last executing test programs: 12.937130278s ago: executing program 4 (id=2145): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x586abc7b6f5091ec, 0xfa00, {0x0, 0x0, 0x13f}}, 0xfdbc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000300)={0x0, 0x0}) 11.98935267s ago: executing program 4 (id=2148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000003000000040001000500000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764beb"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.413346422s ago: executing program 0 (id=2151): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendto$unix(0xffffffffffffffff, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571c4cf752fefd3607634e97c95c0ce2253a7d9322c7e510fe3eae9a6737a04e5253e90a4eb", 0x39, 0x0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 10.392286392s ago: executing program 4 (id=2152): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f733e1a00", 0xb, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10.375555972s ago: executing program 1 (id=2153): ioperm(0x0, 0xf1, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, 0x0, 0x240040c4) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) 9.723285641s ago: executing program 0 (id=2154): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)=ANY=[]) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, 0x0, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) 9.422490555s ago: executing program 2 (id=2155): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0) fanotify_init(0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x191, 0xf0, 0xf00, 0x0, 0x32, 0x1, 0x20, 0x2, {}, {0x0, 0x8fb}, {}, {0x0, 0x0, 0x20}, 0x0, 0x2, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x4}) fanotify_mark(r1, 0xee7b37eb5895331c, 0x1019, r1, &(0x7f0000000180)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x1b89, 0x0, 0xfffffffd}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r5, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x23, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9, 0x3}, 0x10, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xffdffffe}, &(0x7f0000000000), &(0x7f0000000280)) syz_open_dev$vim2m(0x0, 0x7f, 0x2) 8.648294895s ago: executing program 1 (id=2156): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB='6\x00'/12, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b49"], 0x20) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) pipe(&(0x7f0000000880)) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000300000004000100050000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.234341461s ago: executing program 2 (id=2157): symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 8.084749943s ago: executing program 1 (id=2159): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000100)={&(0x7f0000000300), 0x0}) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCX_GETX(r6, 0x4018920a, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0x198, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x1, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 8.084422823s ago: executing program 2 (id=2160): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902", @ANYBLOB="3ff4"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.909282828s ago: executing program 4 (id=2162): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x100847c0, 0x0, 0x1, 0x0, 0x0) writev(r1, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000300)="a4841f4a917ec82638d0bb4955323e14eca1892c911233", 0x17}, {&(0x7f0000000580)="e7502e", 0x3}], 0x3) syz_usb_control_io(r0, 0x0, 0x0) 6.01932443s ago: executing program 3 (id=2163): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x42c, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x418, 0x1, [@m_gact={0x230, 0x110, 0x0, 0x0, {{0x9}, {0x4}, {0x201, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xb8, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x89, 0x6, "88d9d3ab36a0640efed1c86c8343987cdbacd2b0061700f91f1b866af73a932d18cdc7f81d9e91a9e5da9991bd8e1997683afee1a8b9b9c86eeebe71a0cd19510924dec12d4463a58a2b1c90aebc5d2b66c780e3a658282c980bcafd2038edc21272c594cb69bd461bfdeec127e4451c7c4160ab708f14b7e4a4f1eb6cce4a3313b170d05d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x12c, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0xee, 0x6, "a86b05b0d49daafaf0fa484d7f01b1f661fccb6bcccac33aa8aea2c2a6649477457c56f696f530c1e52dea3835bcc1fb5c5c91ee9713e0049a0944cb8f2e44a56d31371c60ae7274d3ca0e588b3ed59036a700f90bb5cd3d23fd5a4d6bff4d060b8af7a383e2ae977dd7eea99ae74f5b9e972f5e769985a211f237a7140aa48f0cc5623c1675d9c0ec302fbefd63fde0c9aba1e26993966e3c84844827597e33b82a89f9d874dadef858ac5d75127ad9af1343e1c6bd4749d05e94c0a9c61a199dc27ce404302f5c711d41ca0b5cb6515ac0b78262fc9d10a29784cd786072fb182bb80f01f9907ed9a6"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x48000}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000090, 0x0, 0xfe2f) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.839721612s ago: executing program 0 (id=2164): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b49"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.763955973s ago: executing program 3 (id=2165): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0xa}}, './file0\x00'}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r5, &(0x7f0000000400)="9bab4759cb857acbf50d9ca48ecb6ed94ec72b2aa6bac720e67298fcf85ff4dc5a0c777dbbf05d7b5d789f75fc07b3ef1fe522881ca6b19227beadf32b6ad92d44b03547401f73ef55abb09f8e0a7684", &(0x7f0000000480)=""/146, 0xf31793a7031d63f8}, 0x20) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x2, 0x289}, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r6, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0) 5.113084872s ago: executing program 0 (id=2166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'vcan0\x00', 0x1}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xac2d5e22244f85e2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r8, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7, r0}) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/129], 0xfc}}, 0x0) 4.850196115s ago: executing program 3 (id=2167): r0 = socket$nl_route(0x10, 0x3, 0x0) ioperm(0x284, 0x7f, 0xe3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x198, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvfrom$packet(r5, 0x0, 0x0, 0x2000, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004000000000008001500000000000500"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 4.106738056s ago: executing program 0 (id=2168): timer_create(0x3, 0x0, &(0x7f0000000300)) setrlimit(0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd, 0x10000000007, 0x3, 0x8}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x0, 0x1}, 0xc) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xe9) syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a00000000000000"], 0xb8}}, 0x0) 3.621406802s ago: executing program 2 (id=2169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000300)={{}, [@netrom, @remote, @rose, @default, @default, @netrom, @default, @bcast]}, &(0x7f0000000100)=0x48) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f00000003c0)=0xcd51, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r3 = gettid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socket$phonet_pipe(0x23, 0x5, 0x2) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000980)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 3.411845885s ago: executing program 1 (id=2170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) 2.785295003s ago: executing program 1 (id=2171): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000004c0)="$eJzsmb+uEkEUxr+Z3QvcG2NiY2GjiTfxmlyW3UUNjQU+gQn4r5PIStAFDGwBJBbExsbH8BUsqCzs7Gy1UBMTCymt18xw2B35J8QQSTy/hNlvZs7MnDnAVwAYhvlv+frl5+dXt0rVUwBncIwsjX+30hhpxH/Kkfj4+l377PPx/H4CQBxvfr4N4G3ZQkT9OP599TE9q5CJvgOJq6TvQcAh/RASd0kHEHhA+omhO4ckwsB51Anrj5th4KrGU42vmuJ8fpORQB1AjvITxnxvMHxaC8OgOy8O4tk5C1Pbij/Uz56UJW4a9VPv1/2XL0aqP6uNa9TPg4RHugiBCukSsnAcJy2Jcf8Ldrq/tcn990Gcy6+LOd2DDFn8AyGMkUMl1Bc6GTk/Gb9fXPVtl4ld2u2VQZ69MPXh6O92zpAJLI1J/VNZ7hXDn2zYiX8UotazQm8wzDdbtUbQCNq+X7zhXnPd635BG9G0XeN/Oe1PR8b+BytiMyKDfi2Kul4fiLpe0venreG4lTedH3qN1P4ncXJ5uof6qOhrZ5efIegl9VOpE2tl8gzDMAzDMAzDMAzDMAzDMFtxEUL/Ckp/VMUr8G/r6F8BAAD///ckZMc=") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0xb, 0x200000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)={0x20002000}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x31) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000180)='./file0\x00', 0xc000, 0x1) 2.763616313s ago: executing program 3 (id=2172): read$FUSE(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000240)=0x6e, 0x100000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc517, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x300, 0x0, 0x54}, 0x9c) 1.746235487s ago: executing program 1 (id=2173): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000240)=0x8b, 0x100000500) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {0x4, 0x6}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x4, @time={0x6, 0x3ff}, {0x6, 0x4}, {}, @result={0xd, 0x4}}], 0x38) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$FICLONE(r3, 0x40049409, r1) ioctl$SG_IO(r6, 0x2285, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f4", 0x27}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r7, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) userfaultfd(0x80001) 1.638773008s ago: executing program 3 (id=2174): gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700", @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000806b3019dee43fce142ce0034c971f0d790eb3053cd6ec288d000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0xfffffffffffffe2b, &(0x7f00000001c0)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c00)='&', 0x1}], 0x1}}], 0x1, 0x0) io_getevents(0x0, 0x1, 0x0, &(0x7f0000000100), &(0x7f0000000300)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x6c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 1.638257208s ago: executing program 4 (id=2175): setrlimit(0x8, &(0x7f00000003c0)={0x4001, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b702000000000000739af0ff00000000b509000000000000c32af05e8fb3c5d223fc0d74cee4ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0fffffaff", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.453936891s ago: executing program 2 (id=2176): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x42c, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x418, 0x1, [@m_gact={0x230, 0x110, 0x0, 0x0, {{0x9}, {0x4}, {0x201, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xb8, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x89, 0x6, "88d9d3ab36a0640efed1c86c8343987cdbacd2b0061700f91f1b866af73a932d18cdc7f81d9e91a9e5da9991bd8e1997683afee1a8b9b9c86eeebe71a0cd19510924dec12d4463a58a2b1c90aebc5d2b66c780e3a658282c980bcafd2038edc21272c594cb69bd461bfdeec127e4451c7c4160ab708f14b7e4a4f1eb6cce4a3313b170d05d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x12c, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0xee, 0x6, "a86b05b0d49daafaf0fa484d7f01b1f661fccb6bcccac33aa8aea2c2a6649477457c56f696f530c1e52dea3835bcc1fb5c5c91ee9713e0049a0944cb8f2e44a56d31371c60ae7274d3ca0e588b3ed59036a700f90bb5cd3d23fd5a4d6bff4d060b8af7a383e2ae977dd7eea99ae74f5b9e972f5e769985a211f237a7140aa48f0cc5623c1675d9c0ec302fbefd63fde0c9aba1e26993966e3c84844827597e33b82a89f9d874dadef858ac5d75127ad9af1343e1c6bd4749d05e94c0a9c61a199dc27ce404302f5c711d41ca0b5cb6515ac0b78262fc9d10a29784cd786072fb182bb80f01f9907ed9a6"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x48000}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000090, 0x0, 0xfe2f) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 142.150688ms ago: executing program 4 (id=2177): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendto$unix(0xffffffffffffffff, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571c4cf752fefd3607634e97c95c0ce2253a7d9322c7e510fe3eae9a6737a04e5253e90a4eb", 0x39, 0x0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 70.285549ms ago: executing program 0 (id=2178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'vcan0\x00', 0x1}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xac2d5e22244f85e2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r8, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7, r0}) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/129], 0xfc}}, 0x0) 33.52357ms ago: executing program 2 (id=2179): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000100)={&(0x7f0000000300), 0x0}) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCX_GETX(r6, 0x4018920a, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0x198, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x1, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 0s ago: executing program 3 (id=2180): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xe4}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): tag 0x0 [ 441.858221][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.586125][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.594551][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.602954][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.610965][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.618906][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.628847][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.643223][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.710774][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.719506][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.729560][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.738871][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.766958][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.793494][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.827714][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.855688][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.876159][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.896942][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 442.905169][ T8321] fuse: Unknown parameter 'group_i00000000000000000000' [ 442.947689][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 443.128149][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 443.881138][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 443.889547][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 443.898352][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 443.917450][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 443.963366][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 444.012977][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 444.061169][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 444.069247][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 444.078039][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 444.086247][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 444.094737][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 444.102879][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 444.126444][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 444.186470][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 444.270885][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 444.294593][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 444.300399][ T8336] device ip6gre1 entered promiscuous mode [ 444.313987][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 444.355757][ T4295] hid-generic 0000:007F:FFFFFFFE.0007: hidraw0: HID v0.00 Device [syz1] on syz1 [ 445.009453][ T8344] loop3: detected capacity change from 0 to 1024 [ 445.077739][ T8348] loop2: detected capacity change from 0 to 16 [ 445.077858][ T8346] binder: BINDER_SET_CONTEXT_MGR already set [ 445.124458][ T8348] erofs: (device loop2): mounted with root inode @ nid 36. [ 445.129972][ T8344] EXT4-fs: Ignoring removed orlov option [ 445.200869][ T8346] binder: 8345:8346 ioctl 4018620d 200000000040 returned -16 [ 445.318578][ T8346] binder: 8345:8346 ioctl c0306201 2000000003c0 