last executing test programs: 22.727772949s ago: executing program 0 (id=8512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c0007800800064000000001"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x20, 0x80, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0xe97f, 0x6}, {0x6, 0x24, 0x1a, 0x3, 0x2b}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x48, 0x6, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9f, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x6, 0xa}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x1, 0x5, 0x48, 0x10, 0x8}, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.580674722s ago: executing program 0 (id=8536): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 19.419333529s ago: executing program 0 (id=8537): syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x42080) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x101, 0x11, 0x5, 0x0, 0x0) 19.233464251s ago: executing program 0 (id=8539): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 19.144690203s ago: executing program 0 (id=8540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028"], 0xc8}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) 18.702307802s ago: executing program 0 (id=8542): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 18.207838817s ago: executing program 32 (id=8542): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 6.437735343s ago: executing program 3 (id=8604): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) dup2(r0, r1) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2}) 6.225327399s ago: executing program 3 (id=8606): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 6.044432947s ago: executing program 3 (id=8608): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, 0x0, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) write$proc_mixer(r0, &(0x7f0000000100)=ANY=[], 0xb0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) dup3(r1, r0, 0x0) 5.822351466s ago: executing program 3 (id=8610): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.944981784s ago: executing program 1 (id=8642): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 2.774150031s ago: executing program 3 (id=8646): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000940)={0x0, {0x11, 0x3, 0x5, 0xb2, 0xff}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.702435053s ago: executing program 1 (id=8647): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x800001c) 2.580222628s ago: executing program 3 (id=8648): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_disconnect(r0) 2.303157482s ago: executing program 1 (id=8651): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x706}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.225226231s ago: executing program 1 (id=8652): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x48800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x3, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.198166125s ago: executing program 5 (id=8653): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$media(&(0x7f0000000100), 0x1, 0x40580) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.017259201s ago: executing program 5 (id=8656): r0 = socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) ioctl$VHOST_GET_VRING_ENDIAN(r14, 0x4008af14, &(0x7f0000000000)={0x0, 0xedd}) syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x60, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r15 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000002c0)=0x10, 0x800) ioctl$FS_IOC_RESVSP(r15, 0x402c5828, &(0x7f0000000300)={0x0, 0x3, 0x9, 0x8001}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], 0x48) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) epoll_create1(0x80000) r16 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r17 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r17, 0xc0184800, &(0x7f0000000040)={0x4, r16, 0x80000}) 1.938875341s ago: executing program 1 (id=8658): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0xd, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xc2}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001042abd70007ddbdf2500000000", @ANYRES32=r0, @ANYBLOB="7b01000001c80400280012800b00010062726964676500001800028005002a00000000000c0023003709000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10000010}, 0x20040844) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x6c, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x22, 0x6, "c6c4021fc3a5f53e69ff0a53f2cf8e34eafb8cef5d1663882dff335c09a4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x98, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x61, 0x7, 0x1, 0x0, "898664df0d93d8f32f888701de0c6d60e655012a6ab1c3f75320f430e99e18e61a2b7232ff3b10d3b20782ca75fb44edff12caa3b5a3b065058d32def32c506f629b6ef53bfbff9f5a0dc5774790f80c549069cd8d17b04e48bea9a80d"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x60, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x6, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x32, 0x6, "821fb5c6d3379be878002847760bfcd77b2430ad9678ce8c2d21812559c0d8f16f52cc93e2c265aeac903fc696ab"}]}, @NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x11}, @NFTA_CT_TIMEOUT_DATA={0x14, 0x3, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CT_TIMEOUT_DATA={0xc, 0x3, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFTA_CT_TIMEOUT_DATA={0x2c, 0x3, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xc8}]}]}}, @NFT_MSG_DELOBJ={0x74, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x298, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xcb, 0x6, "544369044160838b7541109f21dec11b23e46ab6bdd127302a90a165f8cfaa9afc45d0f8a07df642af0f6bf91193a39b679138c799b4fbc12b79246dd0d0a45f9b9922c7ac434feb6d30a91b6ec645f2371589dd2bfb837e2110408e2633c1f2c13ab3fab6aaaff86cbea25eb8b418c719ee2801805e1e5d5534b1ad38cdc3317f06b6490ddfa59d5c047a6954b6068dd2135e3b0f19aefa58f3d27a2390d4fa323a0dcfec36dee203b14312f88366b0938b0f1716c31e029db301b8b80a71d6361a7cc32d4338"}, @NFTA_TABLE_USERDATA={0x23, 0x6, "94419e3b2148d41848e25bd6221a88007073ee6c88395685d0729067681bea"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xf3, 0x6, "c8d12541d75b2e38fb153b79b255f7175e51c32f55e7b2f9b60b5d6bdf0447332c010cc596a66523698872f279c5d7b61ba17ebdc5a5766600163dc907604aa72e1f649c363c7ff28a36db77f645e802c82256fbed2bd3c6d4c0d227a851814437cd7bc340974d65bad5dc21093ee3f7befc398c9c37f2d7c6440714b2fb1a79a82b63854f3acacf280bd159fd9c8893326501439a538a0063497a407b325ccd8a5591326ae40e1227390affc55b1c37a553d71f379013cdd8b6ff00d58dc35289df3a0a839769835c96894382b073cb8ee04e1dae95ac25d4644ff60acf5e7111205602897da477a2ca2c6da8d6ed"}, @NFTA_TABLE_USERDATA={0x75, 0x6, "7797010564856d8f3563049e64ccfed777db847832e3c14568f2e2c78c59b3698dad6a2ae927c8d724c87585bd07c2afdbaf564af2c9f3ed0beda0f0fac5ff2cd1d422d960aae88be582071364628ec5ee21a581390001e7a5aaf2b3d914171f6cd435f33b1dd77ad15e44d8c178daaf47"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x504}}, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x4}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 1.824979461s ago: executing program 2 (id=8659): r0 = socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, 0x0, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) ioctl$VHOST_GET_VRING_ENDIAN(r13, 0x4008af14, &(0x7f0000000000)={0x0, 0xedd}) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x60, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r14 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000002c0)=0x10, 0x800) ioctl$FS_IOC_RESVSP(r14, 0x402c5828, &(0x7f0000000300)={0x0, 0x3, 0x9, 0x8001}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], 0x48) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) epoll_create1(0x80000) r15 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r16 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r16, 0xc0184800, &(0x7f0000000040)={0x4, r15, 0x80000}) 1.378508498s ago: executing program 4 (id=8662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x0, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x6000, 0x800008, 