0x4, 0xffffffff7fffffff, 0x1003, 0x3, 0x9b9, 0xfff, 0xf, 0x3, 0x2b5f7546, 0xfffffffffffffc00, 0x400, 0xffff], 0x100000, 0x1feb97}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.16249022s ago: executing program 5 (id=1889): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', 0x7}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "00017555d000", '\x00', "03000006", '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(r2) kcmp(r3, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001200050926bd7000fdd9df442b0904004e254e26fdffffff240900000600000006000000030000000500000001000000ffffffff", @ANYRES32=0x0, @ANYBLOB="030001000010000006000000ffffffff09000100c5856c0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x26000800}, 0x20000800) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 5.995552154s ago: executing program 2 (id=1890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdc9b, 0x1, 0x1}, {0xe0000, 0xffffff81, 0x0, 0xa, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000580)="1e5002f9c378fbf52656", 0xa}], 0x1}, 0x4c00c) 5.95565633s ago: executing program 1 (id=1891): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.577466574s ago: executing program 5 (id=1892): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xffbffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 5.202500117s ago: executing program 3 (id=1893): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x9, 0x3, 0x3, 0x0, 0x7}) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) keyctl$revoke(0x3, r4) 4.464056115s ago: executing program 2 (id=1894): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x1a, '\x00', [@generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x7, "e80ee304ecb784"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x1c8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.655330823s ago: executing program 2 (id=1895): socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c80, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$binfmt_elf64(r0, 0x0, 0x78) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.532991019s ago: executing program 5 (id=1896): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g&\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05N\xb9\x1dOr\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r3, 0xffff) close(0x3) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x1, 0x0, 0x8000}) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r4, 0x32d7, 0x0, 0x46, 0x0, 0x0) 3.515029928s ago: executing program 4 (id=1897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffb) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x19, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x48}}, 0x40000) 3.416960484s ago: executing program 1 (id=1898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x44000) 2.859077957s ago: executing program 3 (id=1899): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 2.596302515s ago: executing program 3 (id=1900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x3}}]}, {0x4}, {0x2, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20802, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 1.79358547s ago: executing program 1 (id=1901): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.431903109s ago: executing program 3 (id=1902): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f0000008140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x2000000000000000}]) 1.36767839s ago: executing program 1 (id=1903): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x19, '\x00', [@generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x1, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x7, "e80ee304ecb784"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x78, 0x29, 0x36, {0x5e, 0xb, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x0]}}, @generic={0x1, 0x3, "2bdb86"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1f8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.346543406s ago: executing program 5 (id=1904): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, &(0x7f0000001840)=""/242, 0xeeef0000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) 1.096650454s ago: executing program 3 (id=1905): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) syz_open_dev$video(0x0, 0x0, 0x10b200) r3 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000000) syz_open_dev$video(0x0, 0x0, 0x10b200) r4 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 1.05132236s ago: executing program 2 (id=1906): socket$netlink(0x10, 0x3, 0x8) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x5e91, 0xbc03, 0x6, 0x0, 0x0) 757.618133ms ago: executing program 4 (id=1907): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x9840) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 362.724453ms ago: executing program 1 (id=1908): socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 111.19914ms ago: executing program 5 (id=1909): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ftruncate(r5, 0x2007ffd) sendfile(r3, r4, 0x0, 0x1000a3) 0s ago: executing program 1 (id=1910): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x400) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0xfffffffffffffffe, 0x6, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0xa846, 0x10, 0x3, 0x178}, &(0x7f0000002380)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 380.811731][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.832293][ T24] usb 3-1: config 0 has no interface number 0 [ 380.838480][ T24] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.882252][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 380.884873][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 380.891491][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.916370][ T24] usb 3-1: Product: syz [ 380.920607][ T24] usb 3-1: Manufacturer: syz [ 380.926570][ T796] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 380.945239][ T24] usb 3-1: SerialNumber: syz [ 380.963717][ T24] usb 3-1: config 0 descriptor?? [ 380.967617][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.980794][ T24] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 380.997444][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 381.006123][ T24] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 381.016108][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.040068][ T796] usb 2-1: Product: syz [ 381.047295][ T796] usb 2-1: Manufacturer: syz [ 381.052902][ T9] usb 4-1: Product: syz [ 381.057198][ T9] usb 4-1: Manufacturer: syz [ 381.061833][ T9] usb 4-1: SerialNumber: syz [ 381.066747][ T796] usb 2-1: SerialNumber: syz [ 381.093946][ T9] usb 4-1: config 0 descriptor?? [ 381.136493][ T5834] aiptek 5-1:17.0: Aiptek tried all speeds, no sane response [ 381.145733][ T5834] aiptek 5-1:17.0: probe with driver aiptek failed with error -22 [ 381.176100][ T5834] usb 5-1: USB disconnect, device number 24 [ 381.177851][ T24] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 381.276452][ T24] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 381.374663][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 381.418741][ T5898] usb 3-1: USB disconnect, device number 23 [ 381.889572][ T9849] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 381.981466][ T796] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 382.002523][ T5958] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 382.034427][ T796] usb 2-1: USB disconnect, device number 23 [ 382.094185][ T9854] syzkaller0: entered promiscuous mode [ 382.099865][ T9854] syzkaller0: entered allmulticast mode [ 382.163395][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 382.187352][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.199652][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.219984][ T5958] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 382.239581][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.261591][ T5958] usb 5-1: config 0 descriptor?? [ 382.279652][ T5958] hub 5-1:0.0: USB hub found [ 382.408627][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 382.408646][ T29] audit: type=1326 audit(1774861858.375:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72559c799 code=0x7fc00000 [ 383.071211][ T29] audit: type=1326 audit(1774861858.405:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.2.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc72559c799 code=0x7fc00000 [ 383.103214][ T9847] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1190'. [ 383.132602][ T9847] .30ªX¹¦D: renamed from gretap0 (while UP) [ 383.161051][ T9847] .30ªX¹¦D: entered allmulticast mode [ 383.252637][ T9847] A link change request failed with some changes committed already. Interface .30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 383.311996][ T5958] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 383.375736][ T9847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.387282][ T9847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.486084][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 383.530772][ T9] usb 4-1: USB disconnect, device number 27 [ 383.619424][ T5958] usbhid 5-1:0.0: can't add hid device: -71 [ 383.850828][ T5958] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 383.896884][ T5958] usb 5-1: USB disconnect, device number 25 [ 385.922546][ T5958] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 386.094245][ T5958] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.212763][ T5958] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 386.254948][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.280839][ T5958] usb 1-1: config 0 descriptor?? [ 386.297405][ T5958] pwc: Askey VC010 type 2 USB webcam detected. [ 386.624485][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 386.717909][ T5958] pwc: recv_control_msg error -32 req 02 val 2b00 [ 386.734185][ T5958] pwc: recv_control_msg error -32 req 02 val 2700 [ 386.742323][ T5958] pwc: recv_control_msg error -32 req 02 val 2c00 [ 386.757314][ T5958] pwc: recv_control_msg error -32 req 04 val 1000 [ 386.774178][ T5958] pwc: recv_control_msg error -32 req 04 val 1300 [ 386.792217][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 386.797635][ T5958] pwc: recv_control_msg error -32 req 04 val 1400 [ 386.806132][ T5958] pwc: recv_control_msg error -32 req 02 val 2000 [ 386.818226][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 386.832245][ T5958] pwc: recv_control_msg error -32 req 02 val 2100 [ 386.839550][ T9] usb 5-1: config 0 has no interface number 0 [ 386.850051][ T5958] pwc: recv_control_msg error -32 req 04 val 1500 [ 386.856770][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 386.870198][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 386.879718][ T9] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 386.888315][ T9] usb 5-1: Product: syz [ 386.897159][ T9] usb 5-1: config 0 descriptor?? [ 386.915985][ T9] iowarrior 5-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 387.069644][ T5958] pwc: recv_control_msg error -71 req 02 val 2400 [ 387.079535][ T5958] pwc: recv_control_msg error -71 req 02 val 2600 [ 387.094631][ T5958] pwc: recv_control_msg error -71 req 02 val 2900 [ 387.101589][ T5958] pwc: recv_control_msg error -71 req 02 val 2800 [ 387.110357][ T5958] pwc: recv_control_msg error -71 req 04 val 1100 [ 387.115132][ T24] usb 5-1: USB disconnect, device number 26 [ 387.116930][ C1] iowarrior 5-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19 [ 387.117829][ T5958] pwc: recv_control_msg error -71 req 04 val 1200 [ 387.183812][ T5958] pwc: Registered as video103. [ 387.217055][ T5958] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 387.281279][ T5958] usb 1-1: USB disconnect, device number 21 [ 388.347334][ T9931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.798289][ T9938] bridge0: entered promiscuous mode [ 388.821674][ T9938] vlan2: entered promiscuous mode [ 389.131385][ T9937] syzkaller0: entered promiscuous mode [ 389.137039][ T9937] syzkaller0: entered allmulticast mode [ 389.716793][ T9958] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 389.757337][ T9958] kvm: requested 45257 ns i8254 timer period limited to 200000 ns [ 389.782743][ T9958] kvm: requested 133257 ns i8254 timer period limited to 200000 ns [ 389.820175][ T9958] kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 389.833461][ T9958] kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 389.846908][ T9958] kvm: requested 88838 ns i8254 timer period limited to 200000 ns [ 389.859886][ T9958] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 389.871754][ T9958] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 389.886418][ T9958] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 389.911024][ T9958] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 390.852471][ T9973] netlink: 'syz.1.1224': attribute type 13 has an invalid length. [ 391.183476][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'. [ 391.412926][ T29] audit: type=1326 audit(1774861867.325:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ebf9c799 code=0x7ffc0000 [ 391.510284][ T29] audit: type=1326 audit(1774861867.325:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ebf9c799 code=0x7ffc0000 [ 391.672591][ T29] audit: type=1326 audit(1774861867.325:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f00ebf9c799 code=0x7ffc0000 [ 391.791414][ T29] audit: type=1326 audit(1774861867.325:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ebf9c799 code=0x7ffc0000 [ 391.907764][ T29] audit: type=1326 audit(1774861867.325:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ebf9c799 code=0x7ffc0000 [ 391.977053][ T9993] binder: BINDER_SET_CONTEXT_MGR already set [ 391.993496][ T9993] binder: 9992:9993 ioctl 4018620d 200000004a80 returned -16 [ 392.034014][ T29] audit: type=1326 audit(1774861867.335:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f00ebf9c799 code=0x7ffc0000 [ 392.084966][ T29] audit: type=1326 audit(1774861867.335:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ebf9c799 code=0x7ffc0000 [ 392.107885][ T29] audit: type=1326 audit(1774861867.335:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ebf9c799 code=0x7ffc0000 [ 392.134328][ T29] audit: type=1326 audit(1774861867.335:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00ebf9c799 code=0x7ffc0000 [ 392.158434][ T9996] netlink: 'syz.4.1233': attribute type 1 has an invalid length. [ 392.170584][ T29] audit: type=1326 audit(1774861867.335:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ebf9c799 code=0x7ffc0000 [ 392.301398][T10001] syzkaller0: entered promiscuous mode [ 392.307543][T10001] syzkaller0: entered allmulticast mode [ 393.698029][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.144099][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.564297][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.301577][T10047] ALSA: seq fatal error: cannot create timer (-16) [ 396.322865][ T58] bridge_slave_1: left allmulticast mode [ 396.329019][ T58] bridge_slave_1: left promiscuous mode [ 396.352171][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.407021][ T58] bridge_slave_0: left allmulticast mode [ 396.413794][ T58] bridge_slave_0: left promiscuous mode [ 396.421186][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.652210][ T5958] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 397.027425][T10057] cgroup: fork rejected by pids controller in /syz2 [ 397.056092][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 397.129739][ T5958] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 397.141199][ T5958] usb 5-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 397.188558][ T5958] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 397.252272][ T5958] usb 5-1: config 1 has no interface number 1 [ 397.268551][ T5958] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 397.340538][ T5958] usb 5-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x2E, changing to 0xE [ 397.427499][ T5958] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 101, changing to 7 [ 397.484187][ T5958] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 26214, setting to 1024 [ 397.530358][ T5958] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.582517][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.601749][ T5958] usb 5-1: Product: syz [ 397.607268][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.637565][ T5958] usb 5-1: Manufacturer: syz [ 397.647492][ T5958] usb 5-1: SerialNumber: syz [ 397.654844][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.744075][ T58] bond0 (unregistering): Released all slaves [ 398.049917][T10049] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1248'. [ 398.287945][ T5958] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 398.303223][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 398.321617][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 398.336938][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 398.345281][ T5958] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 398.356502][ T5958] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 398.368083][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 398.378265][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 398.752701][ T5958] usb 5-1: USB disconnect, device number 27 [ 398.820142][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.365280][ T5958] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 399.469165][T10291] syzkaller0: entered promiscuous mode [ 399.474812][T10291] syzkaller0: entered allmulticast mode [ 399.532346][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 399.551677][ T5958] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 399.588809][ T5958] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 399.600864][ T5958] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 399.619170][ T5958] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 399.664235][ T5958] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 399.688340][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.697169][ T5958] usb 5-1: Product: syz [ 399.701374][ T5958] usb 5-1: Manufacturer: syz [ 399.712280][ T5958] usb 5-1: SerialNumber: syz [ 399.747408][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 399.773751][ T5958] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input24 [ 400.004680][ T5958] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 400.021427][ T5958] (id 0x00) [ 400.035785][T10304] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 400.144960][ T5958] rc_core: IR keymap rc-imon-pad not found [ 400.161188][ T5958] Registered IR keymap rc-empty [ 400.176216][ T5958] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 400.204211][ T5958] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 400.269270][ T5958] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 400.288453][ T5958] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input25 [ 400.321464][ T5958] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:28> initialized [ 400.478098][ T5830] Bluetooth: hci0: command tx timeout [ 400.942737][ T5958] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 401.095773][ T5958] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 401.107455][ T5958] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 401.118640][ T5958] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 401.130350][ T5958] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 401.139745][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.152696][T10314] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 401.792396][T10304] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 401.816478][T10309] veth3: entered promiscuous mode [ 401.861009][T10310] erspan0: entered allmulticast mode [ 401.892261][ T5898] usb 5-1: USB disconnect, device number 28 [ 401.899215][T10317] imon:send_packet: packet tx failed (-71) [ 401.907587][ T58] hsr_slave_0: left promiscuous mode [ 401.927680][ T58] hsr_slave_1: left promiscuous mode [ 401.940463][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.952262][T10317] imon:vfd_write: send packet #4 failed [ 401.968316][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.008863][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.025098][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.059726][ T58] veth1_macvtap: left promiscuous mode [ 402.074288][ T58] veth0_macvtap: left promiscuous mode [ 402.081901][ T58] veth1_vlan: left promiscuous mode [ 402.090346][ T58] veth0_vlan: left promiscuous mode [ 402.552494][ T5830] Bluetooth: hci0: command tx timeout [ 403.156754][ T58] team0 (unregistering): Port device team_slave_1 removed [ 403.209417][ T58] team0 (unregistering): Port device team_slave_0 removed [ 403.722910][T10340] create_pit_timer: 29 callbacks suppressed [ 403.722961][T10340] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 403.857290][T10340] kvm: pic: non byte read [ 403.862676][T10340] kvm: pic: level sensitive irq not supported [ 403.862780][T10340] kvm: pic: non byte read [ 403.888868][T10340] kvm: pic: level sensitive irq not supported [ 403.888976][T10340] kvm: pic: non byte read [ 403.935038][T10281] chnl_net:caif_netlink_parms(): no params data found [ 404.444694][T10281] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.479547][ T5958] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 404.489598][T10281] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.493995][ T5958] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input26 [ 404.521300][T10281] bridge_slave_0: entered allmulticast mode [ 404.547305][T10281] bridge_slave_0: entered promiscuous mode [ 404.553266][T10361] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 404.561778][T10361] kvm: pic: level sensitive irq not supported [ 404.572888][T10361] kvm: pic: non byte read [ 404.608190][ T5958] usb 2-1: USB disconnect, device number 24 [ 404.614281][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 404.617456][T10281] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.630885][T10361] kvm: pic: level sensitive irq not supported [ 404.630973][T10361] kvm: pic: non byte read [ 404.647269][T10361] kvm: pic: level sensitive irq not supported [ 404.647354][T10361] kvm: pic: non byte read [ 404.653874][ T5830] Bluetooth: hci0: command tx timeout [ 404.658819][T10361] kvm: pic: level sensitive irq not supported [ 404.670502][T10281] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.687699][T10281] bridge_slave_1: entered allmulticast mode [ 404.696387][T10281] bridge_slave_1: entered promiscuous mode [ 404.742486][T10361] kvm: pic: non byte read [ 404.787663][T10361] kvm: pic: level sensitive irq not supported [ 404.787755][T10361] kvm: pic: non byte read [ 404.834790][T10361] kvm: pic: level sensitive irq not supported [ 404.834891][T10361] kvm: pic: non byte read [ 404.868162][T10361] kvm: pic: level sensitive irq not supported [ 404.868252][T10361] kvm: pic: non byte read [ 404.892746][T10361] kvm: pic: level sensitive irq not supported [ 404.894985][T10281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.971438][T10281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.117179][T10281] team0: Port device team_slave_0 added [ 405.120430][T10281] team0: Port device team_slave_1 added [ 405.267239][T10281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.267260][T10281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.267288][T10281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.269373][T10281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.269390][T10281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.269418][T10281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.371717][T10281] hsr_slave_0: entered promiscuous mode [ 405.373256][T10281] hsr_slave_1: entered promiscuous mode [ 405.374076][T10281] debugfs: 'hsr0' already exists in 'hsr' [ 405.374099][T10281] Cannot create hsr debugfs directory [ 405.968701][T10281] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 405.998623][T10281] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 406.007639][T10281] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 406.110003][T10281] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 406.872278][ T5830] Bluetooth: hci0: command tx timeout [ 407.669052][T10421] syzkaller0: entered promiscuous mode [ 407.674693][T10421] syzkaller0: entered allmulticast mode [ 407.964159][T10281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.078618][T10281] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.133759][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.140904][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.193389][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.200631][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.771852][T10281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.377811][T10429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.426213][T10281] veth0_vlan: entered promiscuous mode [ 409.570630][T10281] veth1_vlan: entered promiscuous mode [ 409.722395][ T5835] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 410.041548][T10281] veth0_macvtap: entered promiscuous mode [ 410.060707][T10281] veth1_macvtap: entered promiscuous mode [ 410.067256][ T5835] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 410.081142][ T5835] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 410.132459][ T5835] usb 2-1: config 220 interface 0 has no altsetting 0 [ 410.212630][ T5835] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 410.266677][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.280561][T10281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.341038][ T5835] usb 2-1: Product: syz [ 410.351108][ T5835] usb 2-1: Manufacturer: syz [ 410.371373][ T5835] usb 2-1: SerialNumber: syz [ 410.377248][T10281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.424500][T10453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1282'. [ 410.439280][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.532995][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.541780][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.552171][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 410.552188][ T29] audit: type=1804 audit(1774861886.485:131): pid=10454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1283" name="/newroot/249/file1" dev="fuse" ino=1 res=1 errno=0 [ 410.656573][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.679975][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 410.944198][ T5835] usb 2-1: USB disconnect, device number 25 [ 410.954973][ T9191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.989557][ T9191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.290863][ T424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.330599][ T424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.385160][T10472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.958738][T10487] netlink: 'syz.3.1288': attribute type 8 has an invalid length. [ 412.682870][T10494] syzkaller0: entered promiscuous mode [ 412.705204][T10494] syzkaller0: entered allmulticast mode [ 413.579383][T10511] syzkaller0: entered promiscuous mode [ 413.608483][T10511] syzkaller0: entered allmulticast mode [ 413.676077][T10514] tipc: Enabled bearer , priority 0 [ 413.700249][T10510] tipc: Resetting bearer [ 413.761616][T10510] tipc: Disabling bearer [ 413.993438][T10520] blkio.reset_stats is deprecated [ 414.492189][ T5835] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 414.665229][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.746086][ T5835] usb 2-1: config 0 has no interfaces? [ 414.761576][ T5835] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 414.783904][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.870486][ T5835] usb 2-1: config 0 descriptor?? [ 414.947177][ T29] audit: type=1804 audit(1774861890.915:132): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1301" name="/newroot/281/file1" dev="fuse" ino=1 res=1 errno=0 [ 415.114327][ T5835] usb 2-1: USB disconnect, device number 26 [ 415.141239][T10535] syzkaller0: entered promiscuous mode [ 419.287150][T10571] bond_slave_0: entered promiscuous mode [ 419.293059][T10571] bond_slave_1: entered promiscuous mode [ 419.336164][T10571] vlan2: entered promiscuous mode [ 419.350367][T10571] bond0: entered promiscuous mode [ 419.592443][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.667151][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1316'. [ 421.035782][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 421.398083][T10589] bond_slave_0: entered promiscuous mode [ 421.403875][T10589] bond_slave_1: entered promiscuous mode [ 421.476066][T10589] vlan0: entered promiscuous mode [ 421.501606][T10589] bond0: entered promiscuous mode [ 422.144595][T10595] netlink: 'syz.4.1320': attribute type 1 has an invalid length. [ 422.299294][T10598] bond3: (slave gretap0): making interface the new active one [ 422.307698][T10598] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 422.497567][T10595] vlan0: entered allmulticast mode [ 422.508926][T10595] bond3: entered allmulticast mode [ 422.517021][T10595] gretap0: entered allmulticast mode [ 422.534435][T10595] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 422.566291][T10603] syzkaller0: entered promiscuous mode [ 422.571932][T10603] syzkaller0: entered allmulticast mode [ 422.602241][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 422.762186][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 422.767819][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 422.809903][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.832450][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.880072][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 422.921354][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 422.955206][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.986026][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 423.000860][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 423.022171][ T9] usb 3-1: Manufacturer: syz [ 423.049759][ T9] usb 3-1: config 0 descriptor?? [ 423.494481][ T9] rc_core: IR keymap rc-hauppauge not found [ 423.510347][ T9] Registered IR keymap rc-empty [ 423.532532][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 