last executing test programs: 9.004588389s ago: executing program 3 (id=3571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = fanotify_init(0x200, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) fanotify_mark(r5, 0x401, 0x28, r6, 0x0) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r1, 0x0, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x8040, 0x0, 0x0) (async, rerun: 64) write$binfmt_elf64(r0, 0x0, 0x78) (rerun: 64) 8.498224751s ago: executing program 2 (id=3573): r0 = socket$inet(0x2, 0x80001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'security\x00', 0x2, [{}, {}]}, 0x48) 8.399292367s ago: executing program 0 (id=3574): pipe2(&(0x7f0000000300), 0x0) syz_open_dev$sndctrl(0x0, 0xc, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000000)) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xbe) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0, 0xebec93e830f96115}) rt_sigaction(0x8a, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x0, 0x0, {[0x2]}}, 0x0, 0xfffffffffffffffa, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x526d630517582f29, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4084005) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x141800, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 8.232577176s ago: executing program 2 (id=3575): add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r3, 0x1) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x5, 0x3, 0xb8a}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_io_uring_setup(0x11, &(0x7f0000001200)={0x0, 0x100679a, 0x8000, 0x0, 0x178}, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) 7.59024654s ago: executing program 3 (id=3576): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r8, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) syz_emit_ethernet(0x4e, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x0) 6.949075812s ago: executing program 0 (id=3578): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_setup(0x1ff, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000bc0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x86, r3, &(0x7f0000000180)="5a05c216b9ccf4", 0x7}]) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f00000000c0)=""/86, 0x56) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 6.592546323s ago: executing program 1 (id=3579): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x4, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x6, 0x10007}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0xfffffff7}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x22008001) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x40000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140)={0x2}, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x36c, @private2={0xfc, 0x2, '\x00', 0x1}, 0xaa}}, 0x1, 0xc, 0x8001, 0xf2000, 0x5c, 0x7, 0xfe}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000280)={r2, @in={{0x2, 0x4e22, @multicast2}}, 0x1, 0x6, 0x3, 0x7fff, 0xa52}, &(0x7f0000000340)=0x98) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffff9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) write$vga_arbiter(r1, &(0x7f0000000480)=@unlock_all, 0xb) syz_open_dev$media(&(0x7f00000004c0), 0x2, 0x800) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/softlockup_count', 0x8000, 0x0) syz_io_uring_setup(0x17c, &(0x7f0000000780)={0x0, 0xeeca, 0x4, 0x0, 0x1b4, 0x0, r3}, &(0x7f0000000800), &(0x7f0000000840)=0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000880)={'gretap0\x00', 0x0, 0x10, 0x7, 0x3, 0x5, {{0x40, 0x4, 0x2, 0x8, 0x100, 0x67, 0x0, 0x31, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x73, 0x1, 0x6, [{@broadcast, 0xfffffff7}, {@broadcast, 0x2}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x2b, 0x60, [@loopback, @multicast2, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101, @multicast1]}, @timestamp={0x44, 0x10, 0x4f, 0x0, 0xb, [0x40, 0xf, 0x0]}, @rr={0x7, 0x1b, 0xb4, [@private=0xa010100, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp={0x44, 0x1c, 0x27, 0x0, 0x1, [0x2731, 0x800, 0x6, 0x40, 0x5fe4, 0x9d4f]}, @ssrr={0x89, 0x7, 0x8f, [@multicast2]}, @cipso={0x86, 0x54, 0x0, [{0x6, 0xc, "a84b50eaa2fccc5ab319"}, {0x0, 0x4, "9e64"}, {0x2, 0x12, "2c938c58c4484c3261b28f59e9d79aa8"}, {0x2, 0x9, "1671af4792b0cc"}, {0x0, 0xf, "fe98d1355b15787300dc8b0548"}, {0x1, 0xb, "c1c291a019a394ae14"}, {0x1, 0x9, "f5b599331f15b0"}]}]}}}}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a00)=@ll={0x11, 0xd, r5, 0x1, 0x50}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a80)="84729206c64b54b19cafef5fe1e1cac48f0bc26889688fbe48aab873e922e5d37bc5ced132418a5d0ac1f7cd20333806db6588bdbf71d9531bc350", 0x3b}, {&(0x7f0000000ac0)="d6c2d2fb281859785cc4c3a26be5964ad3b2351840f6c07c42db0adf72dc2d4884cfc9a0a9f230d9a11a39f097b83d5db20cada973a6c92d1d140f9ba23579d9ee439c3b92a197ef98edc50650d87d686aa81b2d0a7803a1186d0cdd9326868558349761d12510a8", 0x68}, {&(0x7f0000000b40)="31faf67ef2fe6bffef350c764fdcde71283432bab42b7e5f89dc170538211b10f662abdda9f4702c0f62af", 0x2b}], 0x3}, 0x4800) write$char_usb(r3, &(0x7f0000000c00)="607f8e7145ba1122fe0dd23c79fa6c8d951bb33c7fb91bee576ecaf07db62215e6046c010a34ab03aa358923d1dc04aa5d1c6fc189c57b45be7a7f06ae3d0813c920bcf81752889fa6a6a29c0845c391662ed4c814742e653fd10d953d8f3c69654a767cfb599f76ad4c8195201eafa863cc7e4104266c57834a6c31e34ca80ca401723bc1b6ca43a4008d5ba089b4e1ebd2dd34e7076c86502fd8dc59fead199fe56956d5e8b85564cf6f277be9f9684f8b568e6f9f0ab7", 0xb8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xd8, 0x11, 0x9, 0x101, 0x70bd2d, 0x25dfdbfd, {0x5, 0x0, 0x3}, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0xf}, @nested={0x46, 0x4b, 0x0, 0x1, [@nested={0x4, 0x40}, @nested={0x4, 0xcd}, @generic="6179fcc00d0f4f0305d23f90c17c1d3665aed625f5c07d60c9d573873ed65f93229a5c521c0360eb734eba473d39d9c6b84c2c343976884dbea1"]}, @generic="20b6e48c9fa4eabc0983c2a5f3284afc71f502ff7a6cf2d840a98e8efb16cbf425a5cd6f8edf1fc7410cf3f755a1aec28529c0bdede8c63766f1a67945da6bf22940a26784db72e1916f2e6015192872da0c1134cc1b84a49785301c4d92ed7e362b93ba5424cc64fa4bf7456d6c95dad0"]}, 0xd8}, 0x1, 0x0, 0x0, 0x404c800}, 0x20080001) write$P9_RXATTRCREATE(r1, &(0x7f0000000e80)={0x7, 0x21, 0x2}, 0x7) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000ec0)={0x8000, 0x1000, "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"}) unshare(0x10000280) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x20010, r0, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000001f80)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, r1, &(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)='./file0\x00'}) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000001fc0)) write$binfmt_script(r1, &(0x7f0000002100)={'#! ', './file0', [{0x20, '\\).\xd3\xa3'}, {}, {0x20, '!:@'}, {0x20, 'syz2\x00'}, {0x20, '-:^@)-\\%K-,'}, {0x20, 'syz2\x00'}, {0x20, '/dev/input/mouse#\x00'}, {0x20, '/dev/input/mouse#\x00'}]}, 0x54) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002180)={r3, r5, 0x25, 0x4, @void}, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000002200), r1) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x24, r9, 0x100, 0x0, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x2048014}, 0x8000) pwritev2(r8, &(0x7f0000002400)=[{&(0x7f0000002300)="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", 0xfe}], 0x1, 0x101, 0x3, 0x4) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000002440)) 6.534529469s ago: executing program 1 (id=3580): fsopen(&(0x7f0000000300)='iso9660\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0xfff, 0x0, 0x400003}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r5, 0xffff8000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500080001000000060002404e20000008000500", @ANYRES16=r7], 0x4c}}, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, 0x0) r8 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000340)={0x2000}, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r9, 0x107, 0x2, 0x0, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x34000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000080)=""/163, &(0x7f0000000140)=0xa3) 5.58369631s ago: executing program 2 (id=3582): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000600)=""/252, 0xfc}], 0x2}, 0x50}], 0x1, 0x40, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x20d302}}], 0x2e288501978821b, 0x80) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') 4.646174621s ago: executing program 0 (id=3585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x105002, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) landlock_create_ruleset(0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r4, 0x5) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000100)={0x6, 0x7}) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x1c3000, 0x100) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x3, "ec0f9537d10d37bee7cee302d2f3a8b4ca20250aa4aa7344ceac828f4c385a70"}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) syz_open_dev$tty1(0xc, 0x4, 0x1) 4.487654816s ago: executing program 0 (id=3587): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x29, 0x80002, 0x7fffffff) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/74, 0x0, 0xdddd1000}) poll(&(0x7f00000000c0)=[{r2, 0x81}], 0x1, 0x7dc0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={r5, 0x9, 0x7fff}, 0x8) 4.379411039s ago: executing program 2 (id=3588): add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r3, 0x1) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x5, 0x3, 0xb8a}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_io_uring_setup(0x11, &(0x7f0000001200)={0x0, 0x100679a, 0x8000, 0x0, 0x178}, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) 4.317369245s ago: executing program 1 (id=3589): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004680)=@newtaction={0x1910, 0x30, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{0x29c, 0x1, [@m_tunnel_key={0x158, 0x1b, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x7, 0x2, 0x409, 0x7}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffa}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0xc1, 0x6, "28551743b54617d7e28d3bc986b2322d356df61d6242dc53b8ad9cb56473b3d8347036b730f986b8222710caeb5a0f50b80b3d30f1ce4e63fa7dd6cbe635cb50f06fe4d01f074d2daca791975f1f870c263c14897fb17abfd047f72493bbdf1803bb7c3fd0a6af3b58e1fd5342c84962b2fd6788129c46418c552db4acc4e33b46b4439f57bfff35850f5904bb5653168eb53cf005f8b6ef68bbcbacdcb3a117e6ca9336bc240077c0fb932f27356f549d8a58e268121de9c4fb403f80"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x140, 0x1a, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x5, 0x5, 0x8, 0x1}, 0x6}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x54, 0x7, 0x4, 0xf8000000, 0x4}, 0xf}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9260}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x7b, 0xd13b8f40be2faaed, 0x8000, 0x3}, 0x3}}]}, {0x85, 0x6, "bc2d3ac6b266695060105ac6874e27439ef616afea0188cf8295ac720e0ce1ebc74ab8e9af827328c3c1cf1b91e1b6c6ba0caaf96e9811be84d03beaebe700dfdfe738f9f32ebecb8a6641c7156e6661a36b9ab2cdb200215c3e802e2f17452f2dd3412f7d5a8d7dd9a95e00818e5f0aa28f177647f26b9590356ccee2bda5ac7e"}, {0xc}, {0xc}}}]}, {0x34c, 0x1, [@m_nat={0x1ec, 0x17, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffffffc, 0x2, 0x64, 0xa}, @private=0xa010102, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200007, 0xfffffff8, 0x10000000, 0xda, 0xffffffff}, @multicast2, @rand_addr=0x64010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x200, 0xffffffffdffffff6, 0x200, 0x101}, @remote, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x7f, 0x1, 0x3, 0x481}, @multicast2, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x8, 0x0, 0x1}, @empty, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x800, 0x8, 0x3, 0x8}, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6800000, 0x8001, 0x0, 0x5, 0xc2}, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, 0x7f000000}}]}, {0xa9, 0x6, "891ccc04c6d2382e12165e8ca668ca8ded75d57ac06584d762b7d0aba129349e64111a1ea26f1bd9d6438e867e5e71dc4cf06dd0646fbef9516a081b43bf777e9a70352dc7e0e0712a283ae0538a925aee16099923abfb25135226879dbf0703356747bdcabf89d79eb5d1915b0000000000000000000000001283495bec6362975af24a60cd6ed566e109709ef227b26467bc5ac14e36ef69f30ae512d241e561e3c76769"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x15c, 0x4, 0x0, 0x0, {{0xc}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1ff, 0xe, 0x1, 0x2, 0x1}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x0, 0x2, 0x1, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1b}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0x2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x1fd, 0x10000000, 0xfffffff7, 0x2}}]}, {0xbd, 0x6, "79d6c103b418a86ea8e0a76eafb884d20715c60fd883d613b1a2c45af652d476f3d2673fe5b6634866a871cbc017febb29df8a1ac71b601e78abecf5e8e5c690c556d53b8af2206b6416f339dbcb64dbdaa2cb5db947786fee839341ae0b365563a6272cc90b1d76a73f5eea3d65e5b59332c64b2e9336180127acf4b13b9e5319565ef0c0b748bce5863630b1778fa716f741107a13b4afef82040eb76825c949c2995322f4e966db09d056c5b897e6926de43bc0b3349a40"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x1314, 0x1, [@m_xt={0x105c, 0x1b, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0xfff, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x1b4, 0x12, 0x0, 0x0, {{0x7}, {0xac, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x95, 0x6, {0xffff, 'security\x00', 0x3, 0xa0, "b2112b713a5569c1f301ae1a02dbeb2358fdc5314c9f7c8e2a3b8d767b7de809d1344882395546655d7f327021cf651ac63544448624771b1bbbf593b9c85be56594c490095534bcc11df99268149158f3b2e589b9ea008c12d28943bb22475a45752f703eb7a648aaab31"}}]}, {0xe1, 0x6, "d95ebcbd51e2f500649337e49d9572fe04b71eecaaa0b8c0d79eb518d9780861d61c2daf8217cf00e754bec6dea64ae5f3d98439621c3527cc31474d32122276dcd296ca993211e4bba8f82827448b63c409ca99a994622f300c1e2dcd054b254bbe386db816037a9c0b92ab23479c46284772b253c4bbc5e088c6ec6985fd40c616478cb6b2631526c99e3efb2af1c1dfe53aa8b0aa648825e558962122fb1be0b74f2e2a935f4216944ae97d34a81e92fe508bd460b57c0ff774f176284ec6bbec06ea4b595da4a2579995186f267bafb1da3745c3b5621a950280c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x100, 0x5, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x0, 0x2, 0x8, 0xfffffffd}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4e0, 0xffffffffffffffff, 0x2, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7, 0x10000000, 0x9, 0x92e}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x4, 0x5, 0x9}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2, 0x3, 0x7, 0x8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x159, 0x0, 0xf, 0xa}, 0x3}}]}, {0x11, 0x6, "001379f8c1cee8f5554b23e046"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x1910}, 0x1, 0x0, 0x0, 0x8080}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x6, "58d761a99ef702f8066485d7947206c192671f79dda31a7875af68e91c4a4269", 0xffffffffffffffff}) socket$inet(0x2, 0x4, 0x400) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0x0}}, './file0\x00'}) fchown(r1, r2, r3) 4.124423677s ago: executing program 3 (id=3591): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r4, 0x1) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, 0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x5, 0x3, 0xb8a}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_io_uring_setup(0x11, &(0x7f0000001200)={0x0, 0x100679a, 0x8000, 0x0, 0x178, 0x0, r0}, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) 4.084080955s ago: executing program 1 (id=3592): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea8a1d91bec8d4b5a6d80b8785d9600010000000000000094d75396dccd0ff600000000a81b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac2200", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x1]}}) 3.376560431s ago: executing program 1 (id=3593): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100167f978493926030062fd01020301090212000100e300000904250000b2fa4e002d0b2b8fa305a8be233cefcd612c2f94ec30fd0ff6a927fe1427b9679c9c1950de2547e8497b88578c560ff2635fffcf90aeeeb34aee73428929b2882bdff7f0a914390b23b34a22ee"], 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000e44000/0x4000)=nil, &(0x7f000051f000/0x4000)=nil, 0x4000, 0x1, 0xfe}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\xeb\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb', 0x5) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) (async, rerun: 32) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0x4) (async) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, &(0x7f00000000c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000c, 0x20010, r2, 0x97990000) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24008811) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001840)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0x138, 0x98, 0x138, 0x138, 0x98, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x0, 0x0, [0x22, 0x31, 0x4, 0x1d, 0x4, 0x38, 0x3c, 0x1c, 0x18, 0x11, 0x1b, 0x28, 0x3, 0x1e, 0xe, 0x1], 0x2, 0x7, 0x382}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async, rerun: 32) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) 3.37625235s ago: executing program 0 (id=3594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000086000/0x1000)=nil, 0x1000, 0x3000001) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x6, 0x3, 0x0, 0xfffffff7, 0x9, 0x6, 0x2, 0x8, 0x3, 0x10, 0x8, 0x0, 0x7, 0x8, 0x87, 0x6, 0x8, 0x7, '\x00', 0x9, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r6, &(0x7f0000000a40)}, 0x20) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x1000002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) 2.98892974s ago: executing program 2 (id=3595): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103"], 0x0) alarm(0xfffffffffffffffc) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x6, @string={0x6, 0x3, "36006c92"}}, 0x0, 0x0, 0x0}, 0x0) 2.684523709s ago: executing program 3 (id=3596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_mark(0xffffffffffffffff, 0x111, 0x48001051, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0xc8, 0x2, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_TUPLE={0x84, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) 2.62489944s ago: executing program 4 (id=3597): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)="2dcb", 0x2) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x15243525538df964) 2.5997261s ago: executing program 3 (id=3598): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000b40)={@desc={0x1, 0x0, @desc4}}) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r5, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f00000002c0)=0x4) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000040)=0x1) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x30102, 0x0) sendmsg$inet(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002000)="f3", 0x1}], 0x1}, 0x8801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f00000030c0)={0xc, {"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", 0x1016}}, 0x1006) syz_usb_connect(0x6, 