0x7ff, 0x1, 0x80000009, 0x8, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x7200, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x18001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x80000000, 0x6, 0x80000001, 0x3, 0x1, 0x9bc, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x9, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0x40000b, 0x5, 0x8005, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0x4bf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x8600, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xb, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x7f, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x0, 0x807, 0x1ff, 0x3, 0x400, 0xffffffff, 0x1040, 0x3, 0xfffffffa, 0x9a6, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x0, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.059490719s ago: executing program 4 (id=8663): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000000c0)=0x5, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 961.25213ms ago: executing program 5 (id=8664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}}, @NFT_MSG_DELRULE={0x98, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x61, 0x7, 0x1, 0x0, "898664df0d93d8f32f888701de0c6d60e655012a6ab1c3f75320f430e99e18e61a2b7232ff3b10d3b20782ca75fb44edff12caa3b5a3b065058d32def32c506f629b6ef53bfbff9f5a0dc5774790f80c549069cd8d17b04e48bea9a80d"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x60, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x32, 0x6, "821fb5c6d3379be878002847760bfcd77b2430ad9678ce8c2d21812559c0d8f16f52cc93e2c265aeac903fc696ab"}]}, @NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x11}, @NFTA_CT_TIMEOUT_DATA={0x14, 0x3, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CT_TIMEOUT_DATA={0xc, 0x3, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFTA_CT_TIMEOUT_DATA={0x2c, 0x3, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xc8}]}]}}, @NFT_MSG_DELOBJ={0x74, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x298, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xcb, 0x6, "544369044160838b7541109f21dec11b23e46ab6bdd127302a90a165f8cfaa9afc45d0f8a07df642af0f6bf91193a39b679138c799b4fbc12b79246dd0d0a45f9b9922c7ac434feb6d30a91b6ec645f2371589dd2bfb837e2110408e2633c1f2c13ab3fab6aaaff86cbea25eb8b418c719ee2801805e1e5d5534b1ad38cdc3317f06b6490ddfa59d5c047a6954b6068dd2135e3b0f19aefa58f3d27a2390d4fa323a0dcfec36dee203b14312f88366b0938b0f1716c31e029db301b8b80a71d6361a7cc32d4338"}, @NFTA_TABLE_USERDATA={0x23, 0x6, "94419e3b2148d41848e25bd6221a88007073ee6c88395685d0729067681bea"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xf3, 0x6, "c8d12541d75b2e38fb153b79b255f7175e51c32f55e7b2f9b60b5d6bdf0447332c010cc596a66523698872f279c5d7b61ba17ebdc5a5766600163dc907604aa72e1f649c363c7ff28a36db77f645e802c82256fbed2bd3c6d4c0d227a851814437cd7bc340974d65bad5dc21093ee3f7befc398c9c37f2d7c6440714b2fb1a79a82b63854f3acacf280bd159fd9c8893326501439a538a0063497a407b325ccd8a5591326ae40e1227390affc55b1c37a553d71f379013cdd8b6ff00d58dc35289df3a0a839769835c96894382b073cb8ee04e1dae95ac25d4644ff60acf5e7111205602897da477a2ca2c6da8d6ed"}, @NFTA_TABLE_USERDATA={0x75, 0x6, "7797010564856d8f3563049e64ccfed777db847832e3c14568f2e2c78c59b3698dad6a2ae927c8d724c87585bd07c2afdbaf564af2c9f3ed0beda0f0fac5ff2cd1d422d960aae88be582071364628ec5ee21a581390001e7a5aaf2b3d914171f6cd435f33b1dd77ad15e44d8c178daaf47"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x4ac}}, 0x0) 882.978344ms ago: executing program 4 (id=8665): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/53, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 785.714141ms ago: executing program 5 (id=8666): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket(0xa, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xd82, 0x80000000, 0x3, 0x1, 0xe4, 0x8, 0x8, 0x1, 0x7, 0x6, 0xc0000, 0x7, 0x4, 0x2f9, 0x0, 0xffffffff, 0x2, 0xffffffff, 0x80, 0x0, 0xfffffffb, 0x5, 0x1, 0x380000, 0x3, 0x9, 0x9, 0x1ff, 0x400, 0x3, 0x3, 0x10, 0x7, 0x3, 0x0, 0x3, 0x9, 0x4, 0x81, 0x80000000, 0x0, 