returned -14 [ 445.336872][ T8344] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 447.893824][ T26] audit: type=1326 audit(1746149503.298:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.1124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdf1b8e969 code=0x0 [ 447.918736][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 448.202975][ T8372] fuse: Unknown parameter 'group_i00000000000000000000' [ 449.309478][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.328778][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.346968][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.362146][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.370215][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.388299][ T8387] program syz.3.1131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.406490][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.427020][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.463651][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.494286][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.527827][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.548227][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.560796][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.568654][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.578903][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.590926][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.598715][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.613524][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.670840][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.678857][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.701068][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.710915][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.727692][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.741166][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.749348][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.757290][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.765211][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.773111][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.781016][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.788853][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.889833][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 449.916340][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 450.675551][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 450.684233][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 450.692577][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 450.701086][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 450.715596][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 450.732776][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 450.749605][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 450.808996][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 450.821396][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 450.829336][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 450.838138][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 450.853373][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 450.897627][ T4295] hid-generic 0000:007F:FFFFFFFE.0008: hidraw0: HID v0.00 Device [syz1] on syz1 [ 451.166264][ T8401] loop4: detected capacity change from 0 to 1024 [ 451.176082][ T8401] EXT4-fs: Ignoring removed orlov option [ 452.557748][ T8401] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 452.864543][ T8419] fuse: Unknown parameter 'group_i00000000000000000000' [ 453.447862][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 454.536201][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 454.751063][ T4297] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 454.952392][ T4297] usb 4-1: Using ep0 maxpacket: 16 [ 455.007200][ T4297] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 455.034337][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 455.059956][ T4297] usb 4-1: Product: syz [ 455.070444][ T4297] usb 4-1: Manufacturer: syz [ 455.082834][ T4297] usb 4-1: SerialNumber: syz [ 455.089357][ T4297] usb 4-1: config 0 descriptor?? [ 455.305562][ T4297] usb 4-1: USB disconnect, device number 14 [ 455.735455][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.743260][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.751028][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.758762][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.773048][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.786624][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.794894][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 455.812775][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.821364][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.829194][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.842208][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.850160][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.861124][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.869288][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.877458][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.889969][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.901562][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.909672][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.923166][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.937256][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.945667][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.962442][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.979491][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 455.987320][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 455.994353][ T7] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 456.008502][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.016408][ T7] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 456.025439][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.033252][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 456.045422][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.053466][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 456.063322][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.071271][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 456.081026][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.089863][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.098541][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.107105][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.115169][ T7] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 456.124276][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.132615][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.140994][ T7] usb 1-1: Product: syz [ 456.145709][ T7] usb 1-1: Manufacturer: syz [ 456.150350][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.158440][ T7] usb 1-1: SerialNumber: syz [ 456.163277][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.172281][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.180657][ T7] usb 1-1: config 0 descriptor?? [ 456.186528][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.187991][ T7] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 456.204450][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.213473][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.221542][ T7] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 456.230211][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.238359][ T7] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 456.246256][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.260858][ T7] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 456.269550][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.280337][ T7] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 456.288375][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.297807][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 456.306296][ T7] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 456.314983][ T7] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 456.324312][ T7] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 456.332148][ T4367] hid-generic 0000:007F:FFFFFFFE.0009: hidraw0: HID v0.00 Device [syz1] on syz1 [ 456.351618][ T7] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 456.366113][ T7] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 456.380890][ T7] keyspan 1-1:0.0: unsupported endpoint type 0 [ 456.408002][ T7] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 456.428003][ T4546] udevd[4546]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.440682][ T7] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 456.476657][ T7] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 456.493928][ T7] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 456.512804][ T7] usb 1-1: USB disconnect, device number 11 [ 456.545192][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 456.556587][ T8459] fuse: Unknown parameter 'group_i00000000000000000000' [ 456.568757][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 456.581916][ T7] keyspan 1-1:0.0: device disconnected [ 456.803035][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 456.929616][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 457.555247][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'. [ 458.698050][ T8503] fuse: Unknown parameter 'group_i00000000000000000000' [ 458.752724][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 458.802351][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 458.815016][ T8513] program syz.4.1166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.860935][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 458.894208][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 458.902408][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 458.928470][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 458.953874][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 458.977641][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 458.998718][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.023877][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.044203][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.062019][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.075989][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.098716][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.122680][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.148743][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.204438][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.213956][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.226813][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.265989][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.304708][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.338927][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.362393][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.398322][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.431464][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.467580][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.487010][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.495400][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.504661][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.513153][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.521711][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.543327][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.565601][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.576722][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.587533][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.635711][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.697409][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.736035][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.844859][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.920818][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 459.980531][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 460.048203][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 460.100823][ T41] hid-generic 0000:007F:FFFFFFFE.000A: unknown main item tag 0x0 [ 460.184342][ T41] hid-generic 0000:007F:FFFFFFFE.000A: hidraw0: HID v0.00 Device [syz1] on syz1 [ 460.350989][ T8399] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 460.540949][ T8399] usb 2-1: Using ep0 maxpacket: 16 [ 460.608674][ T8399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.636989][ T8399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.691116][ T8399] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 460.839256][ T8399] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 461.000940][ T8399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.997576][ T8399] usb 2-1: config 0 descriptor?? [ 462.078180][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'. [ 462.660801][ T41] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 462.869089][ T41] usb 5-1: config 0 has no interfaces? [ 462.939811][ T41] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 462.969278][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.014010][ T41] usb 5-1: Product: syz [ 463.042897][ T41] usb 5-1: Manufacturer: syz [ 463.068278][ T41] usb 5-1: SerialNumber: syz [ 463.103610][ T41] usb 5-1: config 0 descriptor?? [ 463.781277][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 463.795980][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 463.823075][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 463.845608][ T8584] program syz.0.1183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 463.865189][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 463.899404][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 463.920182][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 463.932039][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 463.939949][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 463.954477][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 463.965310][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 464.060886][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 464.069913][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 464.078326][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 464.088105][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 464.096642][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 464.105783][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 464.167277][ T8590] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1185'. [ 464.176490][ T8590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1185'. [ 464.185533][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 464.194909][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 464.887116][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 464.908540][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 464.922114][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 464.972052][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.007263][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.028679][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.054318][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.084670][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.146647][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.208811][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.254697][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.294631][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.337778][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.368369][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.408975][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.429754][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.449430][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.486518][ T8399] usbhid 2-1:0.0: can't add hid device: -71 [ 