last executing test programs: 18.275798818s ago: executing program 2 (id=481): r0 = socket$inet6(0xa, 0x80002, 0x88) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r3, r4, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x100) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) lchown(0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x1, 0x4040000) 17.059473271s ago: executing program 4 (id=483): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) 15.858297403s ago: executing program 1 (id=487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) mlock(&(0x7f0000a38000/0x1000)=nil, 0x1000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, 0x0) mlock2(&(0x7f0000a32000/0xe000)=nil, 0xe000, 0x0) 15.16888189s ago: executing program 0 (id=489): madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x65) sigaltstack(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/205, 0xcd, 0x1, &(0x7f0000001340)=""/4096, 0x1000}, &(0x7f00000001c0)=0x40) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r3}) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ptrace$setregs(0xf, 0x0, 0x3ff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 15.167159048s ago: executing program 4 (id=490): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0x21, 0x6, 0x0, 0x100000}) r4 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e0001080007400000000104000680411ee33398e58a9f31f85ce468ea51794a3647eb976fc7c4707188e3deecf56fa1279196a2a947ba5d4b8514be3975fcc39431f9b3e8fa68b35350981255cf8ae64ac3fa70a1b72ca3d8294170"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 13.1701253s ago: executing program 2 (id=491): madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x65) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00'}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000080)={0x1, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f0000000040)={0xfffffffffffffedd, 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 13.058581559s ago: executing program 4 (id=492): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000400)={0x3, 0x1, 0x7}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @multicast1}]}, 0x2c}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff03"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) r5 = dup(r1) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffff8904"]) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, &(0x7f0000000000)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000080)) 12.86163249s ago: executing program 0 (id=503): syz_open_dev$sg(0x0, 0x0, 0x8400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(r0, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f61640000000009"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, &(0x7f00000001c0), 0x0, 0x20000080, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 11.4734767s ago: executing program 2 (id=494): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) dup(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) shutdown(r2, 0x2) close(r2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00010122b00b09058103100002ba07424ae89cf7d629f944a4bedd8607e44fa2444bf40ddf534ff8c07cb111"], 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r3, 0x2) 11.473187104s ago: executing program 3 (id=495): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x104, 0x4, 0x3f0, 0x220, 0x220, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @empty, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="cab170e97230", @multicast1, @remote, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff000000, 0x0, 0x0, {@mac=@remote, {[0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r2 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x62602) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c80, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, 0x0) socket$packet(0x11, 0xc2340cf684d20d18, 0x300) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) capset(&(0x7f0000000200)={0x39900612, r4}, &(0x7f0000000140)={0x6, 0x0, 0xfffffffc, 0xfffffff7, 0xfffffff3, 0xfffffffa}) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106010000fbff00000007"], 0x18}], 0x1}, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r7, &(0x7f0000000000)="4db8ce7b40005c7539cb8dbfc54a5ea04cd50b34df776b74292db289e176fb214776511a99cdcaca2e2a73cebcdb8bda12aebbb97c5894ab2e576f40ef808d1ef23f0f03929049f82af40d86228b65294ee6", 0x52, 0x4000040, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 11.471284774s ago: executing program 0 (id=505): syz_open_dev$sg(0x0, 0x0, 0x8400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(r0, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f61640000000009"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, &(0x7f00000001c0), 0x0, 0x20000080, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 11.470783402s ago: executing program 1 (id=496): socket(0x1f, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000280), &(0x7f0000000340)=0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80000000000014e, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000002c0)={@local, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x85) ptrace(0x10, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ptrace$pokeuser(0x6, 0x0, 0x112, 0x40000089) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', &(0x7f0000000300)={[&(0x7f0000000180)='&\x00', &(0x7f00000001c0)='&\x00']}, &(0x7f0000000480)) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) 10.720357454s ago: executing program 3 (id=497): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005480)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x3c, 0x2, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000080)={0x0, 0x80080}, 0x20) 9.628305234s ago: executing program 4 (id=498): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r3, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 9.190021719s ago: executing program 1 (id=499): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000}}}}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000300)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1002, 0xfffffffc}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001000cbd8000fbdbdfa500000000", @ANYRES32=r8, @ANYBLOB="002e0a001162050034001280110001006272696467655f736c617665000000001c00058005001b000100000005"], 0x54}, 0x1, 0x0, 0x0, 0x8c041}, 0x2) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r9, &(0x7f0000000040), 0x0, 0x5, 0x0, 0x0) recvfrom$inet(r9, 0x0, 0x0, 0x40010000, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e4, 0x188, 0x2b8, 0x0, 0x188, 0x0, 0x31c, 0x3a8, 0x3a8, 0x31c, 0x3a8, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev, [], [], 'veth0_to_batadv\x00', 'wg2\x00'}, 0x0, 0x120, 0x188, 0x0, {0xd2030000}, [@common=@unspec=@connbytes={{0x38}, {[{0xdac4}, {0x6}]}}, @common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'bond0\x00', 'pim6reg1\x00', {}, {0xff}}, 0x0, 0x154, 0x194, 0x0, {}, [@common=@srh1={{0x8c}, {0x62, 0x7, 0xd, 0xff, 0x62d6, @local, @empty, @dev={0xfe, 0x80, '\x00', 0x3e}, [0x0, 0xffff00, 0xff, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], [0xffffff00, 0xff, 0xff, 0xff], 0x380}}, @inet=@rpfilter={{0x24}, {0x3}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7, 0xd4bf, 0x3, 0x1, 0x6, 0x7, 0x2, 0x5]}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x440) 9.027426932s ago: executing program 0 (id=500): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) 8.016364185s ago: executing program 0 (id=501): r0 = socket$inet6(0xa, 0x80002, 0x88) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r3, r4, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x100) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) lchown(0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x1, 0x4040000) 7.914495686s ago: executing program 3 (id=502): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008902"]) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r7, 0x200004) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x5c}, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$apparmor_exec(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000"], 0x8) sendfile(r3, r7, 0x0, 0x80001d00c0d1) bind$unix(0xffffffffffffffff, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7.646196176s ago: executing program 2 (id=504): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004300), 0x0, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r4) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000001c0)={0x7}) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x66) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) 6.730831957s ago: executing program 1 (id=506): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r4}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 6.730417873s ago: executing program 2 (id=507): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '\t\t'}, {0x20, '\x00\xda\x15YF\xcb)5\xc7\x14T\x10\f{?Nj<\x89S\x00\x00\x00\x00\x00\x00\x00'}]}, 0x2a) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vimc1(0xffffffffffffff9c, &(0x7f0000007200), 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001b91a9fcf35e6f4600"/27], 0x48) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) nanosleep(&(0x7f0000000300)={0x77359400}, &(0x7f0000000340)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001500010000000000000098be7caf2c42352c6f5db2cc0000020000007a59b7d70922a93f9cec7a627eb45e0581538eaa6f7e699f8703fcf44b9faac3bfe0a13495592aff1a9dec3f718d3679f59eda32253096fc4ee85056afeac172f526e19a3cbbcb2ca9da8de6116e793ea1877e39b04584f3c0e6c42830a0e6391a5cccca48bf1f18d4c15b1385b43c6ed526ada9fe985c4ebad1813728f96dadabc32340a92b7dcbf8e5e2f74cb11260124c555f520e338468e4cdc0370c3fe92abd25443ebbec6e9c2889bced4f52ee07f088bd3842c968685f3ad7d4f7c1201638723ec8fb8cf0110eef617bc59e8932d9cd34e93f7cb42663565a143bc3a062c84a47fba9e573276eefed9bb5194a6576b3dc7a3402fc3d932e625e8b1d20657ec7ef63cdc1e0178edd95a281b3f24720bd164ad1ac9e26bb4ea86e4f476d6343bffd59037e7cb30dafa1407eab9a0f8b00fef9f78fa8c160ee62331d0fb6612ea1aed5bdad", @ANYRES32=0x0], 0x18}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x2000094) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5.42354124s ago: executing program 3 (id=508): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aa"], 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, 0x0, r3}, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000000)=""/59, 0x300000, 0x800, 0x800, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000e920e88817000000000200000000000000000000000000000000000000000000000100010000000000005f9ca518cbacf711000000000000007f0000000000000000002200000000000000000000000000ffffffff0dfffffffeffffffffffffff000000000000001e6eca56341055e517a42ef5787177e1f6386ad0b5e845fedbad13ced341e69111786c3e8ef3f7cd0f040000000c519d65c402fb0e462ec3f7bab3c0b1c7603cc3b160b7467d08c0c36af4ab6708fea14b234669287ccab4"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000003e000100fcff07000400000001000000040000000c00018008001080040008900c0002000000000000000000cd8a59657e5ecc6fa01dc85ffb56e0a2d23358bb9a20d9efe46a7d3ef68c5faf0d15039d5abd257e9e796bbb2dc4d03f"], 0x30}}, 0x4008094) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) 5.392106677s ago: executing program 4 (id=509): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x800, 0x14, 0x16}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x11, 0x0, @multicast2, @loopback}}}}, 0x3e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getcwd(&(0x7f0000000540)=""/4096, 0x1000) shutdown(r4, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r5) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00), 0x0, 0xf00) 4.245437906s ago: executing program 2 (id=510): socket$can_j1939(0x1d, 0x2, 0x7) pipe2$9p(0x0, 0x80000) syz_mount_image$fuse(&(0x7f00000000c0), 0x0, 0x300065, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x36ec26d2bbe7d4b4, 0xffffffffffffffff, 0x2000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = timerfd_create(0x0, 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4097, 0x693d4f623b09dbf1}], 0x1) ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000000080)=0x6) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x7e000000000}, 0x40000, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 2.736310602s ago: executing program 3 (id=511): syz_open_dev$sg(0x0, 0x0, 0x8400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(r0, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}}}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f61640000000009"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 2.237156188s ago: executing program 1 (id=512): timerfd_settime(0xffffffffffffffff, 0x7, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) add_key(0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffffffffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xef, 0x0, 0x6, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) 2.066825074s ago: executing program 0 (id=513): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 1.305802414s ago: executing program 4 (id=514): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_pgetevents(0x0, 0x493a, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x2000, 0x14, 0xc2}, &(0x7f00000007c0), 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r4, 0x89ec, &(0x7f0000000140)="0600") io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) recvmsg$can_j1939(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000400)=""/143, 0x8f}], 0x1, &(0x7f00000004c0)=""/66, 0x42}, 0x0) memfd_create(&(0x7f0000000540)=':\x91!/\x00', 0x1) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) 733.289217ms ago: executing program 1 (id=515): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005480)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x3c, 0x2, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000080)={0x0, 0x80080}, 0x20) 0s ago: executing program 3 (id=516): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'vlan0\x00'}}, 0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) readv(r4, &(0x7f00000006c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000040)=0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x4b0, 0x0, 0x0, 0x10c, 0x3d0, 0x3d0, 0x3d0, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @empty, @dev={0xac, 0x14, 0x14, 0xd}, 0x4, 0xffffffff}}}, {{@arp={@remote, @rand_addr=0x64010101, 0x0, 0x975b7c59a753477c, 0x1, 0xc, {@mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x1, 0x1, 0x4b00, 0x1ff, 0x401, 0x0, 'pimreg\x00', 'netdevsim0\x00', {0xff}, {0xff}}, 0xbc, 0xe0}, @unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x5, 0x6}}}, {{@uncond, 0xbc, 0x1e4}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x4fc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) acct(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x68000, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x27c, 0x0, 0x111, 0x4b4, 0x118, 0xd4feffff, 0x218, 0x20a, 0x278, 0x218, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'pimreg0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@inet=@TCPMSS={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2d8) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000840)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[{}, {}], 0x0, &(0x7f0000000140)=[0x0], 0x2, 0x0, 0x9}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) kernel console output (not intermixed with test programs): ][ T47] usb 4-1: Manufacturer: syz [ 156.030087][ T47] usb 4-1: SerialNumber: syz [ 156.055164][ T47] usb 4-1: config 0 descriptor?? [ 156.233160][ T9] usb usb38-port1: unable to enumerate USB device [ 156.300205][ T6572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.333335][ T6572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.918027][ T47] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 156.935640][ T47] usb 4-1: No streaming interface found for terminal 6. [ 157.024591][ T47] usb 4-1: USB disconnect, device number 10 [ 158.904310][ T5891] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.963925][ T6610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.023152][ T6610] vivid-000: disconnect [ 159.060453][ T5891] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 159.079935][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.088527][ T5891] usb 1-1: Product: syz [ 159.092870][ T5891] usb 1-1: Manufacturer: syz [ 159.107638][ T5891] usb 1-1: SerialNumber: syz [ 159.126830][ T5891] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 159.146688][ T976] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 159.155790][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 159.274412][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 159.304330][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 159.311194][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.355902][ T10] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 159.406151][ T5891] usb 1-1: USB disconnect, device number 7 [ 159.424570][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.444800][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 159.460964][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 159.474888][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.484885][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.498257][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.509091][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.522706][ T10] usb 4-1: config 0 descriptor?? [ 159.536238][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.559857][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.801314][ T9] usb 3-1: usb_control_msg returned -32 [ 159.810998][ T9] usbtmc 3-1:16.0: can't read capabilities [ 159.953596][ T10] hid-multitouch 0003:0EEF:72C4.0004: unknown main item tag 0x0 [ 159.966823][ T10] hid-multitouch 0003:0EEF:72C4.0004: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 160.244549][ T976] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 160.268111][ T976] ath9k_htc: Failed to initialize the device [ 160.289860][ T5891] usb 1-1: ath9k_htc: USB layer deinitialized [ 160.354457][ T5895] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 160.393734][ T6623] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[6623] [ 160.562633][ T6623] binder: 6612:6623 ioctl c0306201 0 returned -14 [ 160.726482][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 160.834400][ T5891] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 161.071848][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 161.111688][ T5891] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 161.149527][ T5891] usb 1-1: config 0 has no interface number 0 [ 161.158977][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 161.176459][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.178411][ T47] usb 4-1: USB disconnect, device number 11 [ 161.204875][ T5891] usb 1-1: Product: syz [ 161.223699][ T5891] usb 1-1: Manufacturer: syz [ 161.245480][ T5891] usb 1-1: SerialNumber: syz [ 161.365572][ T5891] usb 1-1: config 0 descriptor?? [ 161.604830][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.637685][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.812713][ T5891] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 161.833743][ T5891] usb 1-1: No streaming interface found for terminal 6. [ 161.857562][ T5891] usb 1-1: USB disconnect, device number 8 [ 161.968941][ T976] usb 3-1: USB disconnect, device number 12 [ 161.979549][ T6610] vivid-000: reconnect [ 162.615944][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 163.202280][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.347582][ T5895] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 163.355263][ T5895] usb 5-1: can't read configurations, error -71 [ 163.988576][ T6651] input: syz0 as /devices/virtual/input/input13 [ 165.392937][ T5895] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 165.924870][ T47] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.947193][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 165.971976][ T5895] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 165.980319][ T5895] usb 5-1: config 0 has no interface number 0 [ 165.994362][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 166.008052][ T5895] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 166.018033][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.036354][ T5895] usb 5-1: Product: syz [ 166.040842][ T5895] usb 5-1: Manufacturer: syz [ 166.064777][ T5895] usb 5-1: SerialNumber: syz [ 166.098936][ T5895] usb 5-1: config 0 descriptor?? [ 166.104590][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 166.114113][ T47] usb 1-1: config 0 has no interfaces? [ 166.126129][ T47] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 166.140005][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.201695][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 166.233714][ T47] usb 1-1: Product: syz [ 166.248604][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.307016][ T47] usb 1-1: Manufacturer: syz [ 166.329784][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.353283][ T47] usb 1-1: SerialNumber: syz [ 166.358194][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.364894][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.533342][ T47] usb 1-1: config 0 descriptor?? [ 166.548454][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 166.594437][ T5895] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 166.607994][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.620662][ T5895] usb 5-1: No streaming interface found for terminal 6. [ 166.651095][ T5895] usb 5-1: USB disconnect, device number 10 [ 166.688785][ T24] usb 4-1: config 0 descriptor?? [ 167.327807][ T5891] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 167.497448][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.518812][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.540805][ T5891] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 167.550193][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.556544][ T5895] usb 1-1: USB disconnect, device number 9 [ 167.583674][ T5891] usb 2-1: Product: syz [ 167.598845][ T5891] usb 2-1: Manufacturer: syz [ 167.663475][ T5891] usb 2-1: SerialNumber: syz [ 167.757905][ T5891] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 168.231000][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 168.293851][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 168.438015][ T5896] usb 2-1: USB disconnect, device number 9 [ 168.466091][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 168.519385][ T24] usb 4-1: USB disconnect, device number 12 [ 168.903998][ T5891] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 168.944491][ T47] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 169.164750][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 169.185498][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 169.199645][ T5891] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.210334][ T47] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 169.218111][ T5891] usb 5-1: config 0 has no interface number 0 [ 169.222690][ T47] usb 1-1: config 0 has no interface number 0 [ 169.231782][ T5891] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 169.240444][ T47] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 169.264391][ T5891] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 169.277496][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.290055][ T47] usb 1-1: Product: syz [ 169.294443][ T47] usb 1-1: Manufacturer: syz [ 169.297720][ T5891] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.299282][ T47] usb 1-1: SerialNumber: syz [ 169.326440][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 169.362739][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.362776][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.382071][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 169.392264][ T9] ath9k_htc: Failed to initialize the device [ 169.423103][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 169.507003][ T5891] usb 5-1: config 0 descriptor?? [ 169.507959][ T5896] usb 2-1: ath9k_htc: USB layer deinitialized [ 169.515331][ T6697] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 169.536281][ T5891] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 169.657883][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.674431][ T47] usb 1-1: config 0 descriptor?? [ 169.690471][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.921849][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.933544][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.943716][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.953579][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.973255][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.344593][ T6698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.562825][ T24] usb 4-1: usb_control_msg returned -71 [ 170.570792][ T24] usbtmc 4-1:16.0: can't read capabilities [ 170.612412][ T47] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 170.626014][ T47] usb 1-1: No streaming interface found for terminal 6. [ 170.660138][ T24] usb 4-1: USB disconnect, device number 13 [ 170.710858][ T47] usb 1-1: USB disconnect, device number 10 [ 171.363179][ T6715] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 171.388013][ T5891] IPVS: starting estimator thread 0... [ 171.548585][ T6716] IPVS: using max 51 ests per chain, 122400 per kthread [ 171.616010][ T6718] ALSA: mixer_oss: invalid OSS volume '' [ 171.668692][ T5891] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 172.209861][ T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 172.390640][ T47] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 172.401301][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 172.424432][ T47] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 172.434695][ T47] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 172.462338][ T47] usb 3-1: Product: syz [ 172.484073][ T47] usb 3-1: Manufacturer: syz [ 172.535430][ T47] usb 3-1: SerialNumber: syz [ 172.653346][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 172.666631][ T9] usb 5-1: USB disconnect, device number 11 [ 172.792508][ T47] usb 3-1: config 0 descriptor?? [ 172.965052][ T5896] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 173.000754][ T47] usb 3-1: selecting invalid altsetting 0 [ 173.222386][ T5896] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 173.236790][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.397728][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.517729][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 173.558926][ T5896] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 173.568522][ T5896] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 173.583665][ T5896] usb 1-1: Manufacturer: syz [ 173.635008][ T5896] usb 1-1: config 0 descriptor?? [ 174.045567][ T6750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.176470][ T5896] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 174.188660][ T5896] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 174.226403][ T5896] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 174.623494][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 174.638683][ T5891] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 174.691992][ T5891] usb 2-1: can't read configurations, error -71 [ 174.809907][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.821760][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.939406][ T6721] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 174.982409][ T9] usb 3-1: USB disconnect, device number 13 [ 175.094289][ T5896] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 175.234325][ T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 175.344854][ T5896] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 175.353953][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.442334][ T5896] usb 5-1: Product: syz [ 175.467497][ T5896] usb 5-1: Manufacturer: syz [ 175.545801][ T5896] usb 5-1: SerialNumber: syz [ 175.592929][ T5896] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 175.745117][ T47] usb 4-1: config 0 has no interfaces? [ 175.770657][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 175.790557][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 175.824454][ T5891] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 175.874576][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 175.954517][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.004571][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 176.050385][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.056187][ T47] usb 4-1: Product: syz [ 176.126586][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.305585][ T5936] usb 5-1: USB disconnect, device number 12 [ 176.320509][ T47] usb 4-1: Manufacturer: syz [ 176.326944][ T47] usb 4-1: SerialNumber: syz [ 176.344851][ T47] usb 4-1: config 0 descriptor?? [ 176.355842][ T10] usb 1-1: USB disconnect, device number 11 [ 176.591720][ T5891] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 176.643692][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.691815][ T5891] usb 2-1: config 0 descriptor?? [ 176.796921][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.808964][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 176.817858][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 176.818941][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.842607][ T24] ath9k_htc: Failed to initialize the device [ 176.863003][ T5936] usb 5-1: ath9k_htc: USB layer deinitialized [ 176.927832][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.970591][ T6772] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 176.985136][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.283622][ T5891] usbhid 2-1:0.0: can't add hid device: -71 [ 178.347598][ T5891] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 178.366879][ T5891] usb 2-1: USB disconnect, device number 11 [ 178.440137][ T24] usb 4-1: USB disconnect, device number 14 [ 178.824464][ T5891] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 178.946794][ T10] usb 3-1: USB disconnect, device number 14 [ 178.975925][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 178.996826][ T5891] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 179.046618][ T5891] usb 2-1: config 0 has no interface number 0 [ 179.169307][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 179.180285][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.190128][ T5891] usb 2-1: Product: syz [ 179.220985][ T5891] usb 2-1: Manufacturer: syz [ 179.227111][ T5891] usb 2-1: SerialNumber: syz [ 179.240266][ T5891] usb 2-1: config 0 descriptor?? [ 179.517760][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.563489][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.739156][ T5891] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 179.747322][ T5891] usb 2-1: No streaming interface found for terminal 6. [ 179.774637][ T5891] usb 2-1: USB disconnect, device number 12 [ 180.055849][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.170'. [ 180.289365][ T6811] input: syz0 as /devices/virtual/input/input14 [ 180.364402][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 180.509954][ T5936] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 180.560890][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 180.654317][ T5936] usb 5-1: device descriptor read/64, error -71 [ 180.918142][ T5936] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 181.074418][ T5895] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 181.241456][ T5936] usb 5-1: device descriptor read/64, error -71 [ 181.367128][ T5936] usb usb5-port1: attempt power cycle [ 181.388703][ T5895] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.399375][ T5895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.438944][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 181.496468][ T5895] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 181.564790][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 181.575323][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 181.624013][ T5895] usb 2-1: SerialNumber: syz [ 181.724869][ T5936] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 