last executing test programs: 5m2.080371275s ago: executing program 0 (id=205): r0 = socket$packet(0x11, 0x3, 0x300) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0xb5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x4d, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76d"}}}}, 0x73) 5m1.565114721s ago: executing program 0 (id=208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 4m57.654430026s ago: executing program 0 (id=219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 4m55.498984896s ago: executing program 0 (id=226): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c00, r3) dup2(r2, r0) 4m54.942158972s ago: executing program 0 (id=227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4m54.072008087s ago: executing program 0 (id=230): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000), 0x1000, r2}, 0x38) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x500c}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 4m52.537908766s ago: executing program 32 (id=230): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000), 0x1000, r2}, 0x38) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x500c}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 12.955703858s ago: executing program 1 (id=1117): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_clone(0x2000000, 0x0, 0x60, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0) 11.791835688s ago: executing program 1 (id=1121): close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9.515642495s ago: executing program 1 (id=1126): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000580)={0x2, {"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", 0x1000}}, 0x1006) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) unshare(0x2c060000) setsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) unshare(0x22020600) unshare(0x44020000) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"a2e3ad084fc752f91b4d09094bf70e0dd038e7ff7fc6e5539b3241078b089b32373b6d1a0890e0878f0e1ac6e7049b074a959b669a240d19520100ffe8d178708c523c921b1b5b31300d346d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44d25b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b90200d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e02090067ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5701259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd0800000000000000c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a707720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1068) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) 7.690287372s ago: executing program 3 (id=1131): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x20, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, "95b8bcc0"}}}}}}, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r3 = socket(0x200000000000011, 0x2, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) 7.193822888s ago: executing program 3 (id=1133): socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc1105511, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.973515894s ago: executing program 1 (id=1135): socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x4, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) fstatfs(0xffffffffffffffff, 0x0) 5.906369732s ago: executing program 4 (id=1136): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x2641d82c) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 5.487898095s ago: executing program 5 (id=1137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, {0x0, r5}}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 5.487041221s ago: executing program 4 (id=1139): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x29, 0x5, 0x0) r1 = socket(0xa, 0x3, 0x3a) recvmmsg(r1, 0x0, 0x0, 0x40000102, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$netlink(0x10, 0x3, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000004e80)=[{0x2, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/6, 0x6}, {0x0}], &(0x7f0000000640)=[0x7, 0x0, 0x80000001, 0x3, 0x1]}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0x4, 0x400, 0x10, 0x5, 0x6, 0x5, 0x100000001, 0x8d0]}, {0x3, 0x1, 0x0, &(0x7f0000000d40)=[{0x0}, {&(0x7f0000000bc0)=""/73, 0x49}, {&(0x7f0000000c40)=""/215, 0xd7}], &(0x7f0000000d80)=[0xf, 0x7, 0x8]}, {0x7, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000dc0)=""/188, 0xbc}, {&(0x7f0000000e80)=""/189, 0xbd}, {&(0x7f0000000f40)=""/164, 0xa4}, {&(0x7f0000001000)=""/178, 0xb2}, {&(0x7f00000010c0)=""/148, 0x94}, {&(0x7f0000001180)=""/193, 0xc1}, {&(0x7f0000001280)=""/179, 0xb3}], &(0x7f0000001380)=[0xffff, 0x3, 0x1, 0xfffffffffffffffc, 0x40, 0x1200000000000000]}, {0x2, 0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/213, 0xd5}, {&(0x7f00000014c0)=""/57, 0x39}], &(0x7f0000001540)=[0x3, 0xffffffffffffffff, 0xe, 0x4, 0x0, 0x0, 0x18c, 0x6, 0x8]}], 0x5) 5.486747074s ago: executing program 3 (id=1140): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r2 = socket(0xa, 0x5, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.108318409s ago: executing program 1 (id=1141): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.487876992s ago: executing program 2 (id=1142): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 3.670005667s ago: executing program 4 (id=1144): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xfea}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f0000000500)=""/88, &(0x7f0000000480)=""/49}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 3.651104291s ago: executing program 3 (id=1154): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 3.555232019s ago: executing program 2 (id=1145): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0x1, 0x400}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000200)={@hyper}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000001940)={&(0x7f0000001500)={{@hyper, 0xac}, {@host, 0x5}, 0x400, "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"}, 0x418, 0x7fffffff}) 3.262946241s ago: executing program 5 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x340}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x682}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x0) 3.259940875s ago: executing program 2 (id=1147): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 3.155084671s ago: executing program 3 (id=1148): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x2d6, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x2a0, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[@routing={0x21, 0xe, 0x1, 0x2, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @local]}, @dstopts={0x2c}, @dstopts={0x2f, 0x11, '\x00', [@jumbo={0xc2, 0x4, 0x8002}, @pad1, @calipso={0x7, 0x8, {0x1, 0x0, 0x1, 0x6}}, @enc_lim={0x4, 0x1, 0x6}, @generic={0xb4, 0x60, "5621db6c8b15db2016a839ef3587ea6264b30ab392eed26d2d21c06a182830ad664caa9d626690f7c11fa8430939082d29090ff8d9c6095eb0fc31a4a8dadd397941452aafc90be50823ac5e3d3fb6b01d738523a1d715d3c374138d45c6bad9"}, @calipso={0x7, 0x10, {0x1, 0x2, 0x6, 0x3, [0xed44]}}]}, @hopopts={0x87, 0xb, '\x00', [@calipso={0x7, 0x48, {0x2, 0x10, 0xf0, 0x3, [0x2a3, 0x1000, 0xf4, 0x12d, 0x8, 0xd, 0x8, 0x7]}}, @pad1, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @dstopts={0x88, 0x3, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x39}]}, @routing={0x32, 0x12, 0x0, 0x2, 0x0, [@private1, @dev={0xfe, 0x80, '\x00', 0x11}, @local, @empty, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @private0, @empty, @private1]}, @srh={0x3c, 0x0, 0x4, 0x0, 0x8, 0x8, 0xd}, @srh={0x1d, 0x2, 0x4, 0x1, 0x8, 0x48, 0xf, [@mcast2]}], @dest_unreach={0x1, 0x4, 0x0, 0x89, '\x00', {0xd, 0x6, "2318d3", 0xf4e, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357bc"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xffff9dd1, 0x20}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={r3, 0x39e}, 0x8) openat$vicodec0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2001030011d9085154000000584f"], 0x0}) 2.966798463s ago: executing program 2 (id=1149): syz_open_dev$sg(&(0x7f0000000080), 0x7f, 0x200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x9, 0x14, 0x8, 0x3, 0xa, 0xb9, 0x9, 0xe, 0x5, 0xffffffffffff1892}, {0x804, 0x2f7, 0x1, 0x2, 0x7, 0x48, 0x22, 0xff, 0x0, 0x1, 0x6, 0x7f, 0x616}, {0x1, 0x2, 0x18, 0x5, 0x84, 0xbc, 0x3, 0xfe, 0x4, 0x70, 0x4, 0x9, 0x1000000000}], 0xfffffffe}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x8a0, 0xfffc, 0xc, 0x44, 0x0, 0x4, 0x2, 0x9, 0x6, 0x1, 0x0, 0x3, 0x393}, {0x3, 0x1, 0x1, 0x2a, 0xff, 0x3, 0x5, 0x5, 0xb4, 0x2, 0x0, 0x6, 0x4}, {0x0, 0x8a7d, 0x9, 0x6, 0x80, 0x9, 0x1, 0x8, 0x9, 0xff, 0x4, 0x28, 0x3fc}], 0x401}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.883053394s ago: executing program 5 (id=1150): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000580)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000008, 0x0, 0x1, 0x10000, 0x100, 0x9004, 0x40000000000000, 0x3, 0x7, 0x5, 0x49, 0x3ff, 0x2, 0x0, 0xb, 0x8000000008, 0x7, 0x1c1, 0x2c, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x9, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x100000001, 0x8, 0x5c3e, 0x3fe, 0x1, 0x5, 0xfffffffffffffffa, 0x1, 0x401, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x3, 0x7, 0x40000005, 0xfffffffeffffffff, 0xa, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x0, 0x2, 0xcdc, 0x200000007, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x5, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x177, 0xff, 0x5, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x3, 0x200, 0x7, 0xe53e, 0x2c, 0x2, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x7, 0x10000000002, 0x1002, 0x7, 0xdfd7, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.667450867s ago: executing program 4 (id=1151): r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x5da23d53, 0x200300) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xa3, &(0x7f0000000100)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x3a, 0x95, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0xc, 0x85, 0x0, 0x2, [0x6, 0xffffffff]}]}}, {{0x4e20, 0x4e23, 0x41424344, r1, 0x1, 0x0, 0xf, 0x80, 0x3c6, 0x0, 0x5, {[@exp_fastopen={0xfe, 0x12, 0xf989, "c5de6f70a8fba800ea72874ca4db"}, @mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x3, @loopback, 0xff, "46b24b5343b5549b"}, @eol]}}, {"039b218ba5d517d9ec736c16e7522792f0221c1017193f0fcb28f7199f19237c4e78519eafbf4c49f38695082a9f6afe7bb5abca134f9c0c35"}}}}}}, 0x0) write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x4, 0x6, 0x1, 0x2d12, 0x4}, @ipv6=@tcp={0x2, 0x6, "06d3dc", 0x30f, 0x6, 0xff, @rand_addr=' \x01\x00', @remote, {[@hopopts={0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x8, 0xb, "f5d4e6ca4faf550b321a41"}]}, @dstopts={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}]}, @hopopts={0x32, 0x5, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x4, 0x8, [0xd, 0x101, 0x5f8, 0x1000]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x29, 0x2f, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x5, 0x98, "3a94bac96b158cb53ef2a731bc66094dece373672c350336af7ff7831a5608fba3b237c73b37ff95cf981be113830e76f07f2f84e1e6eca2e31a5a0974fcef837729d217f1e8a66ac0197b05da17350dcee943e2d1eaa4c8885632c75fa09aeb4783d14869a408504c700b0cf4d19b66a38a10104fae7bb5efb9b867492b82cdc901b28d34dca9c72fe5756a7617c8e2b39985dde7625d71"}, @generic={0xff, 0x75, "b55a0772346f47f34b115c0ca9322a24982984e7ad38be214891a3e3bd57eb42b4c6c8df020e2477fa709085de1456e17046518830b405ee01a541a33ec07dec694dfd7054e5d3495e008f9bb05b234725ddbcdb35b211f0f75e5369dfb2fa837b4acfd556d1a364a444189b189f6f1d25958586b8"}, @generic={0x40, 0xb, "9f37fa5c7becbda50b754d"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x29}}, @generic={0x8}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x40, {0x2, 0xe, 0x7c, 0x6, [0x9, 0x3, 0x80, 0xa, 0xe3, 0xfffffffffffffff6, 0x8]}}]}, @hopopts={0x3c, 0x9, '\x00', [@hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x38, {0x2, 0xc, 0x9, 0x2, [0x2, 0x337022c9, 0x10001, 0x66, 0xdf19, 0xfff]}}]}, @routing={0x0, 0x2, 0x0, 0x3, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}, @fragment={0x73, 0x0, 0x40, 0x0, 0x0, 0x6, 0x68}, @fragment={0x2b, 0x0, 0x7, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x41424344, r2, 0x1, 0x0, 0x10, 0x8, 0x1000, 0x0, 0x8e, {[@exp_smc={0xfe, 0x6}, @generic={0xfe, 0x8, "aec5b4c6425f"}, @md5sig={0x13, 0x12, "48682d487a2f84ed5f4522c0e1991aab"}, @timestamp={0x8, 0xa, 0x5, 0x6}]}}, {"be9cf6d2dc4748e76f3285dc39b00af389023158caa1211ea01cb16f95d3ecdc3f7fabae97c270d2e62f8b7b4f108e9ad9fc7e49304734b911bd9a2eab1c4ff93f5519211d872e8db0482a6c61c7fc3bf7fab64a94e5f8"}}}}}, 0x341) syz_emit_ethernet(0x1e, &(0x7f00000004c0)={@local, @random="0020e0000007", @void, {@can={0xc, {{0x2, 0x1}, 0x4, 0x2, 0x0, 0x0, "00008000"}}}}, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0xfd, 0x0, 0xa5, 0xbd, 0x1, 0x8, 0x4, 0x0, 0x2, 0x40000000}, {0x4, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x4, 0x6, 0xff, 0x5, 0x2, 0x4}, {0x3fe, 0x9, 0x0, 0x6, 0x0, 0xf0, 0xb3, 0x0, 0xff, 0x0, 0x80, 0xf5, 0x7}], 0x5}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="01", 0x24}]) fcntl$getownex(r4, 0x10, &(0x7f0000000040)) fsopen(&(0x7f0000000000)='dax\x00', 0x1) 2.563831053s ago: executing program 2 (id=1152): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r3, r4, 0x3, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 2.319973343s ago: executing program 5 (id=1153): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000580)={0x0, 0x80, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0xc, 0x8, 0x7, 0x800000000000008, 0x0, 0x1, 0x10000, 0x100, 0x9004, 0x40000000000000, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x0, 0xb, 0x8000000008, 0x40, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0xe, 0x1, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x1, 0x5, 0xfffffffffffffff7, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x1000000000066, 0x6, 0x7, 0x40000005, 0xbffffffeffffffff, 0xa, 0x5, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x9, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x8, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x2, 0x2293332f, 0x6, 0x5, 0x40000000000, 0xd, 0x2, 0x5, 0x2, 0x2, 0x6, 0x81, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x5]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.687988815s ago: executing program 4 (id=1155): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x100000, 0x104000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.538114079s ago: executing program 5 (id=1156): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d240500000500"], 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 1.434167871s ago: executing program 1 (id=1157): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.244800333s ago: executing program 3 (id=1158): getdents(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000340)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}) r2 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff14001b00fe"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ppoll(&(0x7f0000000080)=[{r2, 0x2020}, {r3, 0x1000}], 0x2, &(0x7f00000000c0), &(0x7f0000000100)={[0x6bd9, 0x3be6dd5]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f0009240202000000000007240100000110090582"], 0x0) 1.146112641s ago: executing program 4 (id=1159): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c001700000000001f3c93f185000000fdf10000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r3, 0x0, 0x0}, 0x10) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100000000004043550300000000000001090224000100008000090400000103000000092100000001220500090581030004000000c12722870363193d097a02dce9028b7c05e9259309d49bdba37e0c9f9d90d9d5f32b3a33c54bed7765dced6bbe33350b8c159463268d8e1e"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000005c0)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="02001f"], 0x0}, 0x0) 583.303628ms ago: executing program 2 (id=1160): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x5d4c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x20) 0s ago: executing program 5 (id=1161): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x68000) fcntl$setstatus(r0, 0x4, 0x2000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x427c2, 0x19e) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x8, {0x80c, 0x1}, {0x45, 0x400}, @rumble={0xdc, 0x8}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): 131.296033][ T122] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 131.318060][ T122] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 131.331776][ T122] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 131.353117][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO [ 131.374388][ T122] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 131.408466][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 131.431300][ T122] usb 2-1: USB disconnect, device number 5 [ 131.439532][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 131.473691][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 131.494571][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 131.515834][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 131.535828][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.572131][ T24] usb 4-1: USB disconnect, device number 5 [ 131.707379][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 131.729965][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 131.762031][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.778591][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 131.788803][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.808152][ T10] usb 3-1: Product: syz [ 131.816241][ T10] usb 3-1: Manufacturer: syz [ 131.821200][ T10] usb 3-1: SerialNumber: syz [ 131.854244][ T10] usb 3-1: config 0 descriptor?? [ 131.949239][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 