465.494087][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.505560][ T8399] usbhid: probe of 2-1:0.0 failed with error -71 [ 465.559411][ T8399] usb 2-1: USB disconnect, device number 12 [ 465.571189][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.648258][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.665653][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 465.696687][ T8609] binder: BINDER_SET_CONTEXT_MGR already set [ 465.720619][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.721389][ T8609] binder: 8608:8609 ioctl 4018620d 200000000040 returned -16 [ 465.768595][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.809581][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.842811][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.883438][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.918071][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.949068][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 465.964463][ T8613] loop1: detected capacity change from 0 to 16 [ 465.982712][ T4292] hid-generic 0000:007F:FFFFFFFE.000B: hidraw0: HID v0.00 Device [syz1] on syz1 [ 465.998925][ T8613] erofs: (device loop1): mounted with root inode @ nid 36. [ 466.434609][ T4250] usb 5-1: USB disconnect, device number 14 [ 467.160736][ T8633] program syz.1.1196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.984644][ T8643] binder: 8642:8643 ioctl c0306201 2000000003c0 returned -14 [ 468.510771][ T5513] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 468.570818][ T4250] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 468.701367][ T4292] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 468.720916][ T5513] usb 2-1: Using ep0 maxpacket: 32 [ 468.727824][ T5513] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 468.765608][ T5513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.777152][ T4250] usb 1-1: config 0 has no interfaces? [ 468.799222][ T4250] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 468.827843][ T5513] usb 2-1: config 0 descriptor?? [ 468.834071][ T4250] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.885201][ T5513] as10x_usb: device has been detected [ 468.893662][ T4250] usb 1-1: Product: syz [ 468.904860][ T4292] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.916712][ T4250] usb 1-1: Manufacturer: syz [ 468.922949][ T5513] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 468.930210][ T4250] usb 1-1: SerialNumber: syz [ 468.946838][ T4250] usb 1-1: config 0 descriptor?? [ 468.951978][ T4292] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 468.976238][ T5513] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 469.011825][ T5513] as10x_usb: error during firmware upload part1 [ 469.029243][ T5513] Registered device nBox DVB-T Dongle [ 469.037793][ T4292] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 469.064846][ T5513] usb 2-1: USB disconnect, device number 13 [ 469.097883][ T5513] Unregistered device nBox DVB-T Dongle [ 469.117440][ T5513] as10x_usb: device has been disconnected [ 469.134938][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.185534][ T4292] usb 5-1: config 0 descriptor?? [ 471.011916][ T8680] binder: 8679:8680 ioctl c0306201 2000000003c0 returned -14 [ 471.274428][ T8686] loop2: detected capacity change from 0 to 16 [ 471.312966][ T8686] erofs: (device loop2): mounted with root inode @ nid 36. [ 472.946826][ T5372] usb 1-1: USB disconnect, device number 12 [ 473.694048][ T8690] usb 5-1: USB disconnect, device number 15 [ 473.970999][ T5372] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 474.285464][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.304426][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.317687][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.332098][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.342062][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.349795][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.357930][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.365880][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.382457][ T5372] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 474.399948][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.408002][ T5372] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 474.430414][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.438698][ T5372] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 474.447990][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.456150][ T5372] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 474.467741][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.475805][ T5372] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 474.487467][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.495491][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.503870][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.512358][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.520443][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.530135][ T5372] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 474.539572][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.547605][ T5372] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 474.556826][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.564848][ T5372] usb 1-1: Product: syz [ 474.569183][ T5372] usb 1-1: Manufacturer: syz [ 474.574031][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.583922][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.592949][ T5372] cdc_wdm 1-1:1.0: skipping garbage [ 474.598218][ T5372] cdc_wdm 1-1:1.0: skipping garbage [ 474.604307][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.615683][ T5372] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 474.622040][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.629974][ T5372] cdc_wdm 1-1:1.0: Unknown control protocol [ 474.636689][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.650788][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.658771][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.668691][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.678805][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.686797][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.694888][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.702913][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.711241][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.719109][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.729350][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.737846][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.746522][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.754659][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.763663][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: unknown main item tag 0x0 [ 474.773591][ T4294] hid-generic 0000:0080:FFFFFFFE.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 475.243667][ T8729] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1226'. [ 475.253074][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 475.262115][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 475.271296][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 476.154818][ T4297] usb 1-1: USB disconnect, device number 13 [ 476.600778][ T4298] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 477.588511][ T4298] usb 5-1: config 0 has no interfaces? [ 477.698071][ T4298] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 477.717800][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.768654][ T4298] usb 5-1: Product: syz [ 477.772981][ T4298] usb 5-1: Manufacturer: syz [ 477.822029][ T4298] usb 5-1: SerialNumber: syz [ 477.859827][ T4298] usb 5-1: config 0 descriptor?? [ 478.163216][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 478.191052][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 478.386407][ T7] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 478.400679][ T7] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 478.445832][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 478.477080][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 478.519322][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 478.566558][ T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 478.619302][ T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 478.670913][ T7] usb 1-1: Product: syz [ 478.675098][ T7] usb 1-1: Manufacturer: syz [ 478.709682][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 478.734073][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 478.764700][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 478.798287][ T7] cdc_wdm 1-1:1.0: Unknown control protocol [ 480.839130][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 480.845759][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 480.852087][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 480.858677][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 480.864957][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 480.871538][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 480.878167][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 480.884771][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 480.891055][ T4297] usb 1-1: USB disconnect, device number 14 [ 480.897281][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 480.903866][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 480.909930][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 481.078300][ T125] usb 5-1: USB disconnect, device number 16 [ 481.901026][ T8827] netlink: 'syz.3.1258': attribute type 13 has an invalid length. [ 481.928704][ T8827] gretap0: refused to change device tx_queue_len [ 482.095825][ T8827] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 482.765509][ T4367] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 482.948204][ T8840] loop2: detected capacity change from 0 to 16 [ 482.982570][ T8840] erofs: (device loop2): mounted with root inode @ nid 36. [ 483.078148][ T4367] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 483.176286][ T4367] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 483.213396][ T4367] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 483.228033][ T4367] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 483.240567][ T4367] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 483.941589][ T4367] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 483.955618][ T4367] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 483.970845][ T4367] usb 5-1: Product: syz [ 483.975126][ T4367] usb 5-1: Manufacturer: syz [ 483.985735][ T4367] cdc_wdm 5-1:1.0: skipping garbage [ 484.040672][ T4367] cdc_wdm 5-1:1.0: skipping garbage [ 484.069887][ T4367] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 484.102132][ T4367] cdc_wdm 5-1:1.0: Unknown control protocol [ 484.410877][ T4367] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 484.603636][ T4367] usb 2-1: Using ep0 maxpacket: 16 [ 484.610320][ T4367] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.654887][ T4367] usb 2-1: config 0 interface 0 has no altsetting 0 [ 484.676987][ T4367] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 484.738146][ T4367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.780994][ T4367] usb 2-1: config 0 descriptor?? [ 485.423892][ T4367] usb 2-1: USB disconnect, device number 14 [ 485.542983][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 485.549680][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 485.555948][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 485.562528][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 485.569923][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 485.576534][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 485.582960][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 485.589581][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 485.607069][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 485.613686][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 485.628724][ T7] usb 5-1: USB disconnect, device number 17 [ 486.520273][ T8875] binder: 8874:8875 ioctl c0306201 2000000003c0 returned -14 [ 486.560639][ T8875] binder_alloc: 8874: binder_alloc_buf, no vma [ 486.812915][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 486.850767][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 486.880812][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 486.888668][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 486.948313][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 486.990811][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.034299][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.067259][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.103539][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.111675][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.119573][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.128397][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.136530][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.144759][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.153733][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.161951][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.172556][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.182669][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.191125][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.200154][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.208393][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.218554][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.228894][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.238762][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.248801][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.259836][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.269767][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.282796][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.290844][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.299227][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.307283][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.317327][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.327575][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.336410][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.344430][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.358923][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.369071][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.370786][ T4367] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 487.380537][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.398499][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.407686][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.418901][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.427866][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.437436][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 487.447619][ T5513] hid-generic 0000:007F:FFFFFFFE.000E: hidraw0: HID v0.00 Device [syz1] on syz1 [ 487.601051][ T4367] usb 1-1: Using ep0 maxpacket: 16 [ 487.617398][ T4367] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 487.629396][ T4367] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 487.639148][ T4367] usb 1-1: Product: syz [ 487.643661][ T4367] usb 1-1: Manufacturer: syz [ 487.648360][ T4367] usb 1-1: SerialNumber: syz [ 489.081872][ T4367] usb 1-1: config 0 descriptor?? [ 489.295160][ T4367] usb 1-1: USB disconnect, device number 15 [ 489.300030][ T8921] binder: 8920:8921 ioctl c0306201 2000000003c0 returned -14 [ 489.442667][ T8926] netlink: 'syz.2.1285': attribute type 12 has an invalid length. [ 489.504998][ T8928] loop4: detected capacity change from 0 to 16 [ 489.547148][ T8928] erofs: (device loop4): mounted with root inode @ nid 36. [ 491.000989][ T4297] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 491.197503][ T4297] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 491.261409][ T4297] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 