423.572418][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 423.592761][ T5835] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 423.603488][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 423.688054][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input27 [ 423.748073][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 423.782307][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 423.802575][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 423.809554][ T5835] usb 5-1: config 0 has no interfaces? [ 423.815258][ T5835] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 423.832324][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.863351][ T5835] usb 5-1: config 0 descriptor?? [ 423.872324][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 423.912550][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 423.943481][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 423.992424][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 424.058134][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 424.092317][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 424.392660][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 424.442648][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 424.461213][T10633] kvm: kvm [10626]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 424.475559][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 424.495116][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 424.508203][T10633] kvm: kvm [10626]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 424.532636][ T9] usb 3-1: USB disconnect, device number 24 [ 424.635033][ T5835] usb 5-1: USB disconnect, device number 29 [ 426.362307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 426.427092][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 426.466521][ T24] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 427.426076][T10686] syzkaller0: entered promiscuous mode [ 427.452333][T10686] syzkaller0: entered allmulticast mode [ 429.313444][T10722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1348'. [ 430.289197][T10740] syzkaller0: entered promiscuous mode [ 430.326045][T10740] syzkaller0: entered allmulticast mode [ 431.832516][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 432.012166][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 432.034258][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 432.081126][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.129100][ T24] usb 3-1: config 0 descriptor?? [ 432.186546][T10772] netlink: set zone limit has 4 unknown bytes [ 432.262109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 432.416639][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 432.497927][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 432.565579][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 432.583342][ T24] usb 3-1: media controller created [ 432.611575][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.633634][ T24] stb0899_attach: Driver disabled by Kconfig [ 433.640546][ T24] az6027: no front-end attached [ 433.640546][ T24] [ 433.694180][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 433.759178][T10785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'. [ 433.785364][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 433.832714][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 433.883791][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 433.904290][T10757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.928974][T10785] vlan4: entered promiscuous mode [ 433.972737][T10757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.981527][T10785] syz_tun: entered promiscuous mode [ 434.059881][ T796] usb 3-1: USB disconnect, device number 25 [ 434.359813][ T796] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 434.881210][T10807] syzkaller0: entered promiscuous mode [ 434.892021][T10807] syzkaller0: entered allmulticast mode [ 435.447327][T10816] syzkaller0: entered promiscuous mode [ 435.460139][T10816] syzkaller0: entered allmulticast mode [ 435.487775][T10816] tipc: Enabled bearer , priority 0 [ 435.511946][T10815] tipc: Resetting bearer [ 435.556759][T10815] tipc: Disabling bearer [ 438.102255][ T5898] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 438.240688][ T796] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 438.279801][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 438.292632][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 438.320296][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 438.346675][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 438.387048][ T5898] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 438.413214][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.441893][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 438.459348][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.501052][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.502120][ T5898] usb 2-1: config 0 descriptor?? [ 438.532210][ T796] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 438.602926][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.651367][ T796] usb 3-1: config 0 descriptor?? [ 438.666171][ T796] hub 3-1:0.0: USB hub found [ 438.880163][ T796] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 439.807848][ T5898] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 439.935406][ T796] hid-generic 0003:046D:C31C.000D: unknown main item tag 0x0 [ 439.976279][ T796] hid-generic 0003:046D:C31C.000D: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 440.077690][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.092316][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.361114][ T5898] usb 3-1: USB disconnect, device number 26 [ 440.432943][T10854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.473308][T10854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.742584][ T5898] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 440.773231][ T5900] usb 2-1: USB disconnect, device number 27 [ 440.877681][ T5898] usb 3-1: device descriptor read/64, error -71 [ 441.146176][ T5898] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 441.309108][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1380'. [ 441.318935][ T5898] usb 3-1: device descriptor read/64, error -71 [ 441.339031][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1380'. [ 441.443272][ T5898] usb usb3-port1: attempt power cycle [ 444.220492][T10899] binder: 10898:10899 ioctl c0306201 2000000007c0 returned -14 [ 444.562258][ T5958] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 444.781672][ T5958] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 444.802055][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.812755][ T5958] usb 5-1: Product: syz [ 444.817096][ T5958] usb 5-1: Manufacturer: syz [ 444.822048][ T5958] usb 5-1: SerialNumber: syz [ 445.301127][ T5958] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 445.353716][ T5958] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 446.681216][ T5958] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 446.707553][ T5958] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 446.832313][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 447.002293][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 447.010597][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.042312][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 447.055867][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 447.066171][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 447.076483][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.093820][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 447.103442][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 447.111532][ T9] usb 2-1: Manufacturer: syz [ 447.136632][ T9] usb 2-1: config 0 descriptor?? [ 447.147102][ T5958] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 447.166698][ T5958] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 447.184983][ T5958] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 447.198902][ T5958] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 447.217684][ T5958] usb 5-1: USB disconnect, device number 30 [ 447.458543][ T9] rc_core: IR keymap rc-hauppauge not found [ 447.482157][ T9] Registered IR keymap rc-empty [ 447.503113][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 447.532343][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 447.649669][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 447.686498][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30 [ 447.775588][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 447.813992][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 447.879959][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 447.922331][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 447.942336][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 447.962226][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.161553][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.489084][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.533232][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.567448][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.624571][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 448.636237][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 448.649623][ T9] usb 2-1: USB disconnect, device number 28 [ 448.912211][ T5958] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 449.072292][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 449.145484][T10961] geneve2: entered promiscuous mode [ 450.505437][T10974] binder: BINDER_SET_CONTEXT_MGR already set [ 450.513688][T10974] binder: 10973:10974 ioctl 4018620d 200000004a80 returned -16 [ 451.664411][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 451.859328][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 451.879545][ T9] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 451.890553][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.932184][ T9] usb 5-1: Product: syz [ 451.936638][ T9] usb 5-1: Manufacturer: syz [ 451.941313][ T9] usb 5-1: SerialNumber: syz [ 451.988179][ T9] usb 5-1: config 0 descriptor?? [ 452.001227][ T5958] usb 3-1: unable to get BOS descriptor or descriptor too short [ 452.011313][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 452.022809][ T5958] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 452.059653][T10985] syzkaller0: entered promiscuous mode [ 452.066810][ T5958] usb 3-1: can't read configurations, error -71 [ 452.109426][T10985] syzkaller0: entered allmulticast mode [ 452.197933][T10985] tipc: Started in network mode [ 452.214260][T10985] tipc: Node identity b6f04ea50b03, cluster identity 4711 [ 452.232165][T10985] tipc: Enabled bearer , priority 0 [ 452.384129][T10983] tipc: Resetting bearer [ 452.474464][T10983] tipc: Disabling bearer [ 453.024489][T11000] tipc: Enabled bearer , priority 0 [ 453.031933][T11000] syzkaller0: entered promiscuous mode [ 453.037883][T11000] syzkaller0: entered allmulticast mode [ 453.052021][T11000] tipc: Resetting bearer [ 453.075784][T10999] tipc: Resetting bearer [ 453.410720][ T5898] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 453.429909][T10999] tipc: Disabling bearer [ 453.615420][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.629032][T11004] kvm: pic: non byte write [ 453.644670][ T5898] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 453.661826][ T5898] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 453.671545][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.705867][ T5898] usb 2-1: config 0 descriptor?? [ 453.723594][ T5898] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 453.736131][ T5898] dvb-usb: bulk message failed: -22 (3/0) [ 453.767277][ T5898] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 453.800490][ T5898] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 453.830372][ T5898] usb 2-1: media controller created [ 453.867271][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 453.929705][T11015] lo: entered allmulticast mode [ 453.936723][ T5898] dvb-usb: bulk message failed: -22 (6/0) [ 453.943060][ T5898] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 453.943534][T11015] tunl0: entered allmulticast mode [ 453.959267][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 453.975682][T11015] gre0: entered allmulticast mode [ 453.980899][T11015] gretap0: entered allmulticast mode [ 453.989100][T11015] ip_vti0: entered allmulticast mode [ 453.995670][T11015] ip6_vti0: entered allmulticast mode [ 454.016493][ T5898] dvb-usb: schedule remote query interval to 150 msecs. [ 454.024274][ T5898] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 454.035041][T11015] sit0: entered allmulticast mode [ 454.040560][ T5898] usb 2-1: USB disconnect, device number 29 [ 454.047363][T11015] ip6tnl0: entered allmulticast mode [ 454.121468][T11015] ip6gre0: entered allmulticast mode [ 454.128366][T11015] syz_tun: entered allmulticast mode [ 454.142560][T11015] ip6gretap0: entered allmulticast mode [ 454.147311][ T5898] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 454.161062][T11015] bridge0: entered allmulticast mode [ 454.228667][T11015] vcan0: entered allmulticast mode [ 454.234203][T11015] bond0: entered allmulticast mode [ 454.240135][T11015] bond_slave_0: entered allmulticast mode [ 454.245961][T11015] bond_slave_1: entered allmulticast mode [ 454.252299][T11015] team0: entered allmulticast mode [ 454.257495][T11015] team_slave_0: entered allmulticast mode [ 454.263811][T11015] team_slave_1: entered allmulticast mode [ 454.269672][T11015] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 454.287178][T11015] dummy0: entered allmulticast mode [ 454.293186][T11015] nlmon0: entered allmulticast mode [ 454.299890][T11015] caif0: entered allmulticast mode [ 454.305899][T11015] batadv0: entered allmulticast mode [ 454.312757][T11015] veth0: entered allmulticast mode [ 454.320053][T11015] veth1: entered allmulticast mode [ 454.327442][T11015] wg0: entered allmulticast mode [ 454.336495][T11015] wg1: entered allmulticast mode [ 454.341908][T11015] wg2: entered allmulticast mode [ 454.347679][T11015] veth0_to_bridge: entered allmulticast mode [ 454.355004][T11015] veth1_to_bridge: entered allmulticast mode [ 454.369123][T11015] veth0_to_bond: entered allmulticast mode [ 454.380736][T11015] veth1_to_bond: entered allmulticast mode [ 454.391320][T11015] veth0_to_team: entered allmulticast mode [ 454.405321][T11015] veth1_to_team: entered allmulticast mode [ 454.418592][T11015] veth0_to_batadv: entered allmulticast mode [ 454.435915][T11015] batadv_slave_0: entered allmulticast mode [ 454.451492][T11015] veth1_to_batadv: entered allmulticast mode [ 454.464473][T11015] batadv_slave_1: entered allmulticast mode [ 454.477463][T11015] xfrm0: entered allmulticast mode [ 454.489068][T11015] veth0_to_hsr: entered allmulticast mode [ 454.501470][T11015] hsr_slave_0: entered allmulticast mode [ 454.507509][T11015] veth1_to_hsr: entered allmulticast mode [ 454.514624][T11015] hsr_slave_1: entered allmulticast mode [ 