last executing test programs: 31m59.792231464s ago: executing program 0 (id=324): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x57, 0xc2}}}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) unshare(0x2c020400) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000240)={0x7, {0x3ff, 0x800, 0x5}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0xffe}, 0x2b1}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvmmsg(r3, &(0x7f0000000740), 0x0, 0x40010000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1d0000006800e978000000000400040036b6aa74946a2006a80069c7e3d18cf771e453a95cdde1770fe922b42ddc454cf303f2d002151aa223e0061d569a9581f794b1c102cacb517ddec032ae5b74b2a5f3d5953bf0cd70622448caf0f0b9f8c83b75cd"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 31m56.401606537s ago: executing program 0 (id=329): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 31m53.664932222s ago: executing program 0 (id=334): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x14) personality(0xf) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000040), 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) 31m51.68454547s ago: executing program 0 (id=338): socket$netlink(0x10, 0x3, 0x0) r0 = dup(0xffffffffffffffff) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x8010, r3, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)={0x0, 0xfb, 0x15, 0x3, 0x6, "c2f2cedfbaab41ffb39937944de0e129"}, 0x15, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000003340)=[{0x0}, {&(0x7f00000032c0)=""/98, 0x62}], 0x2}, 0x9}], 0x1, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg(r5, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) 31m49.446796013s ago: executing program 0 (id=343): socket(0x18, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r3 = gettid() ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000002c0)={0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@updpolicy={0xf70, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xc}}, [@algo_aead={0xd63, 0x12, {{'morus640-sse2\x00'}, 0x68b8, 0x200, "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"}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @migrate={0x9c, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, @in=@broadcast, @in6=@remote, 0x3c, 0x1, 0x0, 0x3507, 0xa}, {@in6=@mcast1, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x0, 0x2, 0x0, 0x3505, 0x2, 0x2}]}, @lastused={0xc, 0xf, 0x4}, @etimer_thresh={0x8, 0xc, 0xffff}, @lastused={0xc, 0xf, 0x2}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2b, 0x70bd26, 0x70bd2d, 0x70bd26, 0xa, [0x5, 0xae8, 0x3, 0x1000]}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@rand_addr=0x64010102, 0x0, 0xa}}]}, 0xf70}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000002c68c0a", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf255d00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900f8ffffff7f0000004000a6800a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000800a500010000001000a6800a00060008021100000100000800a50001000000"], 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x48090) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r9, @ANYRESHEX], 0x0) 31m45.856690749s ago: executing program 0 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000500)=0xfffffffc, 0x4) setsockopt$sock_linger(r4, 0x29, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000001c0)=""/4096) syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) sendmsg$nl_route(r0, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) 31m30.619995204s ago: executing program 32 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000500)=0xfffffffc, 0x4) setsockopt$sock_linger(r4, 0x29, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000001c0)=""/4096) syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) sendmsg$nl_route(r0, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) 18.26683881s ago: executing program 4 (id=4474): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r4) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000000)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r7, 0x0, 0x0, 0xd1, 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) 17.068851511s ago: executing program 2 (id=4479): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) syz_open_dev$sg(0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) getdents(0xffffffffffffffff, 0x0, 0x58) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x10, @mcast2, 0x7}, 0x1c) 15.68195135s ago: executing program 1 (id=4480): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce", 0xe) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) io_uring_setup(0x5c48, 0x0) unshare(0x6a040000) 15.113959742s ago: executing program 4 (id=4482): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1913f8b22", 0xc2, 0xfffffffffffffffe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0xec, 0x10, 0x1, 0x20000000, 0x25dfdbff, {{@in6=@private0, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d8, 0x3c}, @in=@empty=0x14, {0x4, 0x0, 0xae993c1, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0xfffffffffffffffe, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6, 0x70}}, 0xec}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 14.928688278s ago: executing program 2 (id=4483): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0) r3 = add_key$user(0x0, &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1913f8b22", 0xc2, 0xfffffffffffffffe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0xec, 0x10, 0x1, 0x20000000, 0x25dfdbff, {{@in6=@private0, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d8, 0x3c}, @in=@empty=0x14, {0x4, 0x0, 0xae993c1, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0xfffffffffffffffe, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6, 0x70}}, 0xec}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 14.127020856s ago: executing program 3 (id=4484): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) syz_open_dev$sg(0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) getdents(0xffffffffffffffff, 0x0, 0x58) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x10, @mcast2, 0x7}, 0x1c) 14.067009316s ago: executing program 1 (id=4485): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) syz_open_dev$sg(0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) getdents(0xffffffffffffffff, 0x0, 0x58) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x10, @mcast2, 0x7}, 0x1c) 12.878421326s ago: executing program 5 (id=4486): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r4) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000000)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r7, &(0x7f0000000080), 0x0, 0xd1, 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) 11.18889396s ago: executing program 3 (id=4487): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce", 0xe) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r5, 0x0, 0x0) unshare(0x6a040000) 11.147820508s ago: executing program 5 (id=4488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce", 0xe) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r5, 0x0, 0x0) unshare(0x6a040000) 11.001479592s ago: executing program 2 (id=4489): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400), 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1913f8b22", 0xc2, 0xfffffffffffffffe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0xec, 0x10, 0x1, 0x20000000, 0x25dfdbff, {{@in6=@private0, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d8, 0x3c}, @in=@empty=0x14, {0x4, 0x0, 0xae993c1, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0xfffffffffffffffe, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6, 0x70}}, 0xec}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 10.666686633s ago: executing program 4 (id=4490): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x41, 0x4481) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x28, r4, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.064998271s ago: executing program 1 (id=4491): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce", 0xe) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) io_uring_setup(0x5c48, 0x0) unshare(0x6a040000) 8.57318728s ago: executing program 3 (id=4492): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce", 0xe) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) io_uring_setup(0x5c48, 0x0) unshare(0x6a040000) 7.590645103s ago: executing program 5 (id=4493): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x28, r5, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.062415883s ago: executing program 1 (id=4494): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400), 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1913f8b22", 0xc2, 0xfffffffffffffffe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0xec, 0x10, 0x1, 0x20000000, 0x25dfdbff, {{@in6=@private0, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d8, 0x3c}, @in=@empty=0x14, {0x4, 0x0, 0xae993c1, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0xfffffffffffffffe, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6, 0x70}}, 0xec}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 6.720567513s ago: executing program 2 (id=4495): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/81, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af60, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x10001}}]}, 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r6, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="42a1ee5b20dddd57a5", 0x9, 0xc001, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d}, 0x24}}, 0x0) 5.432700443s ago: executing program 3 (id=4496): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) syz_open_dev$sg(0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) getdents(0xffffffffffffffff, 0x0, 0x58) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x10, @mcast2, 0x7}, 0x1c) 5.421630335s ago: executing program 4 (id=4497): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x41, 0x4481) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x28, r5, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.73060158s ago: executing program 5 (id=4498): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x41, 0x4481) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.674054398s ago: executing program 5 (id=4499): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) syz_open_dev$sg(0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) getdents(0xffffffffffffffff, 0x0, 0x58) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x10, @mcast2, 0x7}, 0x1c) 3.621089445s ago: executing program 4 (id=4500): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce", 0xe) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r5, 0x0, 0x0) unshare(0x6a040000) 3.523781332s ago: executing program 1 (id=4501): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) syz_open_dev$sg(0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) getdents(0xffffffffffffffff, 0x0, 0x58) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x10, @mcast2, 0x7}, 0x1c) 3.390055681s ago: executing program 2 (id=4502): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce", 0xe) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) io_uring_setup(0x5c48, 0x0) unshare(0x6a040000) 3.361348914s ago: executing program 3 (id=4503): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce", 0xe) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r5, 0x0, 0x0) io_uring_setup(0x5c48, 0x0) 2.44952749s ago: executing program 1 (id=4504): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1913f8b22", 0xc2, 0xfffffffffffffffe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0xec, 0x10, 0x1, 0x20000000, 0x25dfdbff, {{@in6=@private0, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d8, 0x3c}, @in=@empty=0x14, {0x4, 0x0, 0xae993c1, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0xfffffffffffffffe, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6, 0x70}}, 0xec}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 2.3857011s ago: executing program 5 (id=4505): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce", 0xe) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r5, 0x0, 0x0) unshare(0x6a040000) 584.048621ms ago: executing program 2 (id=4506): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1913f8b22", 0xc2, 0xfffffffffffffffe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0xec, 0x10, 0x1, 0x20000000, 0x25dfdbff, {{@in6=@private0, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d8, 0x3c}, @in=@empty=0x14, {0x4, 0x0, 0xae993c1, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0xfffffffffffffffe, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6, 0x70}}, 0xec}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 459.928813ms ago: executing program 4 (id=4507): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) syz_open_dev$sg(0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) getdents(0xffffffffffffffff, 0x0, 0x58) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x10, @mcast2, 0x7}, 0x1c) 0s ago: executing program 3 (id=4508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x41, 0x4481) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x28, r5, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): s an invalid bInterval 0, changing to 7 [ 1223.591536][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.603347][ T5922] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1223.614202][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.628973][ T5922] usb 4-1: config 0 descriptor?? [ 1223.856143][T17421] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2741'. [ 1224.000902][ T5922] usbhid 4-1:0.0: can't add hid device: -71 [ 1224.007123][ T5922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1224.034918][ T5922] usb 4-1: USB disconnect, device number 61 [ 1224.120876][ T5871] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1224.257096][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 1224.450809][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 1224.475149][ T5871] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1224.490560][ T5871] usb 5-1: config 179 has no interface number 0 [ 1224.497669][ T5871] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1224.518404][ T5871] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1224.605515][ T5871] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1224.618013][ T5871] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1224.631227][ T5871] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1224.736769][ T5871] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1224.747011][T17432] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2745'. [ 1224.764585][ T5871] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1224.792230][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.827005][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 1224.867760][ T5871] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input48 [ 1225.082475][ T5218] input input48: unable to receive magic message: -110 [ 1225.252414][ T5218] input input48: unable to receive magic message: -32 [ 1225.476804][ T5218] input input48: unable to receive magic message: -32 [ 1225.600985][ T5218] input input48: unable to receive magic message: -32 [ 1225.683582][ T5218] input input48: unable to receive magic message: -32 [ 1225.762388][ T5218] input input48: unable to receive magic message: -32 [ 1227.374781][ T5871] usb 5-1: USB disconnect, device number 54 [ 1227.381683][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1227.782615][T17465] bond4 (unregistering): Released all slaves [ 1228.404239][T17489] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.2766'. [ 1228.800847][ T5922] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1228.981507][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1228.994285][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1229.048854][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1229.150994][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1229.470598][ T5922] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1229.508505][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.541757][ T5922] usb 4-1: config 0 descriptor?? [ 1229.920674][ T5943] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1230.013054][ T5922] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1230.092662][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.107363][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.142881][ T5943] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1230.163298][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.197657][ T5943] usb 5-1: config 0 descriptor?? [ 1230.242929][ T5871] usb 4-1: USB disconnect, device number 62 [ 1230.780622][ T5922] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1231.027657][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 1231.040814][ T5943] hid-led 0003:27B8:01ED.0020: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 1231.076804][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1231.093056][ T5922] usb 2-1: config 14 has an invalid interface number: 120 but max is 0 [ 1231.131327][ T5922] usb 2-1: config 14 has no interface number 0 [ 1231.147219][ T5943] hid-led 0003:27B8:01ED.0020: ThingM blink(1) v1 initialized [ 1231.163941][ T5922] usb 2-1: config 14 interface 120 has no altsetting 0 [ 1231.189465][ T5922] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=22.cd [ 1231.219899][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.239315][ T5922] usb 2-1: Product: syz [ 1231.244922][ T5871] usb 5-1: USB disconnect, device number 55 [ 1231.257683][ T5922] usb 2-1: Manufacturer: syz [ 1231.281016][ T5922] usb 2-1: SerialNumber: syz [ 1231.387447][T17535] fido_id[17535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1231.535462][ T5922] ftdi_sio 2-1:14.120: FTDI USB Serial Device converter detected [ 1231.559609][ T5922] ftdi_sio ttyUSB0: unknown device type: 0x22cd [ 1231.619332][ T5922] usb 2-1: USB disconnect, device number 68 [ 1231.638097][ T5922] ftdi_sio 2-1:14.120: device disconnected [ 1232.240950][ T5922] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1232.420608][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 1232.437104][ T5922] usb 3-1: config 0 has no interfaces? [ 1232.447127][ T5922] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1232.468731][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.503234][ T5922] usb 3-1: Product: syz [ 1232.525097][ T5922] usb 3-1: Manufacturer: syz [ 1232.537835][ T5922] usb 3-1: SerialNumber: syz [ 1232.569907][ T5922] usb 3-1: config 0 descriptor?? [ 1232.792797][ T5871] usb 3-1: USB disconnect, device number 65 [ 1232.865788][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2799'. [ 1233.120622][T16057] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1233.285399][T16057] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.311390][T16057] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1233.346980][T16057] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1233.370803][T16057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1233.379284][T16057] usb 6-1: SerialNumber: syz [ 1233.633406][T16057] usb 6-1: 0:2 : does not exist [ 1233.657627][T16057] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1233.733854][T16057] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1233.763121][T16057] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1233.785718][T16057] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1233.899112][T16057] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1233.960545][T16057] usb 6-1: USB disconnect, device number 51 [ 1234.086095][T11471] udevd[11471]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1235.191955][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2813'. [ 1238.093782][T17633] vlan0: entered allmulticast mode [ 1238.605602][T17654] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2839'. [ 1238.635969][T17654] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2839'. [ 1238.731282][T17657] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.2829'. [ 1238.836765][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.844572][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.292420][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2832'. [ 1241.037714][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2838'. [ 1241.136930][T17693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2841'. [ 1241.330778][ T5922] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1241.518133][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 1241.578153][ T5922] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1241.601453][ T5922] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1241.641207][ T5922] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1241.690789][ T5943] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1241.836207][ T5922] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1241.850750][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.858839][ T5922] usb 2-1: Product: syz [ 1241.863752][ T5922] usb 2-1: Manufacturer: syz [ 1241.869456][ T5922] usb 2-1: SerialNumber: syz [ 1241.875165][ T5943] usb 6-1: Using ep0 maxpacket: 8 [ 1241.883522][ T5943] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1241.892460][ T5943] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1241.911307][ T5943] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1241.922866][ T5943] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1241.941155][ T5943] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1241.956568][ T5943] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1241.970624][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.218237][ T5943] usb 6-1: GET_CAPABILITIES returned 0 [ 1242.231340][ T5943] usbtmc 6-1:16.0: can't read capabilities [ 1242.352168][ T5922] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1242.390833][T16057] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1242.431421][T17702] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 1242.445104][ T5943] usb 6-1: USB disconnect, device number 52 [ 1242.517504][T17711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1242.563475][T16057] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.587820][T16057] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.609860][T16057] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1242.633300][T16057] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1242.645248][T16057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.676273][T16057] usb 5-1: config 0 descriptor?? [ 1242.858518][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2850'. [ 1243.141685][T16057] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1243.196931][ T5922] usb 2-1: current rate 9315330 is different from the runtime rate 9338507 [ 1243.436222][ T30] audit: type=1326 audit(1758200259.523:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17722 comm="syz.5.2853" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x0 [ 1243.512198][ T5922] usb 2-1: USB disconnect, device number 69 [ 1243.661032][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1244.039288][T17733] trusted_key: encrypted_key: insufficient parameters specified [ 1244.348980][T15617] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1244.543861][ C1] plantronics 0003:047F:FFFF.0021: usb_submit_urb(ctrl) failed: -1 [ 1244.558661][T16057] usb 5-1: USB disconnect, device number 56 [ 1244.608477][T17743] netlink: 99 bytes leftover after parsing attributes in process `syz.1.2857'. [ 1245.188011][T17748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2860'. [ 1245.560661][ T5922] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1245.725078][ T5922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.749316][ T5922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1245.824553][ T5922] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1245.834854][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.895973][ T5922] usb 2-1: Product: syz [ 1245.927607][ T5922] usb 2-1: Manufacturer: syz [ 1245.948235][ T5922] usb 2-1: SerialNumber: syz [ 1246.732659][T17757] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1246.815863][T17773] program syz.5.2869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1247.010385][T16057] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1247.035272][T16057] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1247.534511][T17781] netlink: 'syz.2.2872': attribute type 4 has an invalid length. [ 1247.576619][T17781] netlink: 'syz.2.2872': attribute type 4 has an invalid length. [ 1248.094333][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2873'. [ 1248.178103][ T5922] usb 2-1: 0:2 : does not exist [ 1248.191403][ T5922] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1248.237388][ T5922] usb 2-1: USB disconnect, device number 70 [ 1248.325465][T11471] udevd[11471]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1248.796912][T17797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2876'. [ 1249.766236][T17804] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2878'. [ 1249.776745][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2878'. [ 1250.605441][T16057] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1250.833195][T16057] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1250.884612][T16057] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1250.895412][T16057] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1250.915835][T16057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.943821][T17807] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1250.983169][T16057] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1251.155417][T17820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2883'. [ 1251.219705][T16057] usb 4-1: USB disconnect, device number 63 [ 1251.923069][T17833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'. [ 1253.200767][T17855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2891'. [ 1254.621956][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2898'. [ 1254.647275][T17871] syz_tun: entered promiscuous mode [ 1254.664523][T17871] macvtap1: entered promiscuous mode [ 1254.674931][T17871] macvtap1: entered allmulticast mode [ 1254.691499][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2898'. [ 1254.740668][T17871] syz_tun: entered allmulticast mode [ 1254.766274][T17875] syz_tun: left allmulticast mode [ 1254.780888][T17875] syz_tun: left promiscuous mode [ 1255.370805][ T5922] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1255.538907][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.604522][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.620883][ T5922] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1255.631388][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.682306][ T5922] usb 2-1: config 0 descriptor?? [ 1255.979308][T17901] syzkaller0: entered promiscuous mode [ 1255.986292][T17901] syzkaller0: entered allmulticast mode [ 1256.121477][ T5922] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0 [ 1256.128959][ T5922] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0 [ 1256.146825][ T5922] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0023/input/input50 [ 1256.174687][ T5922] cm6533_jd 0003:0D8C:0022.0023: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1256.527028][ T5922] usb 2-1: USB disconnect, device number 71 [ 1257.096907][T17915] netlink: del zone limit has 4 unknown bytes [ 1257.180864][T17914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2911'. [ 1257.190560][T17914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2911'. [ 1257.510596][ T5922] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1257.760129][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 1257.778975][ T5922] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1257.817161][ T5922] usb 3-1: config 0 has no interface number 0 [ 1258.188558][ T5922] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1258.260562][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.295314][ T5922] usb 3-1: Product: syz [ 1258.303395][ T5922] usb 3-1: Manufacturer: syz [ 1258.321667][ T5922] usb 3-1: SerialNumber: syz [ 1258.361682][ T5922] usb 3-1: config 0 descriptor?? [ 1258.374281][T17928] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2916'. [ 1258.384599][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2916'. [ 1258.614999][ T5922] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1258.628582][ T5922] usb 3-1: No valid video chain found. [ 1258.906269][ T5871] usb 3-1: USB disconnect, device number 66 [ 1259.066654][T17938] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2919'. [ 1259.076774][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2919'. [ 1259.579927][T17948] tipc: Enabled bearer , priority 0 [ 1259.606740][T17948] syzkaller0: entered promiscuous mode [ 1259.652498][T17948] syzkaller0: entered allmulticast mode [ 1259.753206][T17948] tipc: Resetting bearer [ 1259.767388][T17947] tipc: Resetting bearer [ 1259.844044][T17947] tipc: Disabling bearer [ 1260.471702][T17972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1262.799687][T17994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2934'. [ 1262.849588][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2934'. [ 1264.273547][T18010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2938'. [ 1264.283645][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'. [ 1266.250090][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 1266.259326][T18031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2944'. [ 1266.277501][T18030] tipc: Enabled bearer , priority 0 [ 1266.362488][T18031] geneve3: entered promiscuous mode [ 1266.389519][T18031] geneve3: entered allmulticast mode [ 1266.452650][T18030] syzkaller0: entered promiscuous mode [ 1266.458201][T18030] syzkaller0: entered allmulticast mode [ 1266.477628][ T6613] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.488720][ T6613] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.579176][ T6613] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.605129][T18030] tipc: Resetting bearer [ 1266.620374][ T5871] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1266.755167][T18028] tipc: Resetting bearer [ 1266.794025][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.806088][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.921034][ T5871] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1266.931330][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.962653][ T5871] usb 3-1: config 0 descriptor?? [ 1266.976506][T18028] tipc: Disabling bearer [ 1267.091869][T16057] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1267.533357][ T5871] logitech 0003:046D:C294.0024: unknown main item tag 0x0 [ 1267.533426][ T5871] logitech 0003:046D:C294.0024: unknown main item tag 0x7 [ 1267.533454][ T5871] logitech 0003:046D:C294.0024: unknown main item tag 0x0 [ 1267.533481][ T5871] logitech 0003:046D:C294.0024: unknown main item tag 0x0 [ 1267.533507][ T5871] logitech 0003:046D:C294.0024: unknown main item tag 0x0 [ 1267.533565][ T5871] logitech 0003:046D:C294.0024: unknown main item tag 0x0 [ 1267.533592][ T5871] logitech 0003:046D:C294.0024: unknown main item tag 0x0 [ 1267.563466][ T5871] logitech 0003:046D:C294.0024: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.2-1/input0 [ 1267.680104][ T5871] logitech 0003:046D:C294.0024: no inputs found [ 1268.039100][ T5871] usb 3-1: USB disconnect, device number 67 [ 1268.638171][ T5922] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1268.813859][T18053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2950'. [ 1268.877636][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.922157][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'. [ 1268.965373][ T5922] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1268.976495][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.996075][T18057] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2951'. [ 1269.011638][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'. [ 1269.127857][ T5922] usb 5-1: config 0 descriptor?? [ 1269.144913][ T5922] pwc: Askey VC010 type 2 USB webcam detected. [ 1269.604892][ T5922] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1269.621604][ T5922] pwc: recv_control_msg error -32 req 02 val 2700 [ 1269.656270][ T5922] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1269.727680][ T5922] pwc: recv_control_msg error -32 req 04 val 1000 [ 1269.848178][ T5922] pwc: recv_control_msg error -32 req 04 val 1300 [ 1269.879083][ T5922] pwc: recv_control_msg error -32 req 04 val 1400 [ 1269.893510][ T5922] pwc: recv_control_msg error -32 req 02 val 2000 [ 1269.907785][ T5922] pwc: recv_control_msg