491.321492][ T4297] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 491.337544][ T4297] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 491.349129][ T4297] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 491.366700][ T4297] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 492.245575][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 492.371569][ T4297] usb 2-1: Product: syz [ 492.375790][ T4297] usb 2-1: Manufacturer: syz [ 492.397467][ T4297] cdc_wdm 2-1:1.0: skipping garbage [ 492.407656][ T4297] cdc_wdm 2-1:1.0: skipping garbage [ 492.415756][ T4297] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 492.422513][ T4297] cdc_wdm 2-1:1.0: Unknown control protocol [ 493.326903][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.365413][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.388030][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.408319][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.436468][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.444804][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.453513][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.461756][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.471341][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.479997][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.488285][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.497123][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.505412][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.570797][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.597880][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.623371][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.651056][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.658859][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.667729][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.704903][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.710811][ T4297] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 493.718499][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.729093][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.740920][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.749308][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.757875][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.767094][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.779064][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.794162][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.812545][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.826837][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.836904][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.849094][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.859477][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.871339][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.879236][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.889312][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.897333][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.905234][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.913146][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.921093][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.929007][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.936874][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.945977][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 493.950811][ T4297] usb 1-1: Using ep0 maxpacket: 32 [ 493.967062][ T4297] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 493.981032][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.994550][ T8399] hid-generic 0000:007F:FFFFFFFE.000F: hidraw0: HID v0.00 Device [syz1] on syz1 [ 493.996088][ T4297] usb 1-1: config 0 descriptor?? [ 494.017042][ T4297] as10x_usb: device has been detected [ 494.023939][ T4297] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 494.045910][ T4297] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 494.059786][ T4297] as10x_usb: error during firmware upload part1 [ 494.093459][ T4297] Registered device nBox DVB-T Dongle [ 494.223974][ T26] audit: type=1326 audit(1746149549.628:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.2.1300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff939f8e969 code=0x0 [ 494.232467][ T8399] usb 1-1: USB disconnect, device number 16 [ 494.270006][ T8399] Unregistered device nBox DVB-T Dongle [ 494.273990][ T8399] as10x_usb: device has been disconnected [ 494.476854][ C0] wdm_int_callback: 2 callbacks suppressed [ 494.476873][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 494.479226][ T8690] usb 2-1: USB disconnect, device number 15 [ 494.482722][ C0] wdm_int_callback: 2 callbacks suppressed [ 494.482739][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 494.482757][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 494.848837][ T9001] xt_l2tp: invalid flags combination: 8 [ 496.681662][ T9018] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 497.040263][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 497.049804][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 497.064388][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 497.073651][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 497.085443][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 497.095533][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 497.109312][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 497.118341][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 497.141523][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 497.157834][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 497.176842][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 497.203092][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 497.217308][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 497.258734][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 497.284271][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.017384][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.042559][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.050657][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.074817][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.112665][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.163077][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.206065][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.226541][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.262469][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.279401][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.296764][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.325464][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.333563][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.341635][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.351319][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.359476][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.373501][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.381698][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.390124][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.405146][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.426396][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.443582][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.465959][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.474115][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.482351][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.498126][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.506393][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.514583][ T7] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 498.531874][ T7] hid-generic 0000:007F:FFFFFFFE.0010: hidraw0: HID v0.00 Device [syz1] on syz1 [ 498.789145][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 498.964031][ T9077] xt_l2tp: invalid flags combination: 8 [ 499.252567][ T9087] loop4: detected capacity change from 0 to 16 [ 499.287280][ T9087] erofs: (device loop4): mounted with root inode @ nid 36. [ 501.113351][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.120280][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.088802][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 502.487836][ T9125] program syz.0.1342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.499828][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.516993][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.531087][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.540227][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.548289][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.556511][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.564828][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.573362][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.582094][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.590609][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.606118][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.614774][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.628525][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.638004][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.651245][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.666313][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.675377][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.687105][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.696934][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.713322][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.723318][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.731975][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.739858][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.748224][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.756235][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.767277][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.780537][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.797127][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.805509][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.822183][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.830280][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.842770][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.851043][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.859062][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.867814][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.882025][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.898697][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.915255][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.930759][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.947445][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.965364][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.984031][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 502.992137][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 503.010858][ T125] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 503.032329][ T8399] hid-generic 0000:007F:FFFFFFFE.0011: hidraw0: HID v0.00 Device [syz1] on syz1 [ 503.315935][ T125] usb 2-1: config 0 has no interfaces? [ 503.325370][ T125] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 503.477067][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.521520][ T125] usb 2-1: Product: syz [ 503.526994][ T125] usb 2-1: Manufacturer: syz [ 503.533796][ T125] usb 2-1: SerialNumber: syz [ 503.550901][ T125] usb 2-1: config 0 descriptor?? [ 505.490206][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1354'. [ 505.636721][ T9176] xt_l2tp: invalid flags combination: 8 [ 505.944492][ T9183] xt_l2tp: invalid flags combination: 8 [ 507.887992][ T7] usb 2-1: USB disconnect, device number 16 [ 507.943285][ T9195] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1358'. [ 510.544649][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1365'. [ 511.378568][ T9231] device dummy0 entered promiscuous mode [ 511.384435][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 511.406504][ T9231] device macsec1 entered promiscuous mode [ 511.423347][ T9231] device dummy0 left promiscuous mode [ 511.598868][ T7] usb 2-1: config 0 has no interfaces? [ 511.617882][ T7] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 511.675090][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.725609][ T7] usb 2-1: Product: syz [ 511.729872][ T7] usb 2-1: Manufacturer: syz [ 511.750777][ T4367] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 511.773165][ T7] usb 2-1: SerialNumber: syz [ 511.780963][ T125] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 511.789976][ T7] usb 2-1: config 0 descriptor?? [ 512.002052][ T4367] usb 5-1: config 0 has no interfaces? [ 512.187026][ T125] usb 4-1: Using ep0 maxpacket: 8 [ 512.809646][ T4367] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 512.821393][ T125] usb 4-1: unable to get BOS descriptor or descriptor too short [ 512.860381][ T4367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.874467][ T4367] usb 5-1: Product: syz [ 512.878737][ T4367] usb 5-1: Manufacturer: syz [ 512.910654][ T125] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.924365][ T125] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 512.978106][ T4367] usb 5-1: SerialNumber: syz [ 512.984639][ T125] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 513.012958][ T4367] usb 5-1: config 0 descriptor?? [ 513.024280][ T125] usb 4-1: New USB device strings: Mfr=34, Product=2, SerialNumber=3 [ 513.080546][ T125] usb 4-1: Product: syz [ 513.100541][ T125] usb 4-1: Manufacturer: syz [ 513.108187][ T125] usb 4-1: SerialNumber: syz [ 513.125328][ T125] usb 4-1: config 0 descriptor?? [ 513.334085][ T125] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 513.410506][ T4243] udevd[4243]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.482641][ T125] usb 4-1: USB disconnect, device number 15 [ 513.533844][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 514.419705][ T125] usb 2-1: USB disconnect, device number 17 [ 516.970872][ T9289] xt_l2tp: invalid flags combination: 8 [ 517.083306][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'. [ 517.381166][ T125] usb 5-1: USB disconnect, device number 18 [ 518.907584][ T9319] loop4: detected capacity change from 0 to 16 [ 519.071086][ T9319] erofs: (device loop4): mounted with root inode @ nid 36. [ 520.751016][ T9340] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1400'. [ 521.677943][ T9346] program syz.2.1402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.722570][ T9329] tipc: Started in network mode [ 521.761166][ T9329] tipc: Node identity 7f000001, cluster identity 4711 [ 521.825730][ T9329] tipc: Enabled bearer , priority 10 [ 521.940987][ T4367] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 522.071959][ T5513] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 522.159107][ T4367] usb 5-1: config 0 has no interfaces? [ 522.182779][ T4367] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 522.198921][ T4367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.223244][ T4367] usb 5-1: Product: syz [ 522.237697][ T4367] usb 5-1: Manufacturer: syz [ 522.256834][ T4367] usb 5-1: SerialNumber: syz [ 522.270887][ T5513] usb 2-1: Using ep0 maxpacket: 32 [ 522.277762][ T5513] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 522.291450][ T4367] usb 5-1: config 0 descriptor?? [ 522.348482][ T5513] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 522.448824][ T5513] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 522.512392][ T5513] usb 2-1: config 1 has no interface number 0 [ 522.535601][ T5513] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.549931][ T5513] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 522.562145][ T5513] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 522.575556][ T5513] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 