0x24, &(0x7f0000000100)=ANY=[@ANYRESHEX=r9], 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r10, 0xffffffffffffffff, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a0104000000000000000007001c0008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d30001280200001800a00010071756f7461000000100002800c0001400000cdcbc9079c0000800000010c00018007000100637400000800034000000110140000001000010000000000000000000784000a"], 0xbc}}, 0x20050800) 2.555855471s ago: executing program 4 (id=3599): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e647fffffff1c00028005001d00000000000500010004"], 0x4c}}, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 2.212744472s ago: executing program 4 (id=3600): r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r4, 0x1) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x5, 0x3, 0xb8a}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_io_uring_setup(0x11, &(0x7f0000001200)={0x0, 0x100679a, 0x8000, 0x0, 0x178, 0x0, r0}, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) 2.191353173s ago: executing program 0 (id=3601): r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000140, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x84100, 0x0) write$vga_arbiter(r2, &(0x7f00000001c0)=@other={'unlock', ' ', 'io+mem'}, 0xe) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYBLOB="f2ed8b4027ff902a87a629"]) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x20) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x1ff, 0x6}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pread64(r4, &(0x7f00000006c0)=""/112, 0x70, 0x42) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 1.332068088s ago: executing program 2 (id=3602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000ac0)=ANY=[], 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[]) inotify_init1(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x385342, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x801) syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f00000001c0)={0x1}) epoll_wait(r6, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) unshare(0x42000000) r7 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x40, 0xc, 0xb3, {0xb3, 0x8, "9bd6cf07485e201372a32831c598ececf1244859f629ba83ac1ec191be100070f05d56c9d80a0389197808ed473e36a84dfc14fdf7e2b323577e57c83a4ee4d4df56608d2a9c8374d0d5f9da65295189f06b5f884fbde18ea368d138aff187fff848cea1bf6173d38bf36c3f824609bcc08ff420a7a0c0ff9ac7516a2f187863fd2dec5d055b45cad3393ba9baa5c10ae70ba93b3ff73317be67e1dcde4e5558eaff287f9a7bb7a28e37113ca5a9c888ac"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x1, 0x5f, "6ceaf20be652d4c3f3c0adfe0743144c23ff5b6df5d39f81676db2e7cda3c668ff12395cccc10a23194fe992055fce45e0452e6c429958254a8623f426867f52163c1fc0fa28912c15ace5b9068401498e7d7f7c572bb87e791132ad9892ca"}, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x48}, 0x0, &(0x7f0000000300)={0x20, 0x82, 0x1, "b9"}, &(0x7f0000000340)={0x20, 0x83, 0x1, "b6"}, &(0x7f0000000480)=ANY=[@ANYBLOB="047ac2bbce6b1719ae0c1f3fa9ef8d9b90424654651652aa9058cd3638335cf227daf51497ea4b1cdcac9418bc6a3b64d95ed822062c73d13a5d9a42a476fd9318d710a5f8809a069dcee864109e129db11202db67f26b9f9ecfded1ff91a6d8"], &(0x7f00000003c0)={0x20, 0x85, 0x3, '!>A'}}) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x80015b1a, 0x0) socket(0x10, 0x803, 0x0) 836.22025ms ago: executing program 4 (id=3603): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea8a1d91bec8d4b5a6d80b8785d9600010000000000000094d75396dccd0ff600000000a81b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861acfe0100", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x1]}}) 680.692878ms ago: executing program 4 (id=3604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) wait4(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x26840440, 0x80400) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, 0xfffffffffffffffc) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000300)=@userptr={0x2, 0x1, 0x4, 0x400, 0x53, {0x0, 0xea60}, {0x3, 0x0, 0x0, 0x9, 0x4, 0x80, "f0edc5fd"}, 0xee, 0x2, {0x0}, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="f2f0808cbd2d2600005bb9800000c00f3235000800000f30b9bf0a0000b83c85e116bafebab4650f3066b823018ed8c7442400b5000000c744240271000000c7442406000000000f011c2465650f38075d1a66420fc777ba44f442ddea0f01c5", 0x60}], 0x1, 0x11, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f00000003c0)=0x2, 0x4) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200010000000000000000001c0000000c00350000000000000000000c0029"], 0x83}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f00000000c0)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000080)=0xc}) 500.348873ms ago: executing program 3 (id=3605): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, 0x0) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x20040810) syz_open_dev$usbfs(0x0, 0x75, 0x40082) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, &(0x7f0000000140)=""/92, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0xfffffffffffffe5f) 390.211574ms ago: executing program 4 (id=3606): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r4, 0x1) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, 0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x5, 0x3, 0xb8a}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_io_uring_setup(0x11, &(0x7f0000001200)={0x0, 0x100679a, 0x8000, 0x0, 0x178, 0x0, r0}, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) 0s ago: executing program 1 (id=3607): r0 = socket(0x3, 0xf, 0x4) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff040000000000000000ff004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r11, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000e47000/0x2000)=nil) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) kernel console output (not intermixed with test programs): 1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.638340][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.645526][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.677407][ T5916] usb 3-1: Product: syz [ 896.706024][ T5916] usb 3-1: Manufacturer: syz [ 896.744828][ T5916] usb 3-1: SerialNumber: syz [ 896.790344][ T5916] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 896.837672][ T8326] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 896.841624][T17680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 897.268632][T17680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.293339][T16051] usb 3-1: USB disconnect, device number 29 [ 897.442136][ T5916] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 897.596341][T17680] veth0_vlan: entered promiscuous mode [ 897.626351][T17680] veth1_vlan: entered promiscuous mode [ 897.689948][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.700439][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 897.764209][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 897.776664][T17680] veth0_macvtap: entered promiscuous mode [ 897.789267][T17680] veth1_macvtap: entered promiscuous mode [ 897.795349][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 897.814279][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 897.839242][T17680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.852762][ T5916] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 897.866437][T17680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.875594][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.899363][ T5916] usb 1-1: Product: syz [ 897.909166][T14593] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.919690][ T5916] usb 1-1: Manufacturer: syz [ 897.924623][T14593] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.939820][ T5916] usb 1-1: SerialNumber: syz [ 897.965148][ T5916] usb 1-1: config 0 descriptor?? [ 897.971266][T14593] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.990561][ T8326] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 898.001218][ T5916] xbox_remote_probe: endpoint_in message size==0? [ 898.008810][ T8326] ath9k_htc: Failed to initialize the device [ 898.021650][T14593] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.027429][T16051] usb 3-1: ath9k_htc: USB layer deinitialized [ 898.093736][T17899] loop8: detected capacity change from 0 to 7 [ 898.111483][T17899] Dev loop8: unable to read RDB block 7 [ 898.143324][T17899] loop8: unable to read partition table [ 898.174503][T17899] loop8: partition table beyond EOD, truncated [ 898.198273][T17899] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 898.341339][T14593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.392040][T14593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.436762][ T1210] usb 1-1: USB disconnect, device number 107 [ 898.579702][T14593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.636869][T14593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.805280][T17911] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 898.847681][T17911] binder: BINDER_SET_CONTEXT_MGR already set [ 898.862469][T17911] binder: 17910:17911 ioctl 4018620d 2000000000c0 returned -16 [ 898.881868][T17911] binder: BINDER_SET_CONTEXT_MGR already set [ 898.901737][T17911] binder: 17910:17911 ioctl 4018620d 200000000040 returned -16 [ 899.117153][T17926] bridge0: entered allmulticast mode [ 899.372054][T16051] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 899.554129][T17933] netlink: 'syz.4.3099': attribute type 20 has an invalid length. [ 899.565317][T17931] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 899.605443][T16051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 899.636571][T16051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 899.665495][T16051] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 899.676884][T16051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.685543][T16051] usb 2-1: Product: syz [ 899.698627][T16051] usb 2-1: Manufacturer: syz [ 899.715053][T16051] usb 2-1: SerialNumber: syz [ 899.723809][T16051] usb 2-1: config 0 descriptor?? [ 899.731885][T16051] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 899.932490][T16051] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 900.215799][T16051] usb 2-1: USB disconnect, device number 49 [ 901.083660][T17978] netlink: 'syz.1.3108': attribute type 14 has an invalid length. [ 901.917398][T17978] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3108'. [ 902.962040][T16051] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 903.051153][T18001] loop4: detected capacity change from 0 to 1 [ 903.116506][T18001] Dev loop4: unable to read RDB block 1 [ 903.122781][T16051] usb 3-1: Using ep0 maxpacket: 16 [ 903.180630][T16051] usb 3-1: config 0 has no interfaces? [ 903.199260][T18001] loop4: unable to read partition table [ 903.207664][T16051] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 903.222660][T16051] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 903.244860][T16051] usb 3-1: Manufacturer: syz [ 903.282515][T16051] usb 3-1: config 0 descriptor?? [ 903.313961][T18001] loop4: partition table beyond EOD, truncated [ 903.361580][T18001] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 903.638244][T17993] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 903.662068][ T1210] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 903.924050][T16051] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 903.924075][ T1210] usb 4-1: device descriptor read/64, error -71 [ 903.938500][T17996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 904.102131][ T8326] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 904.116779][T16051] usb 1-1: Using ep0 maxpacket: 8 [ 904.151088][T16051] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.203101][T16051] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 904.222223][ T1210] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 904.222720][T16051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 904.256709][T16051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 904.276539][ T8326] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 904.287751][ T8326] usb 5-1: can't read configurations, error -61 [ 904.296761][T16051] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 904.320538][T16051] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.359604][T16051] hub 1-1:1.0: bad descriptor, ignoring hub [ 904.382973][T16051] hub 1-1:1.0: probe with driver hub failed with error -5 [ 904.415572][T16051] cdc_wdm 1-1:1.0: skipping garbage [ 904.442802][ T8326] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 904.450449][T16051] cdc_wdm 1-1:1.0: skipping garbage [ 904.450476][ T1210] usb 4-1: device descriptor read/64, error -71 [ 904.467211][T16051] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 904.488025][T16051] cdc_wdm 1-1:1.0: Unknown control protocol [ 904.582598][ T1210] usb usb4-port1: attempt power cycle [ 904.607035][T18034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.625179][ T8326] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 904.641803][ T8326] usb 5-1: can't read configurations, error -61 [ 904.656407][ T8326] usb usb5-port1: attempt power cycle [ 904.681402][T18034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.937765][ T1210] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 904.976876][ T1210] usb 4-1: device descriptor read/8, error -71 [ 905.002140][ T8326] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 905.025389][ T8326] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 905.034127][ T8326] usb 5-1: can't read configurations, error -61 [ 905.172517][ T8326] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 905.198563][ T8326] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 905.208998][ T8326] usb 5-1: can't read configurations, error -61 [ 905.216946][ T8326] usb usb5-port1: unable to enumerate USB device [ 905.232073][ T1210] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 905.263380][ T1210] usb 4-1: device descriptor read/8, error -71 [ 905.382395][ T1210] usb usb4-port1: unable to enumerate USB device [ 905.542060][ T8326] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 905.672267][ T8326] usb 2-1: device descriptor read/64, error -71 [ 905.922081][ T8326] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 905.987833][ T1210] usb 3-1: USB disconnect, device number 30 [ 906.053571][ T8326] usb 2-1: device descriptor read/64, error -71 [ 906.162440][ T8326] usb usb2-port1: attempt power cycle [ 906.192423][T18043] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3119'. [ 906.544123][ T8326] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 906.573968][ T8326] usb 2-1: device descriptor read/8, error -71 [ 906.702683][ T1210] usb 1-1: USB disconnect, device number 108 [ 906.747079][T18048] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 906.759186][T18048] team0: Port device batadv1 added [ 906.812185][ T8326] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 906.833107][ T8326] usb 2-1: device descriptor read/8, error -71 [ 906.957724][ T8326] usb usb2-port1: unable to enumerate USB device [ 908.377531][T18067] sctp: [Deprecated]: syz.1.3126 (pid 18067) Use of int in maxseg socket option. [ 908.377531][T18067] Use struct sctp_assoc_value instead [ 908.478724][ T5916] IPVS: starting estimator thread 0... [ 908.516611][T18075] tipc: Started in network mode [ 908.562449][T18075] tipc: Node identity 6, cluster identity 1023 [ 908.568654][T18075] tipc: Node number set to 6 [ 908.574226][T18077] IPVS: using max 51 ests per chain, 122400 per kthread [ 908.753383][T18062] netlink: 'syz.3.3124': attribute type 20 has an invalid length. [ 908.768631][T18062] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 908.873587][ T5916] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 909.032059][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 909.040523][ T5916] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 909.050118][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.067259][ T5916] usb 3-1: Product: syz [ 909.096805][ T5916] usb 3-1: Manufacturer: syz [ 909.107003][ T5916] usb 3-1: SerialNumber: syz [ 909.123046][ T5916] usb 3-1: config 0 descriptor?? [ 909.152048][ T1210] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 909.242597][ T8332] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 909.344713][ T1210] usb 2-1: Using ep0 maxpacket: 16 [ 909.401769][T18082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.416367][ T1210] usb 2-1: config 0 has no interfaces? [ 909.418331][T18082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.437451][ T1210] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 909.437521][ T5916] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 909.449214][ T1210] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 909.472084][ T8332] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.488807][ T8332] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 909.497938][ T1210] usb 2-1: Manufacturer: syz [ 909.507643][ T8332] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 909.527838][ T1210] usb 2-1: config 0 descriptor?? [ 909.545813][ T8332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.576912][ T8332] usb 4-1: config 0 descriptor?? [ 909.598002][ T8332] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 909.639542][ T8332] dvb-usb: bulk message failed: -22 (3/0) [ 909.747252][ T8332] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 909.784220][T18085] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 909.858493][ T8332] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 909.886891][T18102] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 909.920281][ T8332] usb 4-1: media controller created [ 909.927453][T18102] team0: Port device batadv1 added [ 909.934400][ T8332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 910.231889][ T8332] dvb-usb: bulk message failed: -22 (6/0) [ 910.282326][ T8332] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 910.304737][ T8332] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input72 [ 910.408504][ T8332] dvb-usb: schedule remote query interval to 150 msecs. [ 910.437001][ T8332] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 910.454985][T18094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.510318][T18094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.526336][ T5916] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 910.602287][ T8332] dvb-usb: bulk message failed: -22 (1/0) [ 910.618574][ T8332] dvb-usb: error while querying for an remote control event. [ 910.685729][ T5916] usb 4-1: USB disconnect, device number 58 [ 910.745706][ T5916] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 912.108028][T18112] loop2: detected capacity change from 0 to 7 [ 912.117875][T18112] Dev loop2: unable to read RDB block 7 [ 912.124713][T18112] loop2: unable to read partition table [ 912.133306][T18112] loop2: partition table beyond EOD, truncated [ 912.172575][T18112] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 912.260071][ T5916] usb 3-1: USB disconnect, device number 31 [ 912.386439][ T8326] usb 2-1: USB