error -32 req 02 val 2100 [ 1269.938209][ T5922] pwc: recv_control_msg error -32 req 04 val 1500 [ 1269.946511][ T5922] pwc: recv_control_msg error -32 req 02 val 2500 [ 1269.971759][ T5922] pwc: recv_control_msg error -32 req 02 val 2400 [ 1270.002144][ T5922] pwc: recv_control_msg error -32 req 02 val 2600 [ 1270.011059][ T5922] pwc: recv_control_msg error -32 req 02 val 2900 [ 1270.050616][ T5922] pwc: recv_control_msg error -32 req 02 val 2800 [ 1270.273087][ T5922] pwc: recv_control_msg error -71 req 04 val 1200 [ 1270.321111][ T5922] pwc: Registered as video103. [ 1270.368726][ T5922] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input52 [ 1270.416252][T16057] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1270.441626][T16057] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1270.490651][T16057] usb 4-1: can't read configurations, error -71 [ 1270.533548][ T5922] usb 5-1: USB disconnect, device number 57 [ 1271.128447][T18081] pim6reg: entered allmulticast mode [ 1271.142050][ T5943] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1271.152653][T18080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1271.353902][ T5943] usb 3-1: Using ep0 maxpacket: 32 [ 1271.368698][ T5943] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1271.386920][ T5943] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 1271.397329][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.470445][ T5943] usb 3-1: Product: syz [ 1271.487195][ T5943] usb 3-1: Manufacturer: syz [ 1271.505378][ T5943] usb 3-1: SerialNumber: syz [ 1271.594170][ T5943] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input53 [ 1271.778498][T18077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.819408][T18077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.902804][T18077] kvm: apic: phys broadcast and lowest prio [ 1272.024718][ T5218] bcm5974 3-1:1.0: could not read from device [ 1272.106746][ T5218] bcm5974 3-1:1.0: could not read from device [ 1272.121005][ T5943] usb 3-1: USB disconnect, device number 68 [ 1272.434698][T18096] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2962'. [ 1272.498875][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2962'. [ 1272.797304][ T5871] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1273.225224][ T5871] usb 4-1: too many configurations: 11, using maximum allowed: 8 [ 1273.241706][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.252608][ T5871] usb 4-1: config 0 has no interfaces? [ 1273.301649][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.313602][ T5871] usb 4-1: config 0 has no interfaces? [ 1273.334061][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.430522][ T5871] usb 4-1: config 0 has no interfaces? [ 1273.827074][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.849665][ T5871] usb 4-1: config 0 has no interfaces? [ 1273.979347][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.038696][ T5871] usb 4-1: config 0 has no interfaces? [ 1274.084199][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.119261][ T5871] usb 4-1: config 0 has no interfaces? [ 1274.277365][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.308055][ T5871] usb 4-1: config 0 has no interfaces? [ 1274.354940][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.385656][ T5871] usb 4-1: config 0 has no interfaces? [ 1274.419500][ T5871] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b2a, bcdDevice= 0.00 [ 1274.473336][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.632224][T18116] tipc: Enabled bearer , priority 0 [ 1274.775048][T18116] syzkaller0: entered promiscuous mode [ 1274.791330][T18116] syzkaller0: entered allmulticast mode [ 1274.896223][ T5871] usb 4-1: config 0 descriptor?? [ 1274.913061][T16057] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1275.145913][T16057] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.158496][T15617] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1275.159447][T15617] Bluetooth: hci1: Injecting HCI hardware error event [ 1275.181253][T15617] Bluetooth: hci1: hardware error 0x00 [ 1275.324858][T16057] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1275.406592][T16057] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1275.508555][T16057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.534974][T16057] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1275.718849][T16057] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1275.766382][T16057] tipc: Node number set to 310961137 [ 1276.850305][ T5943] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1277.023655][ T5943] usb 3-1: Using ep0 maxpacket: 32 [ 1277.198299][ T5943] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1277.216193][ T5943] usb 3-1: config 0 has no interface number 0 [ 1277.244029][T15617] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1277.252681][ T5943] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1277.310923][ T5943] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1277.320780][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.328886][ T5943] usb 3-1: Product: syz [ 1277.333807][ T5943] usb 3-1: Manufacturer: syz [ 1277.340529][ T5943] usb 3-1: SerialNumber: syz [ 1277.356863][ T5943] usb 3-1: config 0 descriptor?? [ 1277.374957][ T5943] smsc75xx v1.0.0 [ 1277.378883][ T5943] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1277.394614][ T5943] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1279.768683][T18122] tipc: Resetting bearer [ 1279.774700][T18122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.783604][T18122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.793720][T18125] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2969'. [ 1279.803902][T18125] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2969'. [ 1279.820937][T18115] tipc: Resetting bearer [ 1279.895002][T18115] tipc: Disabling bearer [ 1279.966739][T18130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1280.009793][T18130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.047195][T18130] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1280.057160][T18118] delete_channel: no stack [ 1280.064484][T16057] usb 2-1: USB disconnect, device number 72 [ 1280.167855][T18130] bridge0: port 4(batadv0) entered disabled state [ 1280.334324][T18145] fuse: Bad value for 'fd' [ 1280.341948][T18145] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2972'. [ 1280.498365][ T5943] usb 4-1: USB disconnect, device number 66 [ 1280.520929][ T5922] usb 3-1: USB disconnect, device number 69 [ 1281.299342][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2974'. [ 1283.805646][T18172] netlink: 'syz.4.2981': attribute type 12 has an invalid length. [ 1283.837742][T18168] tipc: Enabled bearer , priority 0 [ 1283.916743][ T30] audit: type=1800 audit(1758200300.013:914): pid=18175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2980" name="bus" dev="tmpfs" ino=3072 res=0 errno=0 [ 1284.251943][T18168] tipc: Resetting bearer [ 1284.264741][T18176] syzkaller0: entered promiscuous mode [ 1284.288165][T18176] syzkaller0: entered allmulticast mode [ 1284.310691][T18167] tipc: Resetting bearer [ 1284.371081][T18167] tipc: Disabling bearer [ 1284.962579][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2986'. [ 1285.045470][T18189] tipc: Enabled bearer , priority 0 [ 1285.063954][T18189] syzkaller0: entered promiscuous mode [ 1285.084501][T18189] syzkaller0: entered allmulticast mode [ 1285.376358][T18189] tipc: Resetting bearer [ 1285.401192][ T5943] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1285.446511][T18187] tipc: Resetting bearer [ 1285.641541][T18187] tipc: Disabling bearer [ 1285.712658][ T5943] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.723891][ T5943] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1285.758962][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.893371][ T30] audit: type=1326 audit(1758200301.993:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18192 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1285.920621][ T30] audit: type=1326 audit(1758200302.013:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18192 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1285.943402][ T30] audit: type=1326 audit(1758200302.023:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18192 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=184 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1285.970859][ T30] audit: type=1326 audit(1758200302.023:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18192 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1285.997977][ T30] audit: type=1326 audit(1758200302.023:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18192 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1286.021565][ T30] audit: type=1326 audit(1758200302.023:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18192 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1286.083841][ T30] audit: type=1326 audit(1758200302.023:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18192 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1286.096874][T18194] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2988'. [ 1286.107478][ T30] audit: type=1326 audit(1758200302.023:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18192 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1286.156286][ T30] audit: type=1326 audit(1758200302.023:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18192 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1287.362734][ T5871] usb 4-1: USB disconnect, device number 67 [ 1289.334216][T18224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2993'. [ 1289.989257][T18234] fuse: Unknown parameter '0x0000000000000007' [ 1291.591535][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2997'. [ 1292.195448][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1292.208588][ T30] audit: type=1800 audit(1758200308.263:980): pid=18252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2998" name="bus" dev="tmpfs" ino=3103 res=0 errno=0 [ 1293.422138][T18256] netlink: 'syz.5.3000': attribute type 153 has an invalid length. [ 1293.552984][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2999'. [ 1295.873379][T18282] usb usb8: usbfs: process 18282 (syz.3.3005) did not claim interface 0 before use [ 1297.022056][T18289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3006'. [ 1297.747286][ T5943] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1297.938556][ T5943] usb 2-1: config 0 has no interfaces? [ 1297.949050][ T5943] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1297.962221][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.996173][ T5943] usb 2-1: Product: syz [ 1298.006812][ T5943] usb 2-1: Manufacturer: syz [ 1298.061863][ T5943] usb 2-1: SerialNumber: syz [ 1298.079871][ T5943] usb 2-1: config 0 descriptor?? [ 1300.274644][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.282429][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.416358][T18323] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3015'. [ 1300.820553][ T5871] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1301.037938][ T5943] usb 2-1: USB disconnect, device number 73 [ 1301.279640][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.294267][ T5871] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1301.317769][ T5871] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1301.436301][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.798287][ T5871] usb 3-1: config 0 descriptor?? [ 1302.128318][T18336] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3017'. [ 1303.209696][T18351] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3020'. [ 1303.221157][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3020'. [ 1304.486867][T18348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1304.516124][ T5943] usb 3-1: USB disconnect, device number 70 [ 1304.554819][T18363] ptrace attach of "./syz-executor exec"[5874] was attempted by "./syz-executor exec"[18363] [ 1305.400793][ T5943] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1305.682927][ T5943] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.016488][ T5943] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1306.040237][ T5871] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1306.154326][ T5943] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1306.212020][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 1306.228894][ T5871] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1306.243739][ T5871] usb 5-1: config 0 has no interface number 0 [ 1306.252695][ T5871] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1306.316552][ T5871] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1306.329335][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.395049][ T5871] usb 5-1: Product: syz [ 1306.401937][ T5943] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1306.418326][ T5871] usb 5-1: Manufacturer: syz [ 1306.465629][ T5871] usb 5-1: SerialNumber: syz [ 1306.622708][ T5871] usb 5-1: config 0 descriptor?? [ 1306.704880][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.785027][ T5943] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1306.799060][ T5943] usb 6-1: invalid MIDI out EP 0 [ 1306.918016][ T5943] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1307.065835][T18381] udevd[18381]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1308.435413][ T5871] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1308.465525][ T5871] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1308.509493][ T5871] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1308.543535][ T5871] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1308.776411][ T5871] usb 5-1: USB disconnect, device number 58 [ 1309.024780][T16057] usb 6-1: USB disconnect, device number 53 [ 1309.111767][ T30] audit: type=1326 audit(1758200325.213:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.5.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1309.217562][ T30] audit: type=1326 audit(1758200325.243:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.5.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1309.337038][T18396] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 1309.488418][ T30] audit: type=1326 audit(1758200325.243:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.5.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1309.811564][ T30] audit: type=1326 audit(1758200325.243:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.5.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1309.933894][ T30] audit: type=1326 audit(1758200325.243:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.5.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1310.556175][ T30] audit: type=1326 audit(1758200325.243:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.5.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1310.753766][ T30] audit: type=1326 audit(1758200325.243:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.5.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1311.218519][ T30] audit: type=1326 audit(1758200325.243:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.5.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1311.242228][T18405] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1311.248412][T18405] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1311.261126][ T5922] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1311.301976][ T30] audit: type=1326 audit(1758200325.243:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.5.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1311.331050][T18405] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1311.337093][T18405] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1311.344217][ T30] audit: type=1326 audit(1758200325.243:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18389 comm="syz.5.