522.584793][ T5513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.626280][ T9351] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 522.657123][ T5513] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 522.867022][ T9351] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 522.884837][ T5513] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 522.955662][ T7] tipc: Node number set to 2130706433 [ 523.127699][ T7] usb 2-1: USB disconnect, device number 18 [ 523.148548][ T7] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 525.745271][ T5372] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 525.980856][ T5372] usb 1-1: Using ep0 maxpacket: 16 [ 525.993315][ T5372] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.018002][ T5372] usb 1-1: config 0 interface 0 has no altsetting 0 [ 526.025916][ T5372] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 526.039819][ T5372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.065956][ T5372] usb 1-1: config 0 descriptor?? [ 526.074933][ T9389] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1416'. [ 526.111854][ T7] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 526.140989][ T8399] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 526.167787][ T4367] usb 5-1: USB disconnect, device number 19 [ 526.340784][ T8399] usb 4-1: Using ep0 maxpacket: 16 [ 526.358144][ T8399] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 526.385160][ T8399] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 526.405571][ T7] usb 2-1: config 0 has no interfaces? [ 526.424990][ T7] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 526.444856][ T8399] usb 4-1: Product: syz [ 526.450111][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.472952][ T8399] usb 4-1: Manufacturer: syz [ 526.477629][ T8399] usb 4-1: SerialNumber: syz [ 526.483887][ T7] usb 2-1: Product: syz [ 526.488945][ T8399] usb 4-1: config 0 descriptor?? [ 526.498559][ T7] usb 2-1: Manufacturer: syz [ 526.506960][ T7] usb 2-1: SerialNumber: syz [ 526.554817][ T7] usb 2-1: config 0 descriptor?? [ 526.715138][ T5372] usb 1-1: USB disconnect, device number 17 [ 526.722965][ T7] usb 4-1: USB disconnect, device number 16 [ 531.402760][ T9413] syz.3.1425 sent an empty control message without MSG_MORE. [ 531.714599][ T9431] fuse: Bad value for 'fd' [ 532.307054][ T5372] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 532.930765][ T5372] usb 5-1: Using ep0 maxpacket: 32 [ 532.943514][ T5372] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 532.969369][ T7] usb 2-1: USB disconnect, device number 19 [ 532.985437][ T5372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.040409][ T5372] usb 5-1: config 0 descriptor?? [ 533.061540][ T5372] as10x_usb: device has been detected [ 533.067291][ T5372] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 533.280462][ T5372] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 534.153152][ T5372] as10x_usb: error during firmware upload part1 [ 534.165795][ T5372] Registered device nBox DVB-T Dongle [ 534.185428][ T5372] usb 5-1: USB disconnect, device number 20 [ 534.202134][ T9447] xt_l2tp: invalid flags combination: 8 [ 534.226698][ T5372] Unregistered device nBox DVB-T Dongle [ 534.239010][ T5372] as10x_usb: device has been disconnected [ 534.342079][ T9457] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1437'. [ 535.639835][ T9465] binder: BINDER_SET_CONTEXT_MGR already set [ 535.676455][ T9465] binder: 9464:9465 ioctl 4018620d 200000000040 returned -16 [ 535.961669][ T9473] fuse: Bad value for 'fd' [ 537.635849][ T26] audit: type=1326 audit(1746149592.878:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9479 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a538e969 code=0x7ffc0000 [ 538.817095][ T9490] loop3: detected capacity change from 0 to 16 [ 538.824297][ T26] audit: type=1326 audit(1746149592.878:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9479 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a538e969 code=0x7ffc0000 [ 538.847253][ T9490] erofs: (device loop3): mounted with root inode @ nid 36. [ 538.984924][ T26] audit: type=1326 audit(1746149592.878:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9479 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89a538e969 code=0x7ffc0000 [ 539.826394][ T9494] mmap: syz.0.1448 (9494) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 539.950914][ T26] audit: type=1326 audit(1746149592.878:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9479 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a538e969 code=0x7ffc0000 [ 540.235308][ T26] audit: type=1326 audit(1746149592.878:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9479 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a538e969 code=0x7ffc0000 [ 540.257761][ T26] audit: type=1326 audit(1746149592.888:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9479 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f89a538e969 code=0x7ffc0000 [ 540.281047][ T26] audit: type=1326 audit(1746149592.888:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9479 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a538e969 code=0x7ffc0000 [ 542.070620][ T26] audit: type=1326 audit(1746149592.888:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9479 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a538e969 code=0x7ffc0000 [ 542.524478][ T26] audit: type=1326 audit(1746149592.898:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9479 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f89a538e969 code=0x7ffc0000 [ 542.547104][ T26] audit: type=1326 audit(1746149592.898:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9479 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a538e969 code=0x7ffc0000 [ 542.737412][ T9510] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 544.382822][ T7] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 544.620876][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 544.635713][ T7] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 545.541090][ T7] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 545.563016][ T7] usb 5-1: Product: syz [ 545.574630][ T7] usb 5-1: Manufacturer: syz [ 545.579330][ T7] usb 5-1: SerialNumber: syz [ 545.656409][ T7] usb 5-1: config 0 descriptor?? [ 545.907431][ T7] usb 5-1: USB disconnect, device number 21 [ 548.028366][ T4257] Bluetooth: Unknown LE signaling command 0x5b [ 548.034869][ T4257] Bluetooth: Wrong link type (-22) [ 548.581871][ T4297] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 548.794195][ T4297] usb 2-1: config 0 has an invalid interface number: 91 but max is 0 [ 548.809344][ T4297] usb 2-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 549.053307][ T4297] usb 2-1: config 0 has no interface number 0 [ 549.171291][ T4297] usb 2-1: config 0 interface 91 altsetting 3 has an invalid endpoint descriptor of length 5, skipping [ 549.477547][ T4297] usb 2-1: config 0 interface 91 has no altsetting 0 [ 549.504937][ T4297] usb 2-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41 [ 549.598865][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.653689][ T4297] usb 2-1: config 0 descriptor?? [ 549.865632][ T4297] usb 2-1: string descriptor 0 read error: -71 [ 549.950307][ T4297] usb 2-1: USB disconnect, device number 20 [ 550.595646][ T4295] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 551.888418][ T4295] usb 1-1: config 0 has no interfaces? [ 551.934993][ T4295] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 552.150463][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.194629][ T4295] usb 1-1: Product: syz [ 552.230340][ T4295] usb 1-1: Manufacturer: syz [ 552.244610][ T4295] usb 1-1: SerialNumber: syz [ 552.255991][ T4295] usb 1-1: config 0 descriptor?? [ 552.750984][ T9618] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1485'. [ 553.404101][ T9626] sd 0:0:1:0: device reset [ 555.966927][ T4295] usb 1-1: USB disconnect, device number 18 [ 556.409378][ T9665] fuse: Bad value for 'fd' [ 557.613706][ T9694] fuse: Bad value for 'fd' [ 557.786200][ T9699] loop0: detected capacity change from 0 to 16 [ 557.943274][ T9699] erofs: (device loop0): mounted with root inode @ nid 36. [ 559.110078][ T9714] loop0: detected capacity change from 0 to 16 [ 559.148691][ T9714] erofs: (device loop0): mounted with root inode @ nid 36. [ 561.066145][ T9741] xt_l2tp: invalid flags combination: 8 [ 561.102861][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 561.102873][ T26] audit: type=1326 audit(1746149616.508:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9744 comm="syz.2.1523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff939f8e969 code=0x0 [ 561.395131][ T9750] loop4: detected capacity change from 0 to 16 [ 561.427042][ T9750] erofs: (device loop4): mounted with root inode @ nid 36. [ 561.659379][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1526'. [ 562.554283][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.560736][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.562408][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1539'. [ 566.877327][ T9815] device syz_tun entered promiscuous mode [ 566.981172][ T9815] device macsec1 entered promiscuous mode [ 567.132836][ T9815] device syz_tun left promiscuous mode [ 567.543689][ T9814] delete_channel: no stack [ 567.666680][ T9827] loop4: detected capacity change from 0 to 16 [ 567.690927][ T9827] erofs: (device loop4): mounted with root inode @ nid 36. [ 567.879812][ T26] audit: type=1326 audit(1746149623.268:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9829 comm="syz.1.1548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8c718e969 code=0x0 [ 567.927976][ T9833] program syz.0.1549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.089955][ T9863] device bond1 entered promiscuous mode [ 571.097137][ T9863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.863444][ T9893] syz.4.1567 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 575.308194][ T9900] program syz.3.1571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.330807][ T8399] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 575.530929][ T8399] usb 3-1: Using ep0 maxpacket: 32 [ 575.537830][ T8399] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 575.555574][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1572'. [ 576.387644][ T8399] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 576.397452][ T8399] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 576.407232][ T8399] usb 3-1: config 1 has no interface number 0 [ 576.413567][ T8399] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.425129][ T8399] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 576.436764][ T8399] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 576.465182][ T8399] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 576.474559][ T8399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.492366][ T9898] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 576.502581][ T8399] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 576.860494][ T9898] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 576.886391][ T8399] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 577.022510][ T9914] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1575'. [ 577.116219][ T8399] usb 3-1: USB disconnect, device number 13 [ 577.126039][ T8399] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 577.258420][ T9920] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 578.919709][ T26] audit: type=1326 audit(1746149634.318:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.4.1586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdf1b8e969 code=0x0 [ 580.078640][ T9959] binder: 9958:9959 ioctl 4018620d 0 returned -22 [ 580.093911][ T9959] binder: 9958:9959 ioctl c0306201 2000000003c0 returned -14 [ 583.640912][ T8690] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 583.946524][ T26] audit: type=1326 audit(1746149639.348:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10020 comm="syz.4.1612" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdf1b8e969 code=0x0 [ 583.970072][ T8690] usb 1-1: config 0 has an invalid interface number: 91 but max is 0 [ 584.040489][ T8690] usb 1-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 584.056665][ T8690] usb 1-1: config 0 has no interface number 0 [ 584.063311][ T8690] usb 1-1: config 0 interface 91 altsetting 3 has an invalid endpoint descriptor of length 5, skipping [ 584.080819][ T8690] usb 1-1: config 0 interface 91 has no altsetting 0 [ 584.088109][ T8690] usb 1-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41 [ 584.097530][ T8690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.131914][ T4295] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 584.172919][ T8690] usb 1-1: config 0 descriptor?? [ 584.622415][ T4295] usb 3-1: config 0 has no interfaces? [ 584.638412][ T8690] usb 1-1: string descriptor 0 read error: -71 [ 584.656351][ T4295] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 584.657143][ T8690] usb 1-1: USB disconnect, device number 19 [ 584.757018][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.822678][ T4295] usb 3-1: Product: syz [ 584.845523][ T4295] usb 3-1: Manufacturer: syz [ 584.865794][ T4295] usb 3-1: SerialNumber: syz [ 584.923821][ T4295] usb 3-1: config 0 descriptor?? [ 585.621991][T10035] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1616'. [ 588.847013][ T14] usb 3-1: USB disconnect, device number 14 [ 589.366981][ T26] audit: type=1326 audit(1746149644.768:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10075 comm="syz.2.1631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff939f8e969 code=0x0 [ 590.840375][ T26] audit: type=1326 audit(1746149646.238:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.0.1639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f089c98e969 code=0x0 [ 590.890848][T10102] fuse: Unknown parameter '0x0000000000000003' [ 593.396506][T10132] device veth1_macvtap left promiscuous mode [ 593.402656][T10132] device macsec0 entered promiscuous mode [ 593.669030][T10139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1650'. [ 594.155590][T10142] loop1: detected capacity change from 0 to 16 [ 594.181859][T10142] erofs: (device loop1): mounted with root inode @ nid 36. [ 594.237862][T10143] xt_l2tp: invalid flags combination: 8 [ 596.050830][ T4297] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 596.524925][ T4297] usb 2-1: config 0 has no interfaces? [ 596.548924][ T4297] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 596.585724][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.598601][ T4297] usb 2-1: Product: syz [ 596.607112][ T4297] usb 2-1: Manufacturer: syz [ 596.613460][ T4297] usb 2-1: SerialNumber: syz [ 596.637075][ T4297] usb 2-1: config 0 descriptor?? [ 597.289925][ T26] audit: type=1326 audit(1746149652.688:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.3.1665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89a538e969 code=0x0 [ 601.238889][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'. [ 602.213622][ T26] audit: type=1326 audit(1746149657.618:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.3.1676" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89a538e969 code=0x0 [ 602.609778][T10235] xt_l2tp: invalid flags combination: 8 [ 603.057150][ T4297] usb 2-1: USB disconnect, device number 21 [ 605.870813][ T4297] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 606.044996][ T4294] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 606.871113][ T4297] usb 2-1: Using ep0 maxpacket: 16 [ 606.916796][ T4297] usb 2-1: device descriptor read/all, error -71 [ 606.927919][ T4294] usb 5-1: config 0 has no interfaces? [ 607.011564][ T4294] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 607.106536][ T4294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.191137][ T4294] usb 5-1: Product: syz [ 607.195343][ T4294] usb 5-1: Manufacturer: syz [ 607.302650][ T4294] usb 5-1: SerialNumber: syz [ 607.356849][ T4294] usb 5-1: config 0 descriptor?? [ 