132.008397][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 132.183822][ T5946] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.359303][ T5946] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 132.382931][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.392343][ T5946] usb 5-1: Product: syz [ 132.397151][ T5946] usb 5-1: Manufacturer: syz [ 132.402490][ T5946] usb 5-1: SerialNumber: syz [ 132.616916][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 132.635160][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 132.669257][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 133.111141][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.118976][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.841335][ T10] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe [ 134.042328][ T10] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 134.072360][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 134.083135][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 134.092965][ T5946] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 134.103030][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 134.125130][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 134.134538][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 134.160383][ T10] usb 3-1: USB disconnect, device number 5 [ 134.535797][ T5946] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 134.571372][ T5946] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 134.605519][ T5946] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 134.634865][ T5946] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 134.704662][ T5946] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 134.747960][ T5946] usb 5-1: USB disconnect, device number 5 [ 134.801725][ T6542] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 134.808677][ T6542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.904627][ T6542] vhci_hcd vhci_hcd.0: Device attached [ 135.082887][ T6551] syzkaller0: entered promiscuous mode [ 135.111512][ T6551] syzkaller0: entered allmulticast mode [ 135.155895][ T43] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 135.368506][ T6545] vhci_hcd: connection reset by peer [ 135.387184][ T1341] vhci_hcd: stop threads [ 135.392216][ T1341] vhci_hcd: release socket [ 135.429321][ T1341] vhci_hcd: disconnect device [ 135.854395][ T5946] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.024119][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 136.038081][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 136.067390][ T5946] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 136.093466][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.101521][ T5946] usb 5-1: Product: syz [ 136.120195][ T5946] usb 5-1: Manufacturer: syz [ 136.140032][ T5946] usb 5-1: SerialNumber: syz [ 136.149230][ T5946] usb 5-1: config 0 descriptor?? [ 136.168104][ T5946] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 136.197748][ T5946] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 137.036204][ T5946] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 137.457086][ T5946] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 137.482998][ T5946] em28xx 5-1:0.0: board has no eeprom [ 138.632294][ T6566] em28xx 5-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 138.693632][ T5946] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 138.701616][ T5946] em28xx 5-1:0.0: dvb set to bulk mode. [ 138.707786][ T5918] em28xx 5-1:0.0: Binding DVB extension [ 138.738892][ T5946] usb 5-1: USB disconnect, device number 6 [ 138.766236][ T5946] em28xx 5-1:0.0: Disconnecting em28xx [ 139.095470][ T5918] em28xx 5-1:0.0: Registering input extension [ 139.104511][ T5946] em28xx 5-1:0.0: Closing input extension [ 139.215532][ T5946] em28xx 5-1:0.0: Freeing device [ 139.411239][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 140.284250][ T43] vhci_hcd: vhci_device speed not set [ 140.917863][ T6603] syzkaller1: entered promiscuous mode [ 140.927024][ T6603] syzkaller1: entered allmulticast mode [ 141.207035][ T6605] loop6: detected capacity change from 0 to 524287999 [ 142.156706][ T6612] syzkaller0: entered promiscuous mode [ 142.234845][ T6612] syzkaller0: entered allmulticast mode [ 143.188042][ T6627] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 143.575906][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.214'. [ 143.611205][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.215'. [ 145.433648][ T5872] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 145.733611][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.235648][ T5872] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 146.245208][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.470948][ T5872] usb 5-1: config 0 descriptor?? [ 146.491379][ T5872] pwc: Askey VC010 type 2 USB webcam detected. [ 146.924394][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 146.932131][ T5872] pwc: recv_control_msg error -32 req 02 val 2700 [ 146.952238][ T5872] pwc: recv_control_msg error -32 req 02 val 2c00 [ 147.146019][ T5872] pwc: recv_control_msg error -32 req 04 val 1000 [ 147.195292][ T5872] pwc: recv_control_msg error -32 req 04 val 1300 [ 147.251913][ T5872] pwc: recv_control_msg error -32 req 04 val 1400 [ 147.272291][ T5872] pwc: recv_control_msg error -32 req 02 val 2000 [ 147.503575][ T5872] pwc: recv_control_msg error -71 req 04 val 1500 [ 147.510901][ T5872] pwc: recv_control_msg error -71 req 02 val 2500 [ 147.517911][ T5872] pwc: recv_control_msg error -71 req 02 val 2400 [ 147.526681][ T5872] pwc: recv_control_msg error -71 req 02 val 2600 [ 147.534367][ T5872] pwc: recv_control_msg error -71 req 02 val 2900 [ 147.551865][ T5872] pwc: recv_control_msg error -71 req 02 val 2800 [ 147.559536][ T5872] pwc: recv_control_msg error -71 req 04 val 1100 [ 147.584935][ T5872] pwc: recv_control_msg error -71 req 04 val 1200 [ 147.694068][ T5872] pwc: Registered as video103. [ 147.744434][ T5872] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 148.172401][ T5872] usb 5-1: USB disconnect, device number 7 [ 148.881377][ T1341] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.437155][ T1341] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.658685][ T1341] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.064218][ T1341] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.628123][ T1341] bridge_slave_1: left allmulticast mode [ 150.650062][ T1341] bridge_slave_1: left promiscuous mode [ 150.666047][ T1341] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.778227][ T1341] bridge_slave_0: left allmulticast mode [ 150.823547][ T1341] bridge_slave_0: left promiscuous mode [ 150.845590][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.328644][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.338034][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.346024][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.354649][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.363270][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.476000][ T5869] Bluetooth: hci0: command tx timeout [ 154.998154][ T1341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.057260][ T1341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.082867][ T1341] bond0 (unregistering): Released all slaves [ 155.964819][ T6762] CIFS: iocharset name too long [ 156.050813][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.247'. [ 156.448656][ T1341] hsr_slave_0: left promiscuous mode [ 156.461227][ T1341] hsr_slave_1: left promiscuous mode [ 156.503812][ T921] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 156.513943][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.532689][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.533664][ T5869] Bluetooth: hci0: command tx timeout [ 156.575005][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.582603][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.590309][ T122] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 156.656672][ T1341] veth1_macvtap: left promiscuous mode [ 156.673253][ T1341] veth0_macvtap: left promiscuous mode [ 156.683823][ T1341] veth1_vlan: left promiscuous mode [ 156.689331][ T1341] veth0_vlan: left promiscuous mode [ 156.707518][ T921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.743472][ T122] usb 5-1: Using ep0 maxpacket: 16 [ 156.750946][ T122] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 156.763330][ T122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 156.774971][ T921] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.775003][ T921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.790063][ T921] usb 4-1: config 0 descriptor?? [ 156.797987][ T122] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.826722][ T6779] kvm: pic: non byte read [ 156.836363][ T6779] kvm: pic: level sensitive irq not supported [ 156.836496][ T6779] kvm: pic: non byte read [ 156.890610][ T122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.908032][ T6779] kvm: pic: level sensitive irq not supported [ 156.908114][ T6779] kvm: pic: non byte read [ 156.949928][ T122] usb 5-1: Product: syz [ 156.980345][ T122] usb 5-1: Manufacturer: syz [ 157.035989][ T921] usbhid 4-1:0.0: can't add hid device: -71 [ 157.042575][ T921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 157.054964][ T921] usb 4-1: USB disconnect, device number 6 [ 157.214089][ T122] usb 5-1: SerialNumber: syz [ 157.242912][ T122] usb 5-1: config 0 descriptor?? [ 157.277690][ T122] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 157.293443][ T122] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 157.593800][ T921] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 157.813708][ T921] usb 4-1: Using ep0 maxpacket: 16 [ 157.823075][ T921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.839801][ T921] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 157.856484][ T921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.883148][ T921] usb 4-1: config 0 descriptor?? [ 157.918544][ T122] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 157.936988][ T122] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 158.314212][ T921] kye 0003:0458:5016.0002: control desc unexpectedly large [ 158.346115][ T921] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0002/input/input7 [ 158.418904][ T921] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0002/input/input8 [ 158.596339][ T122] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 158.613690][ T5869] Bluetooth: hci0: command tx timeout [ 158.874962][ T122] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 158.893541][ T122] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 158.914329][ T122] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 158.927727][ T122] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 159.039258][ T122] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 159.053244][ T921] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 159.053582][ T122] usb 5-1: USB disconnect, device number 8 [ 159.806154][ T1341] team0 (unregistering): Port device team_slave_1 removed [ 159.866975][ T1341] team0 (unregistering): Port device team_slave_0 removed [ 160.467682][ T5872] usb 4-1: USB disconnect, device number 7 [ 160.703969][ T5869] Bluetooth: hci0: command tx timeout [ 160.952040][ T6729] chnl_net:caif_netlink_parms(): no params data found [ 162.302669][ T6729] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.343953][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.351300][ T6729] bridge_slave_0: entered allmulticast mode [ 162.360342][ T6729] bridge_slave_0: entered promiscuous mode [ 162.394492][ T6729] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.403925][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.411766][ T6729] bridge_slave_1: entered allmulticast mode [ 162.494514][ T6729] bridge_slave_1: entered promiscuous mode [ 162.634085][ T6849] syzkaller0: entered promiscuous mode [ 162.639946][ T6849] syzkaller0: entered allmulticast mode [ 162.818200][ T6729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.598202][ T5918] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 168.653747][ T6891] kvm: pic: non byte read [ 168.658671][ T6891] kvm: pic: non byte read [ 168.663531][ T6891] kvm: pic: single mode not supported [ 168.663551][ T6891] kvm: pic: level sensitive irq not supported [ 168.670386][ T6891] kvm: pic: non byte read [ 168.682634][ T6891] kvm: pic: single mode not supported [ 168.682721][ T6891] kvm: pic: non byte read [ 168.694682][ T6891] kvm: pic: single mode not supported [ 168.694764][ T6891] kvm: pic: non byte read [ 168.705591][ T6891] kvm: pic: non byte read [ 168.710395][ T6891] kvm: pic: non byte read [ 168.718902][ T6891] kvm: pic: non byte read [ 168.724802][ T6891] kvm: pic: non byte read [ 168.788704][ T5918] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 168.799407][ T5918] usb 3-1: config 0 has no interface number 0 [ 168.809070][ T5918] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 168.827621][ T5918] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 168.842274][ T5918] usb 3-1: config 0 interface 48 has no altsetting 0 [ 168.872975][ T5918] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 168.894940][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.925578][ T5918] usb 3-1: config 0 descriptor?? [ 169.172579][ T5918] usb 3-1: string descriptor 0 read error: -32 [ 169.210491][ T5918] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 169.275524][ T6865] syz.3.268 (6865): drop_caches: 1 [ 170.114249][ T5918] usb 3-1: USB disconnect, device number 6 [ 170.496968][ T5931] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 170.563093][ T6729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.607215][ T6729] team0: Port device team_slave_0 added [ 170.627600][ T6729] team0: Port device team_slave_1 added [ 170.648954][ T5918] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 170.667280][ T5931] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.700859][ T5931] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 170.720999][ T5931] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.730651][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.779297][ T6898] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 170.812728][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.818658][ T5931] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.824415][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.854082][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 170.879495][ T6729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.893544][ T5918] usb 5-1: config 0 has no interfaces? [ 170.910694][ T5918] usb 5-1: New USB device found, idVendor=3277, idProduct=009e, bcdDevice=2e.0f [ 170.933009][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.946984][ T5918] usb 5-1: Product: syz [ 170.963012][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.970947][ T5918] usb 5-1: Manufacturer: syz [ 170.980793][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.981963][ T5918] usb 5-1: SerialNumber: syz [ 171.023563][ T6729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.049552][ T5918] usb 5-1: config 0 descriptor?? [ 171.316200][ T5918] usb 4-1: USB disconnect, device number 8 [ 171.631858][ T6729] hsr_slave_0: entered promiscuous mode [ 171.661111][ T6729] hsr_slave_1: entered promiscuous mode [ 172.167609][ T5872] usb 5-1: USB disconnect, device number 9 [ 173.004814][ T6946] input: syz1 as /devices/virtual/input/input9 [ 173.122346][ T6729] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.227953][ T6729] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.524521][ T6729] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.572059][ T6729] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.264277][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 174.326624][ T6729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.586368][ T6968] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 174.598613][ T6968] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 175.036164][ T6969] macvlan2: entered promiscuous mode [ 175.055812][ T6969] macvlan2: entered allmulticast mode [ 175.077736][ T6969] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 175.377309][ T6729] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.446131][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.453500][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.600150][ T2981] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.607443][ T2981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.717818][ T6995] fuse: Bad value for 'fd' [ 176.897499][ T6729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.449466][ T7004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.534428][ T6729] veth0_vlan: entered promiscuous mode [ 177.635284][ T7003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.699931][ T6729] veth1_vlan: entered promiscuous mode [ 177.770577][ T7003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.872054][ T6729] veth0_macvtap: entered promiscuous mode [ 177.954249][ T6729] veth1_macvtap: entered promiscuous mode [ 178.024151][ T6729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.058552][ T6729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.117470][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.149589][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.201540][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.334193][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.146666][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.171483][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.252086][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.282938][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.392174][ T7039] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 180.572818][ T7039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.614106][ T5931] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 180.692970][ T7043] bond1: (slave gretap1): making interface the new active one [ 180.711957][ T7043] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 180.814191][ T5931] usb 6-1: Using ep0 maxpacket: 32 [ 180.835440][ T5931] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 180.843587][ T5918] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.946477][ T5931] usb 6-1: config 0 has no interface number 0 [ 180.990361][ T5931] usb 6-1: New USB device found, idVendor=05d1, idProduct=9006, bcdDevice=48.7b [ 181.002671][ T5918] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 181.020455][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.021205][ T7053] Zero length message leads to an empty skb [ 181.040241][ T5931] usb 6-1: Product: syz [ 181.040321][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.060592][ T5931] usb 6-1: Manufacturer: syz [ 181.070746][ T5931] usb 6-1: SerialNumber: syz [ 181.075548][ T5918] usb 3-1: Product: syz [ 181.075571][ T5918] usb 3-1: Manufacturer: syz [ 181.095857][ T5931] usb 6-1: config 0 descriptor?? [ 181.105308][ T5918] usb 3-1: SerialNumber: syz [ 181.110776][ T5931] hub 6-1:0.96: bad descriptor, ignoring hub [ 181.117971][ T5931] hub 6-1:0.96: probe with driver hub failed with error -5 [ 181.121916][ T5918] usb 3-1: config 0 descriptor?? [ 181.133587][ T921] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 181.153293][ T5918] ch341 3-1:0.0: ch341-uart converter detected [ 181.158875][ T5931] ftdi_sio 6-1:0.96: FTDI USB Serial Device converter detected [ 181.185886][ T5931] ftdi_sio ttyUSB1: unknown device type: 0x487b [ 181.293593][ T921] usb 5-1: Using ep0 maxpacket: 16 [ 181.313099][ T921] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 181.336118][ T921] usb 5-1: config 0 has no interface number 0 [ 181.362623][ T921] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 181.404051][ T921] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 181.423491][ T921] usb 5-1: config 0 interface 41 has no altsetting 0 [ 181.444835][ T921] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 181.481590][ T921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.494768][ T921] usb 5-1: Product: syz [ 181.499319][ T921] usb 5-1: Manufacturer: syz [ 181.506464][ T122] usb 6-1: USB disconnect, device number 2 [ 181.530948][ T921] usb 5-1: SerialNumber: syz [ 181.542254][ T921] usb 5-1: config 0 descriptor?? [ 181.555078][ T7051] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 181.558557][ T122] ftdi_sio 6-1:0.96: device disconnected [ 181.579746][ T7051] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 181.822040][ T7051] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 181.850500][ T7051] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 182.246053][ T5918] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 182.650035][ T921] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 182.757651][ T5946] usb 3-1: USB disconnect, device number 7 [ 182.789294][ T5946] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 183.298047][ T5946] ch341 3-1:0.0: device disconnected [ 183.906706][ T7077] kvm: pic: level sensitive irq not supported [ 183.906798][ T7077] kvm: pic: non byte read [ 183.968656][ T7077] kvm: pic: non byte read [ 183.988872][ T7077] kvm: pic: non byte read [ 184.022112][ T7077] kvm: pic: single mode not supported [ 184.022135][ T7077] kvm: pic: level sensitive irq not supported [ 184.031821][ T7077] kvm: pic: non byte read [ 184.044147][ T7077] kvm: pic: non byte read [ 184.056599][ T7077] kvm: pic: non byte read [ 184.061655][ T7077] kvm: pic: non byte read [ 184.072558][ T7077] kvm: pic: level sensitive irq not supported [ 184.072670][ T7077] kvm: pic: non byte read [ 184.125610][ T7077] kvm: pic: level sensitive irq not supported [ 184.125722][ T7077] kvm: pic: non byte read [ 184.405084][ T921] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 184.422018][ T921] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 184.951246][ T921] usb 5-1: USB disconnect, device number 10 [ 186.267004][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.326'. [ 186.900399][ T7115] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 186.974632][ T7115] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 187.157238][ T7118] macvlan2: entered promiscuous mode [ 187.202610][ T7118] macvlan2: entered allmulticast mode [ 187.233281][ T7118] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 187.245128][ T7131] raw_sendmsg: syz.5.329 forgot to set AF_INET. Fix it! [ 187.283112][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 189.098057][ T5872] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 189.286252][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 189.374409][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 189.412336][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 189.492098][ T5872] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 189.550848][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.607439][ T5872] usb 3-1: Product: syz [ 189.616548][ T5872] usb 3-1: Manufacturer: syz [ 189.649557][ T5872] usb 3-1: SerialNumber: syz [ 189.703141][ T5872] usb 3-1: config 0 descriptor?? [ 189.753446][ T5872] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 189.762933][ T5872] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 190.564554][ T7193] netlink: 'syz.4.344': attribute type 21 has an invalid length. [ 190.734471][ T5872] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 190.781271][ T5872] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 191.409179][ T5872] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 191.425054][ T5872] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 191.637318][ T5872] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 191.739771][ T5872] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 191.843015][ T5872] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 191.864638][ T5872] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 191.954405][ T5872] usb 3-1: USB disconnect, device number 8 [ 194.541128][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.570904][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.584826][ T7246] vlan2: entered allmulticast mode [ 195.643570][ T7246] bond0: entered allmulticast mode [ 195.717393][ T7246] bond_slave_0: entered allmulticast mode [ 195.803854][ T7246] bond_slave_1: entered allmulticast mode [ 195.933596][ T7246] team0: entered allmulticast mode [ 195.974271][ T7246] team_slave_0: entered allmulticast mode [ 195.999718][ T7246] team_slave_1: entered allmulticast mode [ 197.722636][ T7277] binder: 7276:7277 ioctl c0306201 80000040 returned -14 [ 197.973514][ T30] audit: type=1326 audit(1757458740.651:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.3.363" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8539 code=0x0 [ 199.294007][ T30] audit: type=1804 audit(1757458742.011:4): pid=7304 uid=0 auid=0 ses=1 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.369" name="file0" dev="ramfs" ino=16272 res=1 errno=0 [ 199.853658][ T5918] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 200.048403][ T5918] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 200.078696][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.101405][ T5918] usb 4-1: Product: syz [ 200.114466][ T5918] usb 4-1: Manufacturer: syz [ 200.119126][ T5918] usb 4-1: SerialNumber: syz [ 200.433503][ T5872] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.633507][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 200.672483][ T5872] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 200.720201][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 200.747659][ T5872] usb 6-1: Product: syz [ 200.772404][ T5872] usb 6-1: Manufacturer: syz [ 200.792695][ T5872] usb 6-1: SerialNumber: syz [ 200.809540][ T5872] usb 6-1: config 0 descriptor?? [ 201.147751][ T5872] usb 6-1: USB disconnect, device number 3 [ 202.059900][ T7356] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.113879][ T5931] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 202.266313][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 202.275857][ T5931] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 202.286866][ T5931] usb 5-1: config 0 has no interface number 0 [ 202.301036][ T5931] usb 5-1: config 0 interface 113 has no altsetting 0 [ 202.321661][ T5931] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 202.331803][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.335205][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 202.340511][ T5931] usb 5-1: Product: syz [ 202.353849][ T5931] usb 5-1: Manufacturer: syz [ 202.358743][ T5931] usb 5-1: SerialNumber: syz [ 202.368696][ T5931] usb 5-1: config 0 descriptor?? [ 202.402266][ T5931] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 202.445514][ T5918] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 202.465863][ T5918] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 202.493615][ T5918] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 202.514363][ T5918] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 202.552632][ T5918] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 202.596376][ T5918] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 202.666855][ T5918] usb 4-1: USB disconnect, device number 9 [ 202.774573][ T5931] usb 5-1: USB disconnect, device number 11 [ 203.144643][ T7371] binder: 7370:7371 ioctl c018620c 80000280 returned -22 [ 203.608610][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 203.785144][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.799609][ T43] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 203.819873][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.866471][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 203.876863][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 203.899714][ T43] usb 3-1: Product: syz [ 203.910913][ T43] usb 3-1: Manufacturer: syz [ 203.951200][ T43] usb 3-1: SerialNumber: syz [ 204.283980][ T43] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 204.537530][ T5931] usb 3-1: USB disconnect, device number 9 [ 204.732823][ T5931] usblp0: removed [ 205.465743][ T5931] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 205.713517][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 205.772107][ T5931] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 205.802289][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.833556][ T5931] usb 4-1: Product: syz [ 205.857399][ T5931] usb 4-1: Manufacturer: syz [ 205.872291][ T5931] usb 4-1: SerialNumber: syz [ 205.922680][ T5931] usb 4-1: config 0 descriptor?? [ 205.928935][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 205.948517][ T5931] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 206.003859][ T7416] syz.4.403 (7416): drop_caches: 1 [ 207.174506][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 207.174594][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 207.180757][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 207.194061][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 207.545118][ T30] audit: type=1326 audit(1757458750.261:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz.1.410" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x0 [ 208.310900][ T30] audit: type=1326 audit(1757458751.031:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.4.413" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x0 [ 208.430133][ T7452] binder: 7450:7452 ioctl c0306201 80000000 returned -14 [ 208.630666][ T5931] gspca_sonixj: reg_w1 err -71 [ 208.673673][ T5931] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 208.704273][ T5931] usb 4-1: USB disconnect, device number 10 [ 208.983500][ T921] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 209.215215][ T921] usb 3-1: Using ep0 maxpacket: 32 [ 209.225775][ T921] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 209.313616][ T921] usb 3-1: config 0 has no interface number 0 [ 209.321042][ T921] usb 3-1: config 0 interface 184 has no altsetting 0 [ 209.332605][ T921] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 209.344012][ T921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.352315][ T921] usb 3-1: Product: syz [ 209.663645][ T921] usb 3-1: Manufacturer: syz [ 209.687214][ T921] usb 3-1: SerialNumber: syz [ 209.718697][ T921] usb 3-1: config 0 descriptor?? [ 209.735351][ T921] smsc75xx v1.0.0 [ 210.003485][ T5872] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 210.251816][ T5872] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 210.261494][ T5872] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 210.312589][ T5872] usb 4-1: config 0 interface 0 has no altsetting 0 [ 210.391810][ T5872] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.439988][ T921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 210.453685][ T921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 210.464058][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 210.503510][ T5872] usb 4-1: Product: syz [ 210.507944][ T5872] usb 4-1: Manufacturer: syz [ 210.512550][ T5872] usb 4-1: SerialNumber: syz [ 210.610983][ T5872] usb 4-1: config 0 descriptor?? [ 210.634278][ T5872] hub 4-1:0.0: bad descriptor, ignoring hub [ 210.664584][ T5872] hub 4-1:0.0: probe with driver hub failed with error -5 [ 210.738441][ T5872] usb 4-1: selecting invalid altsetting 0 [ 210.780521][ T7473] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 211.374687][ T7466] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 211.526141][ T10] usb 4-1: USB disconnect, device number 11 [ 211.541009][ T7479] JFS: charset not found [ 211.905347][ T921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 211.953673][ T921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 212.001835][ T921] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 212.040602][ T921] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 212.092793][ T921] usb 3-1: USB disconnect, device number 10 [ 212.654839][ T7494] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 212.777543][ T7495] syzkaller0: entered promiscuous mode [ 212.823548][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 212.826857][ T7495] syzkaller0: entered allmulticast mode [ 212.989982][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 213.016580][ T10] usb 4-1: no configurations [ 213.021260][ T10] usb 4-1: can't read configurations, error -22 [ 216.546211][ T7541] syz.5.439 (7541): drop_caches: 1 [ 217.180584][ T7552] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 217.234855][ T7553] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 218.505622][ T7568] JFS: charset not found [ 219.394421][ T5931] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 219.628900][ T5931] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 219.649748][ T5931] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 219.661751][ T5931] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 219.702439][ T5931] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 219.758916][ T5931] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 219.780848][ T5931] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 219.790607][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 220.081597][ T5931] usb 6-1: Product: syz [ 220.113632][ T5931] usb 6-1: Manufacturer: syz [ 220.154042][ T5931] cdc_wdm 6-1:1.0: skipping garbage [ 220.162520][ T5931] cdc_wdm 6-1:1.0: skipping garbage [ 220.181257][ T5931] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 220.188090][ T5931] cdc_wdm 6-1:1.0: Unknown control protocol [ 220.297818][ T7591] syz.1.454 (7591): drop_caches: 1 [ 220.903972][ T5872] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 220.935925][ T921] usb 6-1: USB disconnect, device number 4 [ 221.131564][ T5872] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 221.140229][ T5872] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 221.233498][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.252675][ T5872] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.269422][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 221.300075][ T5872] usb 5-1: Product: syz [ 221.533259][ T5872] usb 5-1: Manufacturer: syz [ 221.543941][ T5872] usb 5-1: SerialNumber: syz [ 221.569685][ T5872] usb 5-1: config 0 descriptor?? [ 221.599986][ T5872] hub 5-1:0.0: bad descriptor, ignoring hub [ 221.651604][ T5872] hub 5-1:0.0: probe with driver hub failed with error -5 [ 221.723142][ T5872] usb 5-1: selecting invalid altsetting 0 [ 222.854923][ T5946] usb 5-1: USB disconnect, device number 12 [ 222.984362][ T921] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 223.167994][ T921] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 223.195310][ T921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.222480][ T921] usb 3-1: Product: syz [ 223.231549][ T921] usb 3-1: Manufacturer: syz [ 223.267229][ T921] usb 3-1: SerialNumber: syz [ 225.742445][ T921] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 225.758477][ T921] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 226.459210][ T921] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 226.487298][ T921] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 226.527194][ T921] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 226.817185][ T921] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 226.976797][ T921] usb 3-1: USB disconnect, device number 11 [ 229.194772][ T7676] syzkaller0: entered promiscuous mode [ 229.200292][ T7676] syzkaller0: entered allmulticast mode [ 229.263509][ T5946] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 229.447085][ T5946] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 229.461955][ T5946] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 229.489921][ T5946] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 229.534978][ T5946] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 229.568244][ T5946] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 229.584101][ T5946] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.594651][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 229.602839][ T5946] usb 2-1: SerialNumber: syz [ 229.640246][ T7672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.649097][ T7672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.934925][ T5946] usb 2-1: USB disconnect, device number 6 [ 230.794785][ T5918] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 230.955376][ T5918] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 230.963817][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 230.975649][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 230.986993][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.000481][ T5918] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.010032][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.027923][ T5918] usb 2-1: config 0 descriptor?? [ 231.041080][ T7694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 231.500751][ T5918] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 231.560361][ T5918] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 231.798180][ T5872] usb 2-1: USB disconnect, device number 7 [ 231.965023][ T7695] fido_id[7695]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 232.616253][ T7710] capability: warning: `syz.2.491' uses deprecated v2 capabilities in a way that may be insecure [ 233.421192][ T5931] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 233.645490][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 233.657768][ T5931] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 233.669581][ T5931] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 233.679827][ T5931] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 233.692764][ T5931] usb 3-1: Product: syz [ 233.697536][ T7727] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 233.712395][ T7727] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 233.733163][ T5931] usb 3-1: Manufacturer: syz [ 233.741170][ T5931] usb 3-1: SerialNumber: syz [ 234.000603][ T5931] usb 3-1: Invalid connection information received from device [ 234.465245][ T5931] usb 3-1: USB disconnect, device number 12 [ 234.515190][ T5918] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 234.692419][ T5918] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 234.702802][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.846524][ T5918] usb 2-1: Product: syz [ 234.861478][ T5918] usb 2-1: Manufacturer: syz [ 234.875549][ T5918] usb 2-1: SerialNumber: syz [ 234.984524][ T5918] r8152-cfgselector 2-1: Unknown version 0x0000 [ 235.000165][ T5918] r8152-cfgselector 2-1: config 0 descriptor?? [ 235.534637][ T5918] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 235.982921][ T7756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.507'. [ 235.992078][ T7756] bond0: invalid ARP target 0.0.0.0 specified for addition [ 235.999820][ T7756] bond0: option arp_ip_target: invalid value (0) [ 237.003665][ T5918] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 237.253517][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 237.261279][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 237.313122][ T5918] usb 4-1: config 7 has an invalid interface number: 7 but max is 0 [ 237.454122][ T5918] usb 4-1: config 7 has no interface number 0 [ 237.479713][ T5918] usb 4-1: config 7 interface 7 has no altsetting 0 [ 237.603544][ T5872] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 237.669760][ T5918] usb 4-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=f9.7e [ 237.697028][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.778420][ T5918] usb 4-1: Product: syz [ 237.782880][ T5918] usb 4-1: Manufacturer: syz [ 237.788122][ T5918] usb 4-1: SerialNumber: syz [ 237.788854][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.834545][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.854371][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.003835][ T5872] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.088291][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.094897][ T5918] usb 4-1: Expected 3 endpoints, found: 0 [ 238.124051][ T5872] usb 3-1: config 0 descriptor?? [ 238.173610][ T5918] usb 4-1: USB disconnect, device number 14 [ 238.290218][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 238.539364][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805b39c800: rx timeout, send abort [ 239.151006][ T5872] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 240.773710][ T5918] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 240.963593][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 240.983967][ T5918] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 241.031504][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 241.057275][ T5918] usb 4-1: Product: syz [ 241.116786][ T5918] usb 4-1: Manufacturer: syz [ 241.163502][ T5918] usb 4-1: SerialNumber: syz [ 241.210149][ T5918] usb 4-1: config 0 descriptor?? [ 241.348790][ T5931] usb 3-1: USB disconnect, device number 13 [ 242.428175][ T5931] usb 4-1: USB disconnect, device number 15 [ 242.758831][ T5872] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 242.944112][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 242.959901][ T7831] binder: 7830:7831 ioctl c0306201 80000140 returned -14 [ 242.976255][ T5872] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 243.026673][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.043951][ T5931] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 243.084524][ T5872] usb 6-1: config 0 descriptor?? [ 243.245882][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 243.264463][ T5918] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 243.291048][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.331065][ T5872] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 243.357762][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.388480][ T5931] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 243.400926][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.412929][ T5931] usb 2-1: config 0 descriptor?? [ 243.427570][ T5931] hub 2-1:0.0: USB hub found [ 243.447922][ T5918] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 243.470100][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.500089][ T5918] usb 3-1: config 0 descriptor?? [ 243.517495][ T5918] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 243.650052][ T5931] hub 2-1:0.0: 1 port detected [ 243.703673][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 243.890589][ T43] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 243.900863][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.909254][ T43] usb 4-1: Product: syz [ 243.914157][ T43] usb 4-1: Manufacturer: syz [ 243.918925][ T43] usb 4-1: SerialNumber: syz [ 243.943930][ T43] r8152-cfgselector 4-1: Unknown version 0x0000 [ 243.952220][ T43] r8152-cfgselector 4-1: config 0 descriptor?? [ 244.320022][ T5931] hub 2-1:0.0: activate --> -90 [ 244.415207][ T122] r8152-cfgselector 4-1: USB disconnect, device number 16 [ 244.723063][ T5946] usb 2-1: USB disconnect, device number 9 [ 245.099893][ T5931] usb 2-1-port1: config error [ 245.214556][ T5918] gspca_stv06xx: I2C: Read error writing address: -71 [ 245.246713][ T5918] usb 3-1: USB disconnect, device number 14 [ 245.625047][ T5872] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 245.663624][ T5872] asix 6-1:0.0: probe with driver asix failed with error -71 [ 245.824385][ T5872] usb 6-1: USB disconnect, device number 5 [ 248.753577][ T122] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 248.934189][ T122] usb 2-1: Using ep0 maxpacket: 8 [ 248.959983][ T122] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 249.000187][ T122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.040808][ T122] usb 2-1: Product: syz [ 249.063440][ T122] usb 2-1: Manufacturer: syz [ 249.068195][ T122] usb 2-1: SerialNumber: syz [ 249.115748][ T122] usb 2-1: config 0 descriptor?? [ 249.146622][ T122] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 251.568969][ T122] gspca_sonixj: reg_w1 err -71 [ 251.702493][ T122] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 251.726633][ T122] usb 2-1: USB disconnect, device number 10 [ 252.094221][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 252.145721][ T30] audit: type=1804 audit(1757458794.871:7): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.572" name="/newroot/107/file1" dev="fuse" ino=1 res=1 errno=0 [ 252.273202][ T10] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 252.288797][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.305126][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 252.318467][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 252.354092][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.368809][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.381966][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.393052][ T10] usb 5-1: config 0 descriptor?? [ 252.404476][ T7957] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 252.713592][ T5946] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 252.919437][ T10] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 252.931938][ T5946] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 252.937146][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 252.956434][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.067567][ T5946] usb 4-1: Product: syz [ 253.079528][ T5946] usb 4-1: Manufacturer: syz [ 253.091337][ T5946] usb 4-1: SerialNumber: syz [ 253.181800][ T7975] binder_alloc: 7974: binder_alloc_buf size 1024 failed, no address space [ 253.182315][ T5946] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 253.220727][ T7975] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 253.356706][ T921] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 253.409183][ T7978] binder: BINDER_SET_CONTEXT_MGR already set [ 253.429963][ T5946] usb 5-1: USB disconnect, device number 13 [ 253.434134][ T7978] binder: 7977:7978 ioctl 4018620d 800002c0 returned -16 [ 253.489901][ T7976] fido_id[7976]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 254.451163][ T10] usb 4-1: USB disconnect, device number 17 [ 254.933731][ T921] usb 4-1: Service connection timeout for: 256 [ 254.940205][ T921] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 254.966185][ T921] ath9k_htc: Failed to initialize the device [ 254.990127][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 255.443748][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 255.641021][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 255.651259][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.663756][ T10] usb 4-1: config 0 has no interface number 0 [ 255.683562][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.722079][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 255.790743][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.814747][ T8001] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 255.842950][ T10] usb 4-1: config 0 descriptor?? [ 256.322798][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.329247][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.378193][ T10] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 256.497471][ T7996] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 256.504159][ T7996] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 256.521447][ T7996] vhci_hcd vhci_hcd.0: Device attached [ 256.552141][ T8006] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 256.558733][ T8006] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 256.612888][ T8006] vhci_hcd vhci_hcd.0: Device attached [ 256.623257][ T7996] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 256.629837][ T7996] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 256.641560][ T7996] vhci_hcd vhci_hcd.0: Device attached [ 256.673526][ T7996] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 256.680176][ T7996] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 256.703725][ T10] vhci_hcd: vhci_device speed not set [ 256.715449][ T7996] vhci_hcd vhci_hcd.0: Device attached [ 256.730040][ T5931] usb 4-1: USB disconnect, device number 18 [ 256.763528][ T10] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 257.019331][ T8013] vhci_hcd: connection closed [ 257.020843][ T36] vhci_hcd: stop threads [ 257.040890][ T36] vhci_hcd: release socket [ 257.050975][ T36] vhci_hcd: disconnect device [ 257.068455][ T8010] vhci_hcd: connection closed [ 257.069956][ T8007] vhci_hcd: connection closed [ 257.075029][ T1147] vhci_hcd: stop threads [ 257.105488][ T8004] vhci_hcd: connection reset by peer [ 257.129145][ T1147] vhci_hcd: release socket [ 257.134879][ T1147] vhci_hcd: disconnect device [ 257.141248][ T1147] vhci_hcd: stop threads [ 257.146312][ T1147] vhci_hcd: release socket [ 257.150988][ T1147] vhci_hcd: disconnect device [ 257.159671][ T1147] vhci_hcd: stop threads [ 257.164914][ T1147] vhci_hcd: release socket [ 257.169716][ T1147] vhci_hcd: disconnect device [ 259.439711][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'. [ 260.424158][ T5872] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 260.610187][ T5872] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 260.653711][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.724520][ T5872] usb 6-1: config 0 descriptor?? [ 260.776707][ T5872] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 261.883518][ T10] vhci_hcd: vhci_device speed not set [ 262.720806][ T5872] usb 6-1: USB disconnect, device number 6 [ 267.653315][ T8144] cgroup: fork rejected by pids controller in /syz1 [ 270.278143][ T30] audit: type=1326 audit(1757458813.001:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.5.629" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x0 [ 273.033544][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 273.373419][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 273.395984][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.440224][ T9352] syz_tun: entered allmulticast mode [ 273.447856][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.498408][ T9352] netlink: 64 bytes leftover after parsing attributes in process `syz.4.640'. [ 273.536470][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 273.549748][ T9352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.640'. [ 273.587872][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.697763][ T9352] unsupported nlmsg_type 40 [ 273.718609][ T10] usb 6-1: config 0 descriptor?? [ 274.276326][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 274.294265][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 274.469491][ T9357] syz.3.641 (9357): drop_caches: 1 [ 274.731848][ T10] usb 6-1: USB disconnect, device number 7 [ 274.967771][ T9357] syz.3.641 (9357): drop_caches: 1 [ 275.371906][ T30] audit: type=1326 audit(1757458818.091:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9365 comm="syz.4.645" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x0 [ 278.540267][ T5186] Bluetooth: hci0: command 0x0406 tx timeout [ 280.970287][ T921] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 281.606499][ T9419] binder: BINDER_SET_CONTEXT_MGR already set [ 281.612559][ T9419] binder: 9418:9419 ioctl 4018620d 80000040 returned -16 [ 281.693466][ T921] usb 5-1: Using ep0 maxpacket: 32 [ 281.729622][ T921] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 281.775576][ T921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.790047][ T921] usb 5-1: Product: syz [ 281.806645][ T921] usb 5-1: Manufacturer: syz [ 281.838204][ T921] usb 5-1: SerialNumber: syz [ 281.862796][ T921] usb 5-1: config 0 descriptor?? [ 281.898027][ T921] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 281.993054][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.662'. [ 282.064982][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.662'. [ 282.150596][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.662'. [ 282.165358][ T9430] veth1_to_bond: entered allmulticast mode [ 282.225730][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 282.352540][ T9430] bond0: (slave bond_slave_1): Releasing backup interface [ 282.484185][ T9434] syzkaller0: create flow: hash 1935157898 index 1 [ 282.580060][ T1341] syzkaller0: tun_net_xmit 76 [ 282.601805][ T1341] syzkaller0: tun_net_xmit 48 [ 282.608092][ T5949] syzkaller0: tun_net_xmit 76 [ 282.828254][ T9432] syzkaller0: delete flow: hash 1935157898 index 1 [ 284.005009][ T921] gspca_ov534_9: sccb_read failed 1 [ 284.224749][ T9453] loop6: detected capacity change from 0 to 63 [ 284.249662][ T9453] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.283752][ T9453] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.302955][ T9453] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.321615][ T9453] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.341506][ T9453] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.350600][ T9453] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.358983][ T9453] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.368020][ T9453] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.381320][ T9453] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.398338][ T9453] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.482564][ T921] gspca_ov534_9: reg_r err -71 [ 285.223488][ T921] gspca_ov534_9: Unknown sensor 0000 [ 285.223605][ T921] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 285.511427][ T921] usb 5-1: USB disconnect, device number 14 [ 286.463609][ T5872] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 286.636815][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 286.649868][ T5872] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 286.659066][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.667211][ T5872] usb 6-1: Product: syz [ 286.671417][ T5872] usb 6-1: Manufacturer: syz [ 286.676773][ T5872] usb 6-1: SerialNumber: syz [ 286.690475][ T5872] usb 6-1: config 0 descriptor?? [ 286.925546][ T5872] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 288.376358][ T5872] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 288.389452][ T5872] usb 6-1: USB disconnect, device number 8 [ 289.363531][ T5872] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 289.536059][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 289.575940][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.620600][ T5872] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3 [ 289.724830][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.743959][ T5872] usb 2-1: Product: syz [ 289.760545][ T5872] usb 2-1: Manufacturer: syz [ 290.213523][ T5872] usb 2-1: SerialNumber: syz [ 290.246436][ T5872] usb 2-1: config 0 descriptor?? [ 290.670190][ T5918] usb 2-1: USB disconnect, device number 11 [ 291.877243][ T9482] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.679'. [ 292.101284][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 292.167036][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 292.212448][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 292.243253][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 292.385970][ C1] sd 0:0:1:0: [sda] tag#4480 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 292.396718][ C1] sd 0:0:1:0: [sda] tag#4480 CDB: Write(10) 2a 0a 00 00 00 00 00 00 fc 01 00 00 [ 294.270423][ T9527] binder: BINDER_SET_CONTEXT_MGR already set [ 294.280409][ T9527] binder: 9525:9527 ioctl 4018620d 80000040 returned -16 [ 301.243754][ T5918] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 301.483445][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 301.490934][ T5918] usb 3-1: config 6 has an invalid interface number: 244 but max is -1 [ 301.503916][ T5918] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 0 [ 301.512838][ T5918] usb 3-1: config 6 has no interface number 0 [ 301.531014][ T5918] usb 3-1: config 6 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 301.561428][ T5918] usb 3-1: config 6 interface 244 has no altsetting 0 [ 301.621682][ T5918] usb 3-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 301.632329][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.641689][ T5918] usb 3-1: Product: syz [ 301.658413][ T5918] usb 3-1: Manufacturer: syz [ 301.671326][ T5918] usb 3-1: SerialNumber: syz [ 301.796127][ T5918] snd_usb_toneport 3-1:6.244: Line 6 GuitarPort found [ 302.501566][ T5918] snd_usb_toneport 3-1:6.244: set_interface failed [ 302.838580][ T5918] snd_usb_toneport 3-1:6.244: Line 6 GuitarPort now disconnected [ 302.861495][ T5918] snd_usb_toneport 3-1:6.244: probe with driver snd_usb_toneport failed with error -71 [ 302.883609][ T5918] usb 3-1: USB disconnect, device number 15 [ 303.261402][ T9599] bridge0: port 3(vxlan0) entered blocking state [ 303.298716][ T9599] bridge0: port 3(vxlan0) entered disabled state [ 303.315981][ T9599] vxlan0: entered allmulticast mode [ 303.407858][ T9599] vxlan0: entered promiscuous mode [ 304.573682][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 304.893762][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 304.933820][ T10] usb 2-1: device descriptor read/all, error -71 [ 305.735991][ T9623] netlink: 60 bytes leftover after parsing attributes in process `syz.1.716'. [ 306.437533][ T9631] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 306.799810][ T9638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.723'. [ 310.564430][ T921] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 310.623913][ T5918] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 310.723732][ T921] usb 4-1: Using ep0 maxpacket: 16 [ 310.738894][ T921] usb 4-1: config 11 has an invalid interface number: 202 but max is 0 [ 310.750190][ T921] usb 4-1: config 11 has no interface number 0 [ 310.758601][ T921] usb 4-1: config 11 interface 202 has no altsetting 0 [ 310.772328][ T921] usb 4-1: New USB device found, idVendor=110a, idProduct=1251, bcdDevice=4d.10 [ 310.782745][ T921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.799468][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 310.805467][ T921] usb 4-1: Product: syz [ 310.810486][ T921] usb 4-1: Manufacturer: syz [ 310.820969][ T5918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 310.829567][ T921] usb 4-1: SerialNumber: syz [ 310.854637][ T5918] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 310.884383][ T5918] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 310.906835][ T5918] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 310.917622][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.926100][ T5918] usb 5-1: Product: syz [ 310.930687][ T5918] usb 5-1: Manufacturer: syz [ 310.935862][ T5918] usb 5-1: SerialNumber: syz [ 311.102971][ T921] mxuport 4-1:11.202: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 311.152146][ T921] mxuport 4-1:11.202: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 311.180582][ T921] mxuport 4-1:11.202: probe with driver mxuport failed with error -71 [ 311.219901][ T5918] usb 5-1: USB disconnect, device number 15 [ 311.264050][ T921] usb 4-1: USB disconnect, device number 19 [ 312.473465][ T921] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 312.843600][ T921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.975762][ T921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.167327][ T921] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 313.229052][ T921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.275007][ T921] usb 6-1: config 0 descriptor?? [ 313.536114][ T9724] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 314.160183][ T5918] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 314.358036][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.391871][ T5918] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 314.418594][ T5918] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 314.442947][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.532319][ T5918] usb 3-1: config 0 descriptor?? [ 314.774809][ T5918] usb 3-1: string descriptor 0 read error: -71 [ 314.815554][ T5918] usb 3-1: USB disconnect, device number 16 [ 314.885914][ T921] razer 0003:1532:010E.0006: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 315.242462][ T5872] usb 6-1: USB disconnect, device number 9 [ 315.640220][ T9738] fido_id[9738]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 317.182404][ T9752] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 317.280178][ T9752] kvm: pic: level sensitive irq not supported [ 317.280281][ T9752] kvm: pic: non byte read [ 317.331214][ T9752] kvm: pic: level sensitive irq not supported [ 317.331282][ T9752] kvm: pic: non byte read [ 317.383818][ T9752] kvm: pic: level sensitive irq not supported [ 317.383883][ T9752] kvm: pic: non byte read [ 317.420203][ T9762] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 317.446194][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.459963][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.522794][ T9752] kvm: pic: level sensitive irq not supported [ 317.522882][ T9752] kvm: pic: non byte read [ 317.598319][ T9740] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.749'. [ 323.043474][ T5872] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 323.223517][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 323.271924][ T5872] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 323.333062][ T5872] usb 4-1: config 0 has no interface number 0 [ 323.453479][ T5872] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 323.530227][ T5872] usb 4-1: config 0 interface 41 has no altsetting 0 [ 323.549123][ T5872] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 323.563077][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.608558][ T5872] usb 4-1: Product: syz [ 323.626577][ T5872] usb 4-1: Manufacturer: syz [ 323.679245][ T5872] usb 4-1: SerialNumber: syz [ 323.707842][ T5872] usb 4-1: config 0 descriptor?? [ 323.991477][ T9819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 324.019974][ T5872] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 324.311349][ T5872] usb 4-1: USB disconnect, device number 20 [ 324.709595][ T9837] netlink: 60 bytes leftover after parsing attributes in process `syz.2.776'. [ 325.553429][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 325.803741][ T10] usb 6-1: config 0 has an invalid interface number: 229 but max is 0 [ 325.812250][ T10] usb 6-1: config 0 has no interface number 0 [ 325.820251][ T10] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 325.829508][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.956398][ T10] usb 6-1: config 0 descriptor?? [ 326.594348][ T921] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 326.744996][ T5918] usb 6-1: USB disconnect, device number 10 [ 326.772533][ T921] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.737880][ T9874] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 327.812019][ T9874] kvm: pic: level sensitive irq not supported [ 327.812132][ T9874] kvm: pic: non byte read [ 327.907287][ T9874] kvm: pic: level sensitive irq not supported [ 327.907392][ T9874] kvm: pic: non byte read [ 327.935194][ T9874] kvm: pic: level sensitive irq not supported [ 327.935281][ T9874] kvm: pic: non byte read [ 327.949482][ T9874] kvm: pic: level sensitive irq not supported [ 327.949598][ T9874] kvm: pic: non byte read [ 332.447668][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 332.463693][ T921] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 332.475580][ T9932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.483089][ T9932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.494160][ T9932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.514102][ T9932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.649204][ T921] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 332.659640][ T921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.682206][ T921] usb 5-1: Product: syz [ 332.687721][ T921] usb 5-1: Manufacturer: syz [ 332.693073][ T921] usb 5-1: SerialNumber: syz [ 334.985115][ T921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 334.999906][ T921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 335.665186][ T921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 335.731057][ T921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 335.761846][ T921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 335.800578][ T921] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 335.834308][ T921] usb 5-1: USB disconnect, device number 16 [ 336.261822][ T9970] kvm: pic: single mode not supported [ 336.261846][ T9970] kvm: pic: level sensitive irq not supported [ 336.263484][ T5872] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 336.293922][ T5946] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 336.302110][ T9970] kvm: pic: single mode not supported [ 336.302132][ T9970] kvm: pic: level sensitive irq not supported [ 336.327425][ T9970] kvm: pic: single mode not supported [ 336.333757][ T9970] kvm: pic: level sensitive irq not supported [ 336.355434][ T9970] kvm: pic: single mode not supported [ 336.361781][ T9970] kvm: pic: level sensitive irq not supported [ 336.371203][ T9970] kvm: pic: single mode not supported [ 336.377598][ T9970] kvm: pic: level sensitive irq not supported [ 336.383588][ T9970] kvm: pic: single mode not supported [ 336.389730][ T9970] kvm: pic: level sensitive irq not supported [ 336.397944][ T9970] kvm: pic: single mode not supported [ 336.404188][ T9970] kvm: pic: level sensitive irq not supported [ 336.409909][ T9970] kvm: pic: single mode not supported [ 336.416267][ T9970] kvm: pic: level sensitive irq not supported [ 336.425454][ T9970] kvm: pic: single mode not supported [ 336.431830][ T9970] kvm: pic: level sensitive irq not supported [ 336.438532][ T9970] kvm: pic: single mode not supported [ 336.444856][ T9970] kvm: pic: level sensitive irq not supported [ 336.472897][ T5872] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 336.483458][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 336.493408][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.493433][ T5872] usb 6-1: Product: syz [ 336.493448][ T5872] usb 6-1: Manufacturer: syz [ 336.493462][ T5872] usb 6-1: SerialNumber: syz [ 336.550966][ T5946] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 336.592053][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.603573][ T5946] usb 2-1: Product: syz [ 336.611621][ T5946] usb 2-1: Manufacturer: syz [ 336.617679][ T5946] usb 2-1: SerialNumber: syz [ 336.627620][ T5946] usb 2-1: config 0 descriptor?? [ 336.648689][ T5946] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 336.668124][ T5946] usb 2-1: Detected FT232H [ 337.094711][ T5946] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 337.525087][ T5946] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 338.059492][ T5946] usb 2-1: USB disconnect, device number 14 [ 338.078709][ T5946] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 338.089807][ T5946] ftdi_sio 2-1:0.0: device disconnected [ 339.318408][ T5872] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 339.347866][ T5872] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 339.401081][ T5872] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 339.465734][ T5872] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 339.487727][ T5872] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 339.510726][ T5872] usb 6-1: USB disconnect, device number 11 [ 341.735311][T10034] netlink: 180 bytes leftover after parsing attributes in process `syz.3.834'. [ 341.744650][ T30] audit: type=1326 audit(1757458884.441:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 341.830973][T10034] netlink: 180 bytes leftover after parsing attributes in process `syz.3.834'. [ 341.866646][ T30] audit: type=1326 audit(1757458884.441:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 341.892623][ T30] audit: type=1326 audit(1757458884.441:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 341.896815][T10034] netlink: 180 bytes leftover after parsing attributes in process `syz.3.834'. [ 341.923035][ T30] audit: type=1326 audit(1757458884.441:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 342.023828][ T30] audit: type=1326 audit(1757458884.441:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 342.046198][ T30] audit: type=1326 audit(1757458884.451:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 342.072189][ T30] audit: type=1326 audit(1757458884.451:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 342.094758][ T30] audit: type=1326 audit(1757458884.451:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 342.117267][ T30] audit: type=1326 audit(1757458884.451:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 342.140559][ T30] audit: type=1326 audit(1757458884.461:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 353.053475][ T5872] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 353.243453][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 353.252741][ T5872] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 353.285334][ T5872] usb 4-1: config 0 has no interface number 0 [ 353.294580][T10151] netlink: zone id is out of range [ 353.302230][T10151] netlink: zone id is out of range [ 353.311250][ T5872] usb 4-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 353.327832][ T5872] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 4672, setting to 1024 [ 353.340002][T10151] netlink: zone id is out of range [ 353.543458][T10151] netlink: zone id is out of range [ 353.549939][T10151] netlink: zone id is out of range [ 353.563381][T10151] netlink: zone id is out of range [ 353.568745][T10151] netlink: zone id is out of range [ 353.574324][T10151] netlink: zone id is out of range [ 353.579567][T10151] netlink: zone id is out of range [ 353.585915][T10151] netlink: zone id is out of range [ 353.663450][ T5872] usb 4-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 353.990812][ T5872] usb 4-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 354.003603][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.039233][ T5872] usb 4-1: Product: syz [ 354.053410][ T5872] usb 4-1: Manufacturer: syz [ 354.061342][ T5872] usb 4-1: SerialNumber: syz [ 354.080498][ T5872] usb 4-1: config 0 descriptor?? [ 354.127831][T10141] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 354.143718][T10141] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 354.368103][T10141] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 354.375658][T10141] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 354.449850][T10160] binder: 10159:10160 ioctl c0306201 80000280 returned -14 [ 354.590483][ T5872] asix 4-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 354.621507][ T5872] asix 4-1:0.255: probe with driver asix failed with error -71 [ 354.696644][ T5872] usb 4-1: USB disconnect, device number 21 [ 355.425709][T10178] syz_tun: entered allmulticast mode [ 355.485139][T10178] dvmrp8: entered allmulticast mode [ 355.727772][T10173] syz_tun: left allmulticast mode [ 355.792529][T10173] dvmrp8: left allmulticast mode [ 358.183578][ T5973] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 358.368790][ T5973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.473789][ T5973] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 