disconnect, device number 54 [ 912.542100][T18138] binder: BINDER_SET_CONTEXT_MGR already set [ 912.548146][T18138] binder: 18129:18138 ioctl 4018620d 200000000100 returned -16 [ 912.639526][T18138] binder: BINDER_SET_CONTEXT_MGR already set [ 912.645739][T18138] binder: 18129:18138 ioctl 4018620d 200000000040 returned -16 [ 912.848884][T18145] loop8: detected capacity change from 0 to 7 [ 912.863462][ T7575] Dev loop8: unable to read RDB block 7 [ 912.869272][ T7575] loop8: unable to read partition table [ 912.903606][ T7575] loop8: partition table beyond EOD, truncated [ 912.939047][T18145] Dev loop8: unable to read RDB block 7 [ 912.947653][T18145] loop8: unable to read partition table [ 912.962549][T18145] loop8: partition table beyond EOD, truncated [ 913.062078][T18145] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 913.342387][T18155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 914.436853][T18173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3150'. [ 917.786674][T18208] FAULT_INJECTION: forcing a failure. [ 917.786674][T18208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.806318][T18208] CPU: 1 UID: 0 PID: 18208 Comm: syz.1.3158 Not tainted syzkaller #0 PREEMPT(full) [ 917.806340][T18208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 917.806351][T18208] Call Trace: [ 917.806358][T18208] [ 917.806367][T18208] dump_stack_lvl+0x189/0x250 [ 917.806394][T18208] ? __pfx____ratelimit+0x10/0x10 [ 917.806416][T18208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 917.806437][T18208] ? __pfx__printk+0x10/0x10 [ 917.806455][T18208] ? __might_fault+0xb0/0x130 [ 917.806488][T18208] should_fail_ex+0x414/0x560 [ 917.806516][T18208] _copy_from_iter+0x1de/0x1790 [ 917.806539][T18208] ? rcu_is_watching+0x15/0xb0 [ 917.806558][T18208] ? trace_kmalloc+0x1f/0xd0 [ 917.806577][T18208] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 917.806604][T18208] ? __pfx__copy_from_iter+0x10/0x10 [ 917.806619][T18208] ? __build_skb_around+0x262/0x3f0 [ 917.806636][T18208] ? skb_put+0x11b/0x210 [ 917.806646][T18208] ? tipc_msg_build+0x8c6/0xcf0 [ 917.806662][T18208] tipc_msg_build+0x72b/0xcf0 [ 917.806680][T18208] ? __pfx_tipc_msg_build+0x10/0x10 [ 917.806696][T18208] ? net_generic+0x1e/0x240 [ 917.806707][T18208] ? net_generic+0x1e/0x240 [ 917.806720][T18208] ? tipc_group_bc_cong+0x15f/0x210 [ 917.806732][T18208] tipc_send_group_bcast+0x76c/0xa70 [ 917.806756][T18208] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 917.806776][T18208] ? __pfx_woken_wake_function+0x10/0x10 [ 917.806797][T18208] __tipc_sendmsg+0x2d7/0x2960 [ 917.806815][T18208] ? process_measurement+0x72d/0x1a40 [ 917.806829][T18208] ? __pfx___tipc_sendmsg+0x10/0x10 [ 917.806844][T18208] ? aa_label_sk_perm+0x4cd/0x630 [ 917.806861][T18208] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 917.806887][T18208] ? __lock_acquire+0xab9/0xd20 [ 917.806904][T18208] ? __local_bh_enable_ip+0x12d/0x1c0 [ 917.806916][T18208] ? lockdep_hardirqs_on+0x9c/0x150 [ 917.806930][T18208] ? __local_bh_enable_ip+0x12d/0x1c0 [ 917.806940][T18208] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 917.806955][T18208] tipc_sendmsg+0x55/0x70 [ 917.806968][T18208] ? __pfx_tipc_sendmsg+0x10/0x10 [ 917.806981][T18208] __sock_sendmsg+0x21c/0x270 [ 917.806996][T18208] ____sys_sendmsg+0x52d/0x830 [ 917.807010][T18208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 917.807025][T18208] ? import_iovec+0x74/0xa0 [ 917.807038][T18208] ___sys_sendmsg+0x21f/0x2a0 [ 917.807050][T18208] ? __pfx____sys_sendmsg+0x10/0x10 [ 917.807079][T18208] ? __fget_files+0x2a/0x420 [ 917.807088][T18208] ? __fget_files+0x3a0/0x420 [ 917.807103][T18208] __sys_sendmmsg+0x227/0x430 [ 917.807117][T18208] ? __pfx___sys_sendmmsg+0x10/0x10 [ 917.807132][T18208] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 917.807155][T18208] ? ksys_write+0x22a/0x250 [ 917.807178][T18208] ? __pfx_ksys_write+0x10/0x10 [ 917.807194][T18208] __x64_sys_sendmmsg+0xa0/0xc0 [ 917.807205][T18208] do_syscall_64+0xfa/0xfa0 [ 917.807218][T18208] ? lockdep_hardirqs_on+0x9c/0x150 [ 917.807230][T18208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.807240][T18208] ? clear_bhb_loop+0x60/0xb0 [ 917.807252][T18208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.807262][T18208] RIP: 0033:0x7f22c718f6c9 [ 917.807272][T18208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.807281][T18208] RSP: 002b:00007f22c8090038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 917.807293][T18208] RAX: ffffffffffffffda RBX: 00007f22c73e6090 RCX: 00007f22c718f6c9 [ 917.807300][T18208] RDX: 02e288501978821b RSI: 00002000000030c0 RDI: 0000000000000005 [ 917.807308][T18208] RBP: 00007f22c8090090 R08: 0000000000000000 R09: 0000000000000000 [ 917.807314][T18208] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 917.807320][T18208] R13: 00007f22c73e6128 R14: 00007f22c73e6090 R15: 00007f22c750fa28 [ 917.807336][T18208] [ 919.595757][T18227] netlink: 'syz.4.3162': attribute type 20 has an invalid length. [ 919.622935][T18225] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 920.118251][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3164'. [ 922.365142][T18261] netlink: 'syz.2.3170': attribute type 20 has an invalid length. [ 922.439555][T18259] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 922.720631][T18267] trusted_key: encrypted_key: insufficient parameters specified [ 923.306673][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'. [ 923.805741][T16051] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 923.901110][T18284] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 923.911402][T18284] team0: Port device batadv2 added [ 924.032112][T16051] usb 2-1: Using ep0 maxpacket: 32 [ 924.192370][T16051] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.237787][T16051] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 924.282016][T16051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.495137][T16051] usb 2-1: Product: syz [ 924.602232][T16051] usb 2-1: Manufacturer: syz [ 924.822007][T16051] usb 2-1: SerialNumber: syz [ 924.876685][T16051] usb 2-1: config 0 descriptor?? [ 924.928319][T16051] usb 2-1: bad CDC descriptors [ 924.937434][T16051] usb 2-1: unsupported MDLM descriptors [ 925.063444][T18290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3179'. [ 925.137624][T18291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.147305][T18291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.182112][ T8326] usb 2-1: USB disconnect, device number 55 [ 925.264001][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 925.298193][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 925.317472][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 925.328381][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 925.339189][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 925.362182][ T8330] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 925.516723][T13966] vivid-000: reconnect [ 925.592040][ T8330] usb 1-1: Using ep0 maxpacket: 8 [ 925.601536][ T8330] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 925.610539][ T8330] usb 1-1: config 179 has no interface number 0 [ 925.722262][ T8330] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 925.734037][ T8330] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 925.752277][ T8330] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 925.765439][ T8330] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 925.777322][ T8330] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 925.795210][ T8330] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 925.832452][ T8330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.893776][T18290] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 926.276165][ T8330] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input73 [ 926.579897][T18296] chnl_net:caif_netlink_parms(): no params data found [ 926.682262][T18312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.066898][T18312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.442177][T16076] Bluetooth: hci2: command tx timeout [ 927.735895][T18325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 927.940531][T18296] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.013522][T18296] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.084583][T18296] bridge_slave_0: entered allmulticast mode [ 928.100587][T18296] bridge_slave_0: entered promiscuous mode [ 928.127505][T18296] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.141831][T18296] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.149775][T18296] bridge_slave_1: entered allmulticast mode [ 928.158626][T18296] bridge_slave_1: entered promiscuous mode [ 928.189900][T18328] trusted_key: encrypted_key: insufficient parameters specified [ 928.305708][T18296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.808628][ T5916] usb 1-1: USB disconnect, device number 109 [ 928.808635][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 928.808677][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 929.001686][ T13] bond7 (unregistering): (slave gre1): Releasing backup interface [ 929.382040][ T5916] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 929.492243][T16076] Bluetooth: hci2: command tx timeout [ 929.512318][ T5916] usb 1-1: device descriptor read/64, error -71 [ 929.644404][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.654918][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.664487][ T13] bond0 (unregistering): Released all slaves [ 929.682644][ T13] bond1 (unregistering): Released all slaves [ 929.695608][ T13] bond2 (unregistering): Released all slaves [ 929.719741][ T13] bond3 (unregistering): Released all slaves [ 929.735537][ T13] bond4 (unregistering): Released all slaves [ 929.750011][ T13] bond5 (unregistering): Released all slaves [ 929.762114][ T5916] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 929.766827][ T13] bond6 (unregistering): Released all slaves [ 929.896256][ T5916] usb 1-1: device descriptor read/64, error -71 [ 929.913246][ T13] bond7 (unregistering): Released all slaves [ 929.925777][ T13] bond8 (unregistering): Released all slaves [ 929.938514][ T13] bond9 (unregistering): Released all slaves [ 929.951709][ T13] bond10 (unregistering): Released all slaves [ 929.962118][ T8330] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 929.976968][T18296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.012821][ T5916] usb usb1-port1: attempt power cycle [ 930.083865][T18296] team0: Port device team_slave_0 added [ 930.113901][T18296] team0: Port device team_slave_1 added [ 930.124245][ T8330] usb 4-1: config 68 has an invalid interface number: 220 but max is 0 [ 930.152649][ T8330] usb 4-1: config 68 has no interface number 0 [ 930.165592][ T8330] usb 4-1: config 68 interface 220 has no altsetting 0 [ 930.182267][ T8330] usb 4-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=55.7a [ 930.205881][ T8330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.215510][ T8330] usb 4-1: Product: syz [ 930.220076][ T8330] usb 4-1: Manufacturer: syz [ 930.225471][ T8330] usb 4-1: SerialNumber: syz [ 930.269680][T18296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.277565][T18296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.314813][T18296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.503082][ T5916] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 930.512415][T18358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.514407][T18296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.528419][T18358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.532623][T18296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.568352][ T5916] usb 1-1: device descriptor read/8, error -71 [ 930.633958][T18296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.972999][ T5916] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 931.134904][T18358] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.142158][T18358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.144292][ T5916] usb 1-1: device descriptor read/8, error -71 [ 931.149699][T18358] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.162888][T18358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.219339][T18358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 931.289260][ T5916] usb usb1-port1: unable to enumerate USB device [ 931.472627][T18296] hsr_slave_0: entered promiscuous mode [ 931.497165][T18296] hsr_slave_1: entered promiscuous mode [ 931.515467][T18296] debugfs: 'hsr0' already exists in 'hsr' [ 931.529470][T18296] Cannot create hsr debugfs directory [ 931.579662][T16076] Bluetooth: hci2: command tx timeout [ 931.656625][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.667931][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.707708][ T8330] gspca_main: spca501-2.14.0 probing 0497:c001 [ 932.765284][ T8330] gspca_spca501: reg write: error -71 [ 932.791095][ T8330] spca501 4-1:68.220: Reg write failed for 0x02,0x07,0x05 [ 932.835535][ T8330] spca501 4-1:68.220: probe with driver spca501 failed with error -22 [ 932.904333][ T8330] usb 4-1: USB disconnect, device number 59 [ 933.204813][ T13] hsr_slave_0: left promiscuous mode [ 933.235733][ T13] hsr_slave_1: left promiscuous mode [ 933.262267][ T8330] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 933.360936][ T13] team0 (unregistering): Port device batadv4 removed [ 933.409616][ T13] team0 (unregistering): Port device batadv3 removed [ 933.432118][ T8330] usb 4-1: Using ep0 maxpacket: 8 [ 933.441608][ T8330] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 933.454476][ T13] team0 (unregistering): Port device batadv2 removed [ 933.454774][ T8330] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 933.482155][ T8330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.490232][ T8330] usb 4-1: Product: syz [ 933.494937][ T8330] usb 4-1: Manufacturer: syz [ 933.495159][ T13] team0 (unregistering): Port device batadv0 removed [ 933.499544][ T8330] usb 4-1: SerialNumber: syz [ 933.505020][ T8330] usb 4-1: config 0 descriptor?? [ 933.538345][ T8330] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 933.585618][ T13] team0 (unregistering): Port device batadv1 removed [ 933.662131][ T5149] Bluetooth: hci2: command tx timeout [ 933.735078][ T5149] Bluetooth: hci5: command 0x0406 tx timeout [ 933.997702][ T13] team0 (unregistering): Port device team_slave_1 removed [ 934.049592][ T13] team0 (unregistering): Port device team_slave_0 removed [ 934.576594][ T8330] gspca_zc3xx: reg_w_i err -71 [ 934.698062][T18296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 934.721888][T18296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 934.758843][T18296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 934.786208][T18296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 935.182352][ T8330] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 935.188827][ T8330] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 935.287440][ T8330] usb 4-1: USB disconnect, device number 60 [ 935.774429][T18296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.845278][T18447] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 935.902930][T18296] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.035360][T14593] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.042602][T14593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.115276][T14593] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.122581][T14593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.308292][T18296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 936.343606][ T13] IPVS: stop unused estimator thread 0... [ 936.379869][T18458] netlink: 'syz.3.3207': attribute type 20 has an invalid length. [ 936.408384][T18452] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 936.539421][T18296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.759593][T18296] veth0_vlan: entered promiscuous mode [ 936.816729][T18296] veth1_vlan: entered promiscuous mode [ 936.932296][T18296] veth0_macvtap: entered promiscuous mode [ 936.975989][T18296] veth1_macvtap: entered promiscuous mode [ 937.050823][T18296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.088786][T18296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.131008][ T2993] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.149164][ T2993] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.208117][ T2993] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.442053][ T2993] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.506265][T18481] PKCS7: Unknown OID: [5] (bad) [ 937.511233][T18481] PKCS7: Only support pkcs7_signedData type [ 937.841097][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.878264][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.247949][T18490] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3213'. [ 938.323223][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.363776][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.212778][ T1210] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 939.352074][ T1210] usb 3-1: device descriptor read/64, error -71 [ 939.592113][ T1210] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 939.952043][ T1210] usb 3-1: device descriptor read/64, error -71 [ 940.162292][ T1210] usb usb3-port1: attempt power cycle [ 940.711357][ T1210] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 940.743833][ T1210] usb 3-1: device descriptor read/8, error -71 [ 940.841432][T18538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.892486][T18538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.982107][ T1210] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 941.013762][ T1210] usb 3-1: device descriptor read/8, error -71 [ 941.058959][T18541] netlink: 'syz.3.3220': attribute type 20 has an invalid length. [ 941.068426][T18536] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 941.082095][T17080] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 941.187319][T18546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3224'. [ 941.229728][T18546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3224'. [ 941.239559][ T1210] usb usb3-port1: unable to enumerate USB device [ 941.274504][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3224'. [ 941.293066][T17080] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.319501][T17080] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 941.337546][T17080] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 941.352698][T17080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 941.390693][T17080] usb 5-1: SerialNumber: syz [ 941.618105][T18555] program syz.0.3227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 941.656262][T17080] usb 5-1: 0:2 : does not exist [ 941.686085][T17080] usb 5-1: USB disconnect, device number 6 [ 941.842176][ T8322] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 942.014671][T18565] trusted_key: encrypted_key: insufficient parameters specified [ 942.024230][ T8322] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 