607.613664][T10288] xt_l2tp: invalid flags combination: 8 [ 607.770872][ T4294] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 607.871639][ T26] audit: type=1326 audit(1746149663.278:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.1.1692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8c718e969 code=0x0 [ 608.077425][ T4294] usb 1-1: config 0 has no interfaces? [ 608.321530][ T4294] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 608.346821][ T4294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.395279][ T4294] usb 1-1: Product: syz [ 608.414151][ T4294] usb 1-1: Manufacturer: syz [ 608.433558][ T4294] usb 1-1: SerialNumber: syz [ 608.452806][ T4294] usb 1-1: config 0 descriptor?? [ 609.397060][ T4297] usb 5-1: USB disconnect, device number 22 [ 609.893114][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'. [ 609.923786][ T4297] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 610.038795][T10313] xt_l2tp: invalid flags combination: 8 [ 610.110962][ T4297] usb 4-1: Using ep0 maxpacket: 16 [ 610.126669][ T4297] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 610.143374][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 610.153508][ T4297] usb 4-1: Product: syz [ 610.157860][ T4297] usb 4-1: Manufacturer: syz [ 610.165096][ T4297] usb 4-1: SerialNumber: syz [ 610.179434][ T4297] usb 4-1: config 0 descriptor?? [ 610.396292][ T4297] usb 4-1: USB disconnect, device number 17 [ 612.414731][T10324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1703'. [ 612.772967][ T8690] usb 1-1: USB disconnect, device number 20 [ 613.516417][T10337] xt_l2tp: invalid flags combination: 8 [ 613.787974][T10342] loop2: detected capacity change from 0 to 16 [ 613.834193][T10342] erofs: (device loop2): mounted with root inode @ nid 36. [ 615.024225][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1713'. [ 615.373487][ T26] audit: type=1326 audit(1746149670.778:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.4.1714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdf1b8e969 code=0x0 [ 615.613383][T10363] loop1: detected capacity change from 0 to 16 [ 615.701149][T10363] erofs: (device loop1): mounted with root inode @ nid 36. [ 615.842025][ T5372] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 616.081094][ T5372] usb 3-1: Using ep0 maxpacket: 16 [ 616.140261][ T5372] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 616.396251][ T5372] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 616.581603][ T5372] usb 3-1: Product: syz [ 616.590141][ T5372] usb 3-1: Manufacturer: syz [ 616.599227][ T5372] usb 3-1: SerialNumber: syz [ 616.613174][ T5372] usb 3-1: config 0 descriptor?? [ 616.827908][ T5372] usb 3-1: USB disconnect, device number 15 [ 616.860796][ T4298] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 617.052773][ T4298] usb 1-1: config 0 has no interfaces? [ 617.066848][ T4298] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 617.112904][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.163450][ T4298] usb 1-1: Product: syz [ 617.192419][ T4298] usb 1-1: Manufacturer: syz [ 617.220994][ T4298] usb 1-1: SerialNumber: syz [ 617.249270][ T4298] usb 1-1: config 0 descriptor?? [ 617.918518][T10384] overlayfs: failed to clone upperpath [ 621.433455][ T4298] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 621.453974][ T4293] usb 1-1: USB disconnect, device number 21 [ 621.672205][ T4298] usb 5-1: config 0 has no interfaces? [ 621.709942][ T4298] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 624.651471][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.657904][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.705220][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.715010][ T26] audit: type=1326 audit(1746149680.118:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.1.1736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8c718e969 code=0x0 [ 624.745802][ T4298] usb 5-1: Product: syz [ 624.756753][ T4298] usb 5-1: Manufacturer: syz [ 624.765595][ T4298] usb 5-1: SerialNumber: syz [ 624.776593][ T4298] usb 5-1: config 0 descriptor?? [ 627.255497][ T4298] usb 5-1: can't set config #0, error -71 [ 627.283699][ T4298] usb 5-1: USB disconnect, device number 23 [ 627.370748][ T4367] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 627.474428][T10473] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1754'. [ 627.570909][ T4367] usb 2-1: Using ep0 maxpacket: 16 [ 627.579174][ T4367] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 627.597951][ T4367] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 627.610593][ T4367] usb 2-1: Product: syz [ 627.616719][ T4367] usb 2-1: Manufacturer: syz [ 627.770180][ T4367] usb 2-1: SerialNumber: syz [ 628.465834][ T41] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 628.549290][ T4367] usb 2-1: config 0 descriptor?? [ 628.639495][T10479] xt_l2tp: invalid flags combination: 8 [ 628.762622][ T41] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 630.265410][ T41] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 630.552438][ T4257] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 630.561193][ T4257] Bluetooth: hci0: Injecting HCI hardware error event [ 630.569200][ T4257] Bluetooth: hci0: hardware error 0x00 [ 630.593617][ T41] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 630.761644][ T41] usb 1-1: config 0 interface 0 has no altsetting 0 [ 630.779375][ T5372] usb 2-1: USB disconnect, device number 24 [ 630.790371][ T41] usb 1-1: unable to read config index 1 descriptor/start: -71 [ 630.875044][ T41] usb 1-1: can't read configurations, error -71 [ 632.940819][ T4293] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 633.017687][T10523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1765'. [ 634.018047][ T4293] usb 2-1: config 0 has no interfaces? [ 634.030306][ T4293] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 634.070780][ T4257] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 634.083976][ T4293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.241567][ T4293] usb 2-1: Product: syz [ 634.246206][ T4293] usb 2-1: Manufacturer: syz [ 634.251147][ T4293] usb 2-1: SerialNumber: syz [ 634.257888][ T4293] usb 2-1: config 0 descriptor?? [ 635.150840][ T4293] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 635.197926][T10540] xt_l2tp: invalid flags combination: 8 [ 635.360853][ T4293] usb 5-1: Using ep0 maxpacket: 16 [ 635.375617][ T4293] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 635.411858][ T4293] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 635.445800][ T4293] usb 5-1: Product: syz [ 635.465846][ T4293] usb 5-1: Manufacturer: syz [ 635.474230][ T4293] usb 5-1: SerialNumber: syz [ 635.484257][ T4293] usb 5-1: config 0 descriptor?? [ 635.558426][T10544] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1773'. [ 635.695942][ T4293] usb 5-1: USB disconnect, device number 24 [ 639.596977][ T5372] usb 2-1: USB disconnect, device number 25 [ 643.455517][T10621] loop4: detected capacity change from 0 to 16 [ 643.490546][T10621] erofs: (device loop4): mounted with root inode @ nid 36. [ 644.408423][T10630] fuse: Bad value for 'fd' [ 645.671902][ T4257] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 645.681258][ T4257] Bluetooth: hci3: Injecting HCI hardware error event [ 645.690974][T10488] Bluetooth: hci3: hardware error 0x00 [ 648.850794][ T41] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 648.950911][T10488] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 649.043330][ T41] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 649.060337][ T41] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 649.066033][T10694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1813'. [ 649.071426][ T41] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 649.091691][ T41] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 649.116079][ T41] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 649.161812][ T41] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 649.179508][ T41] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 649.191852][ T41] usb 5-1: Product: syz [ 649.196212][ T41] usb 5-1: Manufacturer: syz [ 649.233541][ T41] cdc_wdm 5-1:1.0: skipping garbage [ 649.238853][ T41] cdc_wdm 5-1:1.0: skipping garbage [ 649.248136][ T41] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 649.448397][ T41] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 649.672074][ T41] usb 1-1: config 0 has an invalid interface number: 91 but max is 0 [ 649.717582][ T41] usb 1-1: config 0 has no interface number 0 [ 649.730747][ T41] usb 1-1: config 0 interface 91 has no altsetting 0 [ 649.737925][ T41] usb 1-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41 [ 649.758052][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.771379][ T41] usb 1-1: config 0 descriptor?? [ 651.279439][ T125] usb 5-1: USB disconnect, device number 25 [ 652.579560][ T41] usb 1-1: string descriptor 0 read error: -71 [ 652.593321][ T41] usb 1-1: Found UVC 0.00 device (174f:5212) [ 652.669740][ T41] usb 1-1: No valid video chain found. [ 652.729806][ T41] usb 1-1: USB disconnect, device number 24 [ 656.191989][T10742] xt_l2tp: invalid flags combination: 8 [ 658.663074][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 658.701061][ T41] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 658.701648][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 658.942314][ T41] usb 3-1: config 0 has an invalid interface number: 91 but max is 0 [ 658.952664][ T41] usb 3-1: config 0 has no interface number 0 [ 658.959158][ T41] usb 3-1: config 0 interface 91 has no altsetting 0 [ 658.966591][ T41] usb 3-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41 [ 658.975733][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.005422][ T41] usb 3-1: config 0 descriptor?? [ 659.274350][ T41] usb 3-1: string descriptor 0 read error: -71 [ 659.284100][ T41] usb 3-1: Found UVC 0.00 device (174f:5212) [ 659.291693][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.302878][ T41] usb 3-1: No valid video chain found. [ 659.305794][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.318528][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.328298][ T41] usb 3-1: USB disconnect, device number 16 [ 659.334442][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.334466][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.355722][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.366866][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.381223][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.389797][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.401699][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.409694][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.432720][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.466396][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.490329][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.507781][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.521229][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.547349][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.556975][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.568099][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.577200][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.589363][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.602378][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.615902][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.623948][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.770906][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.853069][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 659.887370][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.062821][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.280817][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.407429][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.526465][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.569300][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.599790][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.630232][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.658176][T10789] fuse: Bad value for 'user_id' [ 660.666811][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.708541][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.743478][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.747280][T10791] loop4: detected capacity change from 0 to 16 [ 660.768150][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.780179][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.790208][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.790466][T10791] erofs: (device loop4): mounted with root inode @ nid 36. [ 660.811549][ T14] hid-generic 0000:007F:FFFFFFFE.0013: unknown main item tag 0x0 [ 660.852637][ T14] hid-generic 0000:007F:FFFFFFFE.0013: hidraw0: HID v0.00 Device [syz1] on syz1 [ 662.066043][T10797] netlink: 4260 bytes leftover after parsing attributes in process `syz.4.1839'. [ 664.032262][T10823] loop0: detected capacity change from 0 to 16 [ 664.058105][T10823] erofs: (device loop0): mounted with root inode @ nid 36. [ 664.239853][T10825] loop4: detected capacity change from 0 to 16 [ 664.273610][T10825] erofs: (device loop4): mounted with root inode @ nid 36. [ 664.979313][T10830] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1851'. [ 665.769524][T10840] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1853'. [ 666.240718][ T4294] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 666.501309][ T4294] usb 3-1: config 0 has no interfaces? [ 666.519271][ T4294] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 666.724684][T10865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1862'. [ 668.022187][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.024032][T10865] netlink: 'syz.1.1862': attribute type 10 has an invalid length. [ 668.070806][ T4294] usb 3-1: Product: syz [ 668.078964][ T4294] usb 3-1: Manufacturer: syz [ 668.097106][ T4294] usb 3-1: SerialNumber: syz [ 668.143068][T10874] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1866'. [ 668.168765][ T4294] usb 3-1: config 0 descriptor?? [ 668.180254][T10865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.222420][T10865] team0: Port device bond0 added [ 668.241772][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'. [ 669.926133][T10873] team0 (unregistering): Port device team_slave_0 removed [ 669.962589][T10873] team0 (unregistering): Port device team_slave_1 removed [ 670.004282][T10873] team0 (unregistering): Port device bond0 removed [ 672.606757][T10908] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1878'. [ 672.999344][ T4297] usb 3-1: USB disconnect, device number 17 [ 673.551290][ T4295] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 674.180747][ T4295] usb 1-1: Using ep0 maxpacket: 16 [ 677.048744][ T4295] usb 1-1: unable to read config index 0 descriptor/all [ 677.055921][ T4295] usb 1-1: can't read configurations, error -71 [ 677.089530][ T26] audit: type=1326 audit(1746149732.488:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10943 comm="syz.1.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c718e969 code=0x7ffc0000 [ 677.307439][ T26] audit: type=1326 audit(1746149732.498:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10943 comm="syz.1.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fd8c718e969 code=0x7ffc0000 [ 678.130004][ T26] audit: type=1326 audit(1746149732.498:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10943 comm="syz.1.