0x5, 0xf, 0x0, 0x1000, 0x10000, 0x0, 0x4, 0x4, 0x6, 0x0, 0xfffffffb, 0x1, 0x0, 0x73ee, 0x7ff, 0x4, 0x800, 0x200, 0x3, 0x4, 0x2, 0x6, 0x5, 0xe, 0x9, 0x4, 0x2, 0x3, 0x4, 0x6, 0x6, 0x80, 0xa, 0xa, 0x1da, 0x1, 0x5, 0x7, 0x3, 0x0, 0x1, 0x6, 0x8000, 0xbcca, 0x7e5, 0x3, 0xf, 0x1, 0x5, 0x7, 0xfff, 0x8, 0x1, 0x8001, 0xe, 0xd, 0x645, 0x0, 0x7, 0x6, 0x7f, 0xffffff81, 0x401, 0x401, 0x3, 0xd3, 0x100, 0x5, 0x7, 0x10000, 0x7, 0x800, 0x5240, 0x1000, 0x0, 0x5e, 0x8000, 0xda289fc, 0x1, 0x1, 0x80000001, 0x4, 0x5be, 0x3, 0x5, 0x0, 0x3f, 0x2, 0x5, 0xa, 0x100, 0x3, 0x9, 0x401, 0xe4b, 0x6, 0x3, 0x4, 0x8, 0x1, 0x9, 0xc, 0x8, 0xfffffffe, 0x0, 0x9, 0x9, 0x1, 0xffffffff, 0x7, 0x800, 0x3, 0x0, 0x1, 0x9, 0xd3fb, 0x5, 0xffffffff, 0x400, 0x2, 0x200, 0x3e1e, 0x10000, 0x81, 0x4, 0x9, 0x5, 0x8, 0xffff, 0x1, 0x0, 0x7, 0x71, 0x6, 0x2, 0x9, 0x9, 0xb, 0xfffffffe, 0x200, 0x8, 0x6, 0xee7a, 0x7c61c8d9, 0x7, 0x7ff, 0x6, 0x7, 0x401, 0x4a3f, 0x2, 0x7, 0x7, 0x2, 0x1, 0x9, 0x9, 0x3, 0x7, 0xe, 0x2, 0x0, 0x7, 0x9, 0x4, 0x200, 0x1, 0x0, 0x2, 0x8, 0x6, 0xc34de82, 0xd, 0x0, 0x0, 0x0, 0x8, 0x6, 0x6b6f, 0xfffeffff, 0x0, 0xc, 0x65, 0x0, 0x40, 0x4, 0x4, 0x9, 0x4, 0x80000001, 0x35, 0x4, 0x3bf, 0xe90, 0x5, 0x7, 0x95d, 0x4, 0x2, 0x0, 0x3, 0x212, 0x1, 0x2, 0x1, 0x80, 0x6, 0x8, 0x80000001, 0x4, 0x7, 0x5, 0xb, 0x2]}]}]}}]}, 0x43c}}, 0x800) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 699.668942ms ago: executing program 2 (id=8667): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x300}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) 687.764574ms ago: executing program 4 (id=8668): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) 559.879406ms ago: executing program 2 (id=8669): socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_io_uring_setup(0x2182, &(0x7f0000000540)={0x0, 0x9b95, 0x1, 0x5, 0x54}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x1, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x49, 0x0, 0x0) 520.515228ms ago: executing program 5 (id=8670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 483.288773ms ago: executing program 4 (id=8671): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000080)) 359.197707ms ago: executing program 4 (id=8672): r0 = socket$inet6(0xa, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r2, 0x4, 0xa000) close_range(r0, 0xffffffffffffffff, 0x0) 346.693957ms ago: executing program 2 (id=8673): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r0, @ANYRES64=r2], 0xfdef) 249.13776ms ago: executing program 5 (id=8674): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0xd, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xc2}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10000010}, 0x20040844) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x6c, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x22, 0x6, "c6c4021fc3a5f53e69ff0a53f2cf8e34eafb8cef5d1663882dff335c09a4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x98, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x61, 0x7, 0x1, 0x0, "898664df0d93d8f32f888701de0c6d60e655012a6ab1c3f75320f430e99e18e61a2b7232ff3b10d3b20782ca75fb44edff12caa3b5a3b065058d32def32c506f629b6ef53bfbff9f5a0dc5774790f80c549069cd8d17b04e48bea9a80d"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x60, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x6, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x32, 0x6, "821fb5c6d3379be878002847760bfcd77b2430ad9678ce8c2d21812559c0d8f16f52cc93e2c265aeac903fc696ab"}]}, @NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x11}, @NFTA_CT_TIMEOUT_DATA={0x14, 0x3, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CT_TIMEOUT_DATA={0xc, 0x3, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFTA_CT_TIMEOUT_DATA={0x2c, 0x3, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xc8}]}]}}, @NFT_MSG_DELOBJ={0x74, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x298, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xcb, 