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1311.560049][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 1311.596889][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.848224][ T5922] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1311.867838][ T5922] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 1311.899709][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.945852][T18405] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1311.954353][ T5922] usb 4-1: config 0 descriptor?? [ 1313.147616][T16057] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1313.310792][ T7115] Bluetooth: hci3: command 0x0406 tx timeout [ 1313.313570][T15617] Bluetooth: hci2: command 0x0406 tx timeout [ 1313.420556][T15617] Bluetooth: hci4: command 0x0406 tx timeout [ 1314.105065][T15617] Bluetooth: hci0: command 0x0c1a tx timeout [ 1314.584641][ T5871] usb 4-1: USB disconnect, device number 68 [ 1315.471175][T15617] Bluetooth: hci4: command 0x0406 tx timeout [ 1315.690648][ T6008] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1315.890999][ T6008] usb 4-1: Using ep0 maxpacket: 16 [ 1316.594050][ T6008] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1316.823139][ T6008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.836560][ T6008] usb 4-1: Product: syz [ 1316.851234][ T6008] usb 4-1: Manufacturer: syz [ 1316.921123][ T6008] usb 4-1: SerialNumber: syz [ 1316.976605][T16057] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1317.159381][T16057] usb 6-1: too many configurations: 111, using maximum allowed: 8 [ 1317.266497][T16057] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1317.275663][ T6008] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1317.290649][ T6008] r8152-cfgselector 4-1: config 0 descriptor?? [ 1317.297064][T16057] usb 6-1: can't read configurations, error -71 [ 1317.656179][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1317.656202][ T30] audit: type=1326 audit(1758200333.713:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18445 comm="syz.5.3038" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x0 [ 1319.553580][ T5943] r8152-cfgselector 4-1: USB disconnect, device number 69 [ 1319.614253][T18465] netlink: 99 bytes leftover after parsing attributes in process `syz.2.3041'. [ 1319.816952][T18472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3045'. [ 1319.876907][ T6008] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1320.053197][T18478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3045'. [ 1320.404016][T16057] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1320.452997][ T6008] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.504777][ T6008] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1320.584906][ T6008] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1320.594945][ T6008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.603775][ T6008] usb 3-1: Product: syz [ 1320.608095][ T6008] usb 3-1: Manufacturer: syz [ 1320.704524][ T6008] usb 3-1: SerialNumber: syz [ 1320.725988][T16057] usb 4-1: config 0 has no interfaces? [ 1320.939417][T16057] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1321.014743][T16057] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.104191][T16057] usb 4-1: Product: syz [ 1321.109702][T16057] usb 4-1: Manufacturer: syz [ 1321.160550][T16057] usb 4-1: SerialNumber: syz [ 1321.211050][T16057] usb 4-1: config 0 descriptor?? [ 1321.281359][ T6008] usb 3-1: can't set config #1, error -71 [ 1321.349370][ T6008] usb 3-1: USB disconnect, device number 71 [ 1322.121028][T18484] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1322.127673][T18484] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1322.348100][T18484] vhci_hcd vhci_hcd.0: Device attached [ 1322.582282][ T6008] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 1322.838133][T18492] vhci_hcd: connection reset by peer [ 1322.846443][T10233] vhci_hcd: stop threads [ 1322.930889][T18499] netlink: 'syz.5.3048': attribute type 4 has an invalid length. [ 1322.963856][T10233] vhci_hcd: release socket [ 1322.972745][T10233] vhci_hcd: disconnect device [ 1323.580785][ T30] audit: type=1400 audit(1758200339.673:1011): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=18501 comm="syz.1.3049" [ 1323.764419][ T5943] usb 4-1: USB disconnect, device number 70 [ 1323.791072][T18490] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1323.818670][T15992] Bluetooth: hci2: command 0x0406 tx timeout [ 1323.825718][ T7115] Bluetooth: hci0: command 0x0c1a tx timeout [ 1323.870193][T18505] usb usb8: usbfs: process 18505 (syz.1.3049) did not claim interface 0 before use [ 1324.022756][T18511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3050'. [ 1325.384749][T18490] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1325.393569][T18490] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1325.399716][T18490] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1325.957970][T15617] Bluetooth: hci3: command 0x0406 tx timeout [ 1326.146918][T18526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3054'. [ 1326.944197][T18533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3054'. [ 1327.111689][T18534] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 1327.178586][T18537] bridge0: port 4(syz_tun) entered blocking state [ 1327.187146][T18537] bridge0: port 4(syz_tun) entered disabled state [ 1327.521159][T15617] Bluetooth: hci0: command 0x0c1a tx timeout [ 1327.527314][T15992] Bluetooth: hci4: command 0x0406 tx timeout [ 1327.700590][ T6008] vhci_hcd: vhci_device speed not set [ 1327.903716][T18545] block nbd0: Attempted send on invalid socket [ 1327.910991][T18545] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1329.069234][T18550] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1330.795855][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3062'. [ 1330.943314][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 1333.159236][T18599] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:21 [ 1333.169691][T18599] netlink: 'syz.3.3067': attribute type 50 has an invalid length. [ 1333.190982][T18599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3067'. [ 1333.573594][T18604] netlink: 'syz.1.3069': attribute type 10 has an invalid length. [ 1336.264013][T18618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3070'. [ 1336.286950][T18618] netlink: 99 bytes leftover after parsing attributes in process `syz.4.3070'. [ 1336.591014][ T5943] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1336.700309][T16057] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1337.315399][ T5943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.329710][ T5943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1337.381357][ T5943] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1337.422931][T16057] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1337.436707][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.475033][T16057] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1337.496130][ T5943] usb 5-1: Product: syz [ 1337.505587][ T5943] usb 5-1: Manufacturer: syz [ 1337.552791][ T5943] usb 5-1: SerialNumber: syz [ 1337.603710][T16057] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1337.657767][T16057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.763952][T18621] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1339.970482][ T5943] usb 5-1: 0:2 : does not exist [ 1340.018041][ T5943] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1340.112034][ T5943] usb 5-1: USB disconnect, device number 59 [ 1340.413745][T16057] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1340.519308][T18327] udevd[18327]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1340.659315][T16057] usb 4-1: USB disconnect, device number 71 [ 1344.222841][ T30] audit: type=1400 audit(1758200360.313:1012): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620AAC1FB2051D4F401A532E24447D4BD7B9FA9979B40DB pid=18670 comm="syz.5.3084" [ 1344.647285][T16057] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1344.850560][T16057] usb 6-1: Using ep0 maxpacket: 32 [ 1344.941996][T16057] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1344.950699][T16057] usb 6-1: config 0 has no interface number 0 [ 1345.065454][T16057] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1345.078780][T16057] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.088001][T16057] usb 6-1: Product: syz [ 1345.093597][T16057] usb 6-1: Manufacturer: syz [ 1345.098623][T16057] usb 6-1: SerialNumber: syz [ 1345.107906][T16057] usb 6-1: config 0 descriptor?? [ 1345.123277][T16057] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1345.150684][T16057] usb 6-1: selecting invalid altsetting 1 [ 1345.167126][T16057] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1345.208713][T16057] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1345.253633][T16057] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1345.271548][T16057] usb 6-1: media controller created [ 1345.461822][T16057] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1346.511880][T18675] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1346.633043][T16057] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1346.652741][T16057] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1348.868802][T18712] usb usb8: usbfs: process 18712 (syz.4.3090) did not claim interface 0 before use [ 1349.551241][T16057] usb 6-1: USB disconnect, device number 56 [ 1352.902836][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3099'. [ 1355.992511][T18785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3105'. [ 1358.383898][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3107'. [ 1358.782137][T18806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'. [ 1360.029428][T18811] usb usb8: usbfs: process 18811 (syz.2.3109) did not claim interface 0 before use [ 1360.214264][T18813] block nbd0: Attempted send on invalid socket [ 1360.221715][T18813] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1361.715251][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.722080][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.089433][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3117'. [ 1365.263834][T18856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3119'. [ 1368.583644][T18879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3124'. [ 1370.632192][T18881] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1370.651811][T18881] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1370.661602][T18881] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1370.722349][T18881] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1371.655806][T15617] Bluetooth: hci2: command 0x0406 tx timeout [ 1372.691428][T15617] Bluetooth: hci4: command 0x0406 tx timeout [ 1372.720575][T15617] Bluetooth: hci3: command 0x0406 tx timeout [ 1372.773355][T15992] Bluetooth: hci0: command 0x0c1a tx timeout [ 1376.005578][T18922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3132'. [ 1377.700942][ T5922] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1378.025665][T18946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 1378.270620][ T5922] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1378.304352][ T5922] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1378.342206][ T5922] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1378.387885][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.436095][T18938] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1378.473196][ T5922] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1379.110863][ T5922] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1379.202008][T18965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3138'. [ 1379.889864][ T5922] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.951541][ T5922] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1379.980959][ T5922] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1380.185921][ T5943] usb 6-1: USB disconnect, device number 57 [ 1380.286488][ T5922] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1380.378493][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.462467][ T5922] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1380.761458][T18958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.773437][T18958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.932824][T18978] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1381.054635][ T5922] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1381.900971][ T5922] usb 5-1: USB disconnect, device number 60 [ 1384.571169][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3149'. [ 1385.095019][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3150'. [ 1387.955914][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3154'. [ 1390.535248][T19048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3157'. [ 1394.480962][T19078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3163'. [ 1396.724616][T19095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3166'. [ 1399.984326][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3169'. [ 1400.897576][T19121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3171'. [ 1406.388587][T19163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3179'. [ 1406.428826][T19163] netlink: 99 bytes leftover after parsing attributes in process `syz.1.3179'. [ 1406.790906][ T5922] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1407.261768][ T5922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.360335][ T5922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1407.445777][ T5922] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1407.484686][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.537753][ T5922] usb 2-1: Product: syz [ 1407.587889][ T5922] usb 2-1: Manufacturer: syz [ 1407.610200][ T5922] usb 2-1: SerialNumber: syz [ 1408.037913][T19175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3182'. [ 1410.254547][ T5922] usb 2-1: 0:2 : does not exist [ 1410.321364][ T5922] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1410.400257][ T5922] usb 2-1: USB disconnect, device number 74 [ 1410.568448][T19165] udevd[19165]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1413.671421][T19221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3190'. [ 1417.347486][T19248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3196'. [ 1417.385341][T19248] netlink: 99 bytes leftover after parsing attributes in process `syz.3.3196'. [ 1418.050883][ T5922] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1418.425817][ T5922] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.456744][ T5922] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1418.551257][ T5922] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1418.580986][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.589227][ T5922] usb 4-1: Product: syz [ 1418.704225][ T5922] usb 4-1: Manufacturer: syz [ 1418.764488][ T5922] usb 4-1: SerialNumber: syz [ 1421.379031][ T5922] usb 4-1: 0:2 : does not exist [ 1421.396253][ T5922] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1421.514973][ T5922] usb 4-1: USB disconnect, device number 72 [ 1421.597030][T19165] udevd[19165]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1423.181310][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.187709][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.766311][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3206'. [ 1425.516694][T19312] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3209'. [ 1425.723622][T19313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3209'. [ 1428.697793][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3216'. [ 1429.091889][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3217'. [ 1429.103732][T19340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3215'. [ 1429.248792][T19340] netlink: 99 bytes leftover after parsing attributes in process `syz.4.3215'. [ 1429.740757][T16057] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1429.943603][T16057] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.907345][T16057] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1431.190671][T16057] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1431.209972][T16057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.244305][T16057] usb 5-1: Product: syz [ 1431.248532][T16057] usb 5-1: Manufacturer: syz [ 1431.280000][T16057] usb 5-1: SerialNumber: syz [ 1433.064913][T16057] usb 5-1: 0:2 : does not exist [ 1433.091255][T16057] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1433.209690][T16057] usb 5-1: USB disconnect, device number 61 [ 1433.341090][T19165] udevd[19165]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1436.279474][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3226'. [ 1437.863944][T19409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3229'. [ 1440.372061][T19413] batadv0: left promiscuous mode [ 1442.029216][T19413] xfrm0: left promiscuous mode [ 1442.580996][T19456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3238'. [ 1442.637082][T19462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3239'. [ 1443.466874][T19413] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1443.590160][T19413] macvtap1: left promiscuous mode [ 1443.617259][T19413] bridge2: left promiscuous mode [ 1443.960561][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.004502][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.018802][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.022801][T19497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3246'. [ 1452.353545][T19531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3252'. [ 1453.141976][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3253'. [ 1461.041824][T19597] netlink: 99 bytes leftover after parsing attributes in process `syz.2.3267'. [ 1461.380925][ T6008] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1461.629102][ T6008] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.745843][ T6008] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1461.804516][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3269'. [ 1461.868350][ T6008] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1461.905275][T19610] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1461.966120][ T6008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.999257][ T6008] usb 3-1: Product: syz [ 1462.017096][ T6008] usb 3-1: Manufacturer: syz [ 1462.099618][ T6008] usb 3-1: SerialNumber: syz [ 1465.338082][T19631] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3274'. [ 1465.358824][T19631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3274'. [ 1465.611596][ T6008] usb 3-1: 0:2 : does not exist [ 1465.761402][ T6008] usb 3-1: USB disconnect, device number 72 [ 1468.679748][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3283'. [ 1468.703860][T19669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3282'. [ 1473.311912][T19703] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3290'. [ 1473.323330][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'. [ 1478.478639][T19736] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1479.736733][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3298'. [ 1480.882040][T19759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3301'. [ 1483.523266][T19775] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1483.543811][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1484.621259][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.627828][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.133559][T19824] bridge1: left promiscuous mode [ 1491.149326][T19824] ip6erspan0: left promiscuous mode [ 1491.190835][T19824] veth3: left promiscuous mode [ 1491.396751][T19829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3315'. [ 1493.509677][T19848] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1498.764360][T19878] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1501.053088][T19894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3329'. [ 1501.648958][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3331'. [ 1501.869521][T19906] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1503.397518][T19919] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1504.061360][T19923] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1504.788473][T19928] xfrm0: entered promiscuous mode [ 1504.794764][T19928] xfrm0: entered allmulticast mode [ 1506.366034][T19945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3341'. [ 1506.574361][T19948] xfrm0: entered promiscuous mode [ 1506.851480][T19953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3343'. [ 1507.468467][T19958] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1509.121930][T19963] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3345'. [ 1509.132675][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3345'. [ 1509.843898][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3346'. [ 1514.466222][T20014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3357'. [ 1516.373955][T20023] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3359'. [ 1516.387269][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3359'. [ 1518.319780][T20041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3361'. [ 1518.355612][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3363'. [ 1518.505206][T20044] netlink: 99 bytes leftover after parsing attributes in process `syz.5.3363'. [ 1518.695081][T20049] netlink: 99 bytes leftover after parsing attributes in process `syz.1.3362'. [ 1519.040985][T19440] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1519.166957][T20055] xfrm0: entered promiscuous mode [ 1519.172775][T20055] xfrm0: entered allmulticast mode [ 1519.368835][T19440] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.432951][T19440] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1519.462183][T19440] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1519.482301][T19440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.556069][T19440] usb 2-1: Product: syz [ 1519.606896][T19440] usb 2-1: Manufacturer: syz [ 1519.659787][T19440] usb 2-1: SerialNumber: syz [ 1520.911247][T20067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3366'. [ 1522.292085][T19440] usb 2-1: 0:2 : does not exist [ 1522.450674][T19440] usb 2-1: USB disconnect, device number 75 [ 1522.743323][T19932] udevd[19932]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1522.792484][T20083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3370'. [ 1522.804036][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3370'. [ 1523.792835][T20092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3371'. [ 1524.571972][T20101] xfrm0: entered promiscuous mode [ 1524.577079][T20101] xfrm0: entered allmulticast mode [ 1524.995874][T20111] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1525.301182][T20113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3374'. [ 1526.744718][T20126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3378'. [ 1526.766692][T20125] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1527.797322][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3379'. [ 1527.812373][T20137] netlink: 99 bytes leftover after parsing attributes in process `syz.5.3379'. [ 1527.931331][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3380'. [ 1529.143517][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3382'. [ 1530.701287][T20155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3384'. [ 1530.721765][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'. [ 1531.817443][T20165] veth0_to_team: left promiscuous mode [ 1531.972949][T20165] veth1_macvtap: left allmulticast mode [ 1532.126421][T20165] macsec0: left promiscuous mode [ 1533.021938][T20165] gretap1: left promiscuous mode [ 1533.032274][T20165] ip6erspan0: left promiscuous mode [ 1533.110999][T20165] bond2: left promiscuous mode [ 1533.137893][T20165] macvtap1: left promiscuous mode [ 1533.157062][T16659] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.168392][T16659] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.509019][T16659] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.417141][T20203] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1535.750310][T20208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3394'. [ 1536.342171][T20214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3395'. [ 1537.415539][T20223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3397'. [ 1538.011643][T20231] xfrm0: entered promiscuous mode [ 1538.016816][T20231] xfrm0: entered allmulticast mode [ 1544.671263][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3409'. [ 1545.569994][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3410'. [ 1545.653174][T20301] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1546.033712][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.043485][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.652361][T20317] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3414'. [ 1547.695877][T20317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3414'. [ 1552.510875][T20364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3423'. [ 1553.304246][T20373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3425'. [ 1555.253904][T20393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3428'. [ 1555.274290][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3428'. [ 1563.571132][T20447] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3439'. [ 1563.631652][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3439'. [ 1564.440753][T20453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3440'. [ 1566.124714][T20469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3443'. [ 1566.141404][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3443'. [ 1572.671812][T20526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3454'. [ 1575.031902][T20539] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3457'. [ 1575.043356][T20539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3457'. [ 1577.783727][T20563] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1578.994095][T20574] xfrm0: left promiscuous mode [ 1581.352630][T20588] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1582.863563][T20609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3469'. [ 1586.691693][T20632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3476'. [ 1587.232177][T20646] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1587.339282][T20648] xfrm0: entered promiscuous mode [ 1587.775627][T20655] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1590.065685][T20664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3482'. [ 1590.723504][T20672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3485'. [ 1592.768360][T20691] xfrm0: left promiscuous mode [ 1593.267145][T20698] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1595.772017][T20724] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1596.413477][T20735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3497'. [ 1598.213756][T20747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3500'. [ 1598.677053][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3503'. [ 1600.914923][T20774] xfrm0: left promiscuous mode [ 1601.203970][T20785] xfrm0: entered promiscuous mode [ 1601.756387][T20797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3510'. [ 1606.855728][T20830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3516'. [ 1607.073620][T20833] xfrm0: entered promiscuous mode [ 1607.476527][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.483673][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.863494][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3520'. [ 1609.258605][T20861] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1614.546843][T20897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3530'. [ 1616.012763][T20907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3532'. [ 1616.330586][T20913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3533'. [ 1618.498484][T20925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3535'. [ 1619.339034][T20937] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3538'. [ 1619.351792][T20937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3538'. [ 1622.613368][T20964] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1624.039242][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3548'. [ 1624.121054][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3546'. [ 1626.438374][T20999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3551'. [ 1626.667718][T21006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3550'. [ 1628.768182][T21020] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1630.064549][T21026] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1630.250602][T21035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3558'. [ 1630.439089][T21038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3558'. [ 1631.219549][T21056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3561'. [ 1632.252232][T21065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3563'. [ 1634.368511][T21075] fuse: Bad value for 'fd' [ 1635.116531][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3568'. [ 1639.284527][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3577'. [ 1640.599518][T21135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 1641.161642][T21144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3579'. [ 1642.941244][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3583'. [ 1644.258612][T21171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3586'. [ 1644.761048][T21177] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1646.410867][T21189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3590'. [ 1650.542711][T21218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3597'. [ 1650.647062][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3598'. [ 1653.773303][T21248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3602'. [ 1656.223618][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3608'. [ 1659.576263][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3614'. [ 1660.531889][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3615'. [ 1660.577608][T21302] netlink: 99 bytes leftover after parsing attributes in process `syz.3.3615'. [ 1660.905526][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3618'. [ 1661.050478][ T5944] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1661.231249][ T5944] usb 4-1: device descriptor read/64, error -71 [ 1661.761338][ T5944] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1662.100931][ T5944] usb 4-1: device descriptor read/64, error -71 [ 1662.420954][ T5944] usb usb4-port1: attempt power cycle [ 1663.150929][ T5944] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1663.482790][ T5944] usb 4-1: device not accepting address 75, error -71 [ 1663.556991][T21330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3620'. [ 1664.449480][T21340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3623'. [ 1664.921780][T21348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3624'. [ 1666.732486][T21367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3628'. [ 1668.737276][T21383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3630'. [ 1668.760801][T21383] netlink: 99 bytes leftover after parsing attributes in process `syz.3.3630'. [ 1668.927809][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.974494][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.110445][ T5944] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1669.350738][ T5944] usb 4-1: device descriptor read/64, error -71 [ 1669.660542][ T5944] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1669.678999][T21389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3632'. [ 1669.872666][ T5944] usb 4-1: device descriptor read/64, error -71 [ 1669.982418][ T5944] usb usb4-port1: attempt power cycle [ 1670.380411][ T5944] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1670.484756][ T5944] usb 4-1: device descriptor read/8, error -71 [ 1670.840579][ T5944] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1672.701833][ T5944] usb 4-1: device descriptor read/8, error -71 [ 1672.865516][ T5944] usb usb4-port1: unable to enumerate USB device [ 1675.686761][T21438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3641'. [ 1680.084244][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3649'. [ 1680.178140][T21478] netlink: 99 bytes leftover after parsing attributes in process `syz.4.3649'. [ 1680.680907][T19440] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1681.043675][T19440] usb 5-1: device descriptor read/64, error -71 [ 1681.350512][T19440] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1681.490439][T19440] usb 5-1: device descriptor read/64, error -71 [ 1681.601610][T19440] usb usb5-port1: attempt power cycle [ 1682.098400][T19440] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1682.603897][T19440] usb 5-1: device descriptor read/8, error -71 [ 1682.915523][T19440] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1684.605629][T19440] usb 5-1: device descriptor read/8, error -71 [ 1684.738156][T19440] usb usb5-port1: unable to enumerate USB device [ 