358.508664][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.944588][ T5973] usb 3-1: config 0 descriptor?? [ 358.980875][ T5973] pwc: Askey VC010 type 2 USB webcam detected. [ 359.654206][ T5973] pwc: recv_control_msg error -32 req 02 val 2b00 [ 359.745852][T10226] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 359.783101][ T5973] pwc: recv_control_msg error -32 req 02 val 2700 [ 359.795212][ T5973] pwc: recv_control_msg error -32 req 02 val 2c00 [ 359.812041][ T5973] pwc: recv_control_msg error -32 req 04 val 1000 [ 359.904182][ T5973] pwc: recv_control_msg error -32 req 04 val 1300 [ 360.183588][ T5973] pwc: recv_control_msg error -32 req 04 val 1400 [ 360.195284][ T5973] pwc: recv_control_msg error -32 req 02 val 2000 [ 360.202491][ T5973] pwc: recv_control_msg error -32 req 02 val 2100 [ 360.210081][ T5973] pwc: recv_control_msg error -32 req 04 val 1500 [ 360.429099][ T5973] pwc: recv_control_msg error -71 req 02 val 2400 [ 360.445005][ T5973] pwc: recv_control_msg error -71 req 02 val 2600 [ 360.482203][ T5973] pwc: recv_control_msg error -71 req 02 val 2900 [ 360.588501][ T5973] pwc: recv_control_msg error -71 req 02 val 2800 [ 360.678576][T10238] syz.1.887 (10238): drop_caches: 1 [ 360.753605][ T5973] pwc: recv_control_msg error -71 req 04 val 1100 [ 360.766481][ T5973] pwc: recv_control_msg error -71 req 04 val 1200 [ 360.790591][ T5973] pwc: Registered as video103. [ 360.878479][T10238] syz.1.887 (10238): drop_caches: 1 [ 361.198228][ T5973] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 361.309715][ T5973] usb 3-1: USB disconnect, device number 17 [ 361.991699][ T6016] udevd[6016]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 365.504591][ T5973] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 365.596038][ T5872] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 365.643534][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 365.737045][ T5973] usb 5-1: Using ep0 maxpacket: 16 [ 365.748714][ T5973] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 365.767290][ T5973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.785802][ T5872] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 365.796345][ T5973] usb 5-1: config 0 has no interface number 0 [ 365.811642][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 365.822299][ T5872] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 365.835647][ T5973] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 365.849309][ T5973] usb 5-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.853523][ T5946] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 365.867511][ T5872] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 365.880631][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 365.889456][ T10] usb 3-1: config 0 has no interface number 0 [ 365.895743][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.906719][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 365.921596][ T5973] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 366.003215][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.023907][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 366.037847][ T5872] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 366.052109][ T5973] usb 5-1: Product: syz [ 366.057613][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.086450][ T5973] usb 5-1: Manufacturer: syz [ 366.147136][ T5973] usb 5-1: SerialNumber: syz [ 366.164653][ T10] usb 3-1: Product: syz [ 366.172055][ T10] usb 3-1: Manufacturer: syz [ 366.185114][ T5973] usb 5-1: config 0 descriptor?? [ 366.187138][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 366.190471][ T10] usb 3-1: SerialNumber: syz [ 366.236156][ T5946] usb 4-1: config 0 has no interfaces? [ 366.253621][T10282] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 366.253730][ T5946] usb 4-1: config 0 has no interfaces? [ 366.280011][ T5872] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 366.291777][ T10] usb 3-1: config 0 descriptor?? [ 366.300018][ T5973] asix 5-1:0.251: probe with driver asix failed with error -22 [ 366.352981][ T5946] usb 4-1: config 0 has no interfaces? [ 366.414332][ T5946] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 366.453403][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.482091][ T5946] usb 4-1: Product: syz [ 366.486677][ T5946] usb 4-1: Manufacturer: syz [ 366.491414][ T5946] usb 4-1: SerialNumber: syz [ 366.568953][ T5946] usb 4-1: config 0 descriptor?? [ 366.599200][ T5872] usb 5-1: USB disconnect, device number 17 [ 366.676130][T10295] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 367.101650][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 367.101671][ T30] audit: type=1804 audit(1757458909.821:39): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.904" name="/newroot/135/file1" dev="fuse" ino=1 res=1 errno=0 [ 367.436650][ T122] usb 4-1: USB disconnect, device number 22 [ 368.171490][T10308] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 368.248461][ T5872] usb 2-1: USB disconnect, device number 15 [ 368.608129][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 368.671702][ T30] audit: type=1800 audit(1757458911.361:40): pid=10314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.908" name="/" dev="fuse" ino=1 res=0 errno=0 [ 368.673055][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 368.758830][ T30] audit: type=1800 audit(1757458911.371:41): pid=10311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.908" name="/" dev="fuse" ino=1 res=0 errno=0 [ 368.766511][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 368.818198][T10318] netlink: 'syz.3.911': attribute type 10 has an invalid length. [ 368.876833][T10318] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.900394][T10318] bond0: (slave team0): Enslaving as an active interface with an up link [ 369.054489][ T10] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 369.062123][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 369.080362][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 369.133557][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 369.216434][ T10] usb 3-1: USB disconnect, device number 18 [ 369.246826][T10323] syz.5.910 (10323): drop_caches: 1 [ 369.541999][T10323] syz.5.910 (10323): drop_caches: 1 [ 371.318056][T10350] bridge2: entered allmulticast mode [ 371.974417][ T5949] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 372.181022][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 372.374003][ T5949] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 372.382720][ T5949] usb 5-1: config 0 has no interface number 0 [ 372.392206][ T5949] usb 5-1: config 0 interface 184 has no altsetting 0 [ 372.414916][ T5949] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 372.432062][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.441534][ T5949] usb 5-1: Product: syz [ 372.445835][ T5949] usb 5-1: Manufacturer: syz [ 372.450512][ T5949] usb 5-1: SerialNumber: syz [ 372.464681][ T5949] usb 5-1: config 0 descriptor?? [ 372.497046][ T5949] smsc75xx v1.0.0 [ 373.632778][ T5949] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 373.693556][ T5949] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 374.848920][T10380] syz.2.926 (10380): drop_caches: 1 [ 374.983752][T10380] syz.2.926 (10380): drop_caches: 1 [ 375.545315][ T5949] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 375.559976][ T5949] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 375.655261][ T5949] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 375.667566][ T5949] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 375.678083][ T5949] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 375.691502][ T5949] usb 5-1: USB disconnect, device number 18 [ 376.473531][ T5872] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 376.553399][ T921] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 376.715092][ T5872] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 376.737083][ T921] usb 4-1: Using ep0 maxpacket: 8 [ 376.737480][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.762871][ T5872] usb 2-1: Product: syz [ 376.774005][ T921] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 376.790501][ T5872] usb 2-1: Manufacturer: syz [ 376.793734][ T921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 376.869215][ T5872] usb 2-1: SerialNumber: syz [ 376.891651][ T921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 377.220673][ T921] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.071606][ T921] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 378.092100][ T921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.463129][ T921] usb 4-1: GET_CAPABILITIES returned 0 [ 378.469184][ T921] usbtmc 4-1:16.0: can't read capabilities [ 378.692844][ T921] usb 4-1: USB disconnect, device number 23 [ 378.861639][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.868473][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.271580][T10413] binder: transaction release 195 bad handle 1, ret = -22 [ 379.412853][T10423] syz_tun: entered allmulticast mode [ 379.479624][T10423] dvmrp6: entered allmulticast mode [ 380.417206][ T5872] net_ratelimit: 55 callbacks suppressed [ 380.417232][ T5872] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 380.474097][ T5872] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 380.488079][T10420] syz_tun: left allmulticast mode [ 380.534322][T10420] dvmrp6: left allmulticast mode [ 380.551309][ T5872] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 380.636169][ T5872] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 381.248672][ T5872] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 381.273787][ T5872] usb 2-1: USB disconnect, device number 16 [ 382.665504][ T5946] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 382.875502][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 382.883571][ T5946] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 382.893010][ T5946] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.919907][ T5946] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.979273][ T5946] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.990936][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.012202][ T5946] usb 3-1: Product: syz [ 383.023121][ T5946] usb 3-1: Manufacturer: syz [ 383.028479][ T5946] usb 3-1: SerialNumber: syz [ 383.475477][ T5946] usb 3-1: 0:2 : does not exist [ 384.103743][T10489] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 384.150088][T10491] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 384.540040][ T5946] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 384.616316][ T5946] usb 3-1: USB disconnect, device number 19 [ 385.451497][T10511] syzkaller1: entered promiscuous mode [ 385.460026][T10511] syzkaller1: entered allmulticast mode [ 388.613690][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 388.702521][T10548] netlink: 277 bytes leftover after parsing attributes in process `syz.2.976'. [ 388.763456][T10548] netlink: 277 bytes leftover after parsing attributes in process `syz.2.976'. [ 388.995364][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 389.054609][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 389.067433][T10545] futex_wake_op: syz.2.976 tries to shift op by -1; fix this program [ 389.104437][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 390.920928][T10574] syz.4.981 (10574): drop_caches: 1 [ 391.060270][T10574] syz.4.981 (10574): drop_caches: 1 [ 392.869069][T10595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 393.215560][T10605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.851764][ T30] audit: type=1804 audit(1757458937.551:42): pid=10629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.996" name="/newroot/190/file1" dev="fuse" ino=1 res=1 errno=0 [ 395.303448][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 395.487400][ T10] usb 6-1: config 0 has no interfaces? [ 395.493101][ T10] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 395.531974][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.638977][ T10] usb 6-1: config 0 descriptor?? [ 395.973823][ T5973] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 396.293027][T10647] syz.3.1001 (10647): drop_caches: 1 [ 396.303578][ T5973] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 396.335264][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.447731][T10647] syz.3.1001 (10647): drop_caches: 1 [ 396.629386][ T5973] usb 5-1: Product: syz [ 396.667580][ T5973] usb 5-1: Manufacturer: syz [ 396.691152][ T5973] usb 5-1: SerialNumber: syz [ 397.125913][ T10] usb 6-1: USB disconnect, device number 12 [ 398.447459][ T5973] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 398.504062][ T5973] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 398.988482][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'. [ 400.006955][ T5973] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 400.062308][ T5973] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 400.104434][ T5973] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 400.185776][ T5973] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 400.230101][ T5973] usb 5-1: USB disconnect, device number 19 [ 401.985737][T10681] binder: BINDER_SET_CONTEXT_MGR already set [ 401.991857][T10681] binder: 10680:10681 ioctl 4018620d 80004a80 returned -16 [ 404.543184][ T5872] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 404.711560][T10717] syz_tun: entered allmulticast mode [ 404.733470][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 404.745216][ T5872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.760161][T10717] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1024'. [ 404.773936][ T5872] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.786020][T10717] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1024'. [ 404.798528][ T5872] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.812061][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.836576][ T5872] usb 2-1: Product: syz [ 404.840839][ T5872] usb 2-1: Manufacturer: syz [ 404.861598][ T5872] usb 2-1: SerialNumber: syz [ 405.246238][ T5872] usb 2-1: 0:2 : does not exist [ 405.267040][ T5872] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 405.373072][ T5872] usb 2-1: USB disconnect, device number 17 [ 405.545936][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.715985][ T122] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 406.923407][ T122] usb 6-1: Using ep0 maxpacket: 32 [ 406.930928][ T122] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 406.941696][ T122] usb 6-1: config 0 has no interface number 0 [ 406.951251][ T122] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 406.962647][ T122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.970792][ T122] usb 6-1: Product: syz [ 406.975265][ T122] usb 6-1: Manufacturer: syz [ 406.979880][ T122] usb 6-1: SerialNumber: syz [ 406.987364][ T122] usb 6-1: config 0 descriptor?? [ 407.001296][ T122] smsc95xx v2.0.0 [ 407.104024][ T5946] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 407.263732][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 407.271009][ T5946] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 407.280862][ T5946] usb 5-1: config 0 has no interface number 0 [ 407.287536][ T5946] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 407.298822][ T5946] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 407.311044][ T5946] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 407.324556][ T5946] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 407.338091][ T5946] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 407.374141][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.395231][ T5946] usb 5-1: config 0 descriptor?? [ 407.412050][ T122] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 407.439327][ T122] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 407.449179][ T5946] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 407.799289][ T5949] usb 5-1: USB disconnect, device number 20 [ 407.865744][ T5949] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 408.665326][T10769] tipc: Failed to remove unknown binding: 66,1,1/0:555735791/555735793 [ 409.238420][T10777] tipc: Failed to remove unknown binding: 66,1,1/0:3540905670/3540905672 [ 409.247909][T10777] tipc: Failed to remove unknown binding: 66,1,1/0:3540905670/3540905672 [ 409.794326][ T122] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 409.817572][ T122] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 409.839072][ T122] usb 6-1: USB disconnect, device number 13 [ 410.203788][ T5946] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 410.376667][ T5946] usb 5-1: config 0 has no interfaces? [ 410.382498][ T5946] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 410.429489][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.458654][ T5946] usb 5-1: config 0 descriptor?? [ 410.673621][ T122] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 410.682504][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 410.711511][ T5946] usb 5-1: string descriptor 0 read error: -71 [ 410.724197][ T5946] usb 5-1: USB disconnect, device number 21 [ 410.843463][ T122] usb 3-1: Using ep0 maxpacket: 8 [ 410.870991][ T122] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 410.900964][ T122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.952123][ T122] usb 3-1: config 0 descriptor?? [ 411.755789][T10810] binder_alloc: 10808: pid 10808 spamming oneway? 1 buffers allocated for a total size of 4096 [ 411.782908][T10810] binder_alloc: 10808: pid 10808 spamming oneway? 