454.523559][T11015] hsr0: entered allmulticast mode [ 454.528980][T11015] veth1_virt_wifi: entered allmulticast mode [ 454.536262][T11015] veth0_virt_wifi: entered allmulticast mode [ 454.546218][T11015] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 454.592330][T11015] veth1_macvtap: entered allmulticast mode [ 454.603653][T11015] veth0_macvtap: entered allmulticast mode [ 454.623056][T11015] macvtap0: entered allmulticast mode [ 454.637105][T11015] macsec0: entered allmulticast mode [ 454.639599][ T9] gspca_ov534_9: sccb_write failed [ 454.710701][T11015] geneve0: entered allmulticast mode [ 454.869897][T11015] geneve1: entered allmulticast mode [ 454.905462][T11015] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 454.914567][T11015] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 454.922566][T11015] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 454.937990][T11015] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 454.956468][T11015] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 454.966742][T11015] bond2: entered allmulticast mode [ 454.976566][T11015] bridge1: entered allmulticast mode [ 454.982471][T11015] syztnl2: entered allmulticast mode [ 454.989848][T11015] ip6gre1: left promiscuous mode [ 455.029550][T11015] bridge2: entered allmulticast mode [ 455.046267][T11015] veth2: entered allmulticast mode [ 455.052696][ T9] gspca_ov534_9: reg_w failed -71 [ 455.057411][T11015] veth3: entered allmulticast mode [ 455.145129][T11021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 455.162641][T11021] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 455.193481][T11021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 455.222896][T11021] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 455.239515][T11021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 455.246900][T11021] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 455.261228][T11021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 455.267425][T11021] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 455.291519][T11021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 455.298314][T11021] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 455.309643][T11021] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 455.322253][ T9] gspca_ov534_9: Unknown sensor 0000 [ 455.322385][ T9] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 455.350956][ T9] usb 5-1: USB disconnect, device number 31 [ 456.309788][T11051] netlink: 'syz.5.1435': attribute type 27 has an invalid length. [ 456.367680][T11053] mmap: syz.5.1435 (11053) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 457.077529][T11051] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.085062][T11051] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.192277][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 457.274275][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 457.274295][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 457.274356][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 457.355635][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 457.886279][T11051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.983321][T11051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.642155][ T9201] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.662333][ T9201] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.671350][ T9201] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.726802][ T9201] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.282539][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 459.352207][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 459.358290][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 459.364383][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 459.442152][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 460.374229][ T47] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 460.565457][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.579757][ T47] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 460.592033][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.608771][ T47] usb 3-1: config 0 descriptor?? [ 460.626549][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 461.037479][ T47] pwc: recv_control_msg error -32 req 02 val 2b00 [ 461.046958][ T47] pwc: recv_control_msg error -32 req 02 val 2700 [ 461.056058][ T47] pwc: recv_control_msg error -32 req 02 val 2c00 [ 461.063949][ T47] pwc: recv_control_msg error -32 req 04 val 1000 [ 461.071759][ T47] pwc: recv_control_msg error -32 req 04 val 1300 [ 461.082851][ T47] pwc: recv_control_msg error -32 req 04 val 1400 [ 461.090230][ T47] pwc: recv_control_msg error -32 req 02 val 2000 [ 461.098170][ T47] pwc: recv_control_msg error -32 req 02 val 2100 [ 461.313458][ T47] pwc: recv_control_msg error -32 req 02 val 2500 [ 461.517503][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 461.543132][ T47] pwc: recv_control_msg error -71 req 02 val 2600 [ 461.552508][ T47] pwc: recv_control_msg error -71 req 02 val 2900 [ 461.559492][ T47] pwc: recv_control_msg error -71 req 02 val 2800 [ 461.566721][ T47] pwc: recv_control_msg error -71 req 04 val 1100 [ 461.584757][ T47] pwc: recv_control_msg error -71 req 04 val 1200 [ 461.602898][ T47] pwc: Registered as video103. [ 461.610698][ T47] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 461.656757][ T47] usb 3-1: USB disconnect, device number 32 [ 462.157297][T11123] binder: BINDER_SET_CONTEXT_MGR already set [ 462.163416][T11123] binder: 11122:11123 ioctl 4018620d 200000004a80 returned -16 [ 462.920855][T11120] ip6gre1: entered promiscuous mode [ 462.926235][T11120] ip6gre1: entered allmulticast mode [ 462.933984][ T9193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.944944][ T9193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.962723][ T5898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.086764][T11127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1454'. [ 463.186626][T11127] ip6gre2: entered promiscuous mode [ 463.191892][T11127] ip6gre2: entered allmulticast mode [ 463.243277][T11137] netlink: 'syz.1.1454': attribute type 6 has an invalid length. [ 463.283030][T11137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1454'. [ 463.557129][T11139] syzkaller0: entered promiscuous mode [ 463.572483][T11139] syzkaller0: entered allmulticast mode [ 463.672365][ T5898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.852243][ T5898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.426959][T11177] syzkaller0: entered promiscuous mode [ 466.441872][T11177] syzkaller0: entered allmulticast mode [ 466.792734][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 467.212504][ T5834] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 467.462423][ T5834] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.478747][T11187] syzkaller0: entered promiscuous mode [ 467.480302][ T5834] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.514881][T11187] syzkaller0: entered allmulticast mode [ 467.526176][ T5834] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 467.535933][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 467.557770][ T5834] usb 2-1: SerialNumber: syz [ 467.659592][ T5898] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 468.345784][ T5834] usb 2-1: 0:2 : does not exist [ 468.348532][ T5898] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.385976][ T5898] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 468.391630][ T5834] usb 2-1: USB disconnect, device number 30 [ 468.419984][ T5898] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 468.449266][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.701084][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.896641][ T5898] usb 6-1: config 0 descriptor?? [ 468.906055][ T5898] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 468.913104][ T5898] dvb-usb: bulk message failed: -22 (3/0) [ 468.928121][ T5898] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 468.937870][ T5898] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 468.945382][ T5898] usb 6-1: media controller created [ 468.955330][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.980797][ T5898] dvb-usb: bulk message failed: -22 (6/0) [ 468.991643][ T5898] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 469.009641][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input33 [ 469.037102][ T5898] dvb-usb: schedule remote query interval to 150 msecs. [ 469.050170][ T5898] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 469.179928][T11189] dvb-usb: bulk message failed: -22 (2/0) [ 469.203940][ T5959] usb 6-1: USB disconnect, device number 2 [ 469.207157][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 469.248230][ T5898] dvb-usb: error while querying for an remote control event. [ 469.344182][ T5959] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 469.415477][ T29] audit: type=1804 audit(1774861945.365:133): pid=11210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1478" name="/newroot/298/file1" dev="fuse" ino=1 res=1 errno=0 [ 470.566243][T11220] syzkaller0: entered promiscuous mode [ 470.571753][T11220] syzkaller0: entered allmulticast mode [ 472.200280][T11270] sctp: [Deprecated]: syz.1.1488 (pid 11270) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.200280][T11270] Use struct sctp_sack_info instead [ 474.632263][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 475.472670][ T5959] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 475.506299][T11299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1496'. [ 475.667381][ T5959] usb 4-1: Using ep0 maxpacket: 32 [ 475.721511][ T5959] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.772509][ T5959] usb 4-1: config 0 has no interfaces? [ 475.797015][ T5959] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 475.838572][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.862217][ T5959] usb 4-1: Product: syz [ 475.866441][ T5959] usb 4-1: Manufacturer: syz [ 475.871064][ T5959] usb 4-1: SerialNumber: syz [ 475.932524][ T5959] usb 4-1: config 0 descriptor?? [ 476.209609][T11309] syzkaller0: entered promiscuous mode [ 476.219648][T11309] syzkaller0: entered allmulticast mode [ 476.897615][ T5834] usb 4-1: USB disconnect, device number 28 [ 477.478180][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 477.722254][ T5834] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 477.899916][T11323] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1504'. [ 477.912901][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 477.957635][ T5834] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 477.987794][ T5834] usb 3-1: config 0 has no interface number 0 [ 477.995069][ T5834] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 478.047999][ T5834] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 478.090766][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.205774][ T5834] usb 3-1: Product: syz [ 478.218034][ T5834] usb 3-1: Manufacturer: syz [ 478.233704][ T5834] usb 3-1: SerialNumber: syz [ 478.254796][ T5834] usb 3-1: config 0 descriptor?? [ 478.260782][T11320] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 478.499812][T11320] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 478.930632][ T5834] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 479.022565][ T5834] asix 3-1:0.188: probe with driver asix failed with error -32 [ 479.072695][ T5834] usb 3-1: USB disconnect, device number 33 [ 481.382654][ T5834] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 481.586666][ T5834] usb 6-1: string descriptor 0 read error: -22 [ 481.609671][ T5834] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 481.662453][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.722990][ T5834] usb 6-1: config 0 descriptor?? [ 481.740933][ T5834] usbtest 6-1:0.0: FX2 device [ 481.746566][ T5834] usbtest 6-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 481.915720][ T47] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 481.960020][ T5898] usb 6-1: USB disconnect, device number 3 [ 482.092154][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 482.101643][ T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.112172][ T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.125391][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1516'. [ 482.136169][ T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.153818][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.166879][ T47] usb 3-1: Product: syz [ 482.177374][ T47] usb 3-1: Manufacturer: syz [ 482.192185][ T47] usb 3-1: SerialNumber: syz [ 482.313168][T11371] syzkaller0: entered promiscuous mode [ 482.328708][T11371] syzkaller0: entered allmulticast mode [ 482.425693][ T47] usb 3-1: 0:2 : does not exist [ 482.435916][ T47] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 482.564183][ T47] usb 3-1: USB disconnect, device number 34 [ 483.795910][T11393] syzkaller0: entered promiscuous mode [ 483.812112][T11393] syzkaller0: entered allmulticast mode [ 484.832133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 487.168806][T11450] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 487.422947][T11450] picdev_read: 5 callbacks suppressed [ 487.422962][T11450] kvm: pic: non byte read [ 487.464224][T11450] kvm: pic: non byte read [ 487.488925][T11450] kvm: pic: non byte read [ 487.681586][T11450] kvm: pic: non byte read [ 487.703131][T11450] kvm: pic: non byte read [ 487.746158][T11450] kvm: pic: non byte read [ 489.352272][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 489.479191][T11508] syzkaller0: entered promiscuous mode [ 489.484906][T11508] syzkaller0: entered allmulticast mode [ 489.630425][T11516] loop5: detected capacity change from 0 to 7 [ 489.655296][ T6012] loop5: [ 489.664240][ T6012] loop5: partition table partially beyond EOD, truncated [ 489.692736][T11516] loop5: [ 489.698211][T11516] loop5: partition table partially beyond EOD, truncated [ 494.228719][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 497.431979][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 497.608848][T11571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.046319][T11577] bond5: entered promiscuous mode [ 498.090727][T11577] bond5: entered allmulticast mode [ 498.109230][T11577] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.212389][T11577] team0: Port device bond5 added [ 498.317349][T11571] ip6gretap1: entered promiscuous mode [ 498.342715][T11571] ip6gretap1: entered allmulticast mode [ 498.379418][T11571] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 501.433159][ T5959] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 501.528086][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.536960][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.604542][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.619430][ T5959] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 501.636820][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.714472][ T5959] usb 5-1: config 0 descriptor?? [ 502.111221][T11626] futex_wake_op: syz.4.1565 tries to shift op by -1; fix this program [ 503.888764][T11650] netlink: 