181.746110][ T5936] usb 5-1: device descriptor read/8, error -71 [ 182.183936][ T5936] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 182.357131][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 182.564512][ T5936] usb 5-1: device descriptor read/8, error -71 [ 182.814535][ T5936] usb usb5-port1: unable to enumerate USB device [ 182.844404][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 182.872175][ T24] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 182.880795][ T24] usb 4-1: config 0 has no interface number 0 [ 182.894767][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 182.905308][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.919214][ T24] usb 4-1: Product: syz [ 182.960037][ T24] usb 4-1: Manufacturer: syz [ 182.967248][ T24] usb 4-1: SerialNumber: syz [ 183.129562][ T24] usb 4-1: config 0 descriptor?? [ 183.441618][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.553218][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.733439][ T24] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 183.744031][ T24] usb 4-1: No streaming interface found for terminal 6. [ 183.763193][ T24] usb 4-1: USB disconnect, device number 15 [ 183.864832][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 183.877953][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 183.959186][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 183.991783][ T9] usb 1-1: can't read configurations, error -71 [ 184.034475][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 184.052933][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 184.075850][ T10] usb 3-1: config 0 has no interface number 0 [ 184.123553][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 184.139349][ T5895] usb 2-1: 0:2 : does not exist [ 184.196128][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 184.202372][ T5895] usb 2-1: USB disconnect, device number 13 [ 184.225709][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.299255][ T10] usb 3-1: Product: syz [ 184.315476][ T10] usb 3-1: Manufacturer: syz [ 184.347255][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.377340][ T10] usb 3-1: SerialNumber: syz [ 184.471892][ T10] usb 3-1: config 0 descriptor?? [ 185.041453][ T6866] pim6reg: entered allmulticast mode [ 185.160351][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 185.434511][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 185.482761][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.598280][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.632176][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 185.700473][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.738254][ T9] usb 1-1: config 0 descriptor?? [ 187.200299][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 187.220535][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 187.324331][ T5936] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 187.344331][ T5836] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 187.419526][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 187.434607][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 187.462989][ T9] usb 1-1: USB disconnect, device number 13 [ 187.496619][ T5936] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.505080][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 187.517865][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.529206][ T5836] usb 2-1: config 0 has no interfaces? [ 187.534895][ T5836] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 187.552640][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.562343][ T10] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 187.569897][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 187.592302][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 187.607272][ T5836] usb 2-1: config 0 descriptor?? [ 187.623968][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 187.673424][ T10] usb 3-1: USB disconnect, device number 15 [ 187.721065][ T5936] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 187.774960][ T5936] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 187.799326][ T5936] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 187.834619][ T5936] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.846808][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.873746][ T5936] usb 5-1: Product: syz [ 187.884570][ T5936] usb 5-1: Manufacturer: syz [ 187.892014][ T5936] usb 5-1: SerialNumber: syz [ 187.963508][ T6871] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 187.986488][ T6890] @: renamed from vlan0 (while UP) [ 188.234334][ T6871] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 188.241717][ T6871] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 189.513757][ T6871] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 189.521205][ T6871] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 189.747450][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 189.761074][ T30] kauditd_printk_skb: 152 callbacks suppressed [ 189.761092][ T30] audit: type=1800 audit(1748028641.483:164): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.184" name="file0" dev="tmpfs" ino=219 res=0 errno=0 [ 189.788034][ T5936] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 189.794586][ T5936] cdc_mbim 5-1:1.0: dwNtbInMaxSize=5 is too small. Using 2048 [ 189.802062][ T5936] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 189.973718][ T5936] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 189.993916][ T5936] wwan wwan0: port wwan0mbim0 attached [ 190.010494][ T5936] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42 [ 190.048894][ T5936] usb 5-1: USB disconnect, device number 17 [ 190.060629][ T5936] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 190.157448][ T5936] wwan wwan0: port wwan0mbim0 disconnected [ 190.484754][ T5895] usb 2-1: USB disconnect, device number 14 [ 190.794030][ T5936] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 190.929707][ T5895] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 190.974314][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 190.981967][ T5936] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 191.018740][ T5936] usb 4-1: config 0 has no interface number 0 [ 191.072352][ T5936] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 191.089486][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.103877][ T5936] usb 4-1: Product: syz [ 191.118210][ T5936] usb 4-1: Manufacturer: syz [ 191.129197][ T5936] usb 4-1: SerialNumber: syz [ 191.147469][ T5936] usb 4-1: config 0 descriptor?? [ 191.236332][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 191.604342][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 191.886638][ T6911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.256201][ T6911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.028129][ T5936] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 193.047060][ T5936] usb 4-1: No streaming interface found for terminal 6. [ 193.111345][ T5936] usb 4-1: USB disconnect, device number 16 [ 194.079973][ T5895] usb 2-1: unable to get BOS descriptor or descriptor too short [ 194.115653][ T6942] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 194.137901][ T5895] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 194.184292][ T5895] usb 2-1: can't read configurations, error -71 [ 194.258556][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.266935][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.666697][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 194.692803][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 195.067228][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.197'. [ 196.014353][ T5836] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 196.229148][ T5836] usb 3-1: config 0 has no interfaces? [ 196.261385][ T5836] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 196.270592][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.280838][ T5836] usb 3-1: Product: syz [ 196.285288][ T5836] usb 3-1: Manufacturer: syz [ 196.290523][ T5836] usb 3-1: SerialNumber: syz [ 196.308253][ T5836] usb 3-1: config 0 descriptor?? [ 196.884537][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 197.290695][ T5836] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 197.464874][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 197.751708][ T5836] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 197.761472][ T5836] usb 4-1: config 0 has no interface number 0 [ 197.796473][ T5836] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 197.857216][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.874950][ T5836] usb 4-1: Product: syz [ 197.882800][ T5836] usb 4-1: Manufacturer: syz [ 197.958611][ T5836] usb 4-1: SerialNumber: syz [ 197.973900][ T5836] usb 4-1: config 0 descriptor?? [ 198.190517][ T6990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.203022][ T6990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.223844][ T7009] @: renamed from vlan0 (while UP) [ 198.464535][ T5891] usb 3-1: USB disconnect, device number 16 [ 198.601818][ T7015] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 198.820527][ T5836] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 198.827246][ T5836] usb 4-1: No streaming interface found for terminal 6. [ 198.902292][ T5836] usb 4-1: USB disconnect, device number 17 [ 199.004692][ T5891] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 199.196570][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 199.213173][ T5891] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 199.247836][ T5891] usb 3-1: config 0 has no interface number 0 [ 199.534084][ T5891] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 199.564075][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.584322][ T5896] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 199.584375][ T5891] usb 3-1: Product: syz [ 199.637163][ T5891] usb 3-1: Manufacturer: syz [ 199.663571][ T5891] usb 3-1: SerialNumber: syz [ 199.685142][ T5891] usb 3-1: config 0 descriptor?? [ 199.736433][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 199.743410][ T5896] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 199.756211][ T5896] usb 5-1: config 0 has no interface number 0 [ 199.822789][ T5896] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.849339][ T5896] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 199.909621][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 199.958491][ T5896] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 199.967333][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.982287][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 199.993553][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.027924][ T5896] usb 5-1: Product: syz [ 200.033330][ T5896] usb 5-1: SerialNumber: syz [ 200.062032][ T5896] usb 5-1: config 0 descriptor?? [ 200.105062][ T5896] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 200.196807][ T5896] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input15 [ 200.295607][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 200.315942][ T5891] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 200.334502][ T5891] usb 3-1: No streaming interface found for terminal 6. [ 200.376470][ T5891] usb 3-1: USB disconnect, device number 17 [ 200.507151][ T10] usb 5-1: USB disconnect, device number 18 [ 200.519666][ T7019] ALSA: mixer_oss: invalid OSS volume '' [ 200.604140][ T10] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 200.999282][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 201.024995][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 201.134321][ T5896] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 201.289440][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 201.305125][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 201.534340][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 201.550359][ T5891] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 201.604586][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 201.610815][ T5141] Bluetooth: hci0: command 0x0406 tx timeout [ 201.617123][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 201.620141][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 201.624022][ T5141] Bluetooth: hci1: command 0x0406 tx timeout [ 201.802889][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 201.808533][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 202.369566][ T10] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 202.396781][ T5891] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.409700][ T5891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.437140][ T10] usb 4-1: config 0 has no interface number 0 [ 202.443530][ T5891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.488120][ T5891] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.523286][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 202.617205][ T5891] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.636430][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.694332][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.702569][ T10] usb 4-1: Product: syz [ 202.711346][ T10] usb 4-1: Manufacturer: syz [ 202.718285][ T10] usb 4-1: SerialNumber: syz [ 202.757369][ T10] usb 4-1: config 0 descriptor?? [ 203.078658][ T7037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.087675][ T7037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.269437][ T7038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.308997][ T10] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 203.341803][ T10] usb 4-1: No streaming interface found for terminal 6. [ 203.406504][ T10] usb 4-1: USB disconnect, device number 18 [ 203.433010][ T5891] usb 5-1: usb_control_msg returned -71 [ 203.441552][ T5891] usbtmc 5-1:16.0: can't read capabilities [ 203.478832][ T5891] usb 5-1: USB disconnect, device number 19 [ 204.043821][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short [ 204.077812][ T5896] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 204.117203][ T5896] usb 1-1: can't read configurations, error -71 [ 204.187614][ T7064] input: syz0 as /devices/virtual/input/input16 [ 204.292365][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 204.949856][ T5896] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 205.276818][ T5896] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.289854][ T5896] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 205.330247][ T5896] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.357233][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.383751][ T7077] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 205.425112][ T5896] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.264448][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 206.424405][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 206.488435][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 206.505862][ T24] usb 3-1: config 0 has no interface number 0 [ 206.552528][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 206.577340][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 206.632628][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 206.649848][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 206.687566][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 206.700576][ T24] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 206.877542][ T24] usb 3-1: Product: syz [ 206.881808][ T24] usb 3-1: SerialNumber: syz [ 207.416745][ T24] usb 3-1: config 0 descriptor?? [ 208.279978][ T24] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 208.301815][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input17 [ 208.987489][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 209.054563][ T5896] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 209.209759][ C1] cm109_urb_ctl_callback: 218 callbacks suppressed [ 209.209776][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 209.224836][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 209.232245][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 209.239392][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 