942.032295][ T8330] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 942.047589][ T8322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.105124][ T8322] usb 4-1: config 0 descriptor?? [ 942.173686][ T8322] cp210x 4-1:0.0: cp210x converter detected [ 942.459511][ T8330] usb 1-1: config 0 has no interfaces? [ 942.468607][ T8330] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 942.502021][ T8330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.530799][ T8330] usb 1-1: Product: syz [ 942.540525][ T8330] usb 1-1: Manufacturer: syz [ 942.550681][ T8330] usb 1-1: SerialNumber: syz [ 942.578704][ T8330] usb 1-1: config 0 descriptor?? [ 942.820325][ T8330] usb 1-1: USB disconnect, device number 114 [ 942.824039][ T8322] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 942.835133][ T8322] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 942.843893][ T8322] usb 4-1: cp210x converter now attached to ttyUSB0 [ 944.352093][ T8330] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 944.524067][ T8330] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 944.535150][ T8330] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.550934][ T8330] usb 1-1: config 0 has no interface number 0 [ 944.559057][ T8330] usb 1-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 944.576222][ T8330] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 944.586668][ T8330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.598238][ T8330] usb 1-1: Product: syz [ 944.608152][ T8330] usb 1-1: Manufacturer: syz [ 944.632457][ T8330] usb 1-1: SerialNumber: syz [ 944.639703][ T5916] usb 4-1: USB disconnect, device number 61 [ 944.641163][ T8330] usb 1-1: config 0 descriptor?? [ 944.728287][ T5916] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 944.773480][ T5916] cp210x 4-1:0.0: device disconnected [ 944.848920][T18602] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 945.132163][ T1210] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 945.169274][ T8330] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 945.182608][T18601] netlink: 'syz.3.3237': attribute type 20 has an invalid length. [ 945.205476][ T8330] usb 1-1: MIDIStreaming interface descriptor not found [ 945.215426][T18601] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 945.307447][ T8330] usb 1-1: USB disconnect, device number 115 [ 945.468411][ T1210] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 945.503277][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.529074][ T1210] usb 3-1: config 0 descriptor?? [ 945.563558][ T1210] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 946.860991][T17080] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 947.052498][T17080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 947.078339][T17080] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 947.098377][T17080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.112038][T17080] usb 4-1: Product: syz [ 947.116260][T17080] usb 4-1: Manufacturer: syz [ 947.152733][T17080] usb 4-1: SerialNumber: syz [ 947.176029][T17080] usb 4-1: config 0 descriptor?? [ 947.302073][ T8332] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 947.458327][ T8332] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.498868][ T8332] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 947.521292][ T8332] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 947.537536][ T8332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.587835][ T8332] usb 5-1: config 0 descriptor?? [ 947.626167][ T8332] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 947.660700][ T8332] dvb-usb: bulk message failed: -22 (3/0) [ 947.707419][ T8332] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 947.728328][ T8332] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 947.735802][ T8332] usb 5-1: media controller created [ 947.745937][ T8332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 947.780997][ T8332] dvb-usb: bulk message failed: -22 (6/0) [ 947.791640][ T8332] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 947.834444][ T8332] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input74 [ 947.853795][ T8332] dvb-usb: schedule remote query interval to 150 msecs. [ 947.866606][ T8332] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 948.026343][ T8332] dvb-usb: bulk message failed: -22 (1/0) [ 948.033479][ T8332] dvb-usb: error while querying for an remote control event. [ 948.088868][T18635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.098271][T18635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.174528][ T8326] usb 5-1: USB disconnect, device number 7 [ 948.218257][ T1210] usb 3-1: USB disconnect, device number 36 [ 948.262505][ T8326] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 948.481356][T18647] fuse: Bad value for 'fd' [ 948.503411][T18648] fuse: Bad value for 'fd' [ 949.101478][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 949.174017][ T1210] usb 4-1: USB disconnect, device number 62 [ 949.365754][T18660] input: syz0 as /devices/virtual/input/input75 [ 949.690115][T18664] openvswitch: netlink: nsh attr 0 has unexpected len 8188 expected 0 [ 949.702093][ T1210] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 949.702126][T18664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 949.749454][T18670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 949.874138][ T1210] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 949.938221][ T1210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.972440][ T1210] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 950.012097][ T1210] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 950.077798][ T1210] usb 4-1: Manufacturer: syz [ 950.478678][ T1210] usb 4-1: config 0 descriptor?? [ 950.633420][ T1210] igorplugusb 4-1:0.0: incorrect number of endpoints [ 950.916017][ T1210] usb 4-1: USB disconnect, device number 63 [ 951.082265][ T5916] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 951.232210][ T5916] usb 2-1: device descriptor read/64, error -71 [ 951.488719][ T5916] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 951.736811][ T5916] usb 2-1: device descriptor read/64, error -71 [ 951.837214][T18705] netlink: 'syz.2.3264': attribute type 20 has an invalid length. [ 951.845388][T18705] IPv6: NLM_F_CREATE should be specified when creating new route [ 951.882137][ T5916] usb usb2-port1: attempt power cycle [ 951.911204][T18704] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 952.182149][ T8332] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 952.242029][ T5916] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 952.262610][ T5916] usb 2-1: device descriptor read/8, error -71 [ 952.454534][ T8332] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.470106][ T8332] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 952.481755][ T8332] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 952.491682][ T8332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.504424][ T8332] usb 4-1: config 0 descriptor?? [ 952.532277][ T5916] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 952.549800][ T8332] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 952.560844][ T8332] dvb-usb: bulk message failed: -22 (3/0) [ 952.572962][ T5916] usb 2-1: device descriptor read/8, error -71 [ 952.580737][ T8332] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 952.590321][ T8332] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 952.597568][ T8332] usb 4-1: media controller created [ 952.604521][ T8332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 952.624256][T18721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 952.642737][ T8332] dvb-usb: bulk message failed: -22 (6/0) [ 952.648548][ T8332] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 952.673498][ T8332] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input76 [ 952.682638][ T8332] dvb-usb: schedule remote query interval to 150 msecs. [ 952.682661][ T8332] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 952.695770][ T5916] usb usb2-port1: unable to enumerate USB device [ 952.842431][ T8332] dvb-usb: bulk message failed: -22 (1/0) [ 952.848875][ T8332] dvb-usb: error while querying for an remote control event. [ 952.891835][T18723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.909155][T18723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.938089][ T8332] usb 4-1: USB disconnect, device number 64 [ 952.986544][ T8332] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 953.436346][T18732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3274'. [ 953.692017][T18739] : entered promiscuous mode [ 954.032011][ T8330] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 954.162094][T18748] fuse: Unknown parameter 'fJ' [ 954.168519][T18748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 954.202236][ T8330] usb 4-1: Using ep0 maxpacket: 16 [ 954.699285][ T8330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.714758][ T8330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.742375][ T8330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 954.760115][ T8330] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 954.773395][ T8330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.791517][ T8330] usb 4-1: config 0 descriptor?? [ 955.207887][ T8330] microsoft 0003:045E:07DA.0023: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 955.227356][ T8330] microsoft 0003:045E:07DA.0023: no inputs found [ 955.236076][ T8330] microsoft 0003:045E:07DA.0023: could not initialize ff, continuing anyway [ 955.322055][ T5916] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 955.449586][ T8326] usb 4-1: USB disconnect, device number 65 [ 956.095765][ T5916] usb 2-1: config 0 has no interfaces? [ 956.142982][T18769] fido_id[18769]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 956.377295][ T5916] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 956.413176][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.636590][ T5916] usb 2-1: Product: syz [ 956.654990][ T5916] usb 2-1: Manufacturer: syz [ 956.662583][ T5916] usb 2-1: SerialNumber: syz [ 956.755912][ T5916] usb 2-1: config 0 descriptor?? [ 957.410651][T18787] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 957.425584][T18787] team0: Port device batadv3 added [ 959.156855][T16051] usb 2-1: USB disconnect, device number 60 [ 960.179565][T18839] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 960.189537][T18839] team0: Port device batadv2 added [ 961.860034][ T1210] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 962.102400][ T1210] usb 5-1: Using ep0 maxpacket: 8 [ 962.157170][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 962.176771][ T1210] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 962.224872][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.280761][ T1210] usb 5-1: config 0 descriptor?? [ 962.367364][T18865] x_tables: duplicate underflow at hook 3 [ 962.418992][T18865] sctp: [Deprecated]: syz.2.3311 (pid 18865) Use of int in max_burst socket option. [ 962.418992][T18865] Use struct sctp_assoc_value instead [ 962.634185][ T1210] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 962.959358][ T5916] usb 5-1: USB disconnect, device number 8 [ 962.965413][ C1] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 963.623639][T18883] FAULT_INJECTION: forcing a failure. [ 963.623639][T18883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.639296][T18883] CPU: 1 UID: 0 PID: 18883 Comm: syz.0.3315 Not tainted syzkaller #0 PREEMPT(full) [ 963.639343][T18883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 963.639367][T18883] Call Trace: [ 963.639376][T18883] [ 963.639385][T18883] dump_stack_lvl+0x189/0x250 [ 963.639415][T18883] ? __pfx____ratelimit+0x10/0x10 [ 963.639445][T18883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 963.639468][T18883] ? __pfx__printk+0x10/0x10 [ 963.639500][T18883] should_fail_ex+0x414/0x560 [ 963.639532][T18883] _copy_from_user+0x2d/0xb0 [ 963.639554][T18883] alg_setkey+0xb8/0x190 [ 963.639578][T18883] alg_setsockopt+0x3da/0x4a0 [ 963.639598][T18883] ? __pfx_alg_setsockopt+0x10/0x10 [ 963.639618][T18883] do_sock_setsockopt+0x17c/0x1b0 [ 963.639636][T18883] __x64_sys_setsockopt+0x13f/0x1b0 [ 963.639654][T18883] do_syscall_64+0xfa/0xfa0 [ 963.639671][T18883] ? lockdep_hardirqs_on+0x9c/0x150 [ 963.639690][T18883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.639704][T18883] ? clear_bhb_loop+0x60/0xb0 [ 963.639720][T18883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.639733][T18883] RIP: 0033:0x7f2050b8f6c9 [ 963.639746][T18883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 963.639759][T18883] RSP: 002b:00007f204edf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 963.639774][T18883] RAX: ffffffffffffffda RBX: 00007f2050de6180 RCX: 00007f2050b8f6c9 [ 963.639785][T18883] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000008 [ 963.639794][T18883] RBP: 00007f204edf6090 R08: 0000000000000004 R09: 0000000000000000 [ 963.639802][T18883] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 963.639811][T18883] R13: 00007f2050de6218 R14: 00007f2050de6180 R15: 00007f2050f0fa28 [ 963.639834][T18883] [ 963.821896][ C1] vkms_vblank_simulate: vblank timer overrun [ 964.087951][T18887] random: crng reseeded on system resumption [ 964.102827][T18878] netlink: 'syz.2.3314': attribute type 20 has an invalid length. [ 964.130627][T18878] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 964.912019][ T8332] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 965.073506][ T8332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.084847][ T8332] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 965.115978][ T8332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.197291][ T8332] usb 5-1: config 0 descriptor?? [ 965.802813][ T8332] usbhid 5-1:0.0: can't add hid device: -71 [ 965.808856][ T8332] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 965.840127][ T8332] usb 5-1: USB disconnect, device number 9 [ 966.342028][ T8332] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 966.543838][ T8332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.656872][T18940] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 966.666909][T18940] team0: Port device batadv3 added [ 966.749126][ T8332] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 966.788974][ T8332] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 966.822425][ T8332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.882401][ T8332] usb 5-1: config 0 descriptor?? [ 967.385641][T18952] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3332'. [ 967.455499][ T8332] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 967.929052][T18957] netlink: 'syz.2.3331': attribute type 20 has an invalid length. [ 968.173521][T18950] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 968.363799][ T8330] usb 5-1: USB disconnect, device number 10 [ 969.104828][T17080] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 969.353597][T17080] usb 4-1: config 0 has an invalid interface number: 25 but max is 0 [ 969.396886][T17080] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.557964][T17080] usb 4-1: config 0 has no interface number 0 [ 969.571685][T17080] usb 4-1: config 0 interface 25 has no altsetting 0 [ 969.581898][ T5149] Bluetooth: hci1: command 0x0405 tx timeout [ 969.613283][T17080] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 969.629938][T17080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.669791][T17080] usb 4-1: config 0 descriptor?? [ 969.702118][T16051] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 970.002465][T17080] usb 4-1: USB disconnect, device number 66 [ 970.023314][T16051] usb 1-1: Using ep0 maxpacket: 16 [ 970.047684][T16051] usb 1-1: unable to get BOS descriptor or descriptor too short [ 970.058497][T16051] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 970.100090][T16051] usb 1-1: config 13 has no interface number 0 [ 970.122784][T16051] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 970.499840][T16051] usb 1-1: config 13 interface 50 has no altsetting 0 [ 970.515732][T16051] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 970.525281][T16051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.542023][T16051] usb 1-1: Product: syz [ 970.546239][T16051] usb 1-1: Manufacturer: syz [ 970.551157][T16051] usb 1-1: SerialNumber: syz [ 970.582801][T18981] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 970.810748][T16051] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 970.819959][T16051] usb 1-1: MIDIStreaming interface descriptor not found [ 970.897289][T16051] usb 1-1: USB disconnect, device number 116 [ 971.332453][ T8330] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 971.493424][ T8330] usb 4-1: Using ep0 maxpacket: 8 [ 971.499994][ T8330] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 971.523416][ T8330] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 971.533907][ T8330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.549074][ T8330] usb 4-1: Product: syz [ 971.570173][ T8330] usb 4-1: Manufacturer: syz [ 971.590741][ T8330] usb 4-1: SerialNumber: syz [ 971.612288][ T8330] usb 4-1: config 0 descriptor?? [ 971.624410][ T8330] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 971.633325][ T8330] usb 4-1: setting power ON [ 971.638046][ T8330] dvb-usb: bulk message failed: -22 (2/0) [ 971.647043][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3348'. [ 971.650528][ T8330] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 971.674294][ T8330] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 971.689658][ T8330] usb 4-1: media controller created [ 971.930715][T19020] dvb-usb: bulk message failed: -22 (3/0) [ 971.938055][T19020] cxusb: i2c rd: len=112 is too big! [ 971.938055][T19020] [ 972.079757][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 972.079774][ T30] audit: type=1326 audit(1762764205.128:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19013 comm="syz.2.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a138f6c9 code=0x7ffc0000 [ 972.144760][ T8330] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 972.161911][T19022] dvb-usb: bulk message failed: -22 (4/0) [ 972.172617][T19022] cxusb: i2c read failed [ 972.192045][ T30] audit: type=1326 audit(1762764205.128:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19013 comm="syz.2.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a138f6c9 code=0x7ffc0000 [ 972.215722][ T8330] usb 4-1: selecting invalid altsetting 6 [ 972.221452][ T8330] usb 4-1: digital interface selection failed (-22) [ 972.272262][T16051] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 972.284033][ T8330] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 972.309228][ T30] audit: type=1326 audit(1762764205.128:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19013 comm="syz.2.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67a138df10 code=0x7ffc0000 [ 972.322668][ T8330] usb 4-1: setting power OFF [ 972.350841][ T30] audit: type=1326 audit(1762764205.128:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19013 comm="syz.2.