'syz.5.1573': attribute type 10 has an invalid length. [ 503.957131][T11650] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 504.027794][T11650] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 504.495829][T11655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.003364][ T5959] usbhid 5-1:0.0: can't add hid device: -71 [ 505.011777][ T5959] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 505.185250][T11645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.252220][ T5959] usb 5-1: USB disconnect, device number 32 [ 505.966134][T11661] syzkaller0: entered promiscuous mode [ 505.971751][T11661] syzkaller0: entered allmulticast mode [ 506.598330][T11676] netlink: 'syz.1.1584': attribute type 1 has an invalid length. [ 506.645211][T11676] bond6: entered promiscuous mode [ 506.650312][T11676] bond6: entered allmulticast mode [ 506.656229][T11676] 8021q: adding VLAN 0 to HW filter on device bond6 [ 506.678681][T11676] bridge2: entered promiscuous mode [ 506.684270][T11676] bridge2: entered allmulticast mode [ 506.690399][T11676] bond6: (slave bridge2): Enslaving as a backup interface with an up link [ 506.757391][T11258] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 506.772362][T11676] bridge3: entered promiscuous mode [ 506.783126][T11676] bridge3: entered allmulticast mode [ 506.789576][T11676] bond6: (slave bridge3): Enslaving as a backup interface with a down link [ 506.887162][ T9196] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 507.738456][T11696] syzkaller0: entered promiscuous mode [ 507.764529][T11696] syzkaller0: entered allmulticast mode [ 508.612205][ T5959] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 508.782160][ T5959] usb 6-1: Using ep0 maxpacket: 16 [ 508.794275][ T5959] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 508.842268][ T5959] usb 6-1: config 0 has no interface number 0 [ 508.848436][ T5959] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 508.884139][ T5959] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 508.925969][ T5959] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 508.960793][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.998197][ T5959] usb 6-1: Product: syz [ 509.008957][ T5959] usb 6-1: Manufacturer: syz [ 509.037501][ T5959] usb 6-1: SerialNumber: syz [ 509.083835][ T5959] usb 6-1: config 0 descriptor?? [ 509.116166][T11699] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 509.123631][T11704] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 509.134348][T11699] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 509.168279][T11704] kvm: pic: non byte read [ 509.183091][T11704] kvm: pic: single mode not supported [ 509.183420][T11704] kvm: pic: non byte read [ 509.304686][T11704] kvm: pic: non byte read [ 509.326638][T11704] kvm: pic: non byte read [ 509.361021][T11699] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 509.372453][T11699] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 509.380480][T11704] kvm: pic: non byte read [ 509.444843][T11704] kvm: pic: non byte read [ 509.462533][T11704] pic_ioport_write: 4 callbacks suppressed [ 509.462552][T11704] kvm: pic: level sensitive irq not supported [ 509.479391][T11704] kvm: pic: non byte read [ 509.689402][T11704] kvm: pic: non byte read [ 510.369146][T11720] syzkaller0: entered promiscuous mode [ 510.375123][T11720] syzkaller0: entered allmulticast mode [ 511.015855][T11731] syzkaller0: entered promiscuous mode [ 511.021518][T11731] syzkaller0: entered allmulticast mode [ 511.154428][ T5959] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 511.612295][ T5959] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 511.661027][ T5959] asix 6-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 511.691587][ T5959] asix 6-1:0.251: probe with driver asix failed with error -5 [ 511.702169][ T5834] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 511.735626][ T5959] usb 6-1: USB disconnect, device number 4 [ 511.878587][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.902271][ T5834] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 511.954899][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.014740][ T5834] usb 4-1: config 0 descriptor?? [ 512.051394][ T5834] pwc: Askey VC010 type 2 USB webcam detected. [ 512.208699][ T24] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 512.249377][ T24] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 512.446827][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 512.459184][ T5834] pwc: recv_control_msg error -32 req 02 val 2b00 [ 512.470850][ T5834] pwc: recv_control_msg error -32 req 02 val 2700 [ 512.479170][ T5834] pwc: recv_control_msg error -32 req 02 val 2c00 [ 512.487228][ T5834] pwc: recv_control_msg error -32 req 04 val 1000 [ 512.501912][ T5834] pwc: recv_control_msg error -32 req 04 val 1300 [ 512.509994][ T5834] pwc: recv_control_msg error -32 req 04 val 1400 [ 512.518028][ T5834] pwc: recv_control_msg error -32 req 02 val 2000 [ 512.528665][ T5834] pwc: recv_control_msg error -32 req 02 val 2100 [ 512.537388][ T5834] pwc: recv_control_msg error -32 req 04 val 1500 [ 512.545620][ T5834] pwc: recv_control_msg error -32 req 02 val 2500 [ 512.554902][ T5834] pwc: recv_control_msg error -32 req 02 val 2400 [ 512.612121][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 512.619639][ T9] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 512.628676][ T9] usb 5-1: config 0 has no interface number 0 [ 512.635644][ T9] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 512.649155][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 512.658878][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.667531][ T9] usb 5-1: Product: syz [ 512.671860][ T9] usb 5-1: Manufacturer: syz [ 512.682686][ T9] usb 5-1: SerialNumber: syz [ 512.706865][ T9] usb 5-1: config 0 descriptor?? [ 512.714396][T11746] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 512.722428][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 512.777058][ T5834] pwc: recv_control_msg error -71 req 02 val 2900 [ 512.787636][ T5834] pwc: recv_control_msg error -71 req 02 val 2800 [ 512.803350][ T5834] pwc: recv_control_msg error -71 req 04 val 1100 [ 512.810514][ T5834] pwc: recv_control_msg error -71 req 04 val 1200 [ 512.821878][ T5834] pwc: Registered as video103. [ 512.832331][ T5834] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 512.883617][ T5834] usb 4-1: USB disconnect, device number 29 [ 512.906106][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 512.941336][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.960155][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.997649][T11746] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 513.004771][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 513.028801][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.062984][ T24] usb 3-1: Product: syz [ 513.067205][ T24] usb 3-1: Manufacturer: syz [ 513.071826][ T24] usb 3-1: SerialNumber: syz [ 513.107141][T11757] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 513.316432][ T24] usb 3-1: 0:2 : does not exist [ 513.332980][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 513.374394][ T29] audit: type=1804 audit(1774861989.345:134): pid=11761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1610" name="/newroot/322/file1" dev="fuse" ino=1 res=1 errno=0 [ 513.418451][ T24] usb 3-1: USB disconnect, device number 35 [ 513.527116][ T9068] udevd[9068]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.785726][ T47] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 513.955246][ T47] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 513.972155][ T47] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 513.993920][ T47] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 514.014560][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.056291][T11767] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 514.104788][ T47] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.143462][T11783] kernel read not supported for file /¡sxt (pid: 11783 comm: syz.2.1617) [ 514.232728][ T29] audit: type=1800 audit(1774861990.205:135): pid=11783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1617" name=A17378741A dev="mqueue" ino=51632 res=0 errno=0 [ 514.540668][ T5959] usb 6-1: USB disconnect, device number 5 [ 514.752866][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 514.808113][T11787] tipc: Failed to remove unknown binding: 66,0,0/0:1432158210/1432158211 [ 514.824369][T11787] tipc: Failed to remove unknown binding: 66,0,0/0:1432158210/1432158211 [ 515.549984][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 515.568162][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 515.596749][ T9] asix 5-1:0.188: probe with driver asix failed with error -71 [ 515.733266][ T9] usb 5-1: USB disconnect, device number 33 [ 516.251214][T11803] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 518.082170][ T47] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 518.254772][ T47] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 518.264323][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.287855][ T47] usb 5-1: config 0 descriptor?? [ 518.306558][ T47] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 518.319816][T11822] tipc: Started in network mode [ 518.330635][T11822] tipc: Node identity 824def4fda, cluster identity 4711 [ 518.357728][T11822] tipc: Enabled bearer , priority 0 [ 518.405246][T11825] syzkaller0: entered promiscuous mode [ 518.425046][T11825] syzkaller0: entered allmulticast mode [ 518.514503][T11822] tipc: Resetting bearer [ 518.527127][T11821] tipc: Resetting bearer [ 518.572751][T11821] tipc: Disabling bearer [ 519.442275][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 519.775549][T11840] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 519.803004][T11840] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 520.139418][ T47] gspca_stv06xx: Photobit pb0100 sensor detected [ 520.182517][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 520.362169][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 520.397821][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.432873][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.461969][ T47] input: STV06xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 520.478552][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 520.503932][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 520.528512][ T47] usb 5-1: USB disconnect, device number 34 [ 520.550268][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.761765][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 520.771769][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 520.808063][ T24] usb 4-1: Manufacturer: syz [ 520.825277][ T24] usb 4-1: config 0 descriptor?? [ 521.468758][ T24] rc_core: IR keymap rc-hauppauge not found [ 521.481136][ T24] Registered IR keymap rc-empty [ 521.512808][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 521.831474][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 521.884234][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 522.006546][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input36 [ 522.145463][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 522.222223][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 522.401678][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 523.028253][ T5898] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 523.144259][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 523.282235][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 523.305930][ T5898] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 523.315617][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.351251][ T5898] usb 5-1: Product: syz [ 523.353458][T11878] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1644'. [ 523.384951][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 523.395978][ T5898] usb 5-1: Manufacturer: syz [ 523.415415][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 523.423255][ T5898] usb 5-1: SerialNumber: syz [ 523.454085][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 523.492759][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 523.522295][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 523.568768][ T24] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 523.603830][ T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 523.689800][ T24] usb 4-1: USB disconnect, device number 30 [ 524.245196][ T5898] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 524.292928][ T5898] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 524.612974][ T5900] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 524.806726][T11887] tipc: Failed to remove unknown binding: 66,1,1/0:1015894931/1015894933 [ 524.822208][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 524.861477][ T5900] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 524.872316][ T5900] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 524.893131][ T5900] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 524.902626][T11887] tipc: Failed to remove unknown binding: 66,1,1/0:1015894931/1015894933 [ 524.905849][ T5900] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 524.911370][T11887] tipc: Failed to remove unknown binding: 66,1,1/0:1015894931/1015894933 [ 524.980883][ T5900] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.498134][ T5900] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 525.507353][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.843320][T11898] netlink: 'syz.3.1649': attribute type 1 has an invalid length. [ 525.913791][ T5900] usb 2-1: GET_CAPABILITIES returned 0 [ 525.932222][ T5900] usbtmc 2-1:16.0: can't read capabilities [ 525.979335][T11898] bond3: entered promiscuous mode [ 526.033304][T11898] 8021q: adding VLAN 0 to HW filter on device bond3 [ 526.058009][T11896] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 526.087803][ T5898] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 526.101012][ T5898] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 526.132235][T11896] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 526.212242][T11896] bond3: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 526.241532][ T5900] usb 2-1: USB disconnect, device number 31 [ 526.329466][ T5898] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 526.354749][ T5898] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 526.369961][ T5898] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 526.384972][ T5898] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 526.401387][ T5898] usb 5-1: USB disconnect, device number 35 [ 526.407242][T11896] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 526.442761][T11896] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 526.855124][ T5898] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 527.079842][T11920] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 527.099736][T11920] syzkaller0: entered promiscuous mode [ 527.150010][T11920] syzkaller0: entered allmulticast mode [ 527.175390][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 