209.246515][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 209.253557][ T24] usb 3-1: USB disconnect, device number 18 [ 209.259482][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 209.259499][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 209.304472][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 209.355580][ T7085] ALSA: mixer_oss: invalid OSS volume '' [ 209.375871][ T24] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 209.456797][ T47] usb 1-1: USB disconnect, device number 15 [ 209.622828][ T5896] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 209.658779][ T5896] usb 4-1: config 0 has no interface number 0 [ 209.685993][ T5896] usb 4-1: config 0 interface 12 has no altsetting 0 [ 209.796056][ T5896] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 209.830312][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.867158][ T5896] usb 4-1: Product: syz [ 209.891412][ T5896] usb 4-1: Manufacturer: syz [ 209.904515][ T5896] usb 4-1: SerialNumber: syz [ 209.923625][ T5896] usb 4-1: config 0 descriptor?? [ 210.131466][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 210.476876][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 210.562248][ T10] usb 1-1: config 0 has no interfaces? [ 210.592858][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 211.307974][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.334090][ T10] usb 1-1: config 0 descriptor?? [ 211.454346][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 212.104420][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 212.587564][ T5896] usb 4-1: can't set config #0, error -71 [ 212.637496][ T5896] usb 4-1: USB disconnect, device number 19 [ 212.957996][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 213.154493][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 213.198520][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 213.207468][ T5896] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 213.310657][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.341283][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.390765][ T5896] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 213.406121][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.430951][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.463250][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 213.494644][ T5896] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 213.504041][ T5896] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 213.512359][ T5896] usb 4-1: Manufacturer: syz [ 213.525823][ T5896] usb 4-1: config 0 descriptor?? [ 214.153924][ T5936] usb 1-1: USB disconnect, device number 16 [ 214.181668][ T5896] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 214.191431][ T5896] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 214.244556][ T5896] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 214.519706][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 214.570711][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 214.604319][ T24] usb 3-1: can't read configurations, error -71 [ 214.742596][ T7148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.752650][ T7148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.427187][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 215.436355][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 215.867618][ T976] usb 4-1: USB disconnect, device number 20 [ 216.098821][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 216.115417][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 216.123149][ T9] usb 5-1: can't read configurations, error -71 [ 216.446220][ T5891] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 219.933382][ T5891] usb 2-1: device descriptor read/all, error -71 [ 220.313468][ T976] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 220.604111][ T976] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 220.674305][ T976] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 220.706197][ T976] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 221.315374][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.424578][ T7182] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 221.475817][ T976] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.172009][ T7209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.182669][ T7209] bridge0: port 3(bond1) entered blocking state [ 222.190498][ T7209] bridge0: port 3(bond1) entered disabled state [ 222.197475][ T7209] bond1: entered allmulticast mode [ 222.206956][ T7209] bond1: entered promiscuous mode [ 222.226252][ T7209] bridge0: port 3(bond1) entered blocking state [ 222.232678][ T7209] bridge0: port 3(bond1) entered forwarding state [ 222.246016][ T2133] bridge0: port 3(bond1) entered disabled state [ 222.304639][ T976] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 222.472708][ T976] usb 2-1: config 0 has no interfaces? [ 222.582631][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 222.609234][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 222.853088][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 222.879104][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 223.059264][ T976] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 223.095392][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.122986][ T976] usb 2-1: Product: syz [ 223.136169][ T976] usb 2-1: Manufacturer: syz [ 223.159679][ T976] usb 2-1: SerialNumber: syz [ 223.199342][ T976] usb 2-1: config 0 descriptor?? [ 223.219807][ T5936] usb 5-1: USB disconnect, device number 22 [ 226.948862][ T5936] usb 2-1: USB disconnect, device number 19 [ 227.065352][ T5896] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 227.254508][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 227.286429][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 227.339366][ T5896] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 227.849687][ T5896] usb 3-1: config 0 has no interface number 0 [ 228.044334][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 229.822155][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.842906][ T5896] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 229.866742][ T7246] ALSA: mixer_oss: invalid OSS volume '' [ 229.918952][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.953789][ T5896] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 229.987972][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.036214][ T5896] usb 3-1: string descriptor 0 read error: -71 [ 230.068825][ T5896] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 230.080488][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.124619][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 230.164141][ T5896] usb 3-1: config 0 descriptor?? [ 230.169234][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.185375][ T5896] usb 3-1: can't set config #0, error -71 [ 230.210912][ T5896] usb 3-1: USB disconnect, device number 21 [ 230.219548][ T24] usb 1-1: config 0 descriptor?? [ 230.233880][ T24] usb 1-1: can't set config #0, error -71 [ 230.250507][ T24] usb 1-1: USB disconnect, device number 17 [ 230.304396][ T5936] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 230.696625][ T5936] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.704837][ T5936] usb 4-1: config 0 has no interface number 0 [ 230.710912][ T5936] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 230.782398][ T5936] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 230.853023][ T5936] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 230.874506][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.908050][ T5936] usb 4-1: config 0 descriptor?? [ 230.918355][ T7267] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 230.931804][ T5936] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 231.568155][ T7285] @: renamed from vlan0 (while UP) [ 232.430043][ T5936] usb 4-1: USB disconnect, device number 21 [ 235.028390][ T7306] futex_wake_op: syz.3.265 tries to shift op by -33; fix this program [ 235.117286][ T7306] netdevsim netdevsim3: Direct firmware load for . [ 235.117286][ T7306] failed with error -2 [ 235.132156][ T7306] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 235.132156][ T7306] [ 235.344715][ T5896] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 235.754318][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 237.015026][ T7334] pim6reg: entered allmulticast mode [ 239.142353][ T5896] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.185333][ T5896] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 239.266280][ T5896] usb 3-1: can't read configurations, error -71 [ 240.874486][ T7358] usb usb8: usbfs: process 7358 (syz.3.275) did not claim interface 0 before use [ 241.316302][ T5891] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 241.681634][ T5891] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.750779][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.814453][ T5891] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 241.844009][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 241.996232][ T5891] usb 4-1: SerialNumber: syz [ 242.131853][ T7365] kernel profiling enabled (shift: 7) [ 243.024392][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 243.340804][ T24] usb 2-1: config 0 has no interfaces? [ 243.384574][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 243.564315][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.588520][ T24] usb 2-1: Product: syz [ 243.609673][ T24] usb 2-1: Manufacturer: syz [ 243.659869][ T24] usb 2-1: SerialNumber: syz [ 243.691139][ T24] usb 2-1: config 0 descriptor?? [ 243.774396][ T5836] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 244.860134][ T5891] usb 4-1: 0:2 : does not exist [ 244.894847][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 244.937899][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.954287][ T5836] usb 3-1: config 0 has no interfaces? [ 244.984209][ T5836] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 245.005779][ T5891] usb 4-1: USB disconnect, device number 22 [ 245.026802][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.048651][ T7387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.281'. [ 245.303625][ T5836] usb 3-1: config 0 descriptor?? [ 245.398556][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.785131][ T5891] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 245.959837][ T5891] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 245.969290][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.984200][ T5891] usb 4-1: Product: syz [ 246.006528][ T5891] usb 4-1: Manufacturer: syz [ 246.054501][ T5891] usb 4-1: SerialNumber: syz [ 246.106414][ T5891] usb 4-1: config 0 descriptor?? [ 246.133012][ T5936] usb 2-1: USB disconnect, device number 20 [ 246.354371][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 246.883663][ T5891] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 247.829504][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 248.008525][ T5936] usb 3-1: USB disconnect, device number 24 [ 248.156639][ T7403] netlink: 'syz.4.285': attribute type 3 has an invalid length. [ 248.164517][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 248.189081][ T7403] IPv6: Can't replace route, no match found [ 248.435234][ T5836] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 248.555724][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 248.623680][ T5836] usb 5-1: config 2 has an invalid interface number: 243 but max is 0 [ 248.632439][ T5836] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 248.690906][ T5836] usb 5-1: config 2 has no interface number 0 [ 248.767781][ T5836] usb 5-1: config 2 interface 243 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 248.787668][ T5836] usb 5-1: New USB device found, idVendor=34ab, idProduct=59bb, bcdDevice=f9.e4 [ 248.798325][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.817986][ T5836] usb 5-1: Product: syz [ 248.833165][ T5836] usb 5-1: Manufacturer: syz [ 248.844018][ T5836] usb 5-1: SerialNumber: syz [ 248.889047][ T5836] usb-storage 5-1:2.243: USB Mass Storage device detected [ 249.284638][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 249.376879][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 249.568806][ T24] usb 1-1: can't read configurations, error -71 [ 249.981169][ T5936] usb 5-1: USB disconnect, device number 23 [ 250.037285][ T5891] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 250.371392][ T5891] usb 4-1: USB disconnect, device number 23 [ 250.744786][ T7440] sctp: [Deprecated]: syz.2.291 (pid 7440) Use of int in max_burst socket option deprecated. [ 250.744786][ T7440] Use struct sctp_assoc_value instead [ 251.074367][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 251.246776][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.267288][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.308736][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 251.353649][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.408519][ T9] usb 3-1: config 0 descriptor?? [ 251.477147][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 252.085792][ T7435] usb 3-1: USB disconnect, device number 25 [ 252.780672][ T7458] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 252.787247][ T7458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 253.119472][ T7458] vhci_hcd vhci_hcd.0: Device attached [ 253.564409][ T5836] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 254.074290][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 254.741413][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 254.786154][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 254.892304][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.916551][ T24] usb 4-1: Product: syz [ 255.581430][ T24] usb 4-1: Manufacturer: syz [ 255.753756][ T24] usb 4-1: SerialNumber: syz [ 255.933302][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.045750][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.087522][ T24] usb 4-1: config 0 descriptor?? [ 256.104469][ T24] usb 4-1: can't set config #0, error -71 [ 256.121339][ T7459] vhci_hcd: connection reset by peer [ 256.137757][ T3476] vhci_hcd: stop threads [ 256.154410][ T3476] vhci_hcd: release socket [ 256.162073][ T24] usb 4-1: USB disconnect, device number 24 [ 256.190920][ T3476] vhci_hcd: disconnect device [ 256.466257][ T7486] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 256.544061][ T9] IPVS: starting estimator thread 0... [ 256.559824][ T976] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 256.675608][ T7488] IPVS: using max 28 ests per chain, 67200 per kthread [ 256.772287][ T976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.782589][ T976] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.800073][ T976] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 256.809800][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 256.830042][ T976] usb 1-1: SerialNumber: syz [ 258.298856][ T7507] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 258.313699][ T7507] netlink: 36 bytes leftover after parsing attributes in process `syz.4.303'. [ 258.724370][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 258.724418][ T5836] vhci_hcd: vhci_device speed not set [ 258.732637][ T47] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 258.972615][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 258.988504][ T976] usb 1-1: 0:2 : does not exist [ 259.112114][ T976] usb 1-1: USB disconnect, device number 20 [ 259.135312][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 259.154616][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 259.168775][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.664655][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.710137][ T47] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.735948][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 259.763290][ T47] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 259.786756][ T47] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 259.798972][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.835617][ T47] usb 5-1: config 0 descriptor?? [ 