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67a138f2cb code=0x7ffc0000 [ 972.374230][ T5916] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 972.415591][T17080] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 972.432434][ T30] audit: type=1326 audit(1762764205.128:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19013 comm="syz.2.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67a138f2cb code=0x7ffc0000 [ 972.477482][ T8330] dvb-usb: bulk message failed: -22 (2/0) [ 972.477727][ T30] audit: type=1326 audit(1762764205.128:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19013 comm="syz.2.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67a138f2cb code=0x7ffc0000 [ 972.506064][ T8330] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 972.506376][ T30] audit: type=1326 audit(1762764205.128:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19013 comm="syz.2.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67a138f2cb code=0x7ffc0000 [ 972.542167][ T30] audit: type=1326 audit(1762764205.318:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19013 comm="syz.2.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67a138f2cb code=0x7ffc0000 [ 972.565569][ T30] audit: type=1326 audit(1762764205.418:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19013 comm="syz.2.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67a138f2cb code=0x7ffc0000 [ 972.595496][T16051] usb 1-1: config 0 has no interfaces? [ 972.603944][T17080] usb 2-1: device descriptor read/64, error -71 [ 972.622147][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 972.630885][T16051] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 972.641401][ T8330] (NULL device *): no alternate interface [ 972.641448][ T30] audit: type=1326 audit(1762764205.478:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19013 comm="syz.2.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67a138f2cb code=0x7ffc0000 [ 972.670574][T16051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.689000][ T8330] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 972.709365][T16051] usb 1-1: Product: syz [ 972.721549][ T5916] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 972.752078][T16051] usb 1-1: Manufacturer: syz [ 972.756727][T16051] usb 1-1: SerialNumber: syz [ 972.762036][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.765565][ T8330] usb 4-1: USB disconnect, device number 67 [ 972.786206][ T5916] usb 3-1: Product: syz [ 972.802248][ T5916] usb 3-1: Manufacturer: syz [ 972.813112][T16051] usb 1-1: config 0 descriptor?? [ 972.818957][ T5916] usb 3-1: SerialNumber: syz [ 972.842366][T17080] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 972.914581][ T5916] usb 3-1: config 0 descriptor?? [ 972.967161][ T5916] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 972.983901][T17080] usb 2-1: device descriptor read/64, error -71 [ 973.047618][T16051] usb 1-1: USB disconnect, device number 117 [ 973.096374][T17080] usb usb2-port1: attempt power cycle [ 973.327474][T19037] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 973.372649][T19037] team0: Port device batadv3 added [ 973.624717][T17080] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 973.732775][T17080] usb 2-1: device descriptor read/8, error -71 [ 973.899057][T19043] : entered promiscuous mode [ 973.907044][ T5916] gspca_sonixj: reg_w1 err -110 [ 973.912400][ T5916] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 974.087237][T17080] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 974.153477][T17080] usb 2-1: device descriptor read/8, error -71 [ 974.282318][T17080] usb usb2-port1: unable to enumerate USB device [ 975.215769][T17080] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 975.762208][T17080] usb 5-1: Using ep0 maxpacket: 32 [ 975.781321][T17080] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 975.792541][ T8332] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 975.852658][T17080] usb 5-1: config 0 has no interface number 0 [ 975.860655][ T5825] usb 3-1: USB disconnect, device number 37 [ 975.886475][T17080] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 975.905820][T17080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.927619][T17080] usb 5-1: Product: syz [ 975.933811][T17080] usb 5-1: Manufacturer: syz [ 975.953002][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3361'. [ 975.969100][T17080] usb 5-1: SerialNumber: syz [ 975.977949][ T8332] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 975.987818][ T8332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.003502][T17080] usb 5-1: config 0 descriptor?? [ 976.012016][ T8332] usb 2-1: Product: syz [ 976.018468][T17080] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 976.061217][ T8332] usb 2-1: Manufacturer: syz [ 976.075490][ T8332] usb 2-1: SerialNumber: syz [ 976.228072][T17080] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 976.284112][T17080] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 976.400499][T19077] vlan2: entered promiscuous mode [ 976.431270][T19077] gretap0: entered promiscuous mode [ 976.549959][ T8332] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 976.639753][ T8332] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 976.662136][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 976.671074][ T5825] usb 5-1: USB disconnect, device number 11 [ 976.692849][ T5825] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 976.724578][ T8332] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 976.765257][ T8332] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 976.775362][ T5825] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 976.845540][ T8332] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 976.855179][ T5825] quatech2 5-1:0.51: device disconnected [ 976.868703][T19092] FAULT_INJECTION: forcing a failure. [ 976.868703][T19092] name failslab, interval 1, probability 0, space 0, times 0 [ 976.921439][ T8332] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 976.929313][T19092] CPU: 1 UID: 0 PID: 19092 Comm: syz.1.3365 Not tainted syzkaller #0 PREEMPT(full) [ 976.929340][T19092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 976.929350][T19092] Call Trace: [ 976.929359][T19092] [ 976.929368][T19092] dump_stack_lvl+0x189/0x250 [ 976.929393][T19092] ? __pfx____ratelimit+0x10/0x10 [ 976.929413][T19092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 976.929432][T19092] ? __pfx__printk+0x10/0x10 [ 976.929461][T19092] ? __pfx___might_resched+0x10/0x10 [ 976.929483][T19092] should_fail_ex+0x414/0x560 [ 976.929511][T19092] should_failslab+0xa8/0x100 [ 976.929529][T19092] __kmalloc_noprof+0xcb/0x7f0 [ 976.929551][T19092] ? kfree+0x4d/0x6d0 [ 976.929569][T19092] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 976.929601][T19092] tomoyo_realpath_from_path+0xe3/0x5d0 [ 976.929627][T19092] ? tomoyo_domain+0xd9/0x130 [ 976.929647][T19092] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 976.929667][T19092] tomoyo_path_number_perm+0x1e8/0x5a0 [ 976.929690][T19092] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 976.929748][T19092] ? __fget_files+0x2a/0x420 [ 976.929768][T19092] ? __fget_files+0x3a0/0x420 [ 976.929783][T19092] ? __fget_files+0x2a/0x420 [ 976.929803][T19092] security_file_ioctl+0xcb/0x2d0 [ 976.929826][T19092] __se_sys_ioctl+0x47/0x170 [ 976.929849][T19092] do_syscall_64+0xfa/0xfa0 [ 976.929873][T19092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.929889][T19092] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 976.929906][T19092] ? clear_bhb_loop+0x60/0xb0 [ 976.929926][T19092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.929942][T19092] RIP: 0033:0x7f22c718f6c9 [ 976.929959][T19092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.929974][T19092] RSP: 002b:00007f22c8090038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 976.929994][T19092] RAX: ffffffffffffffda RBX: 00007f22c73e6090 RCX: 00007f22c718f6c9 [ 976.930007][T19092] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 976.930018][T19092] RBP: 00007f22c8090090 R08: 0000000000000000 R09: 0000000000000000 [ 976.930029][T19092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.930039][T19092] R13: 00007f22c73e6128 R14: 00007f22c73e6090 R15: 00007f22c750fa28 [ 976.930069][T19092] [ 976.930077][T19092] ERROR: Out of memory at tomoyo_realpath_from_path. [ 977.115257][ T8332] usb 2-1: USB disconnect, device number 65 [ 977.500354][T19100] futex_wake_op: syz.2.3368 tries to shift op by 32; fix this program [ 977.632983][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3373'. [ 977.642909][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3373'. [ 979.261782][T19134] netlink: 'syz.3.3376': attribute type 20 has an invalid length. [ 979.272698][T19125] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 979.975446][T19151] trusted_key: encrypted_key: insufficient parameters specified [ 980.253263][T19159] team0: Port device team_slave_0 removed [ 980.260975][T19159] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 980.282115][ T8336] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 980.282562][T19159] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 980.454916][ T8336] usb 2-1: config 0 has no interfaces? [ 980.465703][ T8336] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 980.477755][ T8336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.491246][ T8336] usb 2-1: Product: syz [ 980.519475][ T8336] usb 2-1: Manufacturer: syz [ 980.529888][ T8336] usb 2-1: SerialNumber: syz [ 980.582825][ T8336] usb 2-1: config 0 descriptor?? [ 980.996736][ T8332] usb 2-1: USB disconnect, device number 66 [ 981.192072][ T5825] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 981.292194][ T5916] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 981.372109][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 981.378897][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 981.396926][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 981.410769][ T5825] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 981.422179][ T5916] usb 1-1: device descriptor read/64, error -71 [ 981.430407][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.438674][ T5825] usb 4-1: Product: syz [ 981.443188][ T5825] usb 4-1: Manufacturer: syz [ 981.447785][ T5825] usb 4-1: SerialNumber: syz [ 981.454486][ T5825] usb 4-1: config 0 descriptor?? [ 981.462113][ T5825] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 981.462337][ T8322] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 981.471369][ T5825] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 981.642128][ T8322] usb 3-1: Using ep0 maxpacket: 8 [ 981.666670][ T5916] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 981.700665][T19190] dvmrp8: entered allmulticast mode [ 981.721244][ T8322] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 981.736715][T19188] dvmrp8: left allmulticast mode [ 981.744161][ T8322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.760520][ T8322] usb 3-1: Product: syz [ 981.776032][ T8322] usb 3-1: Manufacturer: syz [ 981.780762][ T8322] usb 3-1: SerialNumber: syz [ 981.788348][ T8322] usb 3-1: config 0 descriptor?? [ 981.806109][ T8322] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 981.882820][ T5916] usb 1-1: device descriptor read/64, error -71 [ 982.002091][ T5916] usb usb1-port1: attempt power cycle [ 982.080967][ T5825] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 982.088473][T19193] trusted_key: encrypted_key: insufficient parameters specified [ 982.097992][ T5825] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 982.392228][ T5916] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 982.436157][ T5916] usb 1-1: device descriptor read/8, error -71 [ 982.445999][ T8322] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 982.459851][ T8322] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 982.487171][ T8322] usb 3-1: USB disconnect, device number 38 [ 982.799667][ T5825] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 982.813141][ T5825] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 982.853864][ T5916] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 982.884063][ T5916] usb 1-1: device descriptor read/8, error -71 [ 983.010277][ T5916] usb usb1-port1: unable to enumerate USB device [ 983.021767][ T5825] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 983.031187][ T5825] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 983.397827][ T5825] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 983.415135][ T5825] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 983.496059][ T5825] usb 4-1: USB disconnect, device number 68 [ 983.772703][ T8322] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 983.904669][T19213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3401'. [ 983.932026][ T8322] usb 5-1: Using ep0 maxpacket: 8 [ 983.970928][ T8322] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 983.984926][ T8322] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 983.998970][ T8322] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 984.008892][ T8322] usb 5-1: config 255 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 984.022687][ T8322] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 984.031763][ T8322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.485476][ T8322] usb 5-1: string descriptor 0 read error: -71 [ 984.494877][ T8322] usbhid 5-1:255.0: couldn't find an input interrupt endpoint [ 984.506363][ T8322] usb 5-1: USB disconnect, device number 12 [ 984.572060][T17080] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 984.762098][T17080] usb 1-1: Using ep0 maxpacket: 32 [ 984.771267][T17080] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.783220][T17080] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.794472][T17080] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 984.804165][T17080] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.908390][ T5916] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 984.910244][T17080] usb 1-1: config 0 descriptor?? [ 984.967974][T17080] hub 1-1:0.0: USB hub found [ 985.079934][ T5916] usb 3-1: config 0 has no interfaces? [ 985.090412][ T5916] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 985.101480][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.120464][ T5916] usb 3-1: Product: syz [ 985.130599][ T5916] usb 3-1: Manufacturer: syz [ 985.146111][ T5916] usb 3-1: SerialNumber: syz [ 985.215274][T17080] hub 1-1:0.0: 1 port detected [ 985.222912][ T5916] usb 3-1: config 0 descriptor?? [ 985.287051][T19234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3407'. [ 985.807765][ T5916] usb 3-1: USB disconnect, device number 39 [ 985.822195][T19243] tunl0: Caught tx_queue_len zero misconfig [ 985.867909][T17080] hub 1-1:0.0: activate --> -90 [ 986.292158][ T8322] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 986.454402][ T8322] usb 5-1: config 0 interface 0 has no altsetting 0 [ 986.468048][ T8322] usb 5-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00 [ 986.533417][ T8322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.644522][ T8322] usb 5-1: config 0 descriptor?? [ 986.686001][T16051] usb 1-1: USB disconnect, device number 122 [ 986.694637][T17080] usb 1-1-port1: cannot reset (err = -71) [ 986.703473][T17080] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad? [ 986.738044][T19255] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3412'. [ 986.739170][T17080] usb 1-1-port1: attempt power cycle [ 986.883059][ T5825] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 987.042095][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 987.049587][ T5825] usb 3-1: config index 0 descriptor too short (expected 4495, got 71) [ 987.059239][ T5825] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 987.067780][ T5825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.078097][ T5825] usb 3-1: config 0 has no interface number 0 [ 987.091913][ T5825] usb 3-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 987.104283][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.113471][ T5825] usb 3-1: Product: syz [ 987.117911][ T5825] usb 3-1: Manufacturer: syz [ 987.124557][ T5825] usb 3-1: SerialNumber: syz [ 987.136100][ T5825] usb 3-1: config 0 descriptor?? [ 987.144815][ T5825] uvcvideo 3-1:0.105: probe with driver uvcvideo failed with error -22 [ 987.268071][ T8322] usbhid 5-1:0.0: can't add hid device: -71 [ 987.274771][ T8322] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 987.289802][ T8322] usb 5-1: USB disconnect, device number 13 [ 987.347694][ T5825] usb 3-1: USB disconnect, device number 40 [ 988.742033][ T8336] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 988.959720][ T8336] usb 3-1: unable to get BOS descriptor or descriptor too short [ 988.974835][ T8336] usb 3-1: config 6 has an invalid interface number: 200 but max is 0 [ 988.983314][ T8336] usb 3-1: config 6 has no interface number 0 [ 988.989556][ T8336] usb 3-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 989.040417][ T8336] usb 3-1: config 6 interface 200 has no altsetting 0 [ 989.062644][ T8336] usb 3-1: string descriptor 0 read error: -22 [ 989.071873][ T8336] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 989.093359][ T8336] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 989.142736][T19296] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3423'. [ 989.213800][ T8336] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 989.513176][ T8336] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 989.558825][ T8336] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 989.661518][ T8336] usb 3-1: media controller created [ 989.725413][ T8336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 991.602069][T17080] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 991.822055][ T8336] dvb-usb: bulk message failed: -110 (6/0) [ 991.929654][ T8336] dvb-usb: bulk message failed: -71 (6/0) [ 991.948483][T17080] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 991.982244][ T8336] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 992.005944][T17080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.036607][ T8336] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input79 [ 992.073123][T17080] usb 5-1: config 0 descriptor?? [ 992.107070][ T8336] dvb-usb: schedule remote query interval to 150 msecs. [ 992.124315][ T8336] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 992.161972][ T8336] usb 3-1: USB disconnect, device number 41 [ 992.268523][ T8336] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 992.483829][T19325] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3432'. [ 992.497799][T17080] logitech 0003:046D:C298.0025: item fetching failed at offset 5/7 [ 992.507725][T17080] logitech 0003:046D:C298.0025: parse failed [ 992.514236][T17080] logitech 0003:046D:C298.0025: probe with driver logitech failed with error -22 [ 992.622079][ T5825] usb 1-1: new low-speed USB