1690.819377][T21551] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1691.801155][T21557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3669'. [ 1693.125208][T21571] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1693.814791][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3674'. [ 1697.631104][T21623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3683'. [ 1698.931598][T21632] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1701.450829][T21654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3691'. [ 1704.781074][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3697'. [ 1706.001142][T21696] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1707.108170][T21706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3701'. [ 1710.152506][T21731] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1710.242551][T21732] fuse: Bad value for 'fd' [ 1710.661823][T21737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3708'. [ 1711.808394][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3709'. [ 1712.328109][T21753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1712.536457][T21756] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1715.162650][T21782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3717'. [ 1717.101303][T21798] fuse: Bad value for 'fd' [ 1717.230306][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3720'. [ 1718.640186][T21810] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3723'. [ 1718.665111][T21810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3723'. [ 1720.324466][T21822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3725'. [ 1722.514385][T21838] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1725.314595][T21859] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1727.333793][T21871] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1727.491011][T21883] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1727.745268][T21884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3738'. [ 1729.727790][T21902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3741'. [ 1729.800201][T21902] netlink: 99 bytes leftover after parsing attributes in process `syz.2.3741'. [ 1729.950836][T19440] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1730.131001][T19443] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1730.348043][T19443] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.366810][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.375635][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.387774][T19443] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1730.435563][T19443] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1730.445863][T19443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.456947][T19443] usb 3-1: Product: syz [ 1730.466752][T19443] usb 3-1: Manufacturer: syz [ 1730.476894][T19443] usb 3-1: SerialNumber: syz [ 1732.568951][T21925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3745'. [ 1733.075684][T19443] usb 3-1: 0:2 : does not exist [ 1733.192671][T19443] usb 3-1: USB disconnect, device number 73 [ 1733.539287][T21762] udevd[21762]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1734.812681][T21953] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1735.754999][T21958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3753'. [ 1736.690441][T21972] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1738.459478][T21986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3759'. [ 1738.798227][T21994] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1740.569526][T22008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3765'. [ 1741.570650][T19440] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1741.795191][T22025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3767'. [ 1742.280798][T19443] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1743.080825][ T5944] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1745.014902][T19440] usb 5-1: device descriptor read/64, error -71 [ 1745.380810][T19440] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1745.918413][T22044] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1746.600769][T22046] syzkaller1: entered promiscuous mode [ 1746.606522][T22046] syzkaller1: entered allmulticast mode [ 1747.412585][T19443] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1749.552172][T22068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3778'. [ 1750.632708][T22078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3780'. [ 1751.171102][T19443] usb 3-1: device descriptor read/64, error -71 [ 1751.615358][T19443] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1751.900745][T19449] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1753.072981][ T5944] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1754.435928][T19443] usb 3-1: device descriptor read/64, error -71 [ 1754.551159][T19443] usb usb3-port1: attempt power cycle [ 1754.941037][T19443] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1756.581180][T19435] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1757.105826][T19443] usb 3-1: device descriptor read/8, error -71 [ 1758.894156][T22147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3794'. [ 1758.943989][T22147] netlink: 99 bytes leftover after parsing attributes in process `syz.4.3794'. [ 1759.251103][T19443] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1759.430418][T19443] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.496123][T19443] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1759.629480][T19443] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1759.639565][T19443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.648724][T19443] usb 5-1: Product: syz [ 1759.656211][T19443] usb 5-1: Manufacturer: syz [ 1759.661692][T19443] usb 5-1: SerialNumber: syz [ 1759.904431][T22151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3795'. [ 1760.296081][T22156] syzkaller1: entered promiscuous mode [ 1760.306950][T22156] syzkaller1: entered allmulticast mode [ 1761.468823][T19449] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1763.348518][T19443] usb 5-1: 0:2 : does not exist [ 1763.586220][T19443] usb 5-1: USB disconnect, device number 69 [ 1763.753367][T22167] udevd[22167]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1764.336811][T22190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3803'. [ 1765.790508][ T5944] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1766.591334][T19435] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1767.198945][T22223] syzkaller1: entered promiscuous mode [ 1767.207145][T22223] syzkaller1: entered allmulticast mode [ 1768.526022][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3813'. [ 1768.555763][T22235] netlink: 99 bytes leftover after parsing attributes in process `syz.3.3813'. [ 1768.962315][T22240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3814'. [ 1769.154502][T22049] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1769.418234][T22049] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.429248][T22049] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1769.456899][T22049] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1769.495130][T22049] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.031377][T22049] usb 4-1: Product: syz [ 1770.045861][T22049] usb 4-1: Manufacturer: syz [ 1770.059851][T22049] usb 4-1: SerialNumber: syz [ 1770.822400][T22254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3817'. [ 1771.144246][T22254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3817'. [ 1772.133187][T22225] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1773.317122][T22269] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1773.368786][T22049] usb 4-1: 0:2 : does not exist [ 1773.444340][T22049] usb 4-1: USB disconnect, device number 83 [ 1773.826179][T22167] udevd[22167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1774.716983][T22288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3822'. [ 1776.232687][T22308] syzkaller1: entered promiscuous mode [ 1776.238206][T22308] syzkaller1: entered allmulticast mode [ 1777.530723][T22225] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1778.382532][T22332] syzkaller1: entered promiscuous mode [ 1778.388064][T22332] syzkaller1: entered allmulticast mode [ 1780.680927][T19449] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1782.125221][T19443] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1782.570907][T19440] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1786.000802][T22389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3845'. [ 1788.566579][T22406] syzkaller1: entered promiscuous mode [ 1788.578100][T22406] syzkaller1: entered allmulticast mode [ 1789.603461][T19443] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1791.804160][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.813734][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.946468][T22447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3857'. [ 1792.934480][T22457] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1793.073330][T22468] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3862'. [ 1793.085006][T22468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3862'. [ 1793.127128][T19435] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1793.397327][T22472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3861'. [ 1795.825419][T22483] syzkaller1: entered promiscuous mode [ 1795.851234][T22483] syzkaller1: entered allmulticast mode [ 1796.610613][T22049] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1797.128179][T22507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3869'. [ 1799.366811][T22520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3871'. [ 1799.396147][T22520] netlink: 99 bytes leftover after parsing attributes in process `syz.3.3871'. [ 1799.497380][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3873'. [ 1799.569660][T22516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3872'. [ 1799.721229][T19443] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1800.066198][T19443] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.096351][T19443] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1800.137588][T19443] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1800.157851][T19443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.175769][T19443] usb 4-1: Product: syz [ 1800.182187][T19443] usb 4-1: Manufacturer: syz [ 1800.196157][T19443] usb 4-1: SerialNumber: syz [ 1801.171016][T19435] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1803.197482][T22541] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3877'. [ 1803.213289][T22541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3877'. [ 1804.432105][T19443] usb 4-1: 0:2 : does not exist [ 1804.594514][T19443] usb 4-1: USB disconnect, device number 85 [ 1804.717021][T22167] udevd[22167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1805.074049][T22556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3879'. [ 1805.340515][T19440] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1805.813386][T22561] syzkaller1: entered promiscuous mode [ 1805.819340][T22561] syzkaller1: entered allmulticast mode [ 1805.918240][T22565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3882'. [ 1806.981204][T19443] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1807.587080][T19435] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1808.341250][T22581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3885'. [ 1809.581259][T19440] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1810.430352][T22049] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1812.537168][T22602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3889'. [ 1812.556683][T22602] netlink: 99 bytes leftover after parsing attributes in process `syz.5.3889'. [ 1812.840468][T19435] usb 5-1: device descriptor read/64, error -110 [ 1812.840747][T19443] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 1813.038725][T19443] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.084249][T19443] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1813.202812][T19443] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1813.215449][T19443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.260730][T19443] usb 6-1: Product: syz [ 1813.264979][T19443] usb 6-1: Manufacturer: syz [ 1813.300308][T19443] usb 6-1: SerialNumber: syz [ 1813.538073][T22608] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3890'. [ 1813.557294][T22608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3890'. [ 1814.056415][T22615] syzkaller1: entered promiscuous mode [ 1814.090668][T22615] syzkaller1: entered allmulticast mode [ 1815.437430][T19443] usb 6-1: 0:2 : does not exist [ 1815.452540][T19443] usb 6-1: unit 6 not found! [ 1815.478374][T19443] usb 6-1: USB disconnect, device number 64 [ 1815.647372][T22167] udevd[22167]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1816.940705][T19443] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1818.221438][T19449] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1820.662927][T22662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3901'. [ 1821.205398][T22678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3905'. [ 1822.334701][T22688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3908'. [ 1822.553699][T22049] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1822.724681][T22693] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1825.566465][T22722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3916'. [ 1825.610623][T19435] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1828.230554][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3920'. [ 1830.090328][T22049] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1835.120352][T19435] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1835.207590][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3933'. [ 1838.870432][T19443] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1838.977798][T22834] syzkaller1: entered promiscuous mode [ 1839.070975][T22834] syzkaller1: entered allmulticast mode [ 1840.622028][T19435] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1840.981626][T19435] usb 4-1: device descriptor read/64, error -71 [ 1841.461355][T19435] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1841.513883][T22853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3944'. [ 1841.665690][T19435] usb 4-1: device descriptor read/64, error -71 [ 1841.881412][T19435] usb usb4-port1: attempt power cycle [ 1842.266974][T19435] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1842.350671][T22049] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1842.398116][T19435] usb 4-1: device descriptor read/8, error -71 [ 1842.500420][T22049] usb 6-1: device descriptor read/64, error -71 [ 1842.650973][T19435] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1842.811226][T22049] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1843.273568][T22049] usb 6-1: device descriptor read/64, error -71 [ 1843.394728][T22049] usb usb6-port1: attempt power cycle [ 1843.493644][T19435] usb 4-1: device descriptor read/8, error -71 [ 1843.621275][T19435] usb usb4-port1: unable to enumerate USB device [ 1843.704732][T22870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3947'. [ 1843.881981][T22049] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1843.926827][T22049] usb 6-1: device descriptor read/8, error -71 [ 1844.230933][T22049] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1844.254299][T22049] usb 6-1: device descriptor read/8, error -71 [ 1844.380880][T22049] usb usb6-port1: unable to enumerate USB device [ 1844.413857][T19435] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1844.621337][T19443] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1847.570762][T19443] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1847.857752][T22904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3952'. [ 1847.888402][T19443] usb 2-1: device descriptor read/64, error -71 [ 1848.440688][T19443] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1848.900755][T19443] usb 2-1: device descriptor read/64, error -71 [ 1849.031083][T19443] usb usb2-port1: attempt power cycle [ 1849.430593][T19443] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1849.736603][T19443] usb 2-1: device descriptor read/8, error -71 [ 1852.101069][T19449] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1852.240419][T19449] usb 