259.964095][ T5841] Bluetooth: hci5: urb ffff888033835800 submission failed (90) [ 259.984529][ T976] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 260.317939][ T976] usb 1-1: config 0 has no interfaces? [ 260.345740][ T976] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 260.355179][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.363688][ T976] usb 1-1: Product: syz [ 260.368254][ T976] usb 1-1: Manufacturer: syz [ 260.372932][ T976] usb 1-1: SerialNumber: syz [ 260.429251][ T976] usb 1-1: config 0 descriptor?? [ 260.779510][ T7529] AppArmor: change_hat: Invalid input '0x00000000T.LB' [ 260.919399][ T5836] usb 5-1: USB disconnect, device number 24 [ 261.345667][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 261.363578][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 261.378369][ T24] usb 2-1: can't read configurations, error -71 [ 261.463800][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 262.653545][ T24] usb 1-1: USB disconnect, device number 21 [ 262.954685][ T7559] --map-set only usable from mangle table [ 263.492065][ T7557] pim6reg: entered allmulticast mode [ 263.544467][ T976] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 263.621098][ T7569] VFS: Mount too revealing [ 263.705564][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 263.717745][ T976] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 263.727022][ T976] usb 5-1: config 0 has no interface number 0 [ 263.739471][ T976] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 263.748704][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.758851][ T976] usb 5-1: Product: syz [ 263.774758][ T976] usb 5-1: Manufacturer: syz [ 263.792707][ T976] usb 5-1: SerialNumber: syz [ 263.916117][ T976] usb 5-1: config 0 descriptor?? [ 264.397265][ T7585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.422896][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 264.498281][ T7585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.262511][ T976] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 265.347681][ T976] usb 5-1: No streaming interface found for terminal 6. [ 265.404478][ T976] usb 5-1: USB disconnect, device number 25 [ 265.945364][ T976] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 266.605415][ T976] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 266.613555][ T976] usb 2-1: config 0 has no interface number 0 [ 266.636622][ T976] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 266.684319][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.694350][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 267.686278][ T976] usb 2-1: Product: syz [ 267.690497][ T976] usb 2-1: Manufacturer: syz [ 267.929045][ T976] usb 2-1: SerialNumber: syz [ 267.945681][ T976] usb 2-1: config 0 descriptor?? [ 267.953411][ T976] ftdi_sio 2-1:0.23: FTDI USB Serial Device converter detected [ 267.963728][ T976] usb 2-1: Detected SIO [ 267.969928][ T976] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 267.974344][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 268.008574][ T24] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 268.036345][ T24] usb 5-1: config 0 has no interface number 0 [ 268.136915][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 268.161286][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.213148][ T24] usb 5-1: Product: syz [ 268.243660][ T24] usb 5-1: Manufacturer: syz [ 268.260775][ T24] usb 5-1: SerialNumber: syz [ 268.277674][ T7612] netlink: 'syz.2.324': attribute type 6 has an invalid length. [ 268.355084][ T5936] usb 2-1: USB disconnect, device number 23 [ 268.372480][ T24] usb 5-1: config 0 descriptor?? [ 268.416934][ T5936] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 268.442987][ T5936] ftdi_sio 2-1:0.23: device disconnected [ 268.459014][ T7614] xt_NFQUEUE: number of total queues is 0 [ 268.484764][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 268.529108][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 268.582208][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 268.639010][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.653922][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 268.665657][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.289775][ T24] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 269.304479][ T24] usb 5-1: No streaming interface found for terminal 6. [ 269.395639][ T24] usb 5-1: USB disconnect, device number 26 [ 269.614338][ T976] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 269.875030][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 269.884723][ T976] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 269.897114][ T976] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 269.919486][ T976] usb 2-1: string descriptor 0 read error: -22 [ 269.925991][ T976] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 269.937228][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.956239][ T7634] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 270.122603][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 270.865263][ T7632] netlink: 36 bytes leftover after parsing attributes in process `syz.0.330'. [ 271.674411][ T5836] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 271.894841][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 271.909008][ T5836] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 271.921041][ T5836] usb 4-1: config 0 has no interface number 0 [ 271.936707][ T5836] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 271.955715][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.987568][ T5836] usb 4-1: Product: syz [ 271.993449][ T5836] usb 4-1: Manufacturer: syz [ 272.002876][ T5836] usb 4-1: SerialNumber: syz [ 272.019113][ T5836] usb 4-1: config 0 descriptor?? [ 272.346164][ T7657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.621888][ T7657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.667191][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 272.739495][ T5891] usb 2-1: USB disconnect, device number 24 [ 272.950599][ T7664] ALSA: mixer_oss: invalid OSS volume 'T' [ 272.977313][ T5836] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 272.993845][ T7664] netlink: 'syz.2.335': attribute type 11 has an invalid length. [ 273.003082][ T5836] usb 4-1: No streaming interface found for terminal 6. [ 273.028887][ T5836] usb 4-1: USB disconnect, device number 25 [ 275.147980][ T2151] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 275.390208][ T2151] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 275.400932][ T2151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.422229][ T2151] usb 5-1: config 0 descriptor?? [ 275.438822][ T2151] cp210x 5-1:0.0: cp210x converter detected [ 275.649926][ T2151] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 275.657509][ T2151] cp210x 5-1:0.0: querying part number failed [ 275.687130][ T2151] usb 5-1: cp210x converter now attached to ttyUSB0 [ 275.867738][ T7689] could not allocate digest TFM handle vmac64(sm4) [ 276.294384][ T5836] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 276.483818][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 276.574809][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 276.581478][ T5836] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 276.593767][ T5836] usb 2-1: config 0 has no interface number 0 [ 276.653530][ T5836] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 276.679441][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 276.689842][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.704398][ T5836] usb 2-1: Product: syz [ 276.715859][ T5836] usb 2-1: Manufacturer: syz [ 276.724019][ T5836] usb 2-1: SerialNumber: syz [ 276.743152][ T5836] usb 2-1: config 0 descriptor?? [ 277.078854][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.087949][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.259184][ T7720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.373043][ T5836] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 277.394458][ T5836] usb 2-1: No streaming interface found for terminal 6. [ 277.430984][ T5836] usb 2-1: USB disconnect, device number 25 [ 277.971984][ T5891] usb 5-1: USB disconnect, device number 27 [ 278.005527][ T7731] fuse: Bad value for 'fd' [ 278.033079][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 278.034032][ T7731] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 278.114375][ T976] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 278.134952][ T5891] cp210x 5-1:0.0: device disconnected [ 278.316341][ T976] usb 1-1: Using ep0 maxpacket: 8 [ 278.352768][ T976] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 278.400935][ T2151] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 278.420924][ T976] usb 1-1: config 0 has no interface number 0 [ 278.473675][ T976] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 278.482940][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.491114][ T5891] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 278.498873][ T976] usb 1-1: Product: syz [ 278.503055][ T976] usb 1-1: Manufacturer: syz [ 278.523833][ T976] usb 1-1: SerialNumber: syz [ 278.573977][ T976] usb 1-1: config 0 descriptor?? [ 278.585025][ T2151] usb 2-1: Using ep0 maxpacket: 8 [ 278.596375][ T2151] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 278.604939][ T2151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.626381][ T2151] usb 2-1: config 0 has no interface number 0 [ 278.644770][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 278.660578][ T2151] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 278.667284][ T5891] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 278.683423][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.698071][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.708151][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 278.736252][ T5891] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 278.747877][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.748049][ T5891] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 278.767441][ T5891] usb 5-1: Manufacturer: syz [ 278.776076][ T5891] usb 5-1: config 0 descriptor?? [ 278.783257][ T2151] usb 2-1: Product: syz [ 278.795595][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.820750][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.839202][ T2151] usb 2-1: Manufacturer: syz [ 278.850897][ T2151] usb 2-1: SerialNumber: syz [ 278.877700][ T2151] usb 2-1: config 0 descriptor?? [ 278.906198][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.938043][ T976] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 278.944743][ T976] usb 1-1: No streaming interface found for terminal 6. [ 278.976555][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.994431][ T976] usb 1-1: USB disconnect, device number 22 [ 279.037789][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 279.072440][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 279.092946][ T24] usb 4-1: SerialNumber: syz [ 279.261912][ T5891] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 279.288761][ T5891] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 279.313409][ T7740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.322345][ T7740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.379651][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 279.404118][ T5891] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 279.805228][ T5891] usb 2-1: USB disconnect, device number 26 [ 279.830475][ T7754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.861076][ T7754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.900843][ T7753] sctp: [Deprecated]: syz.0.354 (pid 7753) Use of int in max_burst socket option deprecated. [ 279.900843][ T7753] Use struct sctp_assoc_value instead [ 281.064426][ T2151] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 281.236717][ T2151] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.259693][ T2151] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.368256][ T2151] usb 1-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 281.436508][ T2151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.459033][ T2151] usb 1-1: config 0 descriptor?? [ 281.474818][ T7761] ALSA: mixer_oss: invalid OSS volume 'T' [ 281.492446][ T2151] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 281.527195][ T7761] netlink: 'syz.1.355': attribute type 11 has an invalid length. [ 281.823184][ T24] usb 4-1: 0:2 : does not exist [ 281.850107][ T24] usb 4-1: USB disconnect, device number 26 [ 281.976570][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.090924][ T976] usb 5-1: USB disconnect, device number 28 [ 282.338043][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 282.675450][ T976] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 282.904385][ T976] usb 5-1: Using ep0 maxpacket: 16 [ 282.946841][ T976] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 282.955890][ T976] usb 5-1: config 0 has no interface number 0 [ 282.962033][ T976] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 282.981263][ T976] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 283.030442][ T976] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 283.041823][ T976] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 283.057629][ T976] usb 5-1: Product: syz [ 283.064551][ T976] usb 5-1: SerialNumber: syz [ 283.081451][ T976] usb 5-1: config 0 descriptor?? [ 283.102865][ T976] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 283.126240][ T976] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input19 [ 283.312373][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 283.513363][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 283.520558][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 283.527712][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 283.534920][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 283.542021][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 283.549178][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 283.557962][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 283.565737][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 283.573514][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 283.581130][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 283.588524][ T976] usb 5-1: USB disconnect, device number 29 [ 283.594680][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 283.613114][ T976] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 283.625271][ T2151] usb 1-1: USB disconnect, device number 23 [ 284.113740][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 285.644371][ T5936] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 285.847005][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 285.865116][ T5936] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 285.873433][ T5936] usb 4-1: config 0 has no interface number 0 [ 285.931544][ T5936] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 285.941523][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.974460][ T5936] usb 4-1: Product: syz [ 285.978646][ T5936] usb 4-1: Manufacturer: syz [ 286.007142][ T7807] syzkaller1: entered promiscuous mode [ 286.013561][ T7807] syzkaller1: entered allmulticast mode [ 286.207792][ T5936] usb 4-1: SerialNumber: syz [ 286.246004][ T5936] usb 4-1: config 0 descriptor?? [ 286.547124][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.559277][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.964701][ T5936] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 287.014806][ T5936] usb 4-1: No streaming interface found for terminal 6. [ 287.057024][ T5936] usb 4-1: USB disconnect, device number 27 [ 288.454419][ T976] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 288.897220][ T5936] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 288.938630][ T976] usb 4-1: config 0 has no interfaces? [ 289.083155][ T976] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 289.139106][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.200737][ T5936] usb 1-1: not running at top speed; connect to a high speed hub [ 289.226886][ T976] usb 4-1: Product: syz [ 289.233953][ T976] usb 4-1: Manufacturer: syz [ 289.247715][ T976] usb 4-1: SerialNumber: syz [ 289.285473][ T976] usb 4-1: config 0 descriptor?? [ 289.382472][ T5936] usb 1-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 289.544304][ T5936] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 289.581334][ T5936] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 289.614814][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.661107][ T7830] AppArmor: change_hat: Invalid input '0x00000000T.LB' [ 289.747782][ T5936] usb 1-1: Product: syz [ 289.764318][ T47] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 289.967109][ T5936] usb 1-1: Manufacturer: syz [ 290.087457][ T5936] usb 1-1: SerialNumber: syz [ 290.222039][ T47] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.232312][ T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.244515][ T47] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 290.253695][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 290.261808][ T47] usb 5-1: SerialNumber: syz [ 290.973300][ T7850] wireguard0: entered promiscuous mode [ 290.979390][ T7850] wireguard0: entered allmulticast mode [ 291.033634][ T2151] usb 4-1: USB disconnect, device number 28 [ 291.875639][ T5936] usb 1-1: USB disconnect, device number 24 [ 292.177756][ T47] usb 5-1: 0:2 : does not exist [ 292.267111][ T47] usb 5-1: USB disconnect, device number 30 [ 296.323806][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 296.913103][ T7918] --map-set only usable from mangle table [ 297.123114][ T976] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 297.338050][ T976] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 297.347410][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 297.365875][ T976] usb 4-1: SerialNumber: syz [ 297.633486][ T7906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.388'. [ 297.675850][ T976] usb 4-1: config 0 descriptor?? [ 297.691305][ T976] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 297.698924][ T976] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 298.574647][ T47] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 298.734474][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 298.747885][ T47] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 298.758872][ T47] usb 1-1: config 0 has no interface number 0 [ 298.777859][ T47] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 298.825809][ T47] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 298.964605][ T5896] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 299.054715][ T47] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 299.069938][ T47] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 299.080054][ T47] usb 1-1: Product: syz [ 299.086814][ T47] usb 1-1: SerialNumber: syz [ 299.185555][ T47] usb 1-1: config 0 descriptor?? [ 299.195148][ T5896] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 299.205170][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.241967][ T47] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 299.255098][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.298619][ T47] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input20 [ 299.317046][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 299.336315][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.372590][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.422667][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 299.440720][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 299.456592][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.465984][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.526160][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 299.853839][ C1] cm109_urb_ctl_callback: 1 callbacks suppressed [ 299.853868][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.868409][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.875617][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.882827][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.890018][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.897291][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.904445][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.911579][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.918701][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.925934][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.968599][ T47] usb 1-1: USB disconnect, device number 25 [ 299.974594][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 300.005728][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.025670][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.071983][ T47] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 300.102082][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 300.299982][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.309222][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.324394][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 300.332374][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.354777][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.414295][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 300.445314][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.477147][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.504436][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 300.512517][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.524758][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.538955][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 300.554586][ T5896] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 300.563830][ T5896] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 300.573413][ T5896] usb 2-1: Product: syz [ 300.579105][ T5896] usb 2-1: Manufacturer: syz [ 300.583812][ T5896] usb 2-1: SerialNumber: syz [ 300.605618][ T5896] usb 2-1: config 0 descriptor?? [ 300.644997][ T5896] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 300.820287][ T976] usb 4-1: USB disconnect, device number 29 [ 301.041752][ T5896] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 301.276614][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 301.312135][ T5896] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 301.321613][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.441655][ T5896] usb 1-1: Product: syz [ 301.496450][ T5896] usb 1-1: Manufacturer: syz [ 301.506927][ T5896] usb 1-1: SerialNumber: syz [ 301.517801][ T5896] usb 1-1: config 0 descriptor?? [ 301.800764][ T5896] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 301.816031][ T47] usb 2-1: USB disconnect, device number 27 [ 301.827663][ T47] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 303.384144][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 303.584707][ T976] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 303.770403][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 303.851224][ T2151] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 304.099723][ T2151] usb 2-1: unable to get BOS descriptor or descriptor too short [ 304.112816][ T2151] usb 2-1: not running at top speed; connect to a high speed hub [ 304.308922][ T2151] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 304.413843][ T2151] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.585221][ T5896] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 304.626073][ T5896] usb 1-1: USB disconnect, device number 26 [ 304.632699][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.676792][ T2151] usb 2-1: Product: syz [ 304.794946][ T2151] usb 2-1: Manufacturer: syz [ 304.883146][ T2151] usb 2-1: SerialNumber: syz [ 305.116427][ T2151] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 305.947939][ T2151] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 306.185334][ T2151] usb 1-1: Using ep0 maxpacket: 16 [ 306.205121][ T2151] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 306.213169][ T2151] usb 1-1: config 0 has no interface number 0 [ 306.255067][ T2151] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 306.305303][ T2151] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 306.641080][ T2151] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 306.715128][ T2151] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 306.755616][ T2151] usb 1-1: Product: syz [ 306.773416][ T2151] usb 1-1: SerialNumber: syz [ 306.949384][ T2151] usb 1-1: config 0 descriptor?? [ 306.969471][ T2151] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 306.991857][ T2151] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input21 [ 307.174898][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 307.206750][ T976] usb 4-1: unable to get BOS descriptor or descriptor too short [ 307.231658][ T976] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 307.260947][ T976] usb 4-1: can't read configurations, error -71 [ 307.367916][ T10] usb 2-1: USB disconnect, device number 28 [ 307.376162][ C1] cm109_urb_ctl_callback: 195 callbacks suppressed [ 307.376183][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 307.389925][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 307.397387][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 307.404567][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 307.411680][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 307.419169][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 307.426797][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 307.433914][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 307.441018][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 307.448156][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 307.464676][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 307.473668][ T2151] usb 1-1: USB disconnect, device number 27 [ 307.543175][ T2151] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 310.824387][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 311.012573][ T8044] netlink: 460 bytes leftover after parsing attributes in process `syz.2.415'. [ 311.197788][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 311.210670][ T10] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 311.219494][ T10] usb 4-1: config 0 has no interface number 0 [ 311.231158][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 311.241176][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.283171][ T10] usb 4-1: Product: syz [ 311.292918][ T10] usb 4-1: Manufacturer: syz [ 311.482706][ T10] usb 4-1: SerialNumber: syz [ 311.507436][ T10] usb 4-1: config 0 descriptor?? [ 311.733969][ T8037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.745511][ T8037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.829915][ T10] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 311.838421][ T10] usb 4-1: No streaming interface found for terminal 6. [ 311.852372][ T10] usb 4-1: USB disconnect, device number 32 [ 312.056323][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 312.298650][ T2151] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 312.503912][ T2151] usb 2-1: config 0 has no interfaces? [ 312.515638][ T2151] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 312.526120][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.540125][ T2151] usb 2-1: Product: syz [ 312.546846][ T2151] usb 2-1: Manufacturer: syz [ 312.551471][ T2151] usb 2-1: SerialNumber: syz [ 312.721297][ T2151] usb 2-1: config 0 descriptor?? [ 312.735064][ T8058] syzkaller1: entered promiscuous mode [ 312.754693][ T8058] syzkaller1: entered allmulticast mode [ 313.025575][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 313.146515][ T8052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.416'. [ 313.415212][ T2151] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 313.618908][ T2151] usb 4-1: config 0 has an invalid interface number: 241 but max is 0 [ 313.629789][ T2151] usb 4-1: config 0 has no interface number 0 [ 313.657813][ T2151] usb 4-1: New USB device found, idVendor=ea6a, idProduct=daa1, bcdDevice=f1.60 [ 313.680878][ T2151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.691439][ T2151] usb 4-1: Product: syz [ 313.696715][ T2151] usb 4-1: Manufacturer: syz [ 313.701341][ T2151] usb 4-1: SerialNumber: syz [ 313.729026][ T2151] usb 4-1: config 0 descriptor?? [ 313.750629][ T2151] rndis_host 4-1:0.241: skipping garbage [ 313.776887][ T2151] usb 4-1: bad CDC descriptors [ 313.882144][ T8070] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 313.894927][ T8070] Cannot find add_set index 3 as target [ 313.904696][ T5891] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 314.034073][ T5896] usb 4-1: USB disconnect, device number 33 [ 314.078048][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 314.086169][ T5891] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 314.096631][ T5891] usb 1-1: config 0 has no interface number 0 [ 314.107249][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 314.118576][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.127846][ T5891] usb 1-1: Product: syz [ 314.132183][ T5891] usb 1-1: Manufacturer: syz [ 314.137630][ T5891] usb 1-1: SerialNumber: syz [ 314.145402][ T5891] usb 1-1: config 0 descriptor?? [ 314.364139][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.379773][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.457950][ T5891] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 314.473854][ T5891] usb 1-1: No streaming interface found for terminal 6. [ 314.498880][ T5891] usb 1-1: USB disconnect, device number 28 [ 314.819118][ T8079] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.423'. [ 314.828872][ T8079] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 314.837401][ T8079] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 315.386867][ T5891] usb 2-1: USB disconnect, device number 29 [ 315.431268][ T30] audit: type=1326 audit(1748028767.063:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 315.490626][ T30] audit: type=1326 audit(1748028767.063:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 315.552975][ T30] audit: type=1326 audit(1748028767.083:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 315.576198][ T8087] warning: `syz.3.425' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 315.617342][ T30] audit: type=1326 audit(1748028767.083:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 315.667998][ T30] audit: type=1326 audit(1748028767.083:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 315.710220][ T30] audit: type=1326 audit(1748028767.083:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 315.794669][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 316.034433][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 316.284409][ T30] audit: type=1326 audit(1748028767.083:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 316.286924][ T10] usb 1-1: no configurations [ 316.782029][ T10] usb 1-1: can't read configurations, error -22 [ 316.791631][ T30] audit: type=1326 audit(1748028767.083:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 316.941198][ T30] audit: type=1326 audit(1748028767.083:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 316.974860][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 317.092436][ T30] audit: type=1326 audit(1748028767.083:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 317.129790][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.137886][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.245143][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 317.251694][ T10] usb 1-1: no configurations [ 317.256795][ T10] usb 1-1: can't read configurations, error -22 [ 317.270265][ T10] usb usb1-port1: attempt power cycle [ 318.972825][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 319.035619][ T10] usb 1-1: device descriptor read/8, error -71 [ 320.208269][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 321.595833][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.434'. [ 321.840356][ T8143] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[8143] [ 322.721772][ T8150] syz.4.438 uses obsolete (PF_INET,SOCK_PACKET) [ 322.771220][ T8144] netlink: 