2 buffers allocated for a total size of 5120 [ 413.589680][ T122] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 413.601731][ T122] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 414.103863][ T122] asix 3-1:0.0: probe with driver asix failed with error -71 [ 414.197200][ T122] usb 3-1: USB disconnect, device number 20 [ 415.596667][ T5946] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 415.612439][T10852] kvm: pic: non byte read [ 415.630252][T10852] kvm: pic: non byte read [ 415.637604][T10852] kvm: pic: non byte read [ 415.642282][T10852] kvm: pic: non byte read [ 415.647363][T10852] kvm: pic: non byte read [ 415.651905][T10852] kvm: pic: non byte read [ 415.663860][T10852] kvm: pic: non byte read [ 415.668556][T10852] kvm: pic: non byte read [ 415.703468][ T122] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 415.714053][T10852] kvm: pic: non byte read [ 415.721144][T10852] kvm: pic: non byte read [ 415.755906][T10856] binder: 10855:10856 unknown command 0 [ 415.913604][T10856] binder: 10855:10856 ioctl c0306201 80000080 returned -22 [ 415.923963][ T5946] usb 4-1: config 0 has no interfaces? [ 415.931114][ T5946] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 415.942130][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.960032][ T5946] usb 4-1: config 0 descriptor?? [ 415.975287][ T122] usb 6-1: config 0 has no interfaces? [ 415.983352][ T122] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 415.989246][T10856] binder: 10855:10856 ioctl c0306201 80000300 returned -11 [ 416.011705][ T122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.056979][ T122] usb 6-1: config 0 descriptor?? [ 416.180312][T10846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.209185][T10846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.295944][T10848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.323475][T10848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.338039][ T122] usb 4-1: USB disconnect, device number 24 [ 416.428710][ T5918] usb 6-1: USB disconnect, device number 14 [ 417.303495][ T122] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 417.303724][ T5918] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 417.573827][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 417.595793][ T5918] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 417.615952][ T122] usb 4-1: Using ep0 maxpacket: 16 [ 417.627574][ T5918] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.649748][ T122] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.649832][ T5918] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 417.688408][ T122] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.723811][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.726545][ T122] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 417.736275][ T5918] usb 6-1: Product: syz [ 417.783337][ T122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.784173][ T5918] usb 6-1: Manufacturer: syz [ 417.795348][ T122] usb 4-1: Product: syz [ 417.800431][ T122] usb 4-1: Manufacturer: syz [ 417.806785][ T122] usb 4-1: SerialNumber: syz [ 417.848240][ T5918] usb 6-1: SerialNumber: syz [ 418.249076][ T122] usb 4-1: 0:2 : does not exist [ 418.473545][ T122] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 418.510482][ T122] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 418.551670][ T122] usb 4-1: USB disconnect, device number 25 [ 418.559090][ T5918] usb 6-1: 0:2 : does not exist [ 418.781993][ T5918] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 418.816544][ T5918] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 418.835792][ T5918] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 418.871833][ T5918] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 418.894010][ T5918] usb 6-1: USB disconnect, device number 15 [ 419.153134][T10890] xt_policy: neither incoming nor outgoing policy selected [ 419.206102][ T6016] udevd[6016]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 419.317366][T10892] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 419.876972][T10903] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 419.908725][T10903] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 420.441377][T10911] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 421.324300][T10920] tipc: Started in network mode [ 421.329530][T10920] tipc: Node identity 221b24fd440f, cluster identity 4711 [ 421.359177][T10920] tipc: Enabled bearer , priority 0 [ 421.377100][T10920] syzkaller0: entered promiscuous mode [ 421.395555][T10920] syzkaller0: entered allmulticast mode [ 421.444780][T10920] tipc: Resetting bearer [ 421.501449][T10918] tipc: Resetting bearer [ 421.526520][T10918] tipc: Disabling bearer [ 423.633516][ T5872] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 423.834021][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 423.858730][ T5872] usb 6-1: config 0 has no interfaces? [ 423.875023][ T5872] usb 6-1: config 0 has no interfaces? [ 423.879127][T10947] dummy0: entered promiscuous mode [ 423.933988][T10947] vlan2: entered promiscuous mode [ 423.959553][ T5872] usb 6-1: config 0 has no interfaces? [ 423.976903][ T5872] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 424.003357][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.011680][ T5872] usb 6-1: Product: syz [ 424.041858][ T5872] usb 6-1: Manufacturer: syz [ 424.079073][ T5872] usb 6-1: SerialNumber: syz [ 424.117564][ T5872] usb 6-1: config 0 descriptor?? [ 424.803408][ T5872] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 424.963754][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 424.984529][ T5872] usb 4-1: config 6 has an invalid interface number: 244 but max is -1 [ 425.015816][ T5872] usb 4-1: config 6 has 1 interface, different from the descriptor's value: 0 [ 425.042546][ T5872] usb 4-1: config 6 has no interface number 0 [ 425.063909][ T5872] usb 4-1: config 6 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 425.072001][ T5918] usb 6-1: USB disconnect, device number 16 [ 425.086736][ T5872] usb 4-1: config 6 interface 244 has no altsetting 0 [ 425.105596][ T5872] usb 4-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 425.886991][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.056648][ T5872] usb 4-1: Product: syz [ 426.060883][ T5872] usb 4-1: Manufacturer: syz [ 426.074997][ T5872] usb 4-1: SerialNumber: syz [ 426.108786][ T5872] snd_usb_toneport 4-1:6.244: Line 6 GuitarPort found [ 426.340241][ T5872] snd_usb_toneport 4-1:6.244: set_interface failed [ 426.362237][ T5872] snd_usb_toneport 4-1:6.244: Line 6 GuitarPort now disconnected [ 426.417895][ T5872] snd_usb_toneport 4-1:6.244: probe with driver snd_usb_toneport failed with error -71 [ 426.453919][ T5872] usb 4-1: USB disconnect, device number 26 [ 426.836591][T10988] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1107'. [ 426.846778][T10987] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1107'. [ 426.913787][ T5918] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 427.185008][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 427.262847][ T5918] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.297137][ T5918] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.401392][ T5918] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.426986][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.473538][ T5973] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 427.483684][ T5918] usb 3-1: Product: syz [ 427.487883][ T5918] usb 3-1: Manufacturer: syz [ 427.501410][ T5918] usb 3-1: SerialNumber: syz [ 428.313596][ T5973] usb 2-1: Using ep0 maxpacket: 8 [ 428.320766][ T5973] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.434214][ T5973] usb 2-1: config 0 has no interface number 0 [ 428.511211][ T5973] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.614101][ T5973] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 428.670698][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.756403][ T5973] usb 2-1: config 0 descriptor?? [ 428.787352][ T5973] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 428.992991][T10993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.013849][T10993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.194754][ T5973] usb 2-1: USB disconnect, device number 18 [ 429.194768][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 429.838978][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 430.103437][ T10] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 430.115329][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.129835][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.153326][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 430.161952][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.171230][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.182355][ T5973] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 430.191799][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 430.250329][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.308843][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.347000][ T5918] usb 3-1: cannot find UAC_HEADER [ 430.369972][ T5973] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 430.569001][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 430.576156][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.590819][ T5973] usb 5-1: Product: syz [ 430.591823][ T5918] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 430.596212][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.639812][ T5973] usb 5-1: Manufacturer: syz [ 430.662126][ T5918] usb 3-1: USB disconnect, device number 21 [ 430.665341][ T5973] usb 5-1: SerialNumber: syz [ 430.733388][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.812999][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.865921][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 430.906221][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.923862][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 431.033328][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 431.053054][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 431.081392][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 431.123795][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 431.132101][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 431.152384][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 431.178592][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 431.219165][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 431.229114][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 431.258020][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 431.406640][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 431.433884][ T10] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 431.558625][T11027] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.566037][T11027] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.816326][ T10] usb 6-1: Product: syz [ 431.835118][ T10] usb 6-1: Manufacturer: syz [ 431.845438][ T10] usb 6-1: SerialNumber: syz [ 431.861059][ T10] usb 6-1: config 0 descriptor?? [ 431.885717][ T10] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 432.377258][ T5973] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 432.405937][T11027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.427939][T11036] netlink: zone id is out of range [ 432.435922][T11036] netlink: zone id is out of range [ 432.441295][T11036] netlink: zone id is out of range [ 432.447378][T11036] netlink: zone id is out of range [ 432.501459][T11037] netlink: del zone limit has 4 unknown bytes [ 432.529244][T11027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.549687][T11036] netlink: zone id is out of range [ 432.569682][T11036] netlink: zone id is out of range [ 432.593865][T11036] netlink: zone id is out of range [ 432.605294][ T5918] usb 6-1: USB disconnect, device number 17 [ 432.631842][T11036] netlink: zone id is out of range [ 432.999137][T11040] netlink: 'syz.2.1124': attribute type 10 has an invalid length. [ 433.075148][ T30] audit: type=1326 audit(1757458975.801:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.5.1115" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x0 [ 433.268659][T11039] pim6reg: entered allmulticast mode [ 433.309417][T11040] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 433.417068][ T5973] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 433.433107][T11040] team0: Failed to send options change via netlink (err -105) [ 433.436750][ T5973] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 433.490728][T11040] team0: Port device netdevsim0 added [ 433.507521][ T1158] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.507611][ T1158] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.507647][ T1158] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.507683][ T1158] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.510141][ T5973] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 433.548104][ T5973] usb 5-1: USB disconnect, device number 22 [ 434.209598][ T5918] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 435.386857][T11069] syz_tun: entered allmulticast mode [ 435.393618][T11066] syz_tun: left allmulticast mode [ 439.078466][T11115] binder: BINDER_SET_CONTEXT_MGR already set [ 439.128462][T11115] binder: 11111:11115 ioctl 4018620d 800002c0 returned -16 [ 439.799652][T11128] bridge1: entered allmulticast mode [ 440.083487][ T5931] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 440.243461][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 440.255113][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.298462][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.305199][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.345969][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.374323][ T5931] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 440.405773][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.420891][ T5931] usb 4-1: config 0 descriptor?? [ 440.940798][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 440.954048][ T5931] usbhid 4-1:0.0: can't add hid device: -71 [ 440.960256][ T5931] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 441.004484][ T5931] usb 4-1: USB disconnect, device number 27 [ 441.814456][ T122] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 441.829545][T11164] netlink: 'syz.3.1158': attribute type 27 has an invalid length. [ 441.973831][ T5931] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 441.988561][ T122] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.999843][ T122] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.017438][ T122] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 442.027853][ T122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 442.036179][ T122] usb 6-1: SerialNumber: syz [ 442.113411][ T5872] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 442.173625][ T5973] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 442.188501][ T5931] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 442.200636][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.221665][ T5931] usb 2-1: config 0 descriptor?? [ 442.242132][ T5931] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 442.274589][ T122] usb 6-1: 0:2 : does not exist [ 442.284145][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 442.292384][ T5872] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 442.304874][ T5872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.330981][ T122] usb 6-1: USB disconnect, device number 18 [ 442.337231][ T5872] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 442.365099][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.381521][ T5872] usb 4-1: config 1 has no interface number 1 [ 442.396285][ T5973] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 442.405798][ T5872] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 442.428070][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.430384][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.452764][ T5872] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 442.467107][ T5872] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 442.478547][ T5973] usb 5-1: config 0 descriptor?? [ 442.508364][ T5872] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.521662][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.530414][ T5872] usb 4-1: Product: syz [ 442.535372][ T5872] usb 4-1: Manufacturer: syz [ 442.540055][ T5872] usb 4-1: SerialNumber: syz [ 442.677051][T11171] net_ratelimit: 18 callbacks suppressed [ 442.677072][T11171] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 442.860957][ C1] [ 442.863357][ C1] ======================================================== [ 442.870561][ C1] WARNING: possible irq lock inversion dependency detected [ 442.877750][ C1] syzkaller #0 Not tainted [ 442.882181][ C1] -------------------------------------------------------- [ 442.889401][ C1] syz.5.1161/11173 just changed the state of lock: [ 442.896200][ C1] ffff888146bc6230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 442.905906][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 442.914087][ C1] (tasklist_lock){.+.+}-{3:3} [ 442.914110][ C1] [ 442.914110][ C1] [ 442.914110][ C1] and interrupts could create inverse lock ordering between them. [ 442.914110][ C1] [ 442.933347][ C1] [ 442.933347][ C1] other info that might help us debug this: [ 442.941407][ C1] Chain exists of: [ 442.941407][ C1] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 442.941407][ C1] [ 442.955081][ C1] Possible interrupt unsafe locking scenario: [ 442.955081][ C1] [ 442.963506][ C1] CPU0 CPU1 [ 442.968890][ C1] ---- ---- [ 442.974258][ C1] lock(tasklist_lock); [ 442.978516][ C1] local_irq_disable(); [ 442.985288][ C1] lock(&dev->event_lock#2); [ 442.992512][ C1] lock(&client->buffer_lock); [ 442.999992][ C1] [ 443.003497][ C1] lock(&dev->event_lock#2); [ 443.008374][ C1] [ 443.008374][ C1] *** DEADLOCK *** [ 443.008374][ C1] [ 443.016528][ C1] 2 locks held by syz.5.1161/11173: [ 443.021827][ C1] #0: ffff88802960e118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 443.031080][ C1] #1: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x4b/0x210 [ 443.040689][ C1] [ 443.040689][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 443.050142][ C1] -> (tasklist_lock){.