5-1: device descriptor read/64, error -71 [ 1852.790717][T19449] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1852.961399][T19449] usb 5-1: device descriptor read/64, error -71 [ 1853.031808][T22948] fuse: Unknown parameter 'fd0x0000000000000003' [ 1853.071289][T19449] usb usb5-port1: attempt power cycle [ 1853.284406][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.292300][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.440759][T19449] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1853.484514][T19449] usb 5-1: device descriptor read/8, error -71 [ 1854.120374][T19449] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1854.352209][T19449] usb 5-1: device descriptor read/8, error -71 [ 1854.473091][T19449] usb usb5-port1: unable to enumerate USB device [ 1855.077581][T19449] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1855.440323][T19449] usb 5-1: device descriptor read/64, error -71 [ 1855.799096][T19449] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1856.010685][T19449] usb 5-1: device descriptor read/64, error -71 [ 1856.243942][T19449] usb usb5-port1: attempt power cycle [ 1856.790719][T19449] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1856.882240][T19449] usb 5-1: device descriptor read/8, error -71 [ 1857.304725][T19449] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1857.360416][T19435] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1857.398783][T19449] usb 5-1: device descriptor read/8, error -71 [ 1857.640666][T19435] usb 6-1: device descriptor read/64, error -71 [ 1857.751294][T19449] usb usb5-port1: unable to enumerate USB device [ 1857.911032][T19435] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1858.060388][T19435] usb 6-1: device descriptor read/64, error -71 [ 1858.170630][T19435] usb usb6-port1: attempt power cycle [ 1858.770971][T19435] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1858.791077][T19435] usb 6-1: device descriptor read/8, error -71 [ 1859.041371][T19435] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1859.084519][T19435] usb 6-1: device descriptor read/8, error -71 [ 1859.542852][T19435] usb usb6-port1: unable to enumerate USB device [ 1859.740311][T19435] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1862.290295][T22049] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1862.852940][T19449] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1862.900703][T22181] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1865.520915][T22049] usb 5-1: device descriptor read/64, error -71 [ 1865.791275][T22049] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1866.261846][T23062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3988'. [ 1867.013337][T23065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3989'. [ 1870.770907][T19449] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1871.791971][T23109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3999'. [ 1872.875005][T23122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4001'. [ 1873.181190][T22181] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1875.560411][T19443] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1875.920747][T19449] usb 4-1: device descriptor read/64, error -110 [ 1876.160925][T19449] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1876.583653][T23144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4005'. [ 1876.659820][T23144] netlink: 99 bytes leftover after parsing attributes in process `syz.3.4005'. [ 1877.423715][T19449] usb usb4-port1: attempt power cycle [ 1877.870344][T23153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4007'. [ 1878.150820][T19449] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 1878.176327][T19449] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1878.191758][T19449] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1878.236833][T19449] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1878.246844][T19449] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.256936][T19449] usb 4-1: Product: syz [ 1878.273564][T19449] usb 4-1: Manufacturer: syz [ 1878.301796][T19449] usb 4-1: SerialNumber: syz [ 1879.978539][T22181] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1880.368579][T19449] usb 4-1: 0:2 : does not exist [ 1880.397387][T19449] usb 4-1: unit 6 not found! [ 1880.481057][T19449] usb 4-1: USB disconnect, device number 97 [ 1880.538485][T22167] udevd[22167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1881.020933][T19443] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1884.201459][T23205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4020'. [ 1884.625808][T23214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4021'. [ 1885.321015][T22049] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1890.900763][T22225] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1890.927066][T23264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4032'. [ 1893.764079][T22181] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1897.576580][T23323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4045'. [ 1898.043729][T23332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4046'. [ 1903.421649][T23381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4056'. [ 1904.221375][T23396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4059'. [ 1905.539294][T23416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4062'. [ 1908.341059][T23444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4069'. [ 1908.520368][T22225] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1908.568318][T23444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4069'. [ 1914.685475][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.809271][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.960631][T23525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4086'. [ 1917.217723][T23530] fuse: Unknown parameter 'group_i00000000000000000000' [ 1920.090949][T22181] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1920.139382][T23556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4092'. [ 1922.677681][T23581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4097'. [ 1925.022064][T23603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4102'. [ 1927.487212][T23623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4106'. [ 1930.210910][T19440] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1930.558205][T23651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4112'. [ 1932.206952][T23667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4115'. [ 1932.258364][T23669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1933.114339][T22225] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1933.125151][T23688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4120'. [ 1933.142031][T23688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4120'. [ 1933.242493][T23689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4121'. [ 1935.830741][T19440] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1936.324369][T23710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4125'. [ 1936.948561][T23725] fuse: Bad value for 'fd' [ 1938.290820][T22181] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1938.808460][T23737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4130'. [ 1939.194012][T23743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4131'. [ 1940.170737][T19440] usb 5-1: device descriptor read/64, error -71 [ 1940.446110][T19440] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1941.000025][T22181] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1941.765608][T23766] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4135'. [ 1941.782425][T23766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4135'. [ 1942.410726][T19443] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1944.201512][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4138'. [ 1946.640273][T22225] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1947.200749][T19443] usb 4-1: device descriptor read/64, error -71 [ 1947.629581][T19443] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1950.193909][T23824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4146'. [ 1951.503257][T22049] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1951.888583][T23844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4151'. [ 1954.041407][T22225] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1954.527675][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4155'. [ 1954.837696][T23875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4156'. [ 1957.361380][T23892] fuse: Invalid rootmode [ 1958.584072][T23899] fuse: Invalid rootmode [ 1958.967712][T23903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4162'. [ 1959.964250][T23914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4165'. [ 1960.093313][T23916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4164'. [ 1962.634640][T23943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1963.490771][T19443] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1965.923105][T23968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4175'. [ 1966.254482][T23971] fuse: Invalid rootmode [ 1969.036945][T22225] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1969.494936][T24003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4182'. [ 1972.164839][T24020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4185'. [ 1973.340800][T19443] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1973.774179][T19443] usb 6-1: device descriptor read/64, error -71 [ 1974.640710][T19443] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1974.860615][T19443] usb 6-1: device descriptor read/64, error -71 [ 1974.990949][T19443] usb usb6-port1: attempt power cycle [ 1976.330630][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.338245][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1980.560816][T22225] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1980.881651][T22225] usb 3-1: device descriptor read/64, error -71 [ 1981.353009][T22225] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1981.462697][T24106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4201'. [ 1981.531808][T22225] usb 3-1: device descriptor read/64, error -71 [ 1981.650645][T22225] usb usb3-port1: attempt power cycle [ 1982.000533][T22225] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1982.051909][T22225] usb 3-1: device descriptor read/8, error -71 [ 1982.597809][T22225] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1982.754747][T22225] usb 3-1: device descriptor read/8, error -71 [ 1982.873978][T22225] usb usb3-port1: unable to enumerate USB device [ 1985.432395][T22225] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1985.500259][T22049] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1985.731644][T22225] usb 4-1: device descriptor read/64, error -71 [ 1985.867950][T22049] usb 3-1: device descriptor read/64, error -71 [ 1986.380270][T22225] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1986.460540][T22049] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1986.543758][T22225] usb 4-1: device descriptor read/64, error -71 [ 1986.622734][T22049] usb 3-1: device descriptor read/64, error -71 [ 1986.675623][T22225] usb usb4-port1: attempt power cycle [ 1986.753085][T22049] usb usb3-port1: attempt power cycle [ 1987.030340][T22225] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1987.069582][T22225] usb 4-1: device descriptor read/8, error -71 [ 1987.091423][T22049] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1987.121613][T22049] usb 3-1: device descriptor read/8, error -71 [ 1987.320909][T22225] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1987.365278][T22225] usb 4-1: device descriptor read/8, error -71 [ 1987.400388][T22049] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1987.420952][T22049] usb 3-1: device descriptor read/8, error -71 [ 1987.530687][T22049] usb usb3-port1: unable to enumerate USB device [ 1987.570807][T22225] usb usb4-port1: unable to enumerate USB device [ 1991.617316][T24196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4217'. [ 1992.588066][T24208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4220'. [ 1996.801882][T24244] fuse: Unknown parameter 'user_i00000000000000000000' [ 1998.275426][T24255] fuse: Unknown parameter '0x0000000000000006' [ 1999.390410][T22225] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1999.640932][T22225] usb 5-1: device descriptor read/64, error -71 [ 1999.973251][T22225] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2000.110442][T22225] usb 5-1: device descriptor read/64, error -71 [ 2000.220464][T22225] usb usb5-port1: attempt power cycle [ 2000.620577][T19443] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2001.090412][T22225] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2001.123802][T22225] usb 5-1: device descriptor read/8, error -71 [ 2001.381215][T22225] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2001.535018][T24276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4235'. [ 2002.690930][T22181] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2002.858774][T22181] usb 2-1: device descriptor read/64, error -71 [ 2003.110712][T22181] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2003.137769][T22225] usb 5-1: device descriptor read/8, error -71 [ 2003.291990][T22181] usb 2-1: device descriptor read/64, error -71 [ 2003.380808][T22225] usb usb5-port1: unable to enumerate USB device [ 2003.608948][T22181] usb usb2-port1: attempt power cycle [ 2004.004958][T22181] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2004.523652][T22181] usb 2-1: device descriptor read/8, error -71 [ 2004.940677][T22181] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2005.932128][T24309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4242'. [ 2006.058604][T24313] tipc: Enabling of bearer rejected, failed to enable media [ 2007.190807][T22181] usb 2-1: device descriptor read/8, error -71 [ 2007.300927][T22181] usb usb2-port1: unable to enumerate USB device [ 2008.835020][T24335] tipc: Enabling of bearer rejected, failed to enable media [ 2009.950365][T19443] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2011.598182][T24352] tipc: Enabling of bearer rejected, failed to enable media [ 2013.681042][T24365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4252'. [ 2013.700512][T24365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4252'. [ 2014.820754][T19443] usb 3-1: device descriptor read/64, error -71 [ 2015.140816][T19443] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2018.113205][T24408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4261'. [ 2023.600222][T22225] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2024.091134][T22049] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2025.674262][T24469] tipc: Enabling of bearer rejected, failed to enable media [ 2026.460210][T19435] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2027.123715][T24481] tipc: Enabling of bearer rejected, failed to enable media [ 2027.680159][T22049] usb 3-1: device descriptor read/64, error -71 [ 2028.168104][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4278'. [ 2028.210714][T22049] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2030.204496][T24500] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4281'. [ 2030.215636][T24500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4281'. [ 2031.095602][T24509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4283'. [ 2031.146673][T24508] tipc: Enabling of bearer rejected, failed to enable media [ 2032.517506][T24521] tipc: Enabling of bearer rejected, failed to enable media [ 2034.193384][T24530] tipc: Enabling of bearer rejected, failed to enable media [ 2035.345542][T24542] tipc: Enabling of bearer rejected, failed to enable media [ 2037.582528][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.588930][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.623852][T24551] tipc: Enabling of bearer rejected, failed to enable media [ 2038.418850][T24574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4295'. [ 2040.011180][T24583] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4296'. [ 2040.065709][T24584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4296'. [ 2041.964678][T24595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4298'. [ 2042.675404][T24605] tipc: Enabling of bearer rejected, failed to enable media [ 2045.463374][T24623] tipc: Enabling of bearer rejected, failed to enable media [ 2049.076442][T24648] tipc: Enabling of bearer rejected, failed to enable media [ 2051.813184][T24665] tipc: Enabling of bearer rejected, failed to enable media [ 2051.974625][T24671] tipc: Enabling of bearer rejected, failed to enable media [ 2055.671131][T24696] tipc: Enabling of bearer rejected, failed to enable media [ 2057.454795][T24726] tipc: Enabling of bearer rejected, failed to enable media [ 2060.381803][T24753] tipc: Enabling of bearer rejected, failed to enable media [ 2062.213589][T24755] tipc: Enabling of bearer rejected, failed to enable media [ 2069.607863][T24815] tipc: Enabling of bearer rejected, failed to enable media [ 2070.670335][T24825] tipc: Enabling of bearer rejected, failed to enable media [ 2070.765600][T24828] tipc: Enabling of bearer rejected, failed to enable media [ 2073.714218][T24847] tipc: Enabling of bearer rejected, failed to enable media [ 2075.510508][T24863] tipc: Enabling of bearer rejected, failed to enable media [ 2078.901561][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4351'. [ 2078.993008][T24893] tipc: Enabling of bearer rejected, failed to enable media [ 2081.419966][T24902] tipc: Enabling of bearer rejected, failed to enable media [ 2082.461705][T24920] tipc: Enabling of bearer rejected, failed to enable media [ 2083.313778][T24919] tipc: Enabling of bearer rejected, failed to enable media [ 2085.102388][T24936] tipc: Enabling of bearer rejected, failed to enable media [ 2088.683833][T24961] tipc: Enabling of bearer rejected, failed to enable media [ 2090.144374][T24972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4367'. [ 2090.723520][T24981] tipc: Enabling of bearer rejected, failed to enable media [ 2091.575909][T24989] tipc: Enabling of bearer rejected, failed to enable media [ 2092.748096][T24994] tipc: Enabling of bearer rejected, failed to enable media [ 2093.995363][T25004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4373'. [ 2099.020502][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.026851][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.424426][T25056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4383'. [ 2100.742957][T25061] tipc: Enabling of bearer rejected, failed to enable media [ 2102.987261][T25072] tipc: Enabling of bearer rejected, failed to enable media [ 2104.685685][T25092] tipc: Enabling of bearer rejected, failed to enable media [ 2106.850650][T25105] tipc: Enabling of bearer rejected, failed to enable media [ 2108.867290][T25135] tipc: Enabling of bearer rejected, failed to enable media [ 2109.251985][T25136] tipc: Enabling of bearer rejected, failed to enable media [ 2111.068825][T25156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4402'. [ 2111.209287][T25157] tipc: Enabling of bearer rejected, failed to enable media [ 2115.346631][T25190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4409'. [ 2115.421581][T25194] tipc: Enabling of bearer rejected, failed to enable media [ 2116.582224][T25201] tipc: Enabling of bearer rejected, failed to enable media [ 2119.442188][T25221] tipc: Enabling of bearer rejected, failed to enable media [ 2119.778303][T25224] tipc: Enabling of bearer rejected, failed to enable media [ 2121.596468][T25230] tipc: Enabling of bearer rejected, failed to enable media [ 2122.452865][T25243] tipc: Enabling of bearer rejected, failed to enable media [ 2123.099176][T25246] tipc: Enabling of bearer rejected, failed to enable media [ 2124.646631][T25255] tipc: Enabling of bearer rejected, failed to enable media [ 2124.921177][T25263] tipc: Enabling of bearer rejected, failed to enable media [ 2125.594573][T25267] tipc: Enabling of bearer rejected, failed to enable media [ 2128.782014][T25287] tipc: Enabling of bearer rejected, failed to enable media [ 2132.047326][T25318] tipc: Enabling of bearer rejected, failed to enable media [ 2132.095438][T25321] tipc: Enabling of bearer rejected, failed to enable media [ 2133.623773][T25335] tipc: Enabling of bearer rejected, failed to enable media [ 2135.738664][T25347] tipc: Enabling of bearer rejected, failed to enable media [ 2136.843374][T25357] tipc: Enabling of bearer rejected, failed to enable media [ 2140.044533][T25380] tipc: Enabling of bearer rejected, failed to enable media [ 2140.882738][T25390] tipc: Enabling of bearer rejected, failed to enable media [ 2142.181146][T25400] tipc: Enabling of bearer rejected, failed to enable media [ 2143.308358][T25412] tipc: Enabling of bearer rejected, failed to enable media [ 2144.462274][T25420] tipc: Enabling of bearer rejected, failed to enable media [ 2144.511155][T25416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4450'. [ 2147.523731][T25435] tipc: Enabling of bearer rejected, failed to enable media [ 2147.580941][T25443] tipc: Enabling of bearer rejected, failed to enable media [ 2149.304963][T25450] tipc: Enabling of bearer rejected, failed to enable media [ 2151.763338][T25478] tipc: Enabling of bearer rejected, failed to enable media [ 2152.155918][T25485] netlink: 'syz.5.4463': attribute type 10 has an invalid length. [ 2152.857250][T25485] team0: Port device dummy0 added [ 2153.325121][T25496] tipc: Enabling of bearer rejected, failed to enable media [ 2153.588088][T25500] tipc: Enabling of bearer rejected, failed to enable media [ 2155.513755][T25518] netlink: 'syz.5.4470': attribute type 10 has an invalid length. [ 2156.367800][T25526] netlink: 'syz.1.4471': attribute type 10 has an invalid length. [ 2157.046156][T25526] team0: Port device dummy0 added [ 2158.263134][T25552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4477'. [ 2159.688836][T25564] netlink: 'syz.1.4480': attribute type 10 has an invalid length. [ 2160.500873][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.507391][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2164.416374][T25607] netlink: 'syz.3.4487': attribute type 10 has an invalid length. [ 2164.467798][T25607] dummy0: entered promiscuous mode [ 2164.507189][T25607] team0: Port device dummy0 added [ 2164.835178][T25611] netlink: 'syz.5.4488': attribute type 10 has an invalid length. [ 2168.675954][T25640] tipc: Enabling of bearer rejected, failed to enable media [ 2168.814094][T25649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4495'. [ 2170.144059][T25657] tipc: Enabling of bearer rejected, failed to enable media [ 2171.453262][T25663] tipc: Enabling of bearer rejected, failed to enable media [ 2171.906001][T25676] netlink: 'syz.4.4500': attribute type 10 has an invalid length. [ 2172.278703][T25686] netlink: 'syz.3.4503': attribute type 10 has an invalid length. [ 2173.817310][T25700] netlink: 'syz.5.4505': attribute type 10 has an invalid length. [ 2175.160605][ T31] INFO: task kworker/0:2:979 blocked for more than 143 seconds. [ 2175.168406][ T31] Not tainted syzkaller #0 [ 2175.179650][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2175.224890][ T31] task:kworker/0:2 state:D stack:20712 pid:979 tgid:979 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2175.269261][ T31] Workqueue: usb_hub_wq hub_event [ 2175.309220][ T31] Call Trace: [ 2175.325383][ T31] [ 2175.384410][ T31] __schedule+0x1798/0x4cc0 [ 2175.410630][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2175.416267][ T31] ? __pfx___schedule+0x10/0x10 [ 2175.424322][ T31] ? schedule+0x91/0x360 [ 2175.428753][ T31] schedule+0x165/0x360 [ 2175.447823][ T31] usb_kill_urb+0x1be/0x2d0 [ 2175.492894][T25716] tipc: Enabling of bearer rejected, failed to enable media [ 2175.560506][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2175.574530][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2175.586228][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2175.592753][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2176.520585][ T31] ? __kmalloc_noprof+0x29b/0x4f0 [ 2176.526388][ T31] usb_control_msg+0x232/0x3e0 [ 2176.547919][ T31] hub_port_init+0xbf9/0x2800 [ 2176.557058][ T31] hub_event+0x2532/0x4a20 [ 2176.567481][ T31] ? __pfx_hub_event+0x10/0x10 [ 2176.575689][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2176.623440][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2176.629425][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2176.659119][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2176.666320][ T31] process_scheduled_works+0xae1/0x17b0 [ 2176.672163][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2176.679485][ T31] worker_thread+0x8a0/0xda0 [ 2176.684991][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2176.716823][ T31] ? __kthread_parkme+0x7b/0x200 [ 2176.724450][ T31] kthread+0x70e/0x8a0 [ 2176.728933][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2176.737250][ T31] ? __pfx_kthread+0x10/0x10 [ 2176.742614][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2176.747993][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2176.756848][ T31] ? __pfx_kthread+0x10/0x10 [ 2176.762555][ T31] ret_from_fork+0x436/0x7d0 [ 2176.767557][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2176.971789][ T31] ? __switch_to_asm+0x39/0x70 [ 2176.985179][ T31] ? __switch_to_asm+0x33/0x70 [ 2176.992940][ T31] ? __pfx_kthread+0x10/0x10 [ 2176.997785][ T31] ret_from_fork_asm+0x1a/0x30 [ 2177.006940][ T31] [ 2177.012766][ T31] [ 2177.012766][ T31] Showing all locks held in the system: [ 2177.024339][ T31] 1 lock held by khungtaskd/31: [ 2177.029332][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2177.044250][ T31] 2 locks held by kworker/u8:2/36: [ 2177.050346][ T31] #0: ffff88801e789148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2177.065726][ T31] #1: ffffc90000ac7bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2177.081550][ T31] 5 locks held by kworker/0:2/979: [ 2177.086829][ T31] #0: ffff888022281148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2177.101110][ T31] #1: ffffc900036c7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2177.115079][ T31] #2: ffff888145f4b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2177.126389][ T31] #3: ffff888145f4e518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2177.138785][ T31] #4: ffff888145bc5f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2177.153095][ T31] 2 locks held by getty/5623: [ 2177.157923][ T31] #0: ffff888033ffe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2177.171251][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2177.183862][ T31] 3 locks held by kworker/1:0/22181: [ 2177.190802][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2177.204743][ T31] #1: ffffc9001bf57bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2177.217997][ T31] #2: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2177.230448][ T31] 4 locks held by kworker/u8:3/23620: [ 2177.235961][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2177.248072][ T31] #1: ffffc90010db7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2177.261258][ T31] #2: ffffffff8f52d1d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 2177.271882][ T31] #3: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 2177.282226][ T31] 1 lock held by syz.2.4506/25704: [ 2177.287463][ T31] 1 lock held by syz.4.4507/25711: [ 2177.293464][ T31] #0: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 2177.307936][ T31] 1 lock held by syz.3.4508/25716: [ 2177.314515][ T31] #0: ffffffff8f52d1d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 2177.327738][ T31] 1 lock held by dhcpcd/25717: [ 2177.333816][ T31] #0: ffff888061e26258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 2177.349326][ T31] [ 2177.393992][ T31] ============================================= [ 2177.393992][ T31] [ 2177.433129][ T31] NMI backtrace for cpu 0 [ 2177.433158][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2177.433180][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2177.433191][ T31] Call Trace: [ 2177.433200][ T31] [ 2177.433209][ T31] dump_stack_lvl+0x189/0x250 [ 2177.433240][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2177.433263][ T31] ? __pfx__printk+0x10/0x10 [ 2177.433301][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2177.433414][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2177.433442][ T31] ? __pfx__printk+0x10/0x10 [ 2177.433472][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2177.433505][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2177.433534][ T31] watchdog+0xf93/0xfe0 [ 2177.433565][ T31] ? watchdog+0x1de/0xfe0 [ 2177.433596][ T31] kthread+0x70e/0x8a0 [ 2177.433623][ T31] ? __pfx_watchdog+0x10/0x10 [ 2177.433647][ T31] ? __pfx_kthread+0x10/0x10 [ 2177.433670][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2177.433699][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2177.433717][ T31] ? __pfx_kthread+0x10/0x10 [ 2177.433738][ T31] ret_from_fork+0x436/0x7d0 [ 2177.433767][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2177.433792][ T31] ? __switch_to_asm+0x39/0x70 [ 2177.433815][ T31] ? __switch_to_asm+0x33/0x70 [ 2177.433838][ T31] ? __pfx_kthread+0x10/0x10 [ 2177.433863][ T31] ret_from_fork_asm+0x1a/0x30 [ 2177.433901][ T31] [ 2177.433937][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2177.587870][ C1] NMI backtrace for cpu 1 [ 2177.587896][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 2177.587914][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2177.587924][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2177.587945][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 d9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2177.587958][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 2177.587974][ C1] RAX: 8d5cbba68fc61100 RBX: ffffffff819693f8 RCX: 8d5cbba68fc61100 [ 2177.587986][ C1] RDX: 0000000000000001 RSI: ffffffff8d9ba2d7 RDI: ffffffff8be33f00 [ 2177.587997][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 2177.588009][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa3a730 [ 2177.588020][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d6b40 [ 2177.588030][ C1] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 2177.588044][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2177.588054][ C1] CR2: 0000000056a8599c CR3: 0000000077bea000 CR4: 00000000003526f0 [ 2177.588069][ C1] Call Trace: [ 2177.588077][ C1] [ 2177.588083][ C1] default_idle+0x13/0x20 [ 2177.588101][ C1] default_idle_call+0x74/0xb0 [ 2177.588118][ C1] do_idle+0x1e8/0x510 [ 2177.588136][ C1] ? __pfx_do_idle+0x10/0x10 [ 2177.588158][ C1] cpu_startup_entry+0x44/0x60 [ 2177.588172][ C1] start_secondary+0x101/0x110 [ 2177.588193][ C1] common_startup_64+0x13e/0x147 [ 2177.588218][ C1] [ 2177.646711][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2177.646731][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2177.646752][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2177.646764][ T31] Call Trace: [ 2177.646773][ T31] [ 2177.646782][ T31] dump_stack_lvl+0x99/0x250 [ 2177.646809][ T31] ? __asan_memcpy+0x40/0x70 [ 2177.646830][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2177.646851][ T31] ? __pfx__printk+0x10/0x10 [ 2177.646887][ T31] vpanic+0x281/0x750 [ 2177.646910][ T31] ? __pfx_vpanic+0x10/0x10 [ 2177.646928][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 2177.646951][ T31] ? preempt_schedule+0xae/0xc0 [ 2177.646971][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2177.646995][ T31] panic+0xb9/0xc0 [ 2177.647015][ T31] ? __pfx_panic+0x10/0x10 [ 2177.647036][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2177.647066][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2177.647093][ T31] watchdog+0xfd2/0xfe0 [ 2177.647132][ T31] ? watchdog+0x1de/0xfe0 [ 2177.647160][ T31] kthread+0x70e/0x8a0 [ 2177.647185][ T31] ? __pfx_watchdog+0x10/0x10 [ 2177.647207][ T31] ? __pfx_kthread+0x10/0x10 [ 2177.647230][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2177.647255][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2177.647273][ T31] ? __pfx_kthread+0x10/0x10 [ 2177.647295][ T31] ret_from_fork+0x436/0x7d0 [ 2177.647317][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2177.647341][ T31] ? __switch_to_asm+0x39/0x70 [ 2177.647361][ T31] ? __switch_to_asm+0x33/0x70 [ 2177.647382][ T31] ? __pfx_kthread+0x10/0x10 [ 2177.647405][ T31] ret_from_fork_asm+0x1a/0x30 [ 2177.647441][ T31] [ 2177.913645][ T31] Kernel Offset: disabled [ 2177.917973][ T31] Rebooting in 86400 seconds..