0x6, "544369044160838b7541109f21dec11b23e46ab6bdd127302a90a165f8cfaa9afc45d0f8a07df642af0f6bf91193a39b679138c799b4fbc12b79246dd0d0a45f9b9922c7ac434feb6d30a91b6ec645f2371589dd2bfb837e2110408e2633c1f2c13ab3fab6aaaff86cbea25eb8b418c719ee2801805e1e5d5534b1ad38cdc3317f06b6490ddfa59d5c047a6954b6068dd2135e3b0f19aefa58f3d27a2390d4fa323a0dcfec36dee203b14312f88366b0938b0f1716c31e029db301b8b80a71d6361a7cc32d4338"}, @NFTA_TABLE_USERDATA={0x23, 0x6, "94419e3b2148d41848e25bd6221a88007073ee6c88395685d0729067681bea"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xf3, 0x6, "c8d12541d75b2e38fb153b79b255f7175e51c32f55e7b2f9b60b5d6bdf0447332c010cc596a66523698872f279c5d7b61ba17ebdc5a5766600163dc907604aa72e1f649c363c7ff28a36db77f645e802c82256fbed2bd3c6d4c0d227a851814437cd7bc340974d65bad5dc21093ee3f7befc398c9c37f2d7c6440714b2fb1a79a82b63854f3acacf280bd159fd9c8893326501439a538a0063497a407b325ccd8a5591326ae40e1227390affc55b1c37a553d71f379013cdd8b6ff00d58dc35289df3a0a839769835c96894382b073cb8ee04e1dae95ac25d4644ff60acf5e7111205602897da477a2ca2c6da8d6ed"}, @NFTA_TABLE_USERDATA={0x75, 0x6, "7797010564856d8f3563049e64ccfed777db847832e3c14568f2e2c78c59b3698dad6a2ae927c8d724c87585bd07c2afdbaf564af2c9f3ed0beda0f0fac5ff2cd1d422d960aae88be582071364628ec5ee21a581390001e7a5aaf2b3d914171f6cd435f33b1dd77ad15e44d8c178daaf47"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x504}}, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x4}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 244.440622ms ago: executing program 1 (id=8675): r0 = socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) ioctl$VHOST_GET_VRING_ENDIAN(r14, 0x4008af14, &(0x7f0000000000)={0x0, 0xedd}) syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x60, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r15 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000002c0)=0x10, 0x800) ioctl$FS_IOC_RESVSP(r15, 0x402c5828, &(0x7f0000000300)={0x0, 0x3, 0x9, 0x8001}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], 0x48) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) epoll_create1(0x80000) r16 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r17 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r17, 0xc0184800, &(0x7f0000000040)={0x4, r16, 0x80000}) 107.106286ms ago: executing program 2 (id=8676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}}, @NFT_MSG_DELRULE={0x98, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x61, 0x7, 0x1, 0x0, "898664df0d93d8f32f888701de0c6d60e655012a6ab1c3f75320f430e99e18e61a2b7232ff3b10d3b20782ca75fb44edff12caa3b5a3b065058d32def32c506f629b6ef53bfbff9f5a0dc5774790f80c549069cd8d17b04e48bea9a80d"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x60, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x32, 0x6, "821fb5c6d3379be878002847760bfcd77b2430ad9678ce8c2d21812559c0d8f16f52cc93e2c265aeac903fc696ab"}]}, @NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x11}, @NFTA_CT_TIMEOUT_DATA={0x14, 0x3, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CT_TIMEOUT_DATA={0xc, 0x3, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFTA_CT_TIMEOUT_DATA={0x2c, 0x3, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xc8}]}]}}, @NFT_MSG_DELOBJ={0x74, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x298, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xcb, 0x6, "544369044160838b7541109f21dec11b23e46ab6bdd127302a90a165f8cfaa9afc45d0f8a07df642af0f6bf91193a39b679138c799b4fbc12b79246dd0d0a45f9b9922c7ac434feb6d30a91b6ec645f2371589dd2bfb837e2110408e2633c1f2c13ab3fab6aaaff86cbea25eb8b418c719ee2801805e1e5d5534b1ad38cdc3317f06b6490ddfa59d5c047a6954b6068dd2135e3b0f19aefa58f3d27a2390d4fa323a0dcfec36dee203b14312f88366b0938b0f1716c31e029db301b8b80a71d6361a7cc32d4338"}, @NFTA_TABLE_USERDATA={0x23, 0x6, "94419e3b2148d41848e25bd6221a88007073ee6c88395685d0729067681bea"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xf3, 0x6, "c8d12541d75b2e38fb153b79b255f7175e51c32f55e7b2f9b60b5d6bdf0447332c010cc596a66523698872f279c5d7b61ba17ebdc5a5766600163dc907604aa72e1f649c363c7ff28a36db77f645e802c82256fbed2bd3c6d4c0d227a851814437cd7bc340974d65bad5dc21093ee3f7befc398c9c37f2d7c6440714b2fb1a79a82b63854f3