device number 127 using dummy_hcd [ 992.752692][ T5825] usb 1-1: device descriptor read/64, error -71 [ 992.992055][ T5825] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 993.095161][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.101625][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.172026][ T5825] usb 1-1: device descriptor read/64, error -71 [ 993.222093][T16051] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 993.294405][ T5825] usb usb1-port1: attempt power cycle [ 993.372902][T16051] usb 3-1: Using ep0 maxpacket: 32 [ 993.384987][T16051] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 993.402364][T16051] usb 3-1: config 0 has no interface number 0 [ 993.410086][T16051] usb 3-1: config 0 interface 130 has no altsetting 0 [ 993.413663][T19339] netlink: 340 bytes leftover after parsing attributes in process `syz.1.3435'. [ 993.426491][T19339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3435'. [ 993.441220][T16051] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1201, bcdDevice=69.37 [ 993.452658][T19339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3435'. [ 993.474771][T16051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.502059][T16051] usb 3-1: Product: syz [ 993.507990][T16051] usb 3-1: Manufacturer: syz [ 993.525436][T16051] usb 3-1: SerialNumber: syz [ 993.538137][T16051] usb 3-1: config 0 descriptor?? [ 993.662026][ T5825] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 993.682912][ T5825] usb 1-1: device descriptor read/8, error -71 [ 993.825173][T19331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.837499][T19331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.932161][ T5825] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 993.952757][ T5825] usb 1-1: device descriptor read/8, error -71 [ 994.062423][ T5825] usb usb1-port1: unable to enumerate USB device [ 994.100201][T19353] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3438'. [ 994.267685][T19355] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 994.341314][ T5825] usb 5-1: USB disconnect, device number 14 [ 994.593252][ T8322] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 994.682128][ T5825] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 994.754081][ T8322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 994.803214][ T8322] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 994.817532][ T8322] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 994.828472][ T8322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.833274][ T5825] usb 5-1: not running at top speed; connect to a high speed hub [ 994.842909][ T8322] usb 2-1: config 0 descriptor?? [ 994.853649][ T5825] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 994.878812][T19355] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 994.887471][ T5825] usb 5-1: config 95 has no interface number 0 [ 994.916096][ T5825] usb 5-1: config 95 interface 1 has no altsetting 0 [ 994.937439][ T5825] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 994.946798][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.955523][ T5825] usb 5-1: Product: syz [ 994.961061][ T5825] usb 5-1: Manufacturer: syz [ 994.966214][ T5825] usb 5-1: SerialNumber: syz [ 995.245345][ T5825] usb 5-1: USB disconnect, device number 15 [ 995.296278][ T8322] hid (null): report_id 57294 is invalid [ 995.338605][ T8322] asus 0003:0B05:18C6.0026: collection stack underflow [ 995.352793][ T9952] udevd[9952]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 995.369457][ T8322] asus 0003:0B05:18C6.0026: item 0 1 0 12 parsing failed [ 995.378351][ T8322] asus 0003:0B05:18C6.0026: Asus hid parse failed: -22 [ 995.387498][ T8322] asus 0003:0B05:18C6.0026: probe with driver asus failed with error -22 [ 995.506948][ T8322] usb 2-1: USB disconnect, device number 67 [ 995.749523][T16051] option 3-1:0.130: GSM modem (1-port) converter detected [ 995.798912][T16051] usb 3-1: USB disconnect, device number 42 [ 995.817045][T19366] fuse: Bad value for 'fd' [ 995.828656][T16051] option 3-1:0.130: device disconnected [ 995.828995][T17080] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 996.163932][T17080] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.175056][T17080] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.199689][T17080] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 996.202095][ T8322] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 996.215913][T17080] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 996.249098][T19375] netlink: 'syz.2.3444': attribute type 20 has an invalid length. [ 996.262352][T19373] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 996.272591][T17080] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.747346][T17080] usb 1-1: config 0 descriptor?? [ 996.832032][ T8322] usb 5-1: Using ep0 maxpacket: 16 [ 996.839864][ T8322] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 996.848575][ T8322] usb 5-1: can't read configurations, error -61 [ 996.982112][ T8322] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 997.296009][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3442'. [ 997.305333][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3442'. [ 997.332335][T19383] tc_dump_action: action bad kind [ 997.692073][ T8322] usb 5-1: Using ep0 maxpacket: 16 [ 997.699701][ T8322] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 997.709179][ T8322] usb 5-1: can't read configurations, error -61 [ 997.733684][ T8322] usb usb5-port1: attempt power cycle [ 998.082733][ T8322] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 998.115503][ T8322] usb 5-1: Using ep0 maxpacket: 16 [ 998.123685][ T8322] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 998.131616][ T8322] usb 5-1: can't read configurations, error -61 [ 998.282075][ T8322] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 998.312981][ T8322] usb 5-1: Using ep0 maxpacket: 16 [ 998.321365][ T8322] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 998.329839][ T8322] usb 5-1: can't read configurations, error -61 [ 998.337350][ T8322] usb usb5-port1: unable to enumerate USB device [ 998.452234][ T8336] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 998.700996][ T8336] usb 4-1: device descriptor read/64, error -71 [ 998.962557][ T8336] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 999.018603][T19395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 999.088662][T19395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.162259][ T8336] usb 4-1: device descriptor read/64, error -71 [ 999.198171][T19395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.314074][ T8336] usb usb4-port1: attempt power cycle [ 999.359684][T16051] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 999.498539][T17080] usbhid 1-1:0.0: can't add hid device: -71 [ 999.505317][T17080] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 999.530847][T16051] usb 3-1: config 0 has an invalid interface number: 159 but max is 0 [ 999.539613][T16051] usb 3-1: config 0 has no interface number 0 [ 999.548369][T16051] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e14, bcdDevice=db.f2 [ 999.574563][T17080] usb 1-1: USB disconnect, device number 5 [ 999.580622][T16051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.600482][T19404] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 999.610744][T19404] team0: Port device batadv4 added [ 999.627781][T16051] usb 3-1: Product: syz [ 999.632243][T16051] usb 3-1: Manufacturer: syz [ 999.640397][T16051] usb 3-1: SerialNumber: syz [ 999.686977][T16051] usb 3-1: config 0 descriptor?? [ 999.742522][ T8336] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 999.803006][ T8336] usb 4-1: device descriptor read/8, error -71 [ 999.911638][T16051] dvb-usb: found a 'DiBcom STK7700P reference design' in warm state. [ 999.927119][T16051] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1000.102872][T16051] dvbdev: DVB: registering new adapter (DiBcom STK7700P reference design) [ 1000.112649][T19398] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1000.137017][T16051] usb 3-1: media controller created [ 1000.145654][T19414] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1000.162094][ T8336] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1000.176233][T19414] team0: Port device batadv4 added [ 1000.182816][ T8336] usb 4-1: device descriptor read/8, error -71 [ 1000.217825][T16051] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1000.292616][ T8336] usb usb4-port1: unable to enumerate USB device [ 1000.305903][T16051] DVB: Unable to find symbol dib7000p_attach() [ 1000.312269][T16051] dvb-usb: no frontend was attached by 'DiBcom STK7700P reference design' [ 1000.433254][T16051] rc_core: IR keymap rc-dib0700-rc5 not found [ 1000.439797][T16051] Registered IR keymap rc-empty [ 1000.450733][T16051] dvb-usb: could not initialize remote control. [ 1000.464495][T16051] dvb-usb: DiBcom STK7700P reference design successfully initialized and connected. [ 1000.528446][T16051] usb 3-1: USB disconnect, device number 43 [ 1000.627033][T16051] dvb-usb: DiBcom STK7700P reference design successfully deinitialized and disconnected. [ 1000.694035][T19425] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3456'. [ 1000.835184][T19427] xt_bpf: check failed: parse error [ 1000.982069][ T8324] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1001.132070][ T8324] usb 5-1: Using ep0 maxpacket: 32 [ 1001.144041][ T8324] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1001.179095][ T8324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.210852][ T8324] usb 5-1: config 0 has no interface number 0 [ 1001.242298][ T8324] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1001.291298][ T8324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.321214][ T8324] usb 5-1: Product: syz [ 1001.328860][ T8324] usb 5-1: Manufacturer: syz [ 1001.345634][T19438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3460'. [ 1001.365459][ T8324] usb 5-1: SerialNumber: syz [ 1001.372866][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3460'. [ 1001.403134][ T8324] usb 5-1: config 0 descriptor?? [ 1001.416619][T19440] program syz.2.3461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1001.443163][ T8324] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1001.493201][ T8324] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input81 [ 1001.662085][ T8324] usb 5-1: USB disconnect, device number 20 [ 1001.985895][T19458] netlink: 'syz.0.3463': attribute type 1 has an invalid length. [ 1002.054647][T17080] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1002.216368][T17080] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.248629][T17080] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1002.288534][T19458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1002.296282][T17080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.341598][T17080] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1003.100435][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1003.100452][ T30] audit: type=1326 audit(1762764236.168:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5658f6c9 code=0x7ffc0000 [ 1003.245999][ T30] audit: type=1326 audit(1762764236.168:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f2d5658f6c9 code=0x7ffc0000 [ 1003.468311][T17080] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1003.518382][ T30] audit: type=1326 audit(1762764236.168:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5658f6c9 code=0x7ffc0000 [ 1003.565887][ T30] audit: type=1326 audit(1762764236.168:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2d5658f6c9 code=0x7ffc0000 [ 1003.659531][ T30] audit: type=1326 audit(1762764236.168:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5658f6c9 code=0x7ffc0000 [ 1003.666523][T19486] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1003.694927][T17080] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1003.736439][T17080] stv0680 3-1:4.0: last error: 86, command = 0x70 [ 1003.764267][T17080] usb 3-1: USB disconnect, device number 44 [ 1003.777565][T19489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3473'. [ 1003.787985][ T30] audit: type=1326 audit(1762764236.168:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d5658f6c9 code=0x7ffc0000 [ 1003.814219][T19489] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3473'. [ 1003.824384][ T30] audit: type=1326 audit(1762764236.178:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5658f6c9 code=0x7ffc0000 [ 1003.873673][T19486] team0: Port device batadv5 added [ 1004.006323][ T30] audit: type=1326 audit(1762764236.178:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f2d5658f6c9 code=0x7ffc0000 [ 1004.031726][ T30] audit: type=1326 audit(1762764236.178:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5658f6c9 code=0x7ffc0000 [ 1004.060666][ T30] audit: type=1326 audit(1762764236.178:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.4.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5658f6c9 code=0x7ffc0000 [ 1004.129388][T19492] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3475'. [ 1004.332406][T17080] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1004.540638][T17080] usb 2-1: Using ep0 maxpacket: 8 [ 1004.563352][T17080] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1004.600776][T17080] usb 2-1: config 0 has no interface number 0 [ 1004.627367][T17080] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1004.664470][T17080] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.692586][T17080] usb 2-1: Product: syz [ 1004.697418][T17080] usb 2-1: Manufacturer: syz [ 1004.712491][T17080] usb 2-1: SerialNumber: syz [ 1004.739965][T17080] usb 2-1: config 0 descriptor?? [ 1004.742169][ T8324] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1004.947907][ T8324] usb 3-1: descriptor type invalid, skip [ 1004.963475][ T8324] usb 3-1: descriptor type invalid, skip [ 1004.966489][T17080] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 1004.989729][ T8324] usb 3-1: descriptor type invalid, skip [ 1005.004422][ T8324] usb 3-1: not running at top speed; connect to a high speed hub [ 1005.006105][T17080] usb 2-1: USB disconnect, device number 68 [ 1005.043593][ T8324] usb 3-1: config 64 has an invalid interface number: 9 but max is 0 [ 1005.067770][ T8324] usb 3-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 1005.099288][ T8324] usb 3-1: config 64 has no interface number 0 [ 1005.110719][T19510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.119581][ T8324] usb 3-1: config 64 interface 9 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1005.119614][ T8324] usb 3-1: config 64 interface 9 altsetting 5 endpoint 0x3 has invalid maxpacket 959, setting to 64 [ 1005.119637][ T8324] usb 3-1: config 64 interface 9 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1005.148247][T19510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.169755][T19510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.181674][ T8324] usb 3-1: config 64 interface 9 has no altsetting 0 [ 1005.186252][T19510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.191540][ T8324] usb 3-1: New USB device found, idVendor=19d2, idProduct=0148, bcdDevice=e0.5e [ 1005.202131][T19510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.206759][ T8324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.222567][ T8324] usb 3-1: Product: syz [ 1005.226775][ T8324] usb 3-1: Manufacturer: 㶇똋ႜ﫢닉ᮗ턍뉽ᙓ뙵ṍ⢈胸䀖▥䲀凈הּ꾕퇛䣵ྪᥔ㪰ݦ됹暎림ꌽ걉̟䅢䨀铦オ骂样梤㌑鿇↮绌ꄭ躑䠱썘晽ɲ䋯몟隄䪹ꊳ攉੢ꍺ냑帮趙䯋肑␳썼㦯廟ﶌ綵鮽ߊ춗ꨁ뒩抣ᡩ [ 1005.255223][T19510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.270804][ T8324] usb 3-1: SerialNumber: syz [ 1005.302893][T19510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.318296][T19510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.328772][T19510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.342547][T19510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.392011][ T8330] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1005.425484][ T5149] Bluetooth: hci0: command 0x0405 tx timeout [ 1005.467969][T19519] trusted_key: encrypted_key: insufficient parameters specified [ 1005.617269][ T8330] usb 5-1: Using ep0 maxpacket: 8 [ 1005.643933][ T8330] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1005.656415][ T8330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.705001][ T8324] option 3-1:64.9: GSM modem (1-port) converter detected [ 1005.705652][ T8330] usb 5-1: Product: syz [ 1005.718368][ T8324] usb 3-1: USB disconnect, device number 45 [ 1005.721207][ T8324] option 3-1:64.9: device disconnected [ 1005.730081][ T5916] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1005.797538][ T8330] usb 5-1: Manufacturer: syz [ 1005.821868][ T8330] usb 5-1: SerialNumber: syz [ 1005.853711][ T8330] usb 5-1: config 0 descriptor?? [ 1005.892780][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 1005.918667][ T5916] usb 4-1: config 0 has no interfaces? [ 1005.928127][ T5916] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1005.953729][ T5916] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1005.989575][ T5916] usb 4-1: Manufacturer: syz [ 1006.068513][ T5916] usb 4-1: config 0 descriptor?? [ 1006.124130][T16051] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1006.139212][ T8330] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1006.154686][ T8330] gspca_sunplus: reg_w_riv err -71 [ 1006.188892][ T8330] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1006.247025][ T8330] usb 5-1: USB disconnect, device number 21 [ 1006.282385][T16051] usb 1-1: Using ep0 maxpacket: 32 [ 1006.312838][T16051] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1006.320559][T16051] usb 1-1: can't read configurations, error -61 [ 1006.362743][T19517] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1006.393952][T19517] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1006.462061][T16051] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1006.612370][T16051] usb 1-1: Using ep0 maxpacket: 32 [ 1006.639905][T16051] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1006.654295][T16051] usb 1-1: can't read configurations, error -61 [ 1006.674523][T16051] usb usb1-port1: attempt power cycle [ 1006.848101][T19533] xt_CT: No such helper "snmp" [ 1006.925658][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3488'. [ 1007.032080][T16051] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1007.090045][T16051] usb 1-1: Using ep0 maxpacket: 32 [ 1007.101857][T16051] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1007.109991][T16051] usb 1-1: can't read configurations, error -61 [ 1007.249161][T16051] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1007.284065][T16051] usb 1-1: Using ep0 maxpacket: 32 [ 1007.291297][T16051] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1007.300727][T16051] usb 1-1: can't read configurations, error -61 [ 1007.308237][T16051] usb usb1-port1: unable to enumerate USB device [ 1007.415247][ T8330] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1007.585152][ T8330] usb 2-1: Using ep0 