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c718e969 code=0x7ffc0000 [ 678.152340][ C0] vkms_vblank_simulate: vblank timer overrun [ 678.246624][T10962] fuse: Unknown parameter 'group_id00000000000000000000' [ 678.621044][ T4295] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 679.793522][ T4295] usb 1-1: config 0 has no interfaces? [ 679.943090][ T4295] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 679.971044][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.994197][ T4295] usb 1-1: Product: syz [ 680.009497][ T4295] usb 1-1: Manufacturer: syz [ 680.017382][ T4295] usb 1-1: SerialNumber: syz [ 680.087260][ T4295] usb 1-1: config 0 descriptor?? [ 680.180721][ T4250] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 681.140733][ T4250] usb 2-1: Using ep0 maxpacket: 16 [ 681.149607][ T4250] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 681.204224][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 681.257402][ T4250] usb 2-1: Product: syz [ 681.269559][ T4250] usb 2-1: Manufacturer: syz [ 681.300952][ T4250] usb 2-1: SerialNumber: syz [ 681.318981][ T4250] usb 2-1: config 0 descriptor?? [ 681.333868][T10992] xt_l2tp: invalid flags combination: 8 [ 681.510846][ T8399] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 681.560320][ T4250] usb 2-1: USB disconnect, device number 26 [ 681.730798][ T8399] usb 3-1: Using ep0 maxpacket: 16 [ 681.738856][ T8399] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.780906][ T8399] usb 3-1: config 0 interface 0 has no altsetting 0 [ 681.800743][ T8399] usb 3-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 681.830780][ T8399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.855572][ T8399] usb 3-1: config 0 descriptor?? [ 681.942648][T11005] xt_l2tp: invalid flags combination: 8 [ 681.955788][ T4295] usb 1-1: USB disconnect, device number 26 [ 682.276985][ T8399] usbhid 3-1:0.0: can't add hid device: -71 [ 682.283527][ T8399] usbhid: probe of 3-1:0.0 failed with error -71 [ 683.158970][ T8399] usb 3-1: USB disconnect, device number 18 [ 684.241883][T10818] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 684.520857][T10818] usb 1-1: Using ep0 maxpacket: 32 [ 684.553746][T10818] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 684.595706][T10818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.648454][T10818] usb 1-1: config 0 descriptor?? [ 684.680753][T10818] as10x_usb: device has been detected [ 684.702209][T10818] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 684.743786][T10818] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 684.761974][T10818] as10x_usb: error during firmware upload part1 [ 684.775315][T10818] Registered device nBox DVB-T Dongle [ 684.879386][T10818] usb 1-1: USB disconnect, device number 27 [ 684.927901][T10818] Unregistered device nBox DVB-T Dongle [ 684.929224][T10818] as10x_usb: device has been disconnected [ 685.433363][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.439684][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.300724][ T8399] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 687.490720][ T8399] usb 5-1: Using ep0 maxpacket: 16 [ 687.523057][ T8399] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.625572][ T8399] usb 5-1: config 0 interface 0 has no altsetting 0 [ 688.313874][ T8399] usb 5-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 688.323262][ T8399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.452430][ T8399] usb 5-1: config 0 descriptor?? [ 688.479302][T11066] xt_l2tp: invalid flags combination: 8 [ 688.880120][ T8399] usbhid 5-1:0.0: can't add hid device: -71 [ 689.156482][ T8399] usbhid: probe of 5-1:0.0 failed with error -71 [ 689.403292][ T8399] usb 5-1: USB disconnect, device number 26 [ 689.597016][T11075] xt_l2tp: invalid flags combination: 8 [ 692.990938][ T4250] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 693.300945][ T4250] usb 5-1: Using ep0 maxpacket: 32 [ 693.320390][ T4250] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 693.871376][ T4250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.915191][ T4250] usb 5-1: config 0 descriptor?? [ 693.920988][ T4293] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 693.928899][ T4250] as10x_usb: device has been detected [ 693.935062][ T4250] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 693.976556][ T4250] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 693.994767][ T4250] as10x_usb: error during firmware upload part1 [ 694.002088][ T4250] Registered device nBox DVB-T Dongle [ 694.377483][ T4293] usb 3-1: Using ep0 maxpacket: 16 [ 694.529555][ T4293] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 694.549377][ T4293] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 694.578170][ T4293] usb 3-1: Product: syz [ 694.593077][ T4293] usb 3-1: Manufacturer: syz [ 694.607646][ T4293] usb 3-1: SerialNumber: syz [ 694.660408][ T4293] usb 3-1: config 0 descriptor?? [ 694.678852][ T4295] usb 5-1: USB disconnect, device number 27 [ 695.238896][T11102] as102_open: can't find device for minor 0 [ 695.255140][ T4295] Unregistered device nBox DVB-T Dongle [ 695.294093][ T4295] as10x_usb: device has been disconnected [ 695.321224][ T4293] usb 3-1: USB disconnect, device number 19 [ 697.301013][T11151] overlayfs: failed to clone upperpath [ 697.506533][T11154] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1957'. [ 699.059242][T11161] fuse: Bad value for 'user_id' [ 699.689198][T11168] fuse: Bad value for 'fd' [ 700.331044][ T4297] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 700.890735][ T4297] usb 2-1: Using ep0 maxpacket: 16 [ 700.906629][ T4297] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.025644][T11190] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1970'. [ 701.036861][ T4297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 701.680938][ T4297] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 701.698996][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.721784][ T4297] usb 2-1: config 0 descriptor?? [ 702.166276][ T4297] usbhid 2-1:0.0: can't add hid device: -71 [ 702.179204][ T4297] usbhid: probe of 2-1:0.0 failed with error -71 [ 702.212893][ T4297] usb 2-1: USB disconnect, device number 27 [ 702.220976][T11201] fuse: Bad value for 'user_id' [ 703.308675][T11214] netlink: 4260 bytes leftover after parsing attributes in process `syz.2.1977'. [ 704.429984][T11225] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1981'. [ 704.928740][T11233] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1982'. [ 708.211145][T11257] xt_l2tp: invalid flags combination: 8 [ 710.130829][ T41] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 710.330786][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 710.339745][ T41] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.390849][ T41] usb 2-1: config 0 interface 0 has no altsetting 0 [ 710.412904][ T41] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 710.446366][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.474286][ T41] usb 2-1: config 0 descriptor?? [ 710.480720][ T951] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 710.702323][ T951] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 710.728029][ T951] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 710.767153][ T951] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 710.820912][ T951] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 710.879065][ T951] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 710.901778][ T41] usbhid 2-1:0.0: can't add hid device: -71 [ 710.907719][ T41] usbhid: probe of 2-1:0.0 failed with error -71 [ 710.949089][ T951] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 710.949193][ T41] usb 2-1: USB disconnect, device number 28 [ 710.977038][ T951] usb 5-1: Product: syz [ 710.997583][ T951] usb 5-1: Manufacturer: syz [ 711.034986][ T951] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 712.293277][T11296] binder: 11295:11296 ioctl c0306201 2000000003c0 returned -14 [ 712.433564][T11301] xt_l2tp: invalid flags combination: 8 [ 713.251346][ T8690] usb 5-1: USB disconnect, device number 28 [ 715.158544][ T26] audit: type=1326 audit(1746149770.558:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11323 comm="syz.2.2010" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff939f8e969 code=0x0 [ 715.665308][T11328] fuse: Bad value for 'fd' [ 716.042924][ T4294] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 716.250056][T11339] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2015'. [ 716.300945][ T4294] usb 5-1: Using ep0 maxpacket: 16 [ 716.314205][ T4294] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.325482][ T4294] usb 5-1: config 0 interface 0 has no altsetting 0 [ 716.333389][ T4294] usb 5-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 716.730173][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.758634][ T4294] usb 5-1: config 0 descriptor?? [ 717.279355][ T4294] usbhid 5-1:0.0: can't add hid device: -71 [ 717.298332][ T4294] usbhid: probe of 5-1:0.0 failed with error -71 [ 717.332581][ T4294] usb 5-1: USB disconnect, device number 29 [ 718.218135][T11362] xt_l2tp: invalid flags combination: 8 [ 718.660873][ T4294] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 719.057405][T11371] fuse: Bad value for 'fd' [ 719.138012][ T4294] usb 3-1: config 0 has no interfaces? [ 719.150828][ T4294] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 719.181567][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.086725][ T4294] usb 3-1: Product: syz [ 720.826265][ T4294] usb 3-1: Manufacturer: syz [ 720.914958][ T4294] usb 3-1: SerialNumber: syz [ 721.040644][ T4294] usb 3-1: config 0 descriptor?? [ 721.595514][ T26] audit: type=1326 audit(1746149776.998:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11384 comm="syz.1.2031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8c718e969 code=0x0 [ 722.272225][ T4297] usb 3-1: USB disconnect, device number 20 [ 722.332404][T11397] lo speed is unknown, defaulting to 1000 [ 722.338768][T11397] lo speed is unknown, defaulting to 1000 [ 722.347001][T11397] lo speed is unknown, defaulting to 1000 [ 722.357863][T11397] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 722.372061][T11397] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 722.412461][T11398] fuse: Unknown parameter '0x0000000000000003' [ 723.221442][T11397] lo speed is unknown, defaulting to 1000 [ 723.228727][T11397] lo speed is unknown, defaulting to 1000 [ 723.236792][T11397] lo speed is unknown, defaulting to 1000 [ 723.243132][T11397] lo speed is unknown, defaulting to 1000 [ 723.249412][T11397] lo speed is unknown, defaulting to 1000 [ 724.693077][T11418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2039'. [ 727.380702][ T14] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 728.292036][ T14] usb 1-1: config 0 has no interfaces? [ 728.383529][ T14] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 728.446097][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.576560][ T14] usb 1-1: Product: syz [ 728.581442][ T14] usb 1-1: Manufacturer: syz [ 728.586301][ T14] usb 1-1: SerialNumber: syz [ 728.593263][ T14] usb 1-1: config 0 descriptor?? [ 729.384725][ T26] audit: type=1326 audit(1746149784.788:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.4.2051" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdf1b8e969 code=0x0 [ 729.406534][ C1] vkms_vblank_simulate: vblank timer overrun [ 729.490344][T11461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2053'. [ 731.512393][T11486] overlayfs: missing 'lowerdir' [ 732.317643][T11493] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2066'. [ 733.318717][T11503] binder: 11502:11503 ioctl c0306201 2000000003c0 returned -14 [ 733.398424][ T4250] usb 1-1: USB disconnect, device number 28 [ 733.433686][T11508] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2069'. [ 737.452022][T11533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2078'. [ 737.704940][T11537] overlayfs: missing 'lowerdir' [ 738.544929][T11540] xt_l2tp: invalid flags combination: 8 [ 739.513213][T11551] binder: 11549:11551 ioctl c0306201 2000000003c0 returned -14 [ 739.770689][ T5372] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 740.701479][ T5372] usb 1-1: config 0 has no interfaces? [ 740.710411][ T5372] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 740.797295][ T5372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.859790][ T5372] usb 1-1: Product: syz [ 740.880836][ T5372] usb 1-1: Manufacturer: syz [ 740.890692][ T5372] usb 1-1: SerialNumber: syz [ 741.005158][ T5372] usb 1-1: config 0 descriptor?? [ 741.674757][T11578] loop2: detected capacity change from 0 to 16 [ 742.178911][T11578] erofs: (device loop2): mounted with root inode @ nid 36. [ 742.717879][T11581] overlayfs: missing 'workdir' [ 744.393280][ T14] usb 1-1: USB disconnect, device number 29 [ 744.653762][T11614] fuse: Bad value for 'rootmode' [ 744.661213][T11616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2104'. [ 745.514400][T11629] xt_l2tp: invalid flags combination: 8 [ 746.883171][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.889689][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.710660][ T8690] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 747.975465][ T8690] usb 1-1: config 0 has no interfaces? [ 747.992869][ T8690] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 748.075131][ T8690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.090772][ T8690] usb 1-1: Product: syz [ 748.466188][ T8690] usb 1-1: Manufacturer: syz [ 748.479231][ T8690] usb 1-1: SerialNumber: syz [ 748.539630][ T8690] usb 1-1: config 0 descriptor?? [ 749.975453][T11685] netlink: 'syz.3.2128': attribute type 10 has an invalid length. [ 750.081769][T11685] team0: Port device wlan1 added [ 750.283905][ T14] usb 1-1: USB disconnect, device number 30 [ 750.380779][ T8690] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 750.439561][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.449082][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.457281][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.465464][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.473979][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.482066][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.490036][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.498597][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.506702][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.514769][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.522918][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.531019][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.538969][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.547030][ T8690] usb 2-1: device descriptor read/64, error -71 [ 750.628973][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.640739][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.648638][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.673736][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.704882][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.803898][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.900835][ T8690] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 750.912551][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 750.988698][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.059897][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.101362][ T8690] usb 2-1: device descriptor read/64, error -71 [ 751.138736][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.241472][ T8690] usb usb2-port1: attempt power cycle [ 751.264485][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.273183][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.281540][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.300973][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.308730][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.346332][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.370695][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.398891][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.439319][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.457543][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.477754][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.499678][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.515493][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.525381][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.537266][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.547503][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.571282][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.579361][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.657348][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.700845][ T8690] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 751.728318][ T41] hid-generic 0000:007F:FFFFFFFE.0014: unknown main item tag 0x0 [ 751.752501][ T8690] usb 2-1: device descriptor read/8, error -71 [ 751.795663][ T41] hid-generic 0000:007F:FFFFFFFE.0014: hidraw0: HID v0.00 Device [syz1] on syz1 [ 751.800706][ T4367] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 752.040800][ T8690] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 752.092245][ T8690] usb 2-1: device descriptor read/8, error -71 [ 752.241537][ T8690] usb usb2-port1: unable to enumerate USB device [ 752.571055][ T4367] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 752.611627][ T4367] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 752.814590][ T4367] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 752.887723][ T4367] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 752.928099][ T4367] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 753.092218][ T4367] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 753.108061][ T4367] usb 1-1: Product: syz [ 753.135819][ T4367] usb 1-1: Manufacturer: syz [ 753.157708][ T4367] cdc_wdm 1-1:1.0: skipping garbage [ 753.167255][ T4367] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 753.219360][T11732] loop1: detected capacity change from 0 to 16 [ 753.232165][T11732] erofs: (device loop1): mounted with root inode @ nid 36. [ 754.992502][ T4367] usb 1-1: USB disconnect, device number 31 [ 755.729076][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 755.766932][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 755.787250][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 755.799168][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 756.098663][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 756.218629][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 756.296351][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 756.312879][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 756.326854][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 756.337010][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 756.353528][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 756.364548][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 756.374800][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 756.385478][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 756.397550][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 756.865401][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 756.933229][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 756.997034][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.060810][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.117140][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.180487][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.208444][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.240784][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.279067][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.306353][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.479984][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.488594][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.511137][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.518904][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.527396][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.535473][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.597754][T11777] overlayfs: missing 'lowerdir' [ 757.670839][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.678901][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.687727][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.696456][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.705039][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.713570][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 757.761580][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 758.226931][ T4367] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 758.300030][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 758.308221][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 758.319427][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 758.346319][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 758.355269][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: unknown main item tag 0x0 [ 758.376525][ T4294] hid-generic 0000:007F:FFFFFFFE.0015: hidraw0: HID v0.00 Device [syz1] on syz1 [ 758.476829][T11778] xt_l2tp: invalid flags combination: 8 [ 758.510881][ T4367] usb 3-1: Using ep0 maxpacket: 32 [ 758.648785][ T4367] usb 3-1: config index 0 descriptor too short (expected 62527, got 27) [ 758.684473][ T4367] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.503329][ T4367] usb 3-1: config 0 has no interfaces? [ 759.530517][ T4367] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 759.565933][ T4367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.649966][ T4367] usb 3-1: config 0 descriptor?? [ 760.300690][ T14] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 760.513611][ T14] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 760.587232][ T14] usb 5-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 761.340694][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 761.349875][ T14] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 761.406797][ T14] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 761.426293][ T14] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 761.449115][ T14] usb 5-1: Product: syz [ 761.464357][ T14] usb 5-1: Manufacturer: syz [ 761.808802][ T4294] usb 3-1: USB disconnect, device number 21 [ 761.819256][ T14] cdc_wdm 5-1:1.0: skipping garbage [ 761.824689][ T14] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 762.220847][ T8690] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 762.523145][ T8690] usb 1-1: config 0 has no interfaces? [ 762.557470][ T8690] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 762.609038][ T8690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.617243][ T8690] usb 1-1: Product: syz [ 762.627348][ T8690] usb 1-1: Manufacturer: syz [ 762.632066][ T8690] usb 1-1: SerialNumber: syz [ 762.656246][ T8690] usb 1-1: config 0 descriptor?? [ 762.708704][T11816] loop1: detected capacity change from 0 to 16 [ 762.722707][T11816] erofs: (device loop1): mounted with root inode @ nid 36. [ 762.971780][T11820] overlayfs: missing 'lowerdir' [ 763.795694][ T4293] usb 5-1: USB disconnect, device number 30 [ 765.379097][ T14] usb 1-1: USB disconnect, device number 32 [ 766.975342][T11842] xt_l2tp: invalid flags combination: 8 [ 767.071337][T11851] [ 767.073676][T11851] ====================================================== [ 767.080711][T11851] WARNING: possible circular locking dependency detected [ 767.087741][T11851] 6.1.135-syzkaller #0 Not tainted [ 767.092829][T11851] ------------------------------------------------------ [ 767.099826][T11851] syz.3.2180/11851 is trying to acquire lock: [ 767.105874][T11851] ffff88807f738d00 (team->team_lock_key#3){+.+.}-{3:3}, at: team_del_slave+0x2e/0x1c0 [ 767.115444][T11851] [ 767.115444][T11851] but task is already holding lock: [ 767.122795][T11851] ffff888055c607c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x112/0x130 [ 767.132615][T11851] [ 767.132615][T11851] which lock already depends on the new lock. [ 767.132615][T11851] [ 767.143004][T11851] [ 767.143004][T11851] the existing dependency chain (in reverse order) is: [ 767.152000][T11851] [ 767.152000][T11851] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 767.159727][T11851] __mutex_lock+0x120/0xaf0 [ 767.164752][T11851] ieee80211_open+0x140/0x200 [ 767.169952][T11851] __dev_open+0x2b8/0x420 [ 767.174806][T11851] dev_open+0xa7/0x170 [ 767.179394][T11851] team_add_slave+0xa6a/0x2600 [ 767.184674][T11851] do_setlink+0xdc0/0x3c40 [ 767.189618][T11851] rtnl_newlink+0x17d6/0x1ff0 [ 767.194816][T11851] rtnetlink_rcv_msg+0x79b/0xed0 [ 767.200279][T11851] netlink_rcv_skb+0x1de/0x420 [ 767.205570][T11851] netlink_unicast+0x74c/0x8c0 [ 767.210848][T11851] netlink_sendmsg+0x89e/0xbc0 [ 767.216126][T11851] ____sys_sendmsg+0x59b/0x970 [ 767.221409][T11851] ___sys_sendmsg+0x21c/0x290 [ 767.226603][T11851] __se_sys_sendmsg+0x19e/0x270 [ 767.231976][T11851] do_syscall_64+0x4c/0xa0 [ 767.236921][T11851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.243338][T11851] [ 767.243338][T11851] -> #0 (team->team_lock_key#3){+.+.}-{3:3}: [ 767.251495][T11851] __lock_acquire+0x2cf8/0x7c50 [ 767.256863][T11851] lock_acquire+0x1b4/0x490 [ 767.261883][T11851] __mutex_lock+0x120/0xaf0 [ 767.266897][T11851] team_del_slave+0x2e/0x1c0 [ 767.272006][T11851] team_device_event+0x391/0x9c0 [ 767.277461][T11851] raw_notifier_call_chain+0xcb/0x160 [ 767.283342][T11851] unregister_netdevice_many+0xfdc/0x1840 [ 767.289593][T11851] unregister_netdevice_queue+0x31c/0x360 [ 767.295833][T11851] _cfg80211_unregister_wdev+0x177/0x590 [ 767.301984][T11851] ieee80211_if_remove+0x1bd/0x2c0 [ 767.307617][T11851] ieee80211_del_iface+0x15/0x20 [ 767.313065][T11851] cfg80211_remove_virtual_intf+0x243/0x450 [ 767.319471][T11851] genl_family_rcv_msg_doit+0x22e/0x320 [ 767.325532][T11851] genl_rcv_msg+0x5f2/0x780 [ 767.330551][T11851] netlink_rcv_skb+0x1de/0x420 [ 767.335842][T11851] genl_rcv+0x24/0x40 [ 767.340336][T11851] netlink_unicast+0x74c/0x8c0 [ 767.345620][T11851] netlink_sendmsg+0x89e/0xbc0 [ 767.350903][T11851] ____sys_sendmsg+0x59b/0x970 [ 767.356184][T11851] ___sys_sendmsg+0x21c/0x290 [ 767.361380][T11851] __se_sys_sendmsg+0x19e/0x270 [ 767.366752][T11851] do_syscall_64+0x4c/0xa0 [ 767.371685][T11851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.378094][T11851] [ 767.378094][T11851] other info that might help us debug this: [ 767.378094][T11851] [ 767.388304][T11851] Possible unsafe locking scenario: [ 767.388304][T11851] [ 767.395738][T11851] CPU0 CPU1 [ 767.401088][T11851] ---- ---- [ 767.406438][T11851] lock(&rdev->wiphy.mtx); [ 767.410930][T11851] lock(team->team_lock_key#3); [ 767.418377][T11851] lock(&rdev->wiphy.mtx); [ 767.425386][T11851] lock(team->team_lock_key#3); [ 767.430321][T11851] [ 767.430321][T11851] *** DEADLOCK *** [ 767.430321][T11851] [ 767.438541][T11851] 3 locks held by syz.3.2180/11851: [ 767.443721][T11851] #0: ffffffff8db93570 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 767.451889][T11851] #1: ffffffff8db33868 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5b/0x930 [ 767.461115][T11851] #2: ffff888055c607c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x112/0x130 [ 767.471373][T11851] [ 767.471373][T11851] stack backtrace: [ 767.477260][T11851] CPU: 0 PID: 11851 Comm: syz.3.2180 Not tainted 6.1.135-syzkaller #0 [ 767.485399][T11851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 767.495445][T11851] Call Trace: [ 767.498714][T11851] [ 767.501636][T11851] dump_stack_lvl+0x168/0x22e [ 767.506315][T11851] ? load_image+0x3b0/0x3b0 [ 767.510808][T11851] ? show_regs_print_info+0x12/0x12 [ 767.516002][T11851] ? print_circular_bug+0x12b/0x1a0 [ 767.521197][T11851] check_noncircular+0x274/0x310 [ 767.526130][T11851] ? add_chain_block+0x940/0x940 [ 767.531067][T11851] ? lockdep_lock+0xdc/0x1e0 [ 767.535650][T11851] ? add_chain_block+0x940/0x940 [ 767.540593][T11851] ? _find_first_zero_bit+0xcf/0x100 [ 767.545878][T11851] __lock_acquire+0x2cf8/0x7c50 [ 767.550747][T11851] ? __lock_acquire+0x28b5/0x7c50 [ 767.555807][T11851] ? verify_lock_unused+0x140/0x140 [ 767.561008][T11851] ? verify_lock_unused+0x140/0x140 [ 767.566199][T11851] ? __up_read+0x27c/0x660 [ 767.570613][T11851] lock_acquire+0x1b4/0x490 [ 767.575121][T11851] ? team_del_slave+0x2e/0x1c0 [ 767.579887][T11851] ? __might_sleep+0xd0/0xd0 [ 767.584482][T11851] ? read_lock_is_recursive+0x10/0x10 [ 767.589855][T11851] __mutex_lock+0x120/0xaf0 [ 767.594355][T11851] ? team_del_slave+0x2e/0x1c0 [ 767.599111][T11851] ? __lock_acquire+0x7c50/0x7c50 [ 767.604127][T11851] ? trace_contention_end+0x5f/0x170 [ 767.609422][T11851] ? __mutex_lock+0x19e/0xaf0 [ 767.614108][T11851] ? team_del_slave+0x2e/0x1c0 [ 767.618867][T11851] ? mutex_lock_nested+0x10/0x10 [ 767.623793][T11851] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 767.629416][T11851] ? bond_ipsec_offload_ok+0x410/0x410 [ 767.634874][T11851] ? mutex_unlock+0x10/0x10 [ 767.639368][T11851] ? macsec_notify+0xff/0x640 [ 767.644047][T11851] team_del_slave+0x2e/0x1c0 [ 767.648636][T11851] team_device_event+0x391/0x9c0 [ 767.653601][T11851] ? xsk_notifier+0x20d/0x220 [ 767.658283][T11851] raw_notifier_call_chain+0xcb/0x160 [ 767.663650][T11851] unregister_netdevice_many+0xfdc/0x1840 [ 767.669381][T11851] ? alloc_netdev_mqs+0xf00/0xf00 [ 767.674404][T11851] ? kernfs_remove_by_name_ns+0x113/0x150 [ 767.680124][T11851] ? __lock_acquire+0x7c50/0x7c50 [ 767.685161][T11851] unregister_netdevice_queue+0x31c/0x360 [ 767.690880][T11851] ? list_netdevice+0x6c0/0x6c0 [ 767.695736][T11851] ? kernfs_remove_by_name_ns+0x113/0x150 [ 767.701456][T11851] _cfg80211_unregister_wdev+0x177/0x590 [ 767.707093][T11851] ieee80211_if_remove+0x1bd/0x2c0 [ 767.712226][T11851] ieee80211_del_iface+0x15/0x20 [ 767.717156][T11851] cfg80211_remove_virtual_intf+0x243/0x450 [ 767.723045][T11851] genl_family_rcv_msg_doit+0x22e/0x320 [ 767.728582][T11851] ? end_current_label_crit_section+0x170/0x170 [ 767.734821][T11851] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 767.740722][T11851] ? bpf_lsm_capable+0x5/0x10 [ 767.745397][T11851] ? security_capable+0x85/0xb0 [ 767.750252][T11851] genl_rcv_msg+0x5f2/0x780 [ 767.754762][T11851] ? genl_bind+0x350/0x350 [ 767.759170][T11851] ? nl80211_new_interface+0xff0/0xff0 [ 767.764633][T11851] netlink_rcv_skb+0x1de/0x420 [ 767.769401][T11851] ? genl_bind+0x350/0x350 [ 767.773808][T11851] ? netlink_ack+0x1100/0x1100 [ 767.778573][T11851] ? down_read+0x1a8/0x2d0 [ 767.782985][T11851] genl_rcv+0x24/0x40 [ 767.786961][T11851] netlink_unicast+0x74c/0x8c0 [ 767.791752][T11851] netlink_sendmsg+0x89e/0xbc0 [ 767.796522][T11851] ? netlink_getsockopt+0x540/0x540 [ 767.801720][T11851] ? aa_sock_msg_perm+0x94/0x150 [ 767.806656][T11851] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 767.811965][T11851] ? security_socket_sendmsg+0x7c/0xa0 [ 767.817525][T11851] ? netlink_getsockopt+0x540/0x540 [ 767.822730][T11851] ____sys_sendmsg+0x59b/0x970 [ 767.827501][T11851] ? __sys_sendmsg_sock+0x30/0x30 [ 767.832524][T11851] ? __import_iovec+0x315/0x500 [ 767.837369][T11851] ? import_iovec+0x6f/0xa0 [ 767.841906][T11851] ___sys_sendmsg+0x21c/0x290 [ 767.846590][T11851] ? __sys_sendmsg+0x270/0x270 [ 767.851369][T11851] ? __fdget+0x17c/0x200 [ 767.855612][T11851] __se_sys_sendmsg+0x19e/0x270 [ 767.860468][T11851] ? __se_sys_futex+0x14a/0x440 [ 767.865327][T11851] ? __x64_sys_sendmsg+0x80/0x80 [ 767.870275][T11851] ? lockdep_hardirqs_on+0x94/0x140 [ 767.875493][T11851] do_syscall_64+0x4c/0xa0 [ 767.879912][T11851] ? clear_bhb_loop+0x45/0xa0 [ 767.884586][T11851] ? clear_bhb_loop+0x45/0xa0 [ 767.889260][T11851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.895161][T11851] RIP: 0033:0x7f89a538e969 [ 767.899590][T11851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.919203][T11851] RSP: 002b:00007f89a61c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.927610][T11851] RAX: ffffffffffffffda RBX: 00007f89a55b6240 RCX: 00007f89a538e969 [ 767.935591][T11851] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 767.943570][T11851] RBP: 00007f89a5410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 767.951537][T11851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.959587][T11851] R13: 0000000000000000 R14: 00007f89a55b6240 R15: 00007ffdf1b82f08 [ 767.967570][T11851] [ 767.975793][T11851] team0: Port device wlan1 removed