527.186738][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 527.203079][T11923] tipc: Started in network mode [ 527.214644][T11923] tipc: Node identity 96a5fe49839a, cluster identity 4711 [ 527.228675][ T5898] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 527.238493][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.247190][T11923] tipc: Enabled bearer , priority 0 [ 527.253881][ T5898] usb 3-1: Product: syz [ 527.253904][ T5898] usb 3-1: Manufacturer: syz [ 527.253921][ T5898] usb 3-1: SerialNumber: syz [ 527.257699][ T5898] usb 3-1: config 0 descriptor?? [ 527.276514][T11919] tipc: Resetting bearer [ 527.297303][ T5898] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 527.306888][ T5898] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 527.315524][T11919] tipc: Disabling bearer [ 528.173027][ T5898] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 528.734179][ T5898] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 528.742368][ T5898] em28xx 3-1:0.0: board has no eeprom [ 529.149888][ T5898] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 529.190968][ T5898] em28xx 3-1:0.0: dvb set to bulk mode. [ 529.197153][ T47] em28xx 3-1:0.0: Binding DVB extension [ 530.084321][T11911] em28xx 3-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 530.127502][ T24] usb 3-1: USB disconnect, device number 36 [ 530.149746][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 530.197285][ T47] em28xx 3-1:0.0: Registering input extension [ 530.204255][ T5898] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 530.215211][ T24] em28xx 3-1:0.0: Closing input extension [ 530.252369][ T24] em28xx 3-1:0.0: Freeing device [ 530.386577][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.400859][ T5898] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 530.430744][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.464845][ T5898] usb 4-1: config 0 descriptor?? [ 530.492450][ T5898] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 530.796433][T11950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.842573][T11950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.846004][T11977] netlink: 'syz.2.1672': attribute type 1 has an invalid length. [ 531.960622][T11977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 532.047103][T11979] vlan2: entered promiscuous mode [ 532.154742][T11979] bond3: entered promiscuous mode [ 532.160110][T11979] vlan2: entered allmulticast mode [ 532.163053][T11977] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1672'. [ 532.222203][T11979] bond3: entered allmulticast mode [ 532.465391][T11977] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 532.524723][T11977] bond3: (slave batadv1): making interface the new active one [ 532.897435][T11977] batadv1: entered promiscuous mode [ 532.961110][T11977] batadv1: entered allmulticast mode [ 533.026236][T11977] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 533.832246][T11759] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 534.042117][T11759] usb 3-1: Using ep0 maxpacket: 8 [ 534.102985][ T5959] usb 4-1: USB disconnect, device number 31 [ 534.119580][T11759] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.185290][T11759] usb 3-1: config 0 has no interfaces? [ 534.240771][T11759] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 534.259197][T11759] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 534.288258][T11759] usb 3-1: Product: syz [ 534.318775][T11759] usb 3-1: Manufacturer: syz [ 534.340451][T11759] usb 3-1: SerialNumber: syz [ 534.362180][ T47] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 534.421171][T12001] netlink: 'syz.3.1679': attribute type 21 has an invalid length. [ 534.461836][T11759] usb 3-1: config 0 descriptor?? [ 534.462436][T12001] netlink: 'syz.3.1679': attribute type 6 has an invalid length. [ 534.493720][T12001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1679'. [ 534.569921][ T47] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 534.582102][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.620589][ T47] usb 6-1: config 0 descriptor?? [ 534.656057][ T47] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 534.728860][T11993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.748690][T11993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.217658][ T47] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 535.348383][T12015] fuse: Bad value for 'fd' [ 535.639058][ T47] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 536.452908][T11759] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 536.691801][ T47] usb 3-1: USB disconnect, device number 37 [ 536.852461][T12028] syz.4.1684 (12028): drop_caches: 2 [ 536.858345][T12028] syz.4.1684 (12028): drop_caches: 2 [ 537.025420][T11759] usb 4-1: Using ep0 maxpacket: 8 [ 537.078655][T11759] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 537.092157][T11759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.100281][T11759] usb 4-1: Product: syz [ 537.166247][T11759] usb 4-1: Manufacturer: syz [ 537.171046][T11759] usb 4-1: SerialNumber: syz [ 537.203242][T11759] usb 4-1: config 0 descriptor?? [ 537.287471][T11997] syz.5.1678 (11997): drop_caches: 2 [ 537.348522][T12025] syz.5.1678 (12025): drop_caches: 2 [ 537.414543][ T5835] usb 6-1: USB disconnect, device number 6 [ 537.449813][T11759] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 537.472440][ T47] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 537.643737][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 537.650977][ T47] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 537.661161][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 537.830337][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 537.847212][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 20203, setting to 1024 [ 537.863012][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 537.874236][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.889308][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 537.903268][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.084064][ T5835] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 538.131987][ T47] usb 5-1: usb_control_msg returned -32 [ 538.154262][ T47] usbtmc 5-1:16.0: can't read capabilities [ 538.242251][ T5835] usb 6-1: Using ep0 maxpacket: 8 [ 538.251342][ T5835] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 538.260723][ T5835] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 538.272171][ T5835] usb 6-1: config 179 has no interface number 0 [ 538.278493][ T5835] usb 6-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 538.308061][ T5835] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 538.322113][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.555217][T12053] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 538.705258][ T5835] usb 5-1: USB disconnect, device number 36 [ 538.951805][T11759] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 538.979342][T11759] usb 4-1: USB disconnect, device number 32 [ 539.152603][ T5834] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 539.392150][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 539.398933][ T5834] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.435111][ T5834] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 539.446239][ T5834] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 539.487731][ T5834] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.516932][ T5834] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.558932][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.790597][ T5834] usb 2-1: GET_CAPABILITIES returned 0 [ 539.814984][ T5834] usbtmc 2-1:16.0: can't read capabilities [ 540.010125][ T5834] usb 2-1: USB disconnect, device number 32 [ 540.641873][T11759] usb 6-1: USB disconnect, device number 7 [ 544.246888][ T5835] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 544.459461][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 544.488649][ T5835] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 544.498596][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.110940][ T5835] usb 2-1: config 0 descriptor?? [ 545.125051][ T5835] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 545.321609][T12117] syzkaller0: entered promiscuous mode [ 545.412463][T12117] syzkaller0: entered allmulticast mode [ 546.045038][T12129] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1718'. [ 546.322570][T11759] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 546.482111][T11759] usb 4-1: Using ep0 maxpacket: 8 [ 546.490248][T11759] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.503807][T11759] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 546.514127][T11759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.532075][T11759] usb 4-1: Product: syz [ 546.540840][T11759] usb 4-1: Manufacturer: syz [ 546.554693][T11759] usb 4-1: SerialNumber: syz [ 546.713263][T11759] usb 4-1: config 0 descriptor?? [ 546.741014][T11759] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 547.039897][ T24] usb 2-1: USB disconnect, device number 33 [ 547.097853][T12139] sctp: [Deprecated]: syz.3.1718 (pid 12139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 547.097853][T12139] Use struct sctp_sack_info instead [ 547.649093][ T47] usb 4-1: USB disconnect, device number 33 [ 547.762639][T12158] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1727'. [ 547.907162][T12159] syzkaller0: entered promiscuous mode [ 547.955030][T12159] syzkaller0: entered allmulticast mode [ 549.522274][ T47] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 549.732186][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 550.159954][ T47] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 550.178808][ T47] usb 2-1: config 0 has no interface number 0 [ 550.211698][ T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 550.212750][ T5834] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 550.221012][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.460717][ T47] usb 2-1: Product: syz [ 550.481001][ T47] usb 2-1: Manufacturer: syz [ 550.486152][ T47] usb 2-1: SerialNumber: syz [ 550.501593][ T47] usb 2-1: config 0 descriptor?? [ 550.537415][ T5834] usb 6-1: config 0 has an invalid interface number: 99 but max is 0 [ 550.549913][ T5834] usb 6-1: config 0 has no interface number 0 [ 550.572222][ T5834] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 550.594319][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.607292][ T47] hub 2-1:0.132: bad descriptor, ignoring hub [ 550.627894][ T5834] usb 6-1: Product: syz [ 550.652215][ T47] hub 2-1:0.132: probe with driver hub failed with error -5 [ 550.977223][ T5834] usb 6-1: Manufacturer: syz [ 550.981849][ T5834] usb 6-1: SerialNumber: syz [ 550.991580][ T47] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input38 [ 551.094284][ T5834] usb 6-1: config 0 descriptor?? [ 551.110411][ T47] input: failed to attach handler mousedev to device input38, error: -2 [ 551.222892][ T5834] peak_usb 6-1:0.99: probe with driver peak_usb failed with error 99 [ 552.232559][T11759] usb 2-1: USB disconnect, device number 34 [ 552.646168][T12206] syzkaller0: entered promiscuous mode [ 552.646186][T12206] syzkaller0: entered allmulticast mode [ 552.785925][ T24] usb 6-1: USB disconnect, device number 8 [ 553.413886][T12214] tipc: Enabled bearer , priority 0 [ 553.450838][T12214] syzkaller0: entered promiscuous mode [ 553.499974][T12214] syzkaller0: entered allmulticast mode [ 553.903622][T12221] tipc: Resetting bearer [ 553.935444][T12220] tipc: Enabled bearer , priority 0 [ 553.961788][T12220] tipc: Resetting bearer [ 553.977960][T12212] tipc: Resetting bearer [ 554.007986][T12212] tipc: Disabling bearer [ 554.482390][ T5834] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 554.730598][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 554.769615][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 554.781640][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 554.879767][ T5834] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 554.892636][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.913259][ T5834] usb 5-1: Product: syz [ 554.917655][ T5834] usb 5-1: Manufacturer: syz [ 554.933192][ T5834] usb 5-1: SerialNumber: syz [ 554.951675][ T47] tipc: Node number set to 3186839205 [ 555.002477][ T5834] usb 5-1: config 0 descriptor?? [ 555.025080][ T5834] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 555.039952][ T5834] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 555.643870][T12239] syzkaller0: entered promiscuous mode [ 555.670182][T12239] syzkaller0: entered allmulticast mode [ 555.673148][ T5834] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 555.683508][ T5834] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 556.426842][ T5834] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 556.621986][ T5834] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 556.667244][ T5834] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 557.247949][ T5834] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 557.701530][ T5834] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 557.708542][ T5834] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 557.838263][ T5834] usb 5-1: USB disconnect, device number 37 [ 558.508972][T12266] syzkaller0: entered promiscuous mode [ 558.514598][T12266] syzkaller0: entered allmulticast mode [ 558.674598][T12270] veth0: entered promiscuous mode [ 558.700375][T12270] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1760'. [ 558.773249][T12270] hsr_slave_0: left promiscuous mode [ 558.789613][T12270] hsr_slave_1: left promiscuous mode [ 559.370464][T12269] veth0: left promiscuous mode [ 559.868315][T12282] syzkaller0: entered promiscuous mode [ 559.945439][T12282] syzkaller0: entered allmulticast mode [ 561.142145][ T47] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 561.232169][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 561.292187][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 561.308970][ T47] usb 6-1: config 0 has no interfaces? [ 561.344247][ T47] usb 6-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 561.382083][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.403905][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 561.420624][ T47] usb 6-1: Product: syz [ 561.436301][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.452223][ T47] usb 6-1: Manufacturer: syz [ 561.456831][ T47] usb 6-1: SerialNumber: syz [ 561.478624][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.495682][ T47] usb 6-1: config 0 descriptor?? [ 561.531680][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 561.581109][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 561.646702][ T24] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 561.673681][ T24] usb 4-1: Manufacturer: syz [ 561.771133][ T24] usb 4-1: config 0 descriptor?? [ 562.237855][T12296] netlink: 'syz.5.1768': attribute type 4 has an invalid length. [ 562.434481][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.460693][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.536415][ T24] appleir 0003:05AC:8243.000F: item fetching failed at offset 0/1 [ 562.600873][ T24] appleir 0003:05AC:8243.000F: parse failed [ 562.618912][ T24] appleir 0003:05AC:8243.000F: probe with driver appleir failed with error -22 [ 562.761996][ T24] usb 4-1: USB disconnect, device number 34 [ 562.958030][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.974430][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.064205][T12316] syzkaller0: entered promiscuous mode [ 563.071579][T12316] syzkaller0: entered allmulticast mode [ 563.923651][ T24] usb 6-1: USB disconnect, device number 9 [ 565.503046][T12340] bond1: left promiscuous mode [ 565.518879][T12340] ip6erspan1: left allmulticast mode [ 565.790950][T12340] vlan2: left promiscuous mode [ 565.797175][T12340] bond3: left promiscuous mode [ 565.809806][T12340] batadv1: left promiscuous mode [ 565.825540][T12340] vlan2: left allmulticast mode [ 565.873993][T12340] bond3: left allmulticast mode [ 565.891696][T12340] batadv1: left allmulticast mode [ 566.320613][T12352] syzkaller0: entered promiscuous mode [ 566.371514][T12352] syzkaller0: entered allmulticast mode [ 569.846461][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1794'. [ 571.652304][ T24] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 571.837121][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 571.856498][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.877709][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 571.887861][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.138598][ T24] usb 3-1: usb_control_msg returned -32 [ 572.144869][ T24] usbtmc 3-1:16.0: can't read capabilities [ 572.750437][ T24] usb 3-1: USB disconnect, device number 38 [ 572.883515][T12389] tipc: Enabling of bearer rejected, failed to enable media [ 573.128760][T12422] netlink: 'syz.5.1802': attribute type 1 has an invalid length. [ 574.035044][T12428] bond1: (slave geneve2): making interface the new active one [ 574.366730][T12428] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 574.382268][T12422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1802'. [ 574.472972][ T9203] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 574.481982][ T9203] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 574.497097][T12422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 574.570722][ T9203] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 574.602875][ T9203] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 574.612231][ T5835] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 574.823362][ T5835] usb 2-1: config 0 has no interfaces? [ 575.543555][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'. [ 575.602689][ T5835] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 575.678672][ T5835] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 575.749686][ T5835] usb 2-1: Manufacturer: syz [ 575.829063][ T5835] usb 2-1: config 0 descriptor?? [ 576.080957][T12446] syz.5.1808 (12446): drop_caches: 2 [ 576.217923][T12454] syzkaller0: entered promiscuous mode [ 576.263383][T12454] syzkaller0: entered allmulticast mode [ 576.846956][T12460] lo: entered allmulticast mode [ 576.862906][T12460] tunl0: entered allmulticast mode [ 576.868526][T12460] gre0: entered allmulticast mode [ 576.880684][T12460] gretap0: entered allmulticast mode [ 576.963977][T12460] erspan0: entered allmulticast mode [ 577.061629][T12460] ip_vti0: entered allmulticast mode [ 577.068434][T12460] ip6_vti0: entered allmulticast mode [ 577.074240][T12460] sit0: entered allmulticast mode [ 577.079488][T12460] ip6tnl0: entered allmulticast mode [ 577.085068][T12460] ip6gre0: entered allmulticast mode [ 577.122209][ T5834] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 577.286877][T12460] syz_tun: entered allmulticast mode [ 577.300790][T12460] ip6gretap0: entered allmulticast mode [ 577.325642][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 577.334890][ T5834] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 577.341582][T12460] bridge0: entered allmulticast mode [ 577.375286][T12460] vcan0: entered allmulticast mode [ 577.380744][T12460] bond0: entered allmulticast mode [ 577.382457][ T5834] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 577.386043][T12460] bond_slave_0: entered allmulticast mode [ 577.521414][ T5834] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 577.530908][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.552787][T12460] bond_slave_1: entered allmulticast mode [ 577.558581][T12460] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 577.583111][ T5834] usb 3-1: Product: syz [ 577.587333][ T5834] usb 3-1: Manufacturer: syz [ 577.606953][ T5834] usb 3-1: SerialNumber: syz [ 577.612977][T12460] team0: entered allmulticast mode [ 577.653947][T12460] team_slave_0: entered allmulticast mode [ 577.659714][T12460] team_slave_1: entered allmulticast mode [ 577.693686][T12460] dummy0: entered allmulticast mode [ 577.720188][T12460] nlmon0: entered allmulticast mode [ 577.739777][T12460] caif0: entered allmulticast mode [ 577.772351][T12460] batadv0: entered allmulticast mode [ 577.786017][T12460] vxcan0: entered allmulticast mode [ 577.791343][T12460] vxcan1: entered allmulticast mode [ 577.806763][ T24] usb 2-1: USB disconnect, device number 35 [ 577.825534][T12460] veth0: entered allmulticast mode [ 577.840162][T12460] veth1: entered allmulticast mode [ 577.855204][T12460] wg0: entered allmulticast mode [ 577.866911][T12460] wg1: entered allmulticast mode [ 577.888628][T12457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.903378][T12457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.925431][T12460] wg2: entered allmulticast mode [ 577.930652][T12460] veth0_to_bridge: entered allmulticast mode [ 577.972390][T12460] veth1_to_bridge: entered allmulticast mode [ 577.982264][T12460] veth0_to_bond: entered allmulticast mode [ 577.996576][T12460] veth1_to_bond: entered allmulticast mode [ 577.997172][T11759] usb 3-1: USB disconnect, device number 39 [ 578.029550][T12460] veth0_to_team: entered allmulticast mode [ 578.056512][T12460] veth1_to_team: entered allmulticast mode [ 578.070134][T12460] veth0_to_batadv: entered allmulticast mode [ 578.090345][T12460] batadv_slave_0: entered allmulticast mode [ 578.110711][T12460] veth1_to_batadv: entered allmulticast mode [ 578.117572][T12460] batadv_slave_1: entered allmulticast mode [ 578.132217][T12460] xfrm0: entered allmulticast mode [ 578.137552][T12460] veth0_to_hsr: entered allmulticast mode [ 578.292600][ T24] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 578.320046][T12460] hsr_slave_0: entered allmulticast mode [ 578.322207][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 578.342996][T12460] veth1_to_hsr: entered allmulticast mode [ 578.361624][T12460] hsr_slave_1: entered allmulticast mode [ 578.379610][T12460] veth1_virt_wifi: entered allmulticast mode [ 578.392374][T12460] veth0_virt_wifi: entered allmulticast mode [ 578.414144][T12460] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 578.466074][T12460] veth1_vlan: entered allmulticast mode [ 578.473665][T12460] veth0_vlan: entered allmulticast mode [ 578.496402][ T24] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 578.507916][ T24] usb 2-1: config 0 has no interface number 0 [ 578.514935][T12460] vlan0: entered allmulticast mode [ 578.530967][ T24] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 578.542179][T12460] vlan1: entered allmulticast mode [ 578.561166][T12460] macvlan0: entered allmulticast mode [ 578.574547][ T24] usb 2-1: config 0 interface 2 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 578.588354][T12460] macvlan1: entered allmulticast mode [ 578.614560][T12460] ipvlan0: entered allmulticast mode [ 578.622520][ T24] usb 2-1: config 0 interface 2 has no altsetting 0 [ 578.654372][ T24] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 578.672369][T12460] ipvlan1: entered allmulticast mode [ 578.678181][T12460] veth1_macvtap: entered allmulticast mode [ 578.696095][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.697206][T12460] veth0_macvtap: entered allmulticast mode [ 578.803624][T12460] macvtap0: entered allmulticast mode [ 578.809163][T12460] macsec0: entered allmulticast mode [ 578.902110][ T24] usb 2-1: Product: syz [ 578.906386][ T24] usb 2-1: Manufacturer: syz [ 578.911224][ T24] usb 2-1: SerialNumber: syz [ 578.932858][ T24] usb 2-1: config 0 descriptor?? [ 578.942362][T12460] geneve0: entered allmulticast mode [ 578.947891][T12460] geneve1: entered allmulticast mode [ 578.967309][T12474] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 579.016946][T12460] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 579.191618][T12460] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 579.241541][T12460] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 579.258060][T12460] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 579.272193][T12460] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 579.331223][T12460] bond1: entered allmulticast mode [ 579.338347][T12460] geneve2: entered allmulticast mode [ 579.662391][T12489] syzkaller0: entered promiscuous mode [ 579.668053][T12489] syzkaller0: entered allmulticast mode [ 579.675560][ T9207] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 579.681613][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 579.714234][T12492] tipc: Enabled bearer , priority 0 [ 579.733108][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 579.761365][T12485] tipc: Resetting bearer [ 579.762540][ T24] usb 2-1: invalid MIDI in EP 0 [ 580.076545][ T24] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 580.130222][ T24] usb 2-1: USB disconnect, device number 36 [ 580.178150][ T6628] udevd[6628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.737379][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1826'. [ 581.607282][ T29] audit: type=1800 audit(1774862057.285:136): pid=12512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1828" name="bus" dev="ramfs" ino=58915 res=0 errno=0 [ 582.455225][ T29] audit: type=1400 audit(1774862058.385:137): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F04 [ 582.708089][T12524] kvm_intel: kvm [12523]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 582.856673][T12524] kvm_intel: kvm [12523]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 582.884010][T12524] kvm_intel: kvm [12523]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 582.918137][T12524] kvm_intel: kvm [12523]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 582.929099][T12524] kvm_intel: kvm [12523]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 582.957049][T12524] kvm_intel: kvm [12523]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 583.016608][T12524] kvm_intel: kvm [12523]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 583.172784][T12524] kvm_intel: kvm [12523]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 583.248955][T12524] kvm_intel: kvm [12523]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 583.276986][T12524] kvm_intel: kvm [12523]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 583.789452][T12538] kvm: pic: non byte read [ 583.794236][T12538] kvm: pic: non byte read [ 583.798813][T12538] kvm: pic: non byte read [ 583.803330][T12538] kvm: pic: non byte read [ 583.807782][T12538] kvm: pic: non byte read [ 583.812321][T12538] kvm: pic: non byte read [ 583.816779][T12538] kvm: pic: non byte read [ 583.821250][T12538] kvm: pic: non byte read [ 583.825782][T12538] kvm: pic: non byte read [ 583.830246][T12538] kvm: pic: non byte read [ 585.197691][T12485] tipc: Disabling bearer [ 585.211498][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 585.231791][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 585.304894][ T5834] tipc: Node number set to 3011672355 [ 585.405642][T12548] syzkaller0: entered promiscuous mode [ 585.411194][T12548] syzkaller0: entered allmulticast mode [ 587.807124][T12584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 589.732135][ T5959] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 589.885006][ T5959] usb 3-1: Using ep0 maxpacket: 8 [ 589.906459][ T5959] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.925249][ T5959] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 589.938155][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.966129][ T5959] usb 3-1: config 0 descriptor?? [ 590.003761][ T5959] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 590.669046][ T5959] usb 3-1: USB disconnect, device number 40 [ 591.582134][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 591.755182][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 591.767337][ T24] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 591.793122][ T24] usb 3-1: config 0 has no interface number 0 [ 591.796648][T12624] syzkaller0: entered promiscuous mode [ 591.809200][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 591.831092][T12624] syzkaller0: entered allmulticast mode [ 591.836755][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.836785][ T24] usb 3-1: Product: syz [ 591.836801][ T24] usb 3-1: Manufacturer: syz [ 591.836816][ T24] usb 3-1: SerialNumber: syz [ 591.853655][ T24] usb 3-1: config 0 descriptor?? [ 592.170431][T12629] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 592.354264][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 592.367123][T12629] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 592.369813][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 593.562125][ T5835] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 593.712415][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 593.726535][ T5835] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 593.786069][ T5835] usb 2-1: config 0 has no interface number 0 [ 593.877580][ T5835] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 593.905560][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.924401][ T5835] usb 2-1: Product: syz [ 593.928597][ T5835] usb 2-1: Manufacturer: syz [ 593.966253][ T5835] usb 2-1: SerialNumber: syz [ 594.046237][ T5835] usb 2-1: config 0 descriptor?? [ 594.077025][ T5835] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 594.503905][ T5835] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 594.572750][ T5835] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 595.072287][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 595.107427][T12647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.117751][ T24] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 595.155126][ T24] usb 3-1: USB disconnect, device number 41 [ 595.156901][T12647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.387571][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 596.389712][ T5959] usb 2-1: USB disconnect, device number 37 [ 596.461879][ T5959] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 596.585603][ T5959] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 596.645278][ T5959] quatech2 2-1:0.51: device disconnected [ 597.113561][T12670] tipc: Resetting bearer [ 597.132138][ T5959] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 597.293692][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 