maxpacket: 16 [ 1007.601858][ T8330] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1007.620571][ T8330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.635375][ T8330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1007.649855][ T8330] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1007.715395][ T8330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.724345][ T8330] usb 2-1: Product: syz [ 1007.728502][ T8330] usb 2-1: Manufacturer: syz [ 1007.734326][ T8330] usb 2-1: SerialNumber: syz [ 1008.642543][ T8324] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1008.792276][ T8324] usb 3-1: Invalid ep0 maxpacket: 9 [ 1008.933787][ T8324] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1008.986019][T19561] trusted_key: encrypted_key: insufficient parameters specified [ 1009.104701][ T8324] usb 3-1: Invalid ep0 maxpacket: 9 [ 1009.149490][ T8324] usb usb3-port1: attempt power cycle [ 1009.317954][ T5916] usb 4-1: USB disconnect, device number 73 [ 1009.429007][T19564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1009.522143][ T8324] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1009.552774][ T8324] usb 3-1: Invalid ep0 maxpacket: 9 [ 1009.682089][ T8324] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1009.702789][ T8324] usb 3-1: Invalid ep0 maxpacket: 9 [ 1009.708420][ T8324] usb usb3-port1: unable to enumerate USB device [ 1009.792104][ T5916] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1009.922087][ T5916] usb 4-1: device descriptor read/64, error -71 [ 1010.109069][ T8330] usb 2-1: 0:2 : does not exist [ 1010.123037][ T8330] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1010.162045][ T5916] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1010.244834][ T8330] usb 2-1: USB disconnect, device number 69 [ 1010.361067][ T5916] usb 4-1: device descriptor read/64, error -71 [ 1010.483214][ T5916] usb usb4-port1: attempt power cycle [ 1010.666255][T19584] loop8: detected capacity change from 0 to 7 [ 1010.678140][T19584] Dev loop8: unable to read RDB block 7 [ 1010.683927][T19584] loop8: unable to read partition table [ 1010.690024][T19584] loop8: partition table beyond EOD, truncated [ 1010.697743][T19584] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1010.850251][ T5916] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1010.899672][ T5916] usb 4-1: device descriptor read/8, error -71 [ 1011.162983][ T5916] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1011.183618][ T5916] usb 4-1: device descriptor read/8, error -71 [ 1011.292049][ T8324] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1011.304397][ T5916] usb usb4-port1: unable to enumerate USB device [ 1011.494052][ T8324] usb 5-1: Using ep0 maxpacket: 32 [ 1011.535361][ T8324] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1011.576096][ T8324] usb 5-1: config 0 has no interface number 0 [ 1011.581504][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3506'. [ 1011.594790][ T8324] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1011.604104][ T8324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.613021][ T8324] usb 5-1: Product: syz [ 1011.622099][ T8324] usb 5-1: Manufacturer: syz [ 1011.632188][ T8324] usb 5-1: SerialNumber: syz [ 1011.648188][ T8324] usb 5-1: config 0 descriptor?? [ 1011.659092][ T8324] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1011.668116][ T8324] usb 5-1: selecting invalid altsetting 1 [ 1011.683074][ T8324] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1011.823810][ T8324] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1011.834880][ T8324] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1011.867448][ T8324] usb 5-1: media controller created [ 1012.149698][T19611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.170373][T19611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.254782][T19607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.281073][T19607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.282889][ T8324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1012.562127][T16051] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1012.647659][T19621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1012.762083][T16051] usb 3-1: Using ep0 maxpacket: 16 [ 1012.775678][T16051] usb 3-1: config 0 has no interfaces? [ 1012.877560][ T8322] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1012.909421][T16051] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1012.931276][T16051] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1012.931294][T16051] usb 3-1: Manufacturer: syz [ 1012.932930][T19593] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1012.934201][T16051] usb 3-1: config 0 descriptor?? [ 1012.952523][ T8324] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1012.952626][ T8324] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1013.018875][ T8324] usb 5-1: USB disconnect, device number 22 [ 1013.111154][ T8322] usb 1-1: Using ep0 maxpacket: 16 [ 1013.127816][ T8322] usb 1-1: too many configurations: 170, using maximum allowed: 8 [ 1013.187622][T19609] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1013.228963][ T8322] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 82 [ 1013.239946][ T8322] usb 1-1: can't read configurations, error -22 [ 1013.422182][ T8322] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1013.449032][T19629] loop8: detected capacity change from 0 to 7 [ 1013.460583][T19629] Dev loop8: unable to read RDB block 7 [ 1013.466657][T19629] loop8: unable to read partition table [ 1013.472948][T19629] loop8: partition table beyond EOD, truncated [ 1013.495990][T19629] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1013.534012][T19626] netlink: 'syz.3.3511': attribute type 20 has an invalid length. [ 1013.569414][T19623] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1013.604035][ T8322] usb 1-1: Using ep0 maxpacket: 16 [ 1013.628700][ T8322] usb 1-1: too many configurations: 170, using maximum allowed: 8 [ 1013.643990][ T8322] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 82 [ 1013.660415][ T8322] usb 1-1: can't read configurations, error -22 [ 1013.674793][ T8322] usb usb1-port1: attempt power cycle [ 1014.082200][ T8322] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1014.104424][ T8322] usb 1-1: Using ep0 maxpacket: 16 [ 1014.119442][ T8322] usb 1-1: too many configurations: 170, using maximum allowed: 8 [ 1014.129743][ T8322] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 82 [ 1014.140033][ T8322] usb 1-1: can't read configurations, error -22 [ 1014.202069][T16051] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1014.272992][ T8322] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1014.292531][ T8322] usb 1-1: Using ep0 maxpacket: 16 [ 1014.299489][ T8322] usb 1-1: too many configurations: 170, using maximum allowed: 8 [ 1014.347534][ T8322] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 82 [ 1014.356421][T16051] usb 2-1: Using ep0 maxpacket: 32 [ 1014.362861][ T8322] usb 1-1: can't read configurations, error -22 [ 1014.371381][T16051] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1014.381600][ T8322] usb usb1-port1: unable to enumerate USB device [ 1014.394570][T16051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.410025][T16051] usb 2-1: config 0 descriptor?? [ 1014.417668][T16051] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1014.980690][ T8336] usb 3-1: USB disconnect, device number 50 [ 1015.872105][ T8322] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1016.154087][ T8322] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1016.162949][ T8322] usb 1-1: not running at top speed; connect to a high speed hub [ 1016.183129][ T8322] usb 1-1: config 15 has an invalid interface number: 168 but max is 0 [ 1016.191737][ T8322] usb 1-1: config 15 has no interface number 0 [ 1016.212308][ T8322] usb 1-1: config 15 interface 168 has no altsetting 0 [ 1016.222168][ T8322] usb 1-1: New USB device found, idVendor=1044, idProduct=7002, bcdDevice=f0.ca [ 1016.233817][ T8322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.242300][ T8322] usb 1-1: Product: syz [ 1016.249904][ T8322] usb 1-1: Manufacturer: syz [ 1016.250390][T19670] loop8: detected capacity change from 0 to 7 [ 1016.382156][T16051] gspca_sunplus: reg_w_riv err -110 [ 1016.487177][ T7575] Dev loop8: unable to read RDB block 7 [ 1016.487464][T16051] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1016.501849][ T8322] usb 1-1: SerialNumber: syz [ 1016.503585][ T7575] loop8: unable to read partition table [ 1016.573252][ T7575] loop8: partition table beyond EOD, truncated [ 1016.594265][T19670] Dev loop8: unable to read RDB block 7 [ 1016.599993][T19670] loop8: unable to read partition table [ 1016.611383][T19670] loop8: partition table beyond EOD, truncated [ 1016.618084][T19670] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1016.832042][ T8330] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1017.023469][ T8330] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1017.041674][ T8330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.056207][T19677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1017.121745][ T8330] usb 4-1: Product: syz [ 1017.154837][ T8330] usb 4-1: Manufacturer: syz [ 1017.165051][ T8330] usb 4-1: SerialNumber: syz [ 1017.242776][ T8322] dvb-usb: found a 'Gigabyte U8000-RH' in warm state. [ 1017.257117][ T8322] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1017.347326][T16051] usb 2-1: USB disconnect, device number 70 [ 1017.383369][ T8322] dvbdev: DVB: registering new adapter (Gigabyte U8000-RH) [ 1017.397685][ T8322] usb 1-1: media controller created [ 1017.419781][ T8322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1017.516017][ T8330] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:5e:e8:73:6d:33 [ 1017.591594][ T8322] DVB: Unable to find symbol dib7000p_attach() [ 1017.598583][ T8322] dvb-usb: no frontend was attached by 'Gigabyte U8000-RH' [ 1017.682022][ T8322] rc_core: IR keymap rc-dib0700-rc5 not found [ 1017.690987][ T8322] Registered IR keymap rc-empty [ 1017.699004][ T8330] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 1017.711183][ T8322] dvb-usb: could not initialize remote control. [ 1017.718897][ T8322] dvb-usb: Gigabyte U8000-RH successfully initialized and connected. [ 1017.722784][ T8330] usb 4-1: USB disconnect, device number 78 [ 1017.846331][ T8322] usb 1-1: USB disconnect, device number 14 [ 1017.872812][T16051] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1017.937750][ T8322] dvb-usb: Gigabyte U8000-RH successfully deinitialized and disconnected. [ 1018.045118][T16051] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 1018.057032][T16051] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.101739][T16051] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1018.122144][T16051] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1018.130424][T16051] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1018.139954][T16051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.160262][T16051] usb 2-1: config 0 descriptor?? [ 1018.601619][T16051] pyra 0003:1E7D:2C24.0027: reserved main item tag 0xd [ 1018.661488][T16051] pyra 0003:1E7D:2C24.0027: hidraw0: USB HID v0.01 Device [HID 1e7d:2c24] on usb-dummy_hcd.1-1/input0 [ 1018.781109][ T8322] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1018.857086][ T8330] usb 2-1: USB disconnect, device number 71 [ 1018.881575][T19728] loop8: detected capacity change from 0 to 7 [ 1018.921691][T19728] Dev loop8: unable to read RDB block 7 [ 1018.937149][T19720] fido_id[19720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1018.954925][T19728] loop8: unable to read partition table [ 1018.960799][T19728] loop8: partition table beyond EOD, truncated [ 1018.992166][T19728] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1019.015420][ T8322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.027742][ T8322] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1019.106531][ T8322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.123292][ T8322] usb 1-1: config 0 descriptor?? [ 1019.736786][T19744] input: syz1 as /devices/virtual/input/input84 [ 1020.402951][ T8326] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1020.564082][ T8326] usb 2-1: Using ep0 maxpacket: 8 [ 1020.576421][ T8326] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1020.630412][ T8326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.683639][ T8326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.722557][ T8326] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1020.762663][ T8326] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1020.771881][ T8326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.810529][ T8326] usb 2-1: config 0 descriptor?? [ 1021.228342][ T8326] hid (null): report_id 0 is invalid [ 1021.235252][T19792] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3550'. [ 1021.258229][ T8326] redragon 0003:0C45:760B.0028: report_id 0 is invalid [ 1021.267660][ T8326] redragon 0003:0C45:760B.0028: item 0 1 1 8 parsing failed [ 1021.277333][ T8326] redragon 0003:0C45:760B.0028: probe with driver redragon failed with error -22 [ 1021.434759][ T8326] usb 2-1: USB disconnect, device number 72 [ 1021.479113][ T8322] usbhid 1-1:0.0: can't add hid device: -71 [ 1021.485336][ T8322] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1021.502390][ T8322] usb 1-1: USB disconnect, device number 15 [ 1021.699882][T19800] tipc: Enabling of bearer rejected, failed to enable media [ 1022.056441][T19814] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1022.143800][T19814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3553'. [ 1023.391450][T19828] syzkaller0: entered promiscuous mode [ 1023.463276][T19828] syzkaller0: entered allmulticast mode [ 1023.643551][T19838] random: crng reseeded on system resumption [ 1024.111094][T19840] xt_TCPMSS: Only works on TCP SYN packets [ 1025.439058][T19858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.583021][T19860] netlink: 'syz.1.3562': attribute type 20 has an invalid length. [ 1025.591039][T19860] IPv6: NLM_F_CREATE should be specified when creating new route [ 1025.602117][T19854] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1026.712064][ T8336] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1026.866513][ T8336] usb 2-1: not running at top speed; connect to a high speed hub [ 1026.875532][ T8336] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1026.912587][ T8336] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1026.945691][ T8336] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1026.962096][ T8336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.980422][ T8336] usb 2-1: Product: ᠁ [ 1027.009358][ T8336] usb 2-1: Manufacturer: 沣湉Ȅ蓦광睒俌컁㵭἖您ꅿ昜뀃摮喏㵪⁻ܜ툻⍃鸪렢砩쏯텸ኸ軔ꯎ뿔焁턉鹚蝏돯䖴葸ↈ⢞臜ψ썝ﱉ铸Ჳ剖䝊ꏕᴼ眗灃琭姗̦ﺱ灡毵ꏖꂔᆲ䡦僠뼅⟀씌ḩ㐣礌⟪墋䇑韐凛놬ꩴŎꘘ굆㭮 [ 1027.036759][ C0] vkms_vblank_simulate: vblank timer overrun [ 1027.052202][ T8336] usb 2-1: SerialNumber: 䭑얢튆혠䵶旴箦㸩㧔ꗋ끌毩鲛ꡌ๒誸ꞕ퐦虌¤œⳤᏮ쁒 [ 1027.102519][T19873] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1027.632096][ T8326] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1027.802956][ T8326] usb 4-1: too many configurations: 54, using maximum allowed: 8 [ 1027.821919][ T8326] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1027.831356][ T8326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.845486][ T8326] usb 4-1: Product: syz [ 1027.849700][ T8326] usb 4-1: Manufacturer: syz [ 1027.854993][ T8326] usb 4-1: SerialNumber: syz [ 1028.275555][ T8326] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1028.297259][ T8326] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1028.536109][ T8326] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1028.554786][ T8326] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1028.577252][ T8326] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1028.603104][ T8326] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1028.627380][ T8326] usb 4-1: USB disconnect, device number 79 [ 1028.703071][T19883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.733616][T19883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.374242][ T8336] cdc_ncm 2-1:1.0: bind() failure [ 1029.382712][ T8336] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1029.396658][ T8336] cdc_ncm 2-1:1.1: bind() failure [ 1029.442399][ T8336] usb 2-1: USB disconnect, device number 73 [ 1029.545104][T19887] tipc: Started in network mode [ 1029.560550][T19887] tipc: Node identity ac14140f, cluster identity 4711 [ 1029.569582][T19887] tipc: New replicast peer: 255.255.255.255 [ 1029.577510][T19887] tipc: Enabled bearer , priority 10 [ 1029.767553][T19893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3573'. [ 1030.790743][ T8326] tipc: Node number set to 2886997007 [ 1031.063007][T19903] netlink: 'syz.2.3575': attribute type 20 has an invalid length. [ 1031.084750][T19909] netlink: 'syz.4.3577': attribute type 20 has an invalid length. [ 1031.097150][T19909] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1031.125025][T19902] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1031.483374][T19914] netlink: 'syz.3.3576': attribute type 6 has an invalid length. [ 1033.461313][T19937] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3584'. [ 1034.329666][T19962] loop8: detected capacity change from 0 to 7 [ 1034.344057][T19962] Dev loop8: unable to read RDB block 7 [ 1034.351691][T19962] loop8: unable to read partition table [ 1034.357885][T19962] loop8: partition table beyond EOD, truncated [ 1034.381159][T19962] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1034.452544][T19959] netlink: 'syz.2.3588': attribute type 20 has an invalid length. [ 1034.657118][T19959] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1034.985315][T19968] netlink: 'syz.3.3591': attribute type 20 has an invalid length. [ 1034.999049][T19968] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1035.212179][T16051] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1035.362069][T16051] usb 2-1: device descriptor read/64, error -71 [ 1035.486110][ T8336] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1035.642127][T16051] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1035.667992][ T8336] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 1035.689488][ T8336] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.721838][ T8336] usb 3-1: config 0 has no interface number 0 [ 1035.748341][ T8336] usb 3-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1035.792863][T16051] usb 2-1: device descriptor read/64, error -71 [ 1035.812169][ T8336] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 1035.812199][ T8336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.812219][ T8336] usb 3-1: Product: syz [ 1035.812233][ T8336] usb 3-1: Manufacturer: syz [ 1035.812248][ T8336] usb 3-1: SerialNumber: syz [ 1035.819065][ T8336] usb 3-1: config 0 descriptor?? [ 1035.867754][T19984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3598'. [ 1035.903162][T16051] usb