'syz.2.437': attribute type 20 has an invalid length. [ 322.892480][ T30] kauditd_printk_skb: 587 callbacks suppressed [ 322.892500][ T30] audit: type=1804 audit(1748028774.603:762): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.438" name="file0" dev="ramfs" ino=15821 res=1 errno=0 [ 323.324383][ T2151] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 323.448178][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 323.715347][ T2151] usb 2-1: Using ep0 maxpacket: 8 [ 323.721989][ T2151] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 323.730622][ T2151] usb 2-1: config 0 has no interface number 0 [ 323.739684][ T2151] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 323.749487][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.804846][ T2151] usb 2-1: Product: syz [ 323.809228][ T2151] usb 2-1: Manufacturer: syz [ 323.814008][ T2151] usb 2-1: SerialNumber: syz [ 323.826194][ T2151] usb 2-1: config 0 descriptor?? [ 324.079295][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 324.098125][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.136926][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.452883][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 324.544476][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 324.591920][ T2151] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 324.624793][ T2151] usb 2-1: No streaming interface found for terminal 6. [ 324.686104][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.699215][ T2151] usb 2-1: USB disconnect, device number 30 [ 324.761315][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.091271][ T8163] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 325.284001][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.405931][ T5891] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 326.625770][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 326.653915][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 326.770587][ T5891] usb 2-1: no configurations [ 326.777607][ T5891] usb 2-1: can't read configurations, error -22 [ 326.928705][ T5891] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 327.124328][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 327.149446][ T5891] usb 2-1: no configurations [ 327.154069][ T5891] usb 2-1: can't read configurations, error -22 [ 327.163187][ T5891] usb usb2-port1: attempt power cycle [ 327.363681][ T2151] usb 4-1: USB disconnect, device number 34 [ 327.524518][ T5891] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 327.580622][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 327.606381][ T5891] usb 2-1: no configurations [ 327.630486][ T5891] usb 2-1: can't read configurations, error -22 [ 327.784398][ T5891] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 327.814113][ T8190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.858489][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 327.867171][ T5891] usb 2-1: no configurations [ 327.881565][ T5891] usb 2-1: can't read configurations, error -22 [ 327.890823][ T5891] usb usb2-port1: unable to enumerate USB device [ 328.108556][ T8203] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.449'. [ 328.136461][ T8203] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 328.147075][ T8203] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 328.534647][ T5891] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 328.738206][ T5891] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.774804][ T5891] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.933509][ T8211] fuse: Unknown parameter 'kj&9ߓWRK+3xd?訩?zfK?+L?&ѷv8' [ 328.963543][ T5891] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 329.127155][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 329.160911][ T5891] usb 5-1: SerialNumber: syz [ 329.824939][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 329.995793][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.006625][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.033370][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 330.043091][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 330.060793][ T24] usb 1-1: SerialNumber: syz [ 331.360502][ T5891] usb 5-1: 0:2 : does not exist [ 331.479164][ T5891] usb 5-1: USB disconnect, device number 31 [ 331.573886][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.710651][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 331.834531][ T2151] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 331.948548][ T8209] delete_channel: no stack [ 332.004758][ T2151] usb 4-1: Using ep0 maxpacket: 8 [ 332.033208][ T2151] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 332.051688][ T2151] usb 4-1: config 0 has no interface number 0 [ 332.069820][ T2151] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 332.089573][ T2151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.144456][ T5891] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 332.152482][ C0] raw-gadget.3 gadget.4: ignoring, device is not running [ 332.191483][ T2151] usb 4-1: Product: syz [ 332.253046][ T2151] usb 4-1: Manufacturer: syz [ 332.284426][ T5891] usb 5-1: device descriptor read/64, error -32 [ 332.297576][ T2151] usb 4-1: SerialNumber: syz [ 332.323303][ T2151] usb 4-1: config 0 descriptor?? [ 332.605205][ T5891] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 332.610231][ T24] usb 1-1: 0:2 : does not exist [ 332.613806][ C0] raw-gadget.3 gadget.4: ignoring, device is not running [ 332.729074][ T8219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.741327][ T8219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.772733][ T24] usb 1-1: USB disconnect, device number 33 [ 332.774400][ T5891] usb 5-1: device descriptor read/64, error -32 [ 332.897387][ T2151] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 332.907703][ T2151] usb 4-1: No streaming interface found for terminal 6. [ 332.974693][ T5891] usb usb5-port1: attempt power cycle [ 332.980637][ T7109] udevd[7109]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.998856][ T2151] usb 4-1: USB disconnect, device number 35 [ 333.036444][ T8231] Cannot find add_set index 3 as target [ 333.324439][ T5891] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 333.349943][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 333.834187][ T8245] openvswitch: netlink: Message has 4 unknown bytes. [ 334.262153][ T8256] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.461'. [ 334.424463][ T8256] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 334.680425][ T8256] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 335.377515][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 335.387568][ T5891] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 335.395539][ T5891] usb 5-1: can't read configurations, error -71 [ 335.923879][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 336.204450][ T976] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 336.254732][ T2151] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 336.378268][ T976] usb 4-1: not running at top speed; connect to a high speed hub [ 336.404527][ T976] usb 4-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 336.504378][ T2151] usb 2-1: Using ep0 maxpacket: 16 [ 336.527222][ T976] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 336.585416][ T976] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 336.594925][ T2151] usb 2-1: config 7 has an invalid interface number: 76 but max is 0 [ 336.598933][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.616333][ T976] usb 4-1: Product: syz [ 336.620593][ T976] usb 4-1: Manufacturer: syz [ 336.627715][ T976] usb 4-1: SerialNumber: syz [ 336.699651][ T2151] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 336.879306][ T2151] usb 2-1: config 7 has no interface number 0 [ 336.938463][ T2151] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 337.071643][ T2151] usb 2-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 337.151361][ T2151] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 337.433172][ T2151] usb 2-1: config 7 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 337.445103][ T2151] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xF has an invalid bInterval 127, changing to 10 [ 337.460505][ T2151] usb 2-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 337.471907][ T2151] usb 2-1: config 7 interface 76 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 337.483868][ T2151] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x6 has invalid maxpacket 50176, setting to 1024 [ 337.499898][ T2151] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 337.511658][ T2151] usb 2-1: config 7 interface 76 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 337.529765][ T2151] usb 2-1: config 7 interface 76 has no altsetting 0 [ 337.776445][ T2151] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=b7.d3 [ 337.785952][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.794179][ T2151] usb 2-1: Product: 殄⋀噝袣픖揟䧎⽆쿋ﲎ猌ᦜ碙ᥒ᫥䪲Გ찙蔈அ檼㑑ᳵ鰗琷咖憕沤㬫녣撞磻孩⋼쬱〗桬ᖒୡ쬂ጆ￥fȕ斕꼺鮃꺭瞒偸简度轗폡 [ 337.896023][ T2151] usb 2-1: Manufacturer: 茍掞僓ﱶ [ 337.937354][ T2151] usb 2-1: SerialNumber: 瑥ɑ稿ࡇ삆ⲇṲ撙ᘹ뮥蔀쏭쯁険鋏ኼ胎쿘㌫雐鯎竭跖䖹᪊᳖ᥚ樂讕葱㇐຦ᶉ圗䃲渹槗궞損犱 [ 338.335444][ T8263] netlink: 'syz.1.464': attribute type 3 has an invalid length. [ 338.405363][ T2151] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.422217][ T2151] usb 2-1: invalid MIDI in EP 0 [ 338.573007][ T2151] snd-usb-audio 2-1:7.76: probe with driver snd-usb-audio failed with error -22 [ 338.641650][ T2151] usb 2-1: USB disconnect, device number 35 [ 338.765886][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.833216][ T976] usb 4-1: USB disconnect, device number 36 [ 339.314388][ T976] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 339.914518][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 339.926004][ T976] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 340.107664][ T976] usb 4-1: config 0 has no interface number 0 [ 340.122576][ T976] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 340.131994][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.143780][ T976] usb 4-1: Product: syz [ 340.177173][ T976] usb 4-1: Manufacturer: syz [ 340.186762][ T976] usb 4-1: SerialNumber: syz [ 340.219046][ T976] usb 4-1: config 0 descriptor?? [ 340.244353][ T5892] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 340.678425][ T5892] usb 2-1: not running at top speed; connect to a high speed hub [ 340.744970][ T2151] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 340.796958][ T5892] usb 2-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 340.813099][ T5892] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 340.830913][ T5892] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 340.842740][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.854514][ T5892] usb 2-1: Product: syz [ 340.860503][ T5892] usb 2-1: Manufacturer: syz [ 340.871767][ T5892] usb 2-1: SerialNumber: syz [ 340.883066][ T8290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.915119][ T2151] usb 1-1: Using ep0 maxpacket: 16 [ 340.925106][ T8290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.942185][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.967927][ T2151] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 340.983922][ T2151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.998654][ T2151] usb 1-1: config 0 descriptor?? [ 341.026859][ T976] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 341.038187][ T976] usb 4-1: No streaming interface found for terminal 6. [ 341.056152][ T976] usb 4-1: USB disconnect, device number 37 [ 341.237737][ T8302] netlink: 'syz.0.472': attribute type 16 has an invalid length. [ 341.248110][ T8302] netlink: 'syz.0.472': attribute type 17 has an invalid length. [ 341.323397][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.330731][ T8302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.339325][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.346505][ T8302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.593064][ T2151] kye 0003:0458:5016.0008: control desc unexpectedly large [ 341.626011][ T2151] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0008/input/input23 [ 341.691726][ T8302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.773837][ T2151] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0008/input/input24 [ 342.002338][ T2151] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 342.491955][ T5892] usb 2-1: USB disconnect, device number 36 [ 342.683009][ T9] usb 1-1: USB disconnect, device number 34 [ 343.354062][ T8322] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.475'. [ 343.431031][ T8322] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 343.554348][ T8322] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 343.664333][ T47] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 343.774851][ T2151] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 343.832719][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 343.942921][ T47] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 343.975413][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.005023][ T2151] usb 1-1: Using ep0 maxpacket: 16 [ 344.057864][ T47] usb 2-1: config 0 descriptor?? [ 344.297124][ T47] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 344.334473][ T5892] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 344.560193][ T5892] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 344.569130][ T5892] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 344.599858][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 344.822559][ T5892] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 344.870701][ T5892] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 344.918970][ T5892] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 344.971202][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 345.018696][ T5892] usb 5-1: Product: syz [ 345.028762][ T5892] usb 5-1: Manufacturer: syz [ 345.079966][ T5892] cdc_wdm 5-1:1.0: skipping garbage [ 345.094448][ T5892] cdc_wdm 5-1:1.0: skipping garbage [ 345.126032][ T5892] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 345.162651][ T5892] cdc_wdm 5-1:1.0: Unknown control protocol [ 345.301145][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 345.307962][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 345.315041][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 345.321647][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 345.328528][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 345.335129][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 345.342396][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 345.349000][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 345.355537][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 345.362142][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 345.369331][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 345.376006][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 345.382411][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 345.389015][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 345.395466][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 345.402067][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 345.409528][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 345.416138][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 345.422936][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 345.429536][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 345.435940][ T5892] usb 5-1: USB disconnect, device number 36 [ 345.441867][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 346.495049][ T47] gspca_sonixj: reg_w1 err -110 [ 346.525025][ T47] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 346.620721][ T47] usb 2-1: USB disconnect, device number 37 [ 347.199597][ T2151] usb 1-1: unable to get BOS descriptor or descriptor too short [ 347.443916][ T2151] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 347.457843][ T2151] usb 1-1: can't read configurations, error -71 [ 348.461797][ T8373] tipc: Started in network mode [ 348.467117][ T8373] tipc: Node identity 7f000001, cluster identity 4711 [ 348.485622][ T8373] tipc: Enabled bearer , priority 10 [ 349.485649][ T9] tipc: Node number set to 2130706433 [ 350.464990][ T5896] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 350.696299][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 350.707423][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 350.718163][ T5896] usb 4-1: config 0 has an invalid interface number: 82 but max is 2 [ 350.726484][ T5896] usb 4-1: config 0 has an invalid interface number: 159 but max is 2 [ 350.819935][ T5896] usb 4-1: config 0 has an invalid interface number: 156 but max is 2 [ 351.031360][ T8383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.096262][ T5896] usb 4-1: config 0 has no interface number 0 [ 351.165352][ T5896] usb 4-1: config 0 has no interface number 1 [ 351.171471][ T5896] usb 4-1: config 0 has no interface number 2 [ 351.194921][ T5896] usb 4-1: config 0 interface 82 has no altsetting 0 [ 351.201796][ T5896] usb 4-1: config 0 interface 159 has no altsetting 0 [ 351.209055][ T5896] usb 4-1: config 0 interface 156 has no altsetting 0 [ 351.223115][ T5896] usb 4-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d [ 351.232493][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.247183][ T5896] usb 4-1: Product: syz [ 351.257952][ T5896] usb 4-1: Manufacturer: syz [ 351.262525][ T5896] usb 4-1: SerialNumber: syz [ 351.277059][ T5896] usb 4-1: config 0 descriptor?? [ 351.965220][ T5896] usb 4-1: USB disconnect, device number 38 [ 352.479337][ T6292] udevd[6292]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 352.555137][ T47] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 352.696682][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 352.739278][ T47] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 352.751600][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.779678][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.812459][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 352.833644][ T47] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 352.865552][ T47] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 352.882249][ T47] usb 5-1: Manufacturer: syz [ 352.897965][ T47] usb 5-1: config 0 descriptor?? [ 353.354761][ T47] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 353.362326][ T47] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 353.599930][ T47] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 354.010745][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.044970][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.051271][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 355.508311][ T5891] usb 5-1: USB disconnect, device number 37 [ 356.204326][ T2151] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 356.819796][ T8455] xt_connbytes: Forcing CT accounting to be enabled [ 356.832002][ T8455] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.336277][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 357.366923][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.554838][ T2151] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 357.574334][ T30] audit: type=1326 audit(1748028809.293:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 357.614703][ T2151] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 357.883042][ T2151] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.953555][ T30] audit: type=1326 audit(1748028809.293:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 358.010375][ T2151] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 358.037529][ T2151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.056550][ T30] audit: type=1326 audit(1748028809.293:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 358.094386][ T30] audit: type=1326 audit(1748028809.293:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 358.118010][ T30] audit: type=1326 audit(1748028809.293:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 358.180112][ T2151] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.221164][ T2151] usb 5-1: invalid MIDI out EP 0 [ 358.366495][ T8445] delete_channel: no stack [ 358.503558][ T30] audit: type=1326 audit(1748028809.293:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 359.510924][ T30] audit: type=1326 audit(1748028809.293:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 359.533243][ T30] audit: type=1326 audit(1748028811.213:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 359.557111][ T30] audit: type=1326 audit(1748028811.213:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 359.799587][ T6292] udevd[6292]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.846362][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 359.898759][ T2151] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 359.987210][ T2151] usb 5-1: USB disconnect, device number 38 [ 360.124441][ T5891] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 360.183535][ T8484] syzkaller1: entered promiscuous mode [ 360.217288][ T8484] syzkaller1: entered allmulticast mode [ 360.223949][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 360.225525][ T8486] syzkaller1: entered promiscuous mode [ 360.243771][ T8486] syzkaller1: entered allmulticast mode [ 360.365883][ T5891] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 360.410894][ T5891] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.630843][ T5891] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.824422][ T5892] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 360.858428][ T5891] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 360.887283][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.958861][ T5891] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 360.978883][ T5891] usb 2-1: invalid MIDI out EP 0 [ 361.108994][ T5892] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 361.199199][ T8478] delete_channel: no stack [ 361.363888][ T5892] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 361.492625][ T5891] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 361.515252][ T5892] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 361.526815][ T8489] openvswitch: netlink: Tunnel attr 4104 out of range max 16 [ 361.577011][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.594934][ T5891] usb 2-1: USB disconnect, device number 38 [ 361.673094][ T8490] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 361.839430][ T5892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.066225][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 363.579442][ T47] usb 5-1: USB disconnect, device number 39 [ 363.658996][ T8511] usb usb8: usbfs: process 8511 (syz.1.512) did not claim interface 0 before use [ 364.784410][ T5891] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 365.060909][ T5891] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 365.081641][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 365.117849][ T5891] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 365.195738][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 365.294562][ T5891] usb 5-1: Product: syz [ 365.354432][ T5891] usb 5-1: Manufacturer: syz [ 365.362730][ T5891] usb 5-1: SerialNumber: syz [ 365.425682][ T5891] usb 5-1: config 0 descriptor?? [ 365.517706][ T5891] usb 5-1: selecting invalid altsetting 0 [ 365.760069][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 366.230236][ T8556] ================================================================== [ 366.238329][ T8556] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 366.246958][ T8556] Write of size 1440 at addr ffffc9000f7efda0 by task vivid-000-vid-c/8556 [ 366.255536][ T8556] [ 366.257894][ T8556] CPU: 0 UID: 0 PID: 8556 Comm: vivid-000-vid-c Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 366.257917][ T8556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.257934][ T8556] Call Trace: [ 366.257945][ T8556] [ 366.257952][ T8556] dump_stack_lvl+0x189/0x250 [ 366.257980][ T8556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.258000][ T8556] ? __pfx__printk+0x10/0x10 [ 366.258017][ T8556] ? __pfx__printk+0x10/0x10 [ 366.258031][ T8556] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 366.258050][ T8556] ? __virt_addr_valid+0xc3/0x540 [ 366.258071][ T8556] print_report+0xb4/0x290 [ 366.258090][ T8556] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 366.258109][ T8556] kasan_report+0x118/0x150 [ 366.258131][ T8556] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 366.258153][ T8556] kasan_check_range+0x29a/0x2b0 [ 366.258172][ T8556] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 366.258191][ T8556] __asan_memcpy+0x40/0x70 [ 366.258209][ T8556] tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 366.258258][ T8556] vivid_thread_vid_cap_tick+0xfff/0x5fe0 [ 366.258288][ T8556] ? xfd_validate_state+0x6d/0x150 [ 366.258306][ T8556] ? __lock_acquire+0xaac/0xd20 [ 366.258329][ T8556] ? ktime_get+0x3e/0x1f0 [ 366.258358][ T8556] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 366.258383][ T8556] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.258407][ T8556] vivid_thread_vid_cap+0x8d8/0x10d0 [ 366.258436][ T8556] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 366.258454][ T8556] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 366.258472][ T8556] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 366.258492][ T8556] ? __kthread_parkme+0x7b/0x200 [ 366.258509][ T8556] ? __kthread_parkme+0x1a1/0x200 [ 366.258529][ T8556] kthread+0x70e/0x8a0 [ 366.258548][ T8556] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 366.258566][ T8556] ? __pfx_kthread+0x10/0x10 [ 366.258584][ T8556] ? __pfx_kthread+0x10/0x10 [ 366.258601][ T8556] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.258617][ T8556] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.258636][ T8556] ? __pfx_kthread+0x10/0x10 [ 366.258652][ T8556] ret_from_fork+0x4b/0x80 [ 366.258668][ T8556] ? __pfx_kthread+0x10/0x10 [ 366.258685][ T8556] ret_from_fork_asm+0x1a/0x30 [ 366.258706][ T8556] [ 366.258711][ T8556] [ 366.474014][ T8556] The buggy address belongs to the virtual mapping at [ 366.474014][ T8556] [ffffc9000f7d9000, ffffc9000f7f1000) created by: [ 366.474014][ T8556] vb2_vmalloc_alloc+0xef/0x340 [ 366.491895][ T8556] [ 366.494208][ T8556] The buggy address belongs to the physical page: [ 366.500619][ T8556] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888023cd8600 pfn:0x23cd8 [ 366.510670][ T8556] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 366.517773][ T8556] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 366.526347][ T8556] raw: ffff888023cd8600 0000000000000000 00000001ffffffff 0000000000000000 [ 366.534911][ T8556] page dumped because: kasan: bad access detected [ 366.541313][ T8556] page_owner tracks the page as allocated [ 366.547008][ T8556] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 8555, tgid 8552 (syz.3.516), ts 365643663248, free_ts 365279827956 [ 366.566098][ T8556] post_alloc_hook+0x1d8/0x230 [ 366.570852][ T8556] get_page_from_freelist+0x21ce/0x22b0 [ 366.576381][ T8556] __alloc_frozen_pages_noprof+0x181/0x370 [ 366.582170][ T8556] alloc_pages_mpol+0x232/0x4a0 [ 366.587008][ T8556] alloc_pages_noprof+0xa9/0x190 [ 366.591930][ T8556] __vmalloc_node_range_noprof+0x8fe/0x12c0 [ 366.597807][ T8556] vmalloc_user_noprof+0x74/0x80 [ 366.602734][ T8556] vb2_vmalloc_alloc+0xef/0x340 [ 366.607596][ T8556] __vb2_queue_alloc+0x9bf/0x15a0 [ 366.612649][ T8556] vb2_core_reqbufs+0xc31/0x1420 [ 366.617600][ T8556] __vb2_init_fileio+0x318/0xff0 [ 366.622530][ T8556] __vb2_perform_fileio+0x284/0x1600 [ 366.627813][ T8556] vb2_fop_read+0x273/0x360 [ 366.632322][ T8556] v4l2_read+0x199/0x2c0 [ 366.636556][ T8556] vfs_readv+0x5a2/0x840 [ 366.640793][ T8556] do_readv+0x14d/0x2d0 [ 366.644940][ T8556] page last free pid 8501 tgid 8492 stack trace: [ 366.651275][ T8556] __free_frozen_pages+0xb0e/0xcd0 [ 366.656377][ T8556] __slab_free+0x326/0x400 [ 366.660775][ T8556] qlist_free_all+0x9a/0x140 [ 366.665351][ T8556] kasan_quarantine_reduce+0x148/0x160 [ 366.670793][ T8556] __kasan_slab_alloc+0x22/0x80 [ 366.675631][ T8556] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 366.681512][ T8556] __alloc_skb+0x112/0x2d0 [ 366.685914][ T8556] alloc_skb_with_frags+0xca/0x890 [ 366.691014][ T8556] sock_alloc_send_pskb+0x857/0x990 [ 366.696203][ T8556] __ip_append_data+0x2cf6/0x40f0 [ 366.701214][ T8556] ip_make_skb+0x1de/0x3f0 [ 366.705623][ T8556] udp_sendmsg+0x18f6/0x22e0 [ 366.710199][ T8556] __sock_sendmsg+0x19c/0x270 [ 366.714861][ T8556] ____sys_sendmsg+0x52d/0x830 [ 366.719614][ T8556] ___sys_sendmsg+0x21f/0x2a0 [ 366.724286][ T8556] __sys_sendmmsg+0x28e/0x430 [ 366.728960][ T8556] [ 366.731266][ T8556] Memory state around the buggy address: [ 366.736878][ T8556] ffffc9000f7eff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.744922][ T8556] ffffc9000f7eff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 366.752964][ T8556] >ffffc9000f7f0000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 366.761006][ T8556] ^ [ 366.765065][ T8556] ffffc9000f7f0080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 366.773193][ T8556] ffffc9000f7f0100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 366.781235][ T8556] ================================================================== [ 367.126983][ T8556] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 367.134222][ T8556] CPU: 0 UID: 0 PID: 8556 Comm: vivid-000-vid-c Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 367.146642][ T8556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.156703][ T8556] Call Trace: [ 367.159991][ T8556] [ 367.162923][ T8556] dump_stack_lvl+0x99/0x250 [ 367.167522][ T8556] ? __asan_memcpy+0x40/0x70 [ 367.172115][ T8556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.177329][ T8556] ? __pfx__printk+0x10/0x10 [ 367.181934][ T8556] panic+0x2db/0x790 [ 367.185845][ T8556] ? __pfx_panic+0x10/0x10 [ 367.190285][ T8556] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 367.196187][ T8556] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 367.202525][ T8556] ? print_memory_metadata+0x314/0x400 [ 367.208004][ T8556] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 367.213640][ T8556] check_panic_on_warn+0x89/0xb0 [ 367.218595][ T8556] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 367.224242][ T8556] end_report+0x78/0x160 [ 367.228491][ T8556] kasan_report+0x129/0x150 [ 367.233003][ T8556] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 367.238726][ T8556] kasan_check_range+0x29a/0x2b0 [ 367.243651][ T8556] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 367.249277][ T8556] __asan_memcpy+0x40/0x70 [ 367.253681][ T8556] tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 367.259163][ T8556] vivid_thread_vid_cap_tick+0xfff/0x5fe0 [ 367.264881][ T8556] ? xfd_validate_state+0x6d/0x150 [ 367.269980][ T8556] ? __lock_acquire+0xaac/0xd20 [ 367.274831][ T8556] ? ktime_get+0x3e/0x1f0 [ 367.279153][ T8556] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 367.285303][ T8556] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.290494][ T8556] vivid_thread_vid_cap+0x8d8/0x10d0 [ 367.295776][ T8556] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 367.301483][ T8556] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 367.307360][ T8556] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 367.313675][ T8556] ? __kthread_parkme+0x7b/0x200 [ 367.318599][ T8556] ? __kthread_parkme+0x1a1/0x200 [ 367.323610][ T8556] kthread+0x70e/0x8a0 [ 367.327673][ T8556] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 367.333383][ T8556] ? __pfx_kthread+0x10/0x10 [ 367.337960][ T8556] ? __pfx_kthread+0x10/0x10 [ 367.342537][ T8556] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.347725][ T8556] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.352908][ T8556] ? __pfx_kthread+0x10/0x10 [ 367.357486][ T8556] ret_from_fork+0x4b/0x80 [ 367.361893][ T8556] ? __pfx_kthread+0x10/0x10 [ 367.366468][ T8556] ret_from_fork_asm+0x1a/0x30 [ 367.371225][ T8556] [ 367.374511][ T8556] Kernel Offset: disabled [ 367.378828][ T8556] Rebooting in 86400 seconds..