597.346866][ T5959] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 597.378042][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.398659][ T5959] usb 2-1: config 0 descriptor?? [ 597.430365][ T5959] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 598.379670][T12682] binder: BINDER_SET_CONTEXT_MGR already set [ 598.385845][T12682] binder: 12681:12682 ioctl 4018620d 200000004a80 returned -16 [ 599.202097][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 599.302154][ T5835] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 599.365650][ T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 599.376178][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.404162][ T24] usb 6-1: config 0 descriptor?? [ 599.411770][ T24] cp210x 6-1:0.0: cp210x converter detected [ 599.472132][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 599.479216][ T5835] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 599.489280][ T5835] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 599.502110][ T5835] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 599.522748][ T5835] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 599.542129][ T5835] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 599.563574][ T5835] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 599.605044][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.831868][ T24] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 599.869482][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 599.925262][T12687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.934338][T12687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.950970][ T47] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 600.083557][ T5835] usb 3-1: usb_control_msg returned -71 [ 600.102492][ T5835] usbtmc 3-1:16.0: can't read capabilities [ 600.112361][T12685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.116171][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.144596][T12685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.152965][ T5835] usb 3-1: USB disconnect, device number 42 [ 600.176455][ T47] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 600.211110][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.240493][ T47] usb 4-1: config 0 descriptor?? [ 600.260368][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 600.398739][ T5959] gspca_sonixj: reg_w err -71 [ 600.403853][ T5959] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 600.422373][ T5959] usb 2-1: USB disconnect, device number 38 [ 600.661782][ T47] pwc: recv_control_msg error -32 req 02 val 2b00 [ 600.687552][ T47] pwc: recv_control_msg error -32 req 02 val 2700 [ 600.700999][ T47] pwc: recv_control_msg error -32 req 02 val 2c00 [ 600.709753][ T47] pwc: recv_control_msg error -32 req 04 val 1000 [ 600.722180][ T47] pwc: recv_control_msg error -32 req 04 val 1300 [ 600.733331][ T47] pwc: recv_control_msg error -32 req 04 val 1400 [ 600.744072][ T47] pwc: recv_control_msg error -32 req 02 val 2000 [ 600.753330][ T47] pwc: recv_control_msg error -32 req 02 val 2100 [ 600.763790][ T47] pwc: recv_control_msg error -32 req 04 val 1500 [ 600.772944][ T47] pwc: recv_control_msg error -32 req 02 val 2500 [ 600.780452][ T47] pwc: recv_control_msg error -32 req 02 val 2400 [ 600.791045][ T47] pwc: recv_control_msg error -32 req 02 val 2600 [ 601.005538][ T47] pwc: recv_control_msg error -71 req 02 val 2800 [ 601.034391][ T47] pwc: recv_control_msg error -71 req 04 val 1100 [ 601.045180][ T47] pwc: recv_control_msg error -71 req 04 val 1200 [ 601.065225][ T47] pwc: Registered as video103. [ 601.094707][ T47] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 601.151342][ T47] usb 4-1: USB disconnect, device number 35 [ 601.372142][ T5835] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 601.763427][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 601.773199][ T5835] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 601.781353][ T5835] usb 3-1: config 0 has no interface number 0 [ 601.788005][ T5835] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 601.799953][ T5835] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 601.813443][ T5835] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 601.827907][ T5835] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 601.847738][ T5835] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 601.859326][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.908160][ T5835] usb 3-1: config 0 descriptor?? [ 601.952307][ T47] usb 6-1: USB disconnect, device number 10 [ 601.981149][ T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 602.025579][ T5835] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 602.051130][ T47] cp210x 6-1:0.0: device disconnected [ 602.410918][T12713] tipc: Enabled bearer , priority 0 [ 602.456687][ T47] usb 3-1: USB disconnect, device number 43 [ 602.487730][ T47] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 602.501889][T12713] syzkaller0: entered promiscuous mode [ 602.525091][T12713] syzkaller0: entered allmulticast mode [ 602.662603][T12718] syzkaller0: entered promiscuous mode [ 602.669014][T12718] syzkaller0: entered allmulticast mode [ 602.713795][T12713] tipc: Resetting bearer [ 603.108632][T12711] tipc: Resetting bearer [ 603.178478][T12711] tipc: Disabling bearer [ 603.437632][T12722] syzkaller0: entered promiscuous mode [ 603.443245][T12722] syzkaller0: entered allmulticast mode [ 604.756804][T12742] netdevsim netdevsim5 : renamed from netdevsim0 [ 605.022676][T12745] syzkaller0: entered promiscuous mode [ 605.042208][T12745] syzkaller0: entered allmulticast mode [ 608.189717][ T29] audit: type=1804 audit(1774862084.155:138): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1895" name="/newroot/411/file1" dev="tmpfs" ino=2150 res=1 errno=0 [ 608.824089][T12789] syzkaller0: entered promiscuous mode [ 608.829928][T12789] syzkaller0: entered allmulticast mode [ 608.838295][T12789] 0: reclassify loop, rule prio 0, protocol 800 [ 608.845325][T12786] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 608.862334][T12786] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 608.890281][T12786] tipc: Resetting bearer [ 608.962577][T12784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1900'. [ 608.991925][T12784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1900'. [ 609.297657][ T29] audit: type=1804 audit(1774862085.265:139): pid=12792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1902" name="/newroot/363/file1" dev="fuse" ino=1 res=1 errno=0 [ 610.046615][T11759] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 610.255452][T11759] usb 4-1: Using ep0 maxpacket: 32 [ 610.263568][T11759] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 610.281711][T11759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.521821][T11759] usb 4-1: config 0 descriptor?? [ 610.582492][T11759] as10x_usb: device has been detected [ 610.594771][T11759] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 610.756339][T11759] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 610.955796][T12804] ------------[ cut here ]------------ [ 610.961338][T12804] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 610.961356][T12804] WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x10a4/0x1300, CPU#1: syz.3.1905/12804 [ 610.977867][T12804] Modules linked in: [ 610.981795][T12804] CPU: 1 UID: 0 PID: 12804 Comm: syz.3.1905 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.993513][T12804] Tainted: [L]=SOFTLOCKUP [ 610.997833][T12804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 611.008169][T12804] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 611.013667][T12804] Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 4a 61 04 00 75 13 48 8d 3d 1c 60 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 611.033471][T12804] RSP: 0018:ffffc9000517fa20 EFLAGS: 00010246 [ 611.039545][T12804] RAX: 0000000000000000 RBX: 1ffff92000a2ff5c RCX: 0000000000080000 [ 611.047927][T12804] RDX: ffffc9000e3f5000 RSI: ffffffff8bcce0c0 RDI: ffffffff90151510 [ 611.055975][T12804] RBP: ffffc9000517fbd8 R08: ffffffff9011ffc3 R09: 1ffffffff2023ff8 [ 611.064027][T12804] R10: dffffc0000000000 R11: fffffbfff2023ff9 R12: ffff88807f14eb60 [ 611.072056][T12804] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 611.080072][T12804] FS: 00007f369de736c0(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 611.089224][T12804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.096173][T12804] CR2: 0000001b3130fff8 CR3: 0000000057b44000 CR4: 00000000003526f0 [ 611.104359][T12804] Call Trace: [ 611.107634][T12804] [ 611.110572][T12804] ? __mutex_lock+0x319/0x1300 [ 611.115441][T12804] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 611.121073][T12804] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 611.127520][T12804] ? __pfx___mutex_lock+0x10/0x10 [ 611.132562][T12804] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 611.138190][T12804] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 611.144200][T12804] ? do_raw_spin_lock+0x12b/0x2f0 [ 611.149247][T12804] as102_dvb_dmx_start_feed+0x70/0x290 [ 611.154744][T12804] dmx_section_feed_start_filtering+0x518/0x6c0 [ 611.160998][T12804] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 611.166586][T12804] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 611.172087][T12804] dvb_demux_do_ioctl+0x470/0x540 [ 611.177142][T12804] dvb_usercopy+0x199/0x2e0 [ 611.181639][T12804] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 611.187212][T12804] ? __pfx_dvb_usercopy+0x10/0x10 [ 611.192312][T12804] ? __fget_files+0x3a0/0x420 [ 611.197254][T12804] ? __fget_files+0x2a/0x420 [ 611.201836][T12804] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 611.207346][T12804] dvb_demux_ioctl+0x29/0x40 [ 611.211956][T12804] __se_sys_ioctl+0xfc/0x170 [ 611.216574][T12804] do_syscall_64+0x14d/0xf80 [ 611.221162][T12804] ? trace_irq_disable+0x3b/0x150 [ 611.226206][T12804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.232360][T12804] ? clear_bhb_loop+0x40/0x90 [ 611.237044][T12804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.243034][T12804] RIP: 0033:0x7f369cf9c799 [ 611.247455][T12804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.267140][T12804] RSP: 002b:00007f369de73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.275747][T12804] RAX: ffffffffffffffda RBX: 00007f369d215fa0 RCX: 00007f369cf9c799 [ 611.283743][T12804] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 611.291745][T12804] RBP: 00007f369d032c99 R08: 0000000000000000 R09: 0000000000000000 [ 611.300017][T12804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.308203][T12804] R13: 00007f369d216038 R14: 00007f369d215fa0 R15: 00007f369d33fa48 [ 611.316197][T12804] [ 611.319214][T12804] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 611.326506][T12804] CPU: 1 UID: 0 PID: 12804 Comm: syz.3.1905 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.337433][T12804] Tainted: [L]=SOFTLOCKUP [ 611.341744][T12804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 611.351785][T12804] Call Trace: [ 611.355068][T12804] [ 611.357997][T12804] vpanic+0x56c/0xa60 [ 611.361973][T12804] ? __pfx__printk+0x10/0x10 [ 611.366559][T12804] ? __pfx_vpanic+0x10/0x10 [ 611.371055][T12804] ? is_bpf_text_address+0x292/0x2b0 [ 611.376336][T12804] ? is_bpf_text_address+0x26/0x2b0 [ 611.381531][T12804] panic+0xc5/0xd0 [ 611.385252][T12804] ? __pfx_panic+0x10/0x10 [ 611.389691][T12804] __warn+0x315/0x4f0 [ 611.393670][T12804] ? __mutex_lock+0x10a4/0x1300 [ 611.398516][T12804] ? __mutex_lock+0x10a4/0x1300 [ 611.403358][T12804] __report_bug+0x29a/0x540 [ 611.407867][T12804] ? dvb_demux_do_ioctl+0x470/0x540 [ 611.413069][T12804] ? __mutex_lock+0x10a4/0x1300 [ 611.417917][T12804] ? __pfx___report_bug+0x10/0x10 [ 611.422933][T12804] ? pfn_valid+0x125/0x4c0 [ 611.427348][T12804] ? __lock_acquire+0x6b5/0x2cf0 [ 611.432293][T12804] report_bug_entry+0x19a/0x290 [ 611.437142][T12804] ? __mutex_lock+0x10ab/0x1300 [ 611.441981][T12804] ? __mutex_lock+0x10b0/0x1300 [ 611.446841][T12804] handle_bug+0xce/0x200 [ 611.451136][T12804] exc_invalid_op+0x1a/0x50 [ 611.455633][T12804] asm_exc_invalid_op+0x1a/0x20 [ 611.460471][T12804] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 611.465925][T12804] Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 4a 61 04 00 75 13 48 8d 3d 1c 60 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 611.485530][T12804] RSP: 0018:ffffc9000517fa20 EFLAGS: 00010246 [ 611.491587][T12804] RAX: 0000000000000000 RBX: 1ffff92000a2ff5c RCX: 0000000000080000 [ 611.499555][T12804] RDX: ffffc9000e3f5000 RSI: ffffffff8bcce0c0 RDI: ffffffff90151510 [ 611.507526][T12804] RBP: ffffc9000517fbd8 R08: ffffffff9011ffc3 R09: 1ffffffff2023ff8 [ 611.515501][T12804] R10: dffffc0000000000 R11: fffffbfff2023ff9 R12: ffff88807f14eb60 [ 611.523471][T12804] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 611.531448][T12804] ? __mutex_lock+0x319/0x1300 [ 611.536228][T12804] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 611.541870][T12804] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 611.548286][T12804] ? __pfx___mutex_lock+0x10/0x10 [ 611.553415][T12804] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 611.559057][T12804] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 611.565046][T12804] ? do_raw_spin_lock+0x12b/0x2f0 [ 611.570080][T12804] as102_dvb_dmx_start_feed+0x70/0x290 [ 611.575543][T12804] dmx_section_feed_start_filtering+0x518/0x6c0 [ 611.581781][T12804] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 611.587324][T12804] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 611.592791][T12804] dvb_demux_do_ioctl+0x470/0x540 [ 611.597841][T12804] dvb_usercopy+0x199/0x2e0 [ 611.602366][T12804] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 611.607918][T12804] ? __pfx_dvb_usercopy+0x10/0x10 [ 611.612946][T12804] ? __fget_files+0x3a0/0x420 [ 611.617622][T12804] ? __fget_files+0x2a/0x420 [ 611.622207][T12804] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 611.627509][T12804] dvb_demux_ioctl+0x29/0x40 [ 611.632109][T12804] __se_sys_ioctl+0xfc/0x170 [ 611.636704][T12804] do_syscall_64+0x14d/0xf80 [ 611.641375][T12804] ? trace_irq_disable+0x3b/0x150 [ 611.646386][T12804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.652444][T12804] ? clear_bhb_loop+0x40/0x90 [ 611.657120][T12804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.663009][T12804] RIP: 0033:0x7f369cf9c799 [ 611.667424][T12804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.687278][T12804] RSP: 002b:00007f369de73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.695773][T12804] RAX: ffffffffffffffda RBX: 00007f369d215fa0 RCX: 00007f369cf9c799 [ 611.703755][T12804] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 611.711714][T12804] RBP: 00007f369d032c99 R08: 0000000000000000 R09: 0000000000000000 [ 611.719669][T12804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.727628][T12804] R13: 00007f369d216038 R14: 00007f369d215fa0 R15: 00007f369d33fa48 [ 611.735603][T12804] [ 611.739153][T12804] Kernel Offset: disabled [ 611.743475][T12804] Rebooting in 86400 seconds..