usb2-port1: attempt power cycle [ 1036.253790][ T8336] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1036.269407][ T8336] usb 3-1: MIDIStreaming interface descriptor not found [ 1036.279413][T16051] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1036.282499][ T8330] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1036.351660][T16051] usb 2-1: device descriptor read/8, error -71 [ 1036.419338][ T8336] usb 3-1: USB disconnect, device number 51 [ 1036.429739][T19997] netlink: 'syz.4.3600': attribute type 20 has an invalid length. [ 1036.441420][T19997] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1036.552951][ T8330] usb 1-1: Using ep0 maxpacket: 32 [ 1036.564115][ T8330] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1036.573217][ T8330] usb 1-1: config 0 has no interface number 0 [ 1036.592063][T16051] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1036.612950][T16051] usb 2-1: device descriptor read/8, error -71 [ 1036.630331][ T8330] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1036.722863][T16051] usb usb2-port1: unable to enumerate USB device [ 1036.756853][ T8330] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1036.837750][ T8330] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1036.852484][ T8330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.044931][ T8330] usb 1-1: Product: syz [ 1037.131826][ T8330] usb 1-1: Manufacturer: syz [ 1037.145535][ T8330] usb 1-1: SerialNumber: syz [ 1037.227503][ T8330] usb 1-1: config 0 descriptor?? [ 1037.336440][T20006] loop8: detected capacity change from 0 to 7 [ 1037.344944][T20006] Dev loop8: unable to read RDB block 7 [ 1037.350588][T20006] loop8: unable to read partition table [ 1037.356787][T20006] loop8: partition table beyond EOD, truncated [ 1037.363118][T20006] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1037.568319][T20010] netlink: 'syz.4.3604': attribute type 41 has an invalid length. [ 1037.722390][ T8336] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1037.883666][ T8336] usb 3-1: Using ep0 maxpacket: 8 [ 1037.897010][ T8336] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1037.906037][ T8336] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1038.095612][ T8336] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1038.117888][ T8336] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1038.131705][ T8336] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1038.145795][ T8336] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1038.155355][ T8336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.200998][ T8330] appletouch 1-1:0.85: Geyser mode initialized. [ 1038.210822][ T8330] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input85 [ 1038.263643][T20023] netlink: 'syz.4.3606': attribute type 20 has an invalid length. [ 1038.292819][T20023] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1038.602252][ T8336] usb 3-1: usb_control_msg returned -32 [ 1038.607904][ T8336] usbtmc 3-1:16.0: can't read capabilities [ 1038.722281][ C1] [ 1038.724648][ C1] ======================================================== [ 1038.731829][ C1] WARNING: possible irq lock inversion dependency detected [ 1038.739020][ C1] syzkaller #0 Not tainted [ 1038.743433][ C1] -------------------------------------------------------- [ 1038.750617][ C1] swapper/1/0 just changed the state of lock: [ 1038.756670][ C1] ffff888023963230 (&dev->event_lock#2){..-.}-{3:3}, at: input_event+0x76/0xe0 [ 1038.765629][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 1038.773609][ C1] (tasklist_lock){.+.+}-{3:3} [ 1038.773645][ C1] [ 1038.773645][ C1] [ 1038.773645][ C1] and interrupts could create inverse lock ordering between them. [ 1038.773645][ C1] [ 1038.792692][ C1] [ 1038.792692][ C1] other info that might help us debug this: [ 1038.800743][ C1] Chain exists of: [ 1038.800743][ C1] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 1038.800743][ C1] [ 1038.813704][ C1] Possible interrupt unsafe locking scenario: [ 1038.813704][ C1] [ 1038.822016][ C1] CPU0 CPU1 [ 1038.827453][ C1] ---- ---- [ 1038.832816][ C1] lock(tasklist_lock); [ 1038.837060][ C1] local_irq_disable(); [ 1038.843809][ C1] lock(&dev->event_lock#2); [ 1038.851000][ C1] lock(&new->fa_lock); [ 1038.857753][ C1] [ 1038.861193][ C1] lock(&dev->event_lock#2); [ 1038.866036][ C1] [ 1038.866036][ C1] *** DEADLOCK *** [ 1038.866036][ C1] [ 1038.874168][ C1] no locks held by swapper/1/0. [ 1038.879009][ C1] [ 1038.879009][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 1038.888376][ C1] -> (tasklist_lock){.+.+}-{3:3} { [ 1038.893751][ C1] HARDIRQ-ON-R at: [ 1038.897981][ C1] lock_acquire+0x120/0x360 [ 1038.904666][ C1] _raw_read_lock+0x36/0x50 [ 1038.911334][ C1] __do_wait+0xde/0x740 [ 1038.917680][ C1] do_wait+0x1f8/0x510 [ 1038.923917][ C1] kernel_wait+0xab/0x170 [ 1038.930407][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 1038.938460][ C1] process_scheduled_works+0xae1/0x17b0 [ 1038.946208][ C1] worker_thread+0x8a0/0xda0 [ 1038.952980][ C1] kthread+0x711/0x8a0 [ 1038.959217][ C1] ret_from_fork+0x4bc/0x870 [ 1038.965964][ C1] ret_from_fork_asm+0x1a/0x30 [ 1038.972885][ C1] SOFTIRQ-ON-R at: [ 1038.977113][ C1] lock_acquire+0x120/0x360 [ 1038.983773][ C1] _raw_read_lock+0x36/0x50 [ 1038.990439][ C1] __do_wait+0xde/0x740 [ 1038.996758][ C1] do_wait+0x1f8/0x510 [ 1039.002987][ C1] kernel_wait+0xab/0x170 [ 1039.009498][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 1039.017557][ C1] process_scheduled_works+0xae1/0x17b0 [ 1039.025275][ C1] worker_thread+0x8a0/0xda0 [ 1039.032039][ C1] kthread+0x711/0x8a0 [ 1039.038298][ C1] ret_from_fork+0x4bc/0x870 [ 1039.045055][ C1] ret_from_fork_asm+0x1a/0x30 [ 1039.052019][ C1] INITIAL USE at: [ 1039.056200][ C1] lock_acquire+0x120/0x360 [ 1039.062776][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 1039.069795][ C1] copy_process+0x224f/0x3c00 [ 1039.076559][ C1] kernel_clone+0x21e/0x840 [ 1039.083147][ C1] user_mode_thread+0xdd/0x140 [ 1039.090422][ C1] rest_init+0x23/0x300 [ 1039.096657][ C1] start_kernel+0x3ae/0x410 [ 1039.103234][ C1] x86_64_start_reservations+0x24/0x30 [ 1039.110771][ C1] x86_64_start_kernel+0x143/0x1c0 [ 1039.117962][ C1] common_startup_64+0x13e/0x147 [ 1039.124994][ C1] INITIAL READ USE at: [ 1039.129569][ C1] lock_acquire+0x120/0x360 [ 1039.136586][ C1] _raw_read_lock+0x36/0x50 [ 1039.143608][ C1] __do_wait+0xde/0x740 [ 1039.150310][ C1] do_wait+0x1f8/0x510 [ 1039.156907][ C1] kernel_wait+0xab/0x170 [ 1039.163747][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 1039.172157][ C1] process_scheduled_works+0xae1/0x17b0 [ 1039.180240][ C1] worker_thread+0x8a0/0xda0 [ 1039.187468][ C1] kthread+0x711/0x8a0 [ 1039.194113][ C1] ret_from_fork+0x4bc/0x870 [ 1039.201213][ C1] ret_from_fork_asm+0x1a/0x30 [ 1039.208515][ C1] } [ 1039.211262][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 1039.219234][ C1] ... acquired at: [ 1039.223283][ C1] lock_acquire+0x120/0x360 [ 1039.227949][ C1] _raw_read_lock+0x36/0x50 [ 1039.232613][ C1] send_sigio+0x101/0x370 [ 1039.237103][ C1] dnotify_handle_event+0x169/0x440 [ 1039.242466][ C1] fsnotify+0x1671/0x1a80 [ 1039.246958][ C1] __fsnotify_parent+0x3fe/0x540 [ 1039.252071][ C1] notify_change+0xc55/0xf40 [ 1039.256827][ C1] do_truncate+0x1a4/0x220 [ 1039.261404][ C1] vfs_truncate+0x493/0x520 [ 1039.266074][ C1] do_sys_truncate+0xdb/0x190 [ 1039.270938][ C1] __x64_sys_truncate+0x5b/0x70 [ 1039.275954][ C1] do_syscall_64+0xfa/0xfa0 [ 1039.280629][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.286683][ C1] [ 1039.289017][ C1] -> (&f_owner->lock){....}-{3:3} { [ 1039.294385][ C1] INITIAL USE at: [ 1039.298442][ C1] lock_acquire+0x120/0x360 [ 1039.304865][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 1039.311704][ C1] __f_setown+0x67/0x370 [ 1039.317849][ C1] generic_setlease+0xd60/0x1240 [ 1039.324696][ C1] fcntl_setlease+0x3a2/0x4c0 [ 1039.331274][ C1] do_fcntl+0x6a9/0x1910 [ 1039.337415][ C1] __se_sys_fcntl+0xc8/0x150 [ 1039.343931][ C1] do_syscall_64+0xfa/0xfa0 [ 1039.350346][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.358151][ C1] INITIAL READ USE at: [ 1039.362644][ C1] lock_acquire+0x120/0x360 [ 1039.369571][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 1039.377199][ C1] send_sigio+0x38/0x370 [ 1039.383786][ C1] kill_fasync+0x24d/0x4d0 [ 1039.390541][ C1] lease_break_callback+0x26/0x30 [ 1039.397930][ C1] __break_lease+0x6a5/0x1620 [ 1039.404944][ C1] do_dentry_open+0x8b7/0x13f0 [ 1039.412099][ C1] vfs_open+0x3b/0x340 [ 1039.418505][ C1] path_openat+0x2ee5/0x3830 [ 1039.425428][ C1] do_filp_open+0x1fa/0x410 [ 1039.432302][ C1] do_sys_openat2+0x121/0x1c0 [ 1039.439433][ C1] __x64_sys_open+0x11e/0x150 [ 1039.446450][ C1] do_syscall_64+0xfa/0xfa0 [ 1039.453293][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.461524][ C1] } [ 1039.464188][ C1] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1039.473201][ C1] ... acquired at: [ 1039.477174][ C1] lock_acquire+0x120/0x360 [ 1039.481835][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 1039.487282][ C1] send_sigio+0x38/0x370 [ 1039.491686][ C1] kill_fasync+0x24d/0x4d0 [ 1039.496295][ C1] lease_break_callback+0x26/0x30 [ 1039.501508][ C1] __break_lease+0x6a5/0x1620 [ 1039.506349][ C1] do_dentry_open+0x8b7/0x13f0 [ 1039.511279][ C1] vfs_open+0x3b/0x340 [ 1039.515516][ C1] path_openat+0x2ee5/0x3830 [ 1039.520296][ C1] do_filp_open+0x1fa/0x410 [ 1039.524964][ C1] do_sys_openat2+0x121/0x1c0 [ 1039.529805][ C1] __x64_sys_open+0x11e/0x150 [ 1039.534655][ C1] do_syscall_64+0xfa/0xfa0 [ 1039.539325][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.545385][ C1] [ 1039.547705][ C1] -> (&new->fa_lock){....}-{3:3} { [ 1039.552941][ C1] INITIAL USE at: [ 1039.556914][ C1] lock_acquire+0x120/0x360 [ 1039.563173][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 1039.569930][ C1] fasync_remove_entry+0xf1/0x1c0 [ 1039.576688][ C1] lease_modify+0x1ca/0x3c0 [ 1039.582979][ C1] generic_setlease+0x9ae/0x1240 [ 1039.589682][ C1] fcntl_setlease+0xc6/0x4c0 [ 1039.596013][ C1] do_fcntl+0x6a9/0x1910 [ 1039.602006][ C1] __se_sys_fcntl+0xc8/0x150 [ 1039.608335][ C1] do_syscall_64+0xfa/0xfa0 [ 1039.614600][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.622219][ C1] INITIAL READ USE at: [ 1039.626628][ C1] lock_acquire+0x120/0x360 [ 1039.633306][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 1039.640761][ C1] kill_fasync+0x199/0x4d0 [ 1039.647364][ C1] lease_break_callback+0x26/0x30 [ 1039.654581][ C1] __break_lease+0x6a5/0x1620 [ 1039.661456][ C1] do_dentry_open+0x8b7/0x13f0 [ 1039.668476][ C1] vfs_open+0x3b/0x340 [ 1039.674712][ C1] path_openat+0x2ee5/0x3830 [ 1039.681474][ C1] do_filp_open+0x1fa/0x410 [ 1039.688142][ C1] do_sys_openat2+0x121/0x1c0 [ 1039.695000][ C1] __x64_sys_open+0x11e/0x150 [ 1039.701847][ C1] do_syscall_64+0xfa/0xfa0 [ 1039.708550][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.716614][ C1] } [ 1039.719199][ C1] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1039.727986][ C1] ... acquired at: [ 1039.731881][ C1] lock_acquire+0x120/0x360 [ 1039.736549][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 1039.742002][ C1] kill_fasync+0x199/0x4d0 [ 1039.746587][ C1] mousedev_notify_readers+0x6f1/0xc00 [ 1039.752228][ C1] mousedev_event+0x602/0x1320 [ 1039.757153][ C1] input_handle_events_default+0xd4/0x1a0 [ 1039.763031][ C1] input_pass_values+0x288/0x890 [ 1039.768127][ C1] input_event_dispose+0x330/0x6b0 [ 1039.773401][ C1] input_inject_event+0x1dd/0x340 [ 1039.778600][ C1] evdev_write+0x2fc/0x480 [ 1039.783188][ C1] vfs_write+0x27e/0xb30 [ 1039.787597][ C1] ksys_write+0x145/0x250 [ 1039.792086][ C1] do_syscall_64+0xfa/0xfa0 [ 1039.796751][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.802799][ C1] [ 1039.805104][ C1] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1039.810653][ C1] IN-SOFTIRQ-W at: [ 1039.814632][ C1] lock_acquire+0x120/0x360 [ 1039.820774][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1039.827612][ C1] input_event+0x76/0xe0 [ 1039.833493][ C1] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 1039.840766][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 1039.847945][ C1] dummy_timer+0x85f/0x44c0 [ 1039.854084][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 1039.860921][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1039.867673][ C1] handle_softirqs+0x286/0x870 [ 1039.874078][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1039.880313][ C1] irq_exit_rcu+0x9/0x30 [ 1039.886190][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1039.893463][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1039.901079][ C1] pv_native_safe_halt+0x13/0x20 [ 1039.907653][ C1] default_idle+0x13/0x20 [ 1039.913624][ C1] default_idle_call+0x73/0xb0 [ 1039.920019][ C1] do_idle+0x1e7/0x510 [ 1039.925765][ C1] cpu_startup_entry+0x44/0x60 [ 1039.932167][ C1] start_secondary+0x101/0x110 [ 1039.938584][ C1] common_startup_64+0x13e/0x147 [ 1039.945180][ C1] INITIAL USE at: [ 1039.949074][ C1] lock_acquire+0x120/0x360 [ 1039.955123][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1039.961915][ C1] input_inject_event+0xa5/0x340 [ 1039.968423][ C1] kbd_led_trigger_activate+0xbc/0x100 [ 1039.975435][ C1] led_trigger_set+0x52d/0x950 [ 1039.981747][ C1] led_trigger_set_default+0x260/0x2a0 [ 1039.988752][ C1] led_classdev_register_ext+0x73d/0x930 [ 1039.995935][ C1] input_leds_connect+0x517/0x790 [ 1040.002504][ C1] input_register_device+0xd00/0x1140 [ 1040.009421][ C1] atkbd_connect+0x72e/0xa00 [ 1040.015561][ C1] serio_driver_probe+0x82/0xd0 [ 1040.021964][ C1] really_probe+0x26d/0x9e0 [ 1040.028035][ C1] __driver_probe_device+0x18c/0x2f0 [ 1040.034870][ C1] driver_probe_device+0x4f/0x430 [ 1040.041444][ C1] __driver_attach+0x452/0x700 [ 1040.047755][ C1] bus_for_each_dev+0x233/0x2b0 [ 1040.054155][ C1] serio_handle_event+0x1f9/0x8d0 [ 1040.060730][ C1] process_scheduled_works+0xae1/0x17b0 [ 1040.067826][ C1] worker_thread+0x8a0/0xda0 [ 1040.073964][ C1] kthread+0x711/0x8a0 [ 1040.079586][ C1] ret_from_fork+0x4bc/0x870 [ 1040.085728][ C1] ret_from_fork_asm+0x1a/0x30 [ 1040.092060][ C1] } [ 1040.094554][ C1] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1040.103565][ C1] ... acquired at: [ 1040.107349][ C1] mark_lock+0x11b/0x190 [ 1040.111754][ C1] __lock_acquire+0x680/0xd20 [ 1040.116601][ C1] lock_acquire+0x120/0x360 [ 1040.121268][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1040.126637][ C1] input_event+0x76/0xe0 [ 1040.131054][ C1] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 1040.136856][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 1040.142402][ C1] dummy_timer+0x85f/0x44c0 [ 1040.147165][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 1040.152522][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1040.157795][ C1] handle_softirqs+0x286/0x870 [ 1040.162717][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1040.167486][ C1] irq_exit_rcu+0x9/0x30 [ 1040.171888][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1040.177683][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1040.183824][ C1] pv_native_safe_halt+0x13/0x20 [ 1040.188946][ C1] default_idle+0x13/0x20 [ 1040.193430][ C1] default_idle_call+0x73/0xb0 [ 1040.198347][ C1] do_idle+0x1e7/0x510 [ 1040.202575][ C1] cpu_startup_entry+0x44/0x60 [ 1040.207502][ C1] start_secondary+0x101/0x110 [ 1040.212430][ C1] common_startup_64+0x13e/0x147 [ 1040.217530][ C1] [ 1040.219833][ C1] [ 1040.219833][ C1] stack backtrace: [ 1040.225706][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1040.225720][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1040.225728][ C1] Call Trace: [ 1040.225734][ C1] [ 1040.225739][ C1] dump_stack_lvl+0x189/0x250 [ 1040.225758][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1040.225772][ C1] ? __pfx__printk+0x10/0x10 [ 1040.225786][ C1] print_irq_inversion_bug+0x1d2/0x1e0 [ 1040.225800][ C1] mark_lock_irq+0x35f/0x390 [ 1040.225814][ C1] mark_lock+0x11b/0x190 [ 1040.225825][ C1] __lock_acquire+0x680/0xd20 [ 1040.225837][ C1] ? input_event+0x76/0xe0 [ 1040.225853][ C1] lock_acquire+0x120/0x360 [ 1040.225863][ C1] ? input_event+0x76/0xe0 [ 1040.225881][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1040.225896][ C1] ? input_event+0x76/0xe0 [ 1040.225911][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1040.225925][ C1] ? atp_calculate_abs+0xeb7/0xff0 [ 1040.225942][ C1] input_event+0x76/0xe0 [ 1040.225958][ C1] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 1040.225977][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 1040.225992][ C1] dummy_timer+0x85f/0x44c0 [ 1040.226015][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1040.226027][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1040.226038][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1040.226048][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 1040.226061][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 1040.226080][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1040.226092][ C1] ? read_tsc+0x9/0x20 [ 1040.226108][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1040.226122][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1040.226136][ C1] handle_softirqs+0x286/0x870 [ 1040.226148][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1040.226161][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1040.226173][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1040.226189][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1040.226201][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1040.226214][ C1] irq_exit_rcu+0x9/0x30 [ 1040.226224][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1040.226239][ C1] [ 1040.226243][ C1] [ 1040.226247][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1040.226268][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1040.226283][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1040.226293][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1040.226304][ C1] RAX: 8f983ab65611b000 RBX: ffffffff81968b47 RCX: 8f983ab65611b000 [ 1040.226313][ C1] RDX: 0000000000000001 RSI: ffffffff8d70db74 RDI: ffffffff8bbf0760 [ 1040.226321][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 1040.226329][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ce370 [ 1040.226337][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 1040.226346][ C1] ? do_idle+0x1e7/0x510 [ 1040.226359][ C1] default_idle+0x13/0x20 [ 1040.226369][ C1] default_idle_call+0x73/0xb0 [ 1040.226379][ C1] do_idle+0x1e7/0x510 [ 1040.226391][ C1] ? __pfx_do_idle+0x10/0x10 [ 1040.226406][ C1] cpu_startup_entry+0x44/0x60 [ 1040.226417][ C1] start_secondary+0x101/0x110 [ 1040.226433][ C1] common_startup_64+0x13e/0x147 [ 1040.226452][ C1] [ 1040.602807][ T8336] usb 3-1: USB disconnect, device number 52 [ 1040.706743][T20034] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1040.714985][T20034] team0: Port device batadv1 added [ 1040.849725][ T8330] usb 1-1: USB disconnect, device number 16 [ 1040.907026][ T8330] appletouch 1-1:0.85: input: appletouch disconnected