+.+}-{3:3} { [ 443.055730][ C1] HARDIRQ-ON-R at: [ 443.060080][ C1] lock_acquire+0x120/0x360 [ 443.066993][ C1] _raw_read_lock+0x36/0x50 [ 443.074224][ C1] __do_wait+0xde/0x740 [ 443.080737][ C1] do_wait+0x1f8/0x520 [ 443.087161][ C1] kernel_wait+0xab/0x170 [ 443.093834][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 443.102086][ C1] process_scheduled_works+0xae1/0x17b0 [ 443.109974][ C1] worker_thread+0x8a0/0xda0 [ 443.116925][ C1] kthread+0x70e/0x8a0 [ 443.123338][ C1] ret_from_fork+0x3fc/0x770 [ 443.130300][ C1] ret_from_fork_asm+0x1a/0x30 [ 443.137430][ C1] SOFTIRQ-ON-R at: [ 443.141753][ C1] lock_acquire+0x120/0x360 [ 443.148604][ C1] _raw_read_lock+0x36/0x50 [ 443.155463][ C1] __do_wait+0xde/0x740 [ 443.162325][ C1] do_wait+0x1f8/0x520 [ 443.168736][ C1] kernel_wait+0xab/0x170 [ 443.175490][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 443.183744][ C1] process_scheduled_works+0xae1/0x17b0 [ 443.192054][ C1] worker_thread+0x8a0/0xda0 [ 443.199003][ C1] kthread+0x70e/0x8a0 [ 443.205427][ C1] ret_from_fork+0x3fc/0x770 [ 443.212559][ C1] ret_from_fork_asm+0x1a/0x30 [ 443.219661][ C1] INITIAL USE at: [ 443.223896][ C1] lock_acquire+0x120/0x360 [ 443.230680][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 443.237975][ C1] copy_process+0x224f/0x3c00 [ 443.244897][ C1] kernel_clone+0x21e/0x840 [ 443.251666][ C1] user_mode_thread+0xdd/0x140 [ 443.258696][ C1] rest_init+0x23/0x300 [ 443.265201][ C1] start_kernel+0x3a9/0x410 [ 443.271952][ C1] x86_64_start_reservations+0x24/0x30 [ 443.279679][ C1] x86_64_start_kernel+0x143/0x1c0 [ 443.287036][ C1] common_startup_64+0x13e/0x147 [ 443.294240][ C1] INITIAL READ USE at: [ 443.298999][ C1] lock_acquire+0x120/0x360 [ 443.306191][ C1] _raw_read_lock+0x36/0x50 [ 443.313394][ C1] __do_wait+0xde/0x740 [ 443.320253][ C1] do_wait+0x1f8/0x520 [ 443.327232][ C1] kernel_wait+0xab/0x170 [ 443.334358][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 443.342947][ C1] process_scheduled_works+0xae1/0x17b0 [ 443.351269][ C1] worker_thread+0x8a0/0xda0 [ 443.358640][ C1] kthread+0x70e/0x8a0 [ 443.365394][ C1] ret_from_fork+0x3fc/0x770 [ 443.372696][ C1] ret_from_fork_asm+0x1a/0x30 [ 443.380264][ C1] } [ 443.383122][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 443.391225][ C1] ... acquired at: [ 443.395398][ C1] lock_acquire+0x120/0x360 [ 443.400103][ C1] _raw_read_lock+0x36/0x50 [ 443.404804][ C1] send_sigurg+0x12b/0x420 [ 443.409712][ C1] sk_send_sigurg+0x6c/0x2e0 [ 443.414501][ C1] queue_oob+0x420/0x4f0 [ 443.418942][ C1] unix_stream_sendmsg+0xc3f/0xdf0 [ 443.424450][ C1] __sock_sendmsg+0x21c/0x270 [ 443.429340][ C1] ____sys_sendmsg+0x505/0x830 [ 443.434342][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 443.439612][ C1] __sys_sendmsg+0x164/0x220 [ 443.444401][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 443.449725][ C1] do_fast_syscall_32+0x34/0x80 [ 443.454867][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 443.461373][ C1] [ 443.463704][ C1] -> (&f_owner->lock){....}-{3:3} { [ 443.469275][ C1] INITIAL USE at: [ 443.473443][ C1] lock_acquire+0x120/0x360 [ 443.480071][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 443.487127][ C1] __f_setown+0x67/0x370 [ 443.493478][ C1] fcntl_dirnotify+0x3fa/0x6a0 [ 443.500446][ C1] do_fcntl+0x6d0/0x1910 [ 443.506787][ C1] do_compat_fcntl64+0x477/0x720 [ 443.514253][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 443.521460][ C1] do_fast_syscall_32+0x34/0x80 [ 443.528389][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 443.536803][ C1] INITIAL READ USE at: [ 443.541389][ C1] lock_acquire+0x120/0x360 [ 443.548425][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 443.556694][ C1] send_sigurg+0x55/0x420 [ 443.563563][ C1] sk_send_sigurg+0x6c/0x2e0 [ 443.570815][ C1] queue_oob+0x420/0x4f0 [ 443.577614][ C1] unix_stream_sendmsg+0xc3f/0xdf0 [ 443.585260][ C1] __sock_sendmsg+0x21c/0x270 [ 443.592490][ C1] ____sys_sendmsg+0x505/0x830 [ 443.599888][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 443.607116][ C1] __sys_sendmsg+0x164/0x220 [ 443.614322][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 443.621971][ C1] do_fast_syscall_32+0x34/0x80 [ 443.629428][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 443.638472][ C1] } [ 443.641319][ C1] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 443.650523][ C1] ... acquired at: [ 443.654582][ C1] lock_acquire+0x120/0x360 [ 443.659263][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 443.664739][ C1] send_sigio+0x38/0x370 [ 443.669180][ C1] kill_fasync+0x24d/0x4d0 [ 443.673808][ C1] lease_break_callback+0x26/0x30 [ 443.679114][ C1] __break_lease+0x6a2/0x1620 [ 443.683980][ C1] do_dentry_open+0x8b7/0x13f0 [ 443.688916][ C1] vfs_open+0x3b/0x340 [ 443.693161][ C1] path_openat+0x2ee5/0x3830 [ 443.698088][ C1] do_filp_open+0x1fa/0x410 [ 443.702788][ C1] do_open_execat+0x135/0x560 [ 443.707649][ C1] open_exec+0x40/0x60 [ 443.711983][ C1] load_script+0x6e9/0x860 [ 443.716842][ C1] bprm_execve+0x99c/0x1450 [ 443.721779][ C1] do_execveat_common+0x510/0x6a0 [ 443.726981][ C1] __ia32_compat_sys_execveat+0xca/0xe0 [ 443.732715][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 443.738009][ C1] do_fast_syscall_32+0x34/0x80 [ 443.743028][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 443.749538][ C1] [ 443.751872][ C1] -> (&new->fa_lock){....}-{3:3} { [ 443.757264][ C1] INITIAL USE at: [ 443.761324][ C1] lock_acquire+0x120/0x360 [ 443.767828][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 443.774673][ C1] fasync_remove_entry+0xf1/0x1c0 [ 443.781609][ C1] lease_modify+0x1ca/0x3c0 [ 443.788105][ C1] locks_remove_file+0x4bf/0xea0 [ 443.795125][ C1] __fput+0x3ab/0xa70 [ 443.801021][ C1] task_work_run+0x1d1/0x260 [ 443.807520][ C1] exit_to_user_mode_loop+0xec/0x110 [ 443.814712][ C1] __do_fast_syscall_32+0x1f4/0x2b0 [ 443.821819][ C1] do_fast_syscall_32+0x34/0x80 [ 443.828573][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 443.836981][ C1] INITIAL READ USE at: [ 443.841481][ C1] lock_acquire+0x120/0x360 [ 443.848505][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 443.856138][ C1] kill_fasync+0x199/0x4d0 [ 443.862898][ C1] lease_break_callback+0x26/0x30 [ 443.870292][ C1] __break_lease+0x6a2/0x1620 [ 443.877312][ C1] do_dentry_open+0x8b7/0x13f0 [ 443.884477][ C1] vfs_open+0x3b/0x340 [ 443.890918][ C1] path_openat+0x2ee5/0x3830 [ 443.897869][ C1] do_filp_open+0x1fa/0x410 [ 443.904811][ C1] do_open_execat+0x135/0x560 [ 443.911834][ C1] open_exec+0x40/0x60 [ 443.918262][ C1] load_script+0x6e9/0x860 [ 443.925285][ C1] bprm_execve+0x99c/0x1450 [ 443.932145][ C1] do_execveat_common+0x510/0x6a0 [ 443.939604][ C1] __ia32_compat_sys_execveat+0xca/0xe0 [ 443.947582][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 443.955035][ C1] do_fast_syscall_32+0x34/0x80 [ 443.962349][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 443.971055][ C1] } [ 443.973744][ C1] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 443.982595][ C1] ... acquired at: [ 443.986568][ C1] lock_acquire+0x120/0x360 [ 443.991244][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 443.996715][ C1] kill_fasync+0x199/0x4d0 [ 444.001391][ C1] evdev_pass_values+0x627/0xbd0 [ 444.006498][ C1] evdev_events+0x1e6/0x340 [ 444.011169][ C1] input_pass_values+0x288/0x890 [ 444.016285][ C1] input_event_dispose+0x330/0x6b0 [ 444.021657][ C1] input_inject_event+0x1dd/0x340 [ 444.026863][ C1] evdev_write+0x2fc/0x480 [ 444.031481][ C1] vfs_write+0x27b/0xb30 [ 444.036008][ C1] ksys_write+0x145/0x250 [ 444.040525][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 444.045810][ C1] do_fast_syscall_32+0x34/0x80 [ 444.050827][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.057326][ C1] [ 444.059645][ C1] -> (&client->buffer_lock){....}-{3:3} { [ 444.065467][ C1] INITIAL USE at: [ 444.069452][ C1] lock_acquire+0x120/0x360 [ 444.075715][ C1] _raw_spin_lock_irq+0xa2/0xf0 [ 444.082307][ C1] evdev_read+0x370/0xca0 [ 444.088391][ C1] vfs_read+0x200/0xa30 [ 444.094286][ C1] ksys_read+0x145/0x250 [ 444.100355][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 444.107203][ C1] do_fast_syscall_32+0x34/0x80 [ 444.113789][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.121848][ C1] } [ 444.124428][ C1] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 444.132728][ C1] ... acquired at: [ 444.136613][ C1] lock_acquire+0x120/0x360 [ 444.141645][ C1] _raw_spin_lock+0x2e/0x40 [ 444.146323][ C1] evdev_pass_values+0xb9/0xbd0 [ 444.151346][ C1] evdev_events+0x1e6/0x340 [ 444.156023][ C1] input_pass_values+0x288/0x890 [ 444.161142][ C1] input_event_dispose+0x330/0x6b0 [ 444.166430][ C1] input_inject_event+0x1dd/0x340 [ 444.171635][ C1] evdev_write+0x2fc/0x480 [ 444.176221][ C1] vfs_write+0x27b/0xb30 [ 444.180825][ C1] ksys_write+0x145/0x250 [ 444.185419][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 444.190700][ C1] do_fast_syscall_32+0x34/0x80 [ 444.195722][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.202310][ C1] [ 444.204629][ C1] -> (&dev->event_lock#2){..-.}-{3:3} { [ 444.210197][ C1] IN-SOFTIRQ-W at: [ 444.214172][ C1] lock_acquire+0x120/0x360 [ 444.220417][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 444.227268][ C1] input_inject_event+0xa5/0x340 [ 444.234117][ C1] led_trigger_event+0x138/0x210 [ 444.240725][ C1] kbd_bh+0x1c6/0x2e0 [ 444.246357][ C1] tasklet_action_common+0x36c/0x580 [ 444.253299][ C1] handle_softirqs+0x283/0x870 [ 444.259708][ C1] __irq_exit_rcu+0xca/0x1f0 [ 444.266061][ C1] irq_exit_rcu+0x9/0x30 [ 444.271956][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 444.279242][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 444.286867][ C1] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 444.294331][ C1] evdev_write+0x2fc/0x480 [ 444.300393][ C1] vfs_write+0x27b/0xb30 [ 444.306282][ C1] ksys_write+0x145/0x250 [ 444.312349][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 444.319107][ C1] do_fast_syscall_32+0x34/0x80 [ 444.325619][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.333765][ C1] INITIAL USE at: [ 444.337742][ C1] lock_acquire+0x120/0x360 [ 444.343813][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 444.350676][ C1] input_inject_event+0xa5/0x340 [ 444.357175][ C1] kbd_led_trigger_activate+0xbc/0x100 [ 444.364207][ C1] led_trigger_set+0x52a/0x950 [ 444.370545][ C1] led_trigger_set_default+0x260/0x2a0 [ 444.377577][ C1] led_classdev_register_ext+0x73d/0x930 [ 444.384789][ C1] input_leds_connect+0x517/0x790 [ 444.391376][ C1] input_register_device+0xcfd/0x1140 [ 444.398395][ C1] atkbd_connect+0x72e/0xa00 [ 444.404591][ C1] serio_driver_probe+0x82/0xd0 [ 444.411016][ C1] really_probe+0x26d/0x9e0 [ 444.417249][ C1] __driver_probe_device+0x18c/0x2f0 [ 444.424104][ C1] driver_probe_device+0x4f/0x430 [ 444.430950][ C1] __driver_attach+0x452/0x700 [ 444.437287][ C1] bus_for_each_dev+0x233/0x2b0 [ 444.443700][ C1] serio_handle_event+0x1f9/0x8d0 [ 444.450298][ C1] process_scheduled_works+0xae1/0x17b0 [ 444.457409][ C1] worker_thread+0x8a0/0xda0 [ 444.463590][ C1] kthread+0x70e/0x8a0 [ 444.469223][ C1] ret_from_fork+0x3fc/0x770 [ 444.475368][ C1] ret_from_fork_asm+0x1a/0x30 [ 444.481719][ C1] } [ 444.484217][ C1] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 444.493242][ C1] ... acquired at: [ 444.497047][ C1] mark_lock+0x11b/0x190 [ 444.501465][ C1] __lock_acquire+0x680/0xd20 [ 444.506335][ C1] lock_acquire+0x120/0x360 [ 444.511138][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 444.516514][ C1] input_inject_event+0xa5/0x340 [ 444.521621][ C1] led_trigger_event+0x138/0x210 [ 444.526727][ C1] kbd_bh+0x1c6/0x2e0 [ 444.530891][ C1] tasklet_action_common+0x36c/0x580 [ 444.536434][ C1] handle_softirqs+0x283/0x870 [ 444.541367][ C1] __irq_exit_rcu+0xca/0x1f0 [ 444.546128][ C1] irq_exit_rcu+0x9/0x30 [ 444.550795][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 444.556776][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 444.562955][ C1] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 444.569109][ C1] evdev_write+0x2fc/0x480 [ 444.573700][ C1] vfs_write+0x27b/0xb30 [ 444.578115][ C1] ksys_write+0x145/0x250 [ 444.582616][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 444.587899][ C1] do_fast_syscall_32+0x34/0x80 [ 444.592952][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.599542][ C1] [ 444.601863][ C1] [ 444.601863][ C1] stack backtrace: [ 444.607776][ C1] CPU: 1 UID: 0 PID: 11173 Comm: syz.5.1161 Not tainted syzkaller #0 PREEMPT(full) [ 444.607794][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 444.607803][ C1] Call Trace: [ 444.607810][ C1] [ 444.607816][ C1] dump_stack_lvl+0x189/0x250 [ 444.607837][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.607854][ C1] ? __pfx__printk+0x10/0x10 [ 444.607875][ C1] print_irq_inversion_bug+0x1d2/0x1e0 [ 444.607891][ C1] mark_lock_irq+0x35f/0x390 [ 444.607906][ C1] mark_lock+0x11b/0x190 [ 444.607919][ C1] __lock_acquire+0x680/0xd20 [ 444.607939][ C1] ? input_inject_event+0xa5/0x340 [ 444.607955][ C1] lock_acquire+0x120/0x360 [ 444.607973][ C1] ? input_inject_event+0xa5/0x340 [ 444.607996][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 444.608014][ C1] ? input_inject_event+0xa5/0x340 [ 444.608029][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 444.608047][ C1] ? led_trigger_event+0x4b/0x210 [ 444.608061][ C1] ? led_trigger_event+0x4b/0x210 [ 444.608083][ C1] input_inject_event+0xa5/0x340 [ 444.608101][ C1] ? led_trigger_event+0x4b/0x210 [ 444.608118][ C1] led_trigger_event+0x138/0x210 [ 444.608133][ C1] kbd_bh+0x1c6/0x2e0 [ 444.608151][ C1] tasklet_action_common+0x36c/0x580 [ 444.608166][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 444.608182][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 444.608199][ C1] ? workqueue_softirq_action+0xd4/0x150 [ 444.608215][ C1] handle_softirqs+0x283/0x870 [ 444.608228][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 444.608243][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 444.608260][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 444.608277][ C1] __irq_exit_rcu+0xca/0x1f0 [ 444.608290][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 444.608306][ C1] irq_exit_rcu+0x9/0x30 [ 444.608317][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 444.608338][ C1] [ 444.608343][ C1] [ 444.608348][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 444.608361][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 444.608383][ C1] Code: 74 05 e8 1b 9a 4a f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e3 3e 13 f6 65 8b 05 6c f1 23 07 85 c0 74 40 48 c7 04 24 0e 36 [ 444.608397][ C1] RSP: 0018:ffffc9000498fb00 EFLAGS: 00000206 [ 444.608411][ C1] RAX: 2443e8903b648a00 RBX: 0000000000000a02 RCX: 2443e8903b648a00 [ 444.608427][ C1] RDX: 0000000000000006 RSI: ffffffff8d9b9313 RDI: 0000000000000001 [ 444.608436][ C1] RBP: ffffc9000498fb90 R08: ffffffff8fa3a037 R09: 1ffffffff1f47406 [ 444.608446][ C1] R10: dffffc0000000000 R11: fffffbfff1f47407 R12: dffffc0000000000 [ 444.608456][ C1] R13: dffffc0000000000 R14: ffff888146bc6218 R15: 1ffff92000931f60 [ 444.608471][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 444.608491][ C1] ? input_inject_event+0x2e6/0x340 [ 444.608507][ C1] ? input_inject_event+0xb6/0x340 [ 444.608525][ C1] evdev_write+0x2fc/0x480 [ 444.608541][ C1] ? futex_private_hash_put+0x245/0x280 [ 444.608557][ C1] ? __pfx_evdev_write+0x10/0x10 [ 444.608570][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 444.608586][ C1] ? security_file_permission+0x75/0x290 [ 444.608604][ C1] ? rw_verify_area+0x255/0x4d0 [ 444.608619][ C1] ? __lock_acquire+0xab9/0xd20 [ 444.608636][ C1] ? __pfx_evdev_write+0x10/0x10 [ 444.608649][ C1] vfs_write+0x27b/0xb30 [ 444.608668][ C1] ? __pfx_vfs_write+0x10/0x10 [ 444.608687][ C1] ? __fget_files+0x2a/0x420 [ 444.608699][ C1] ? __fget_files+0x2a/0x420 [ 444.608710][ C1] ? __fget_files+0x3a0/0x420 [ 444.608721][ C1] ? __fget_files+0x2a/0x420 [ 444.608734][ C1] ksys_write+0x145/0x250 [ 444.608751][ C1] ? __pfx_ksys_write+0x10/0x10 [ 444.608768][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.608781][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 444.608798][ C1] do_fast_syscall_32+0x34/0x80 [ 444.608814][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.608831][ C1] RIP: 0023:0xf707e539 [ 444.608843][ C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 444.608854][ C1] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 444.608867][ C1] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 444.608877][ C1] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 444.608886][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 444.608894][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 444.608902][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 444.608914][ C1] [ 445.092739][ T5973] uclogic 0003:5543:0003.0008: unknown main item tag 0x0 [ 445.114042][ T5973] uclogic 0003:5543:0003.0008: unknown main item tag 0x0 [ 445.121184][ T5973] uclogic 0003:5543:0003.0008: unknown main item tag 0x0 [ 445.130054][ T5973] uclogic 0003:5543:0003.0008: unknown main item tag 0x0 [ 445.137301][ T5973] uclogic 0003:5543:0003.0008: unknown main item tag 0x0 [ 445.146220][ T5872] usb 4-1: USB disconnect, device number 28 [ 445.337914][ T5973] uclogic 0003:5543:0003.0008: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0 [ 445.373000][ T5973] usb 5-1: USB disconnect, device number 23 [ 445.559452][T11175] fido_id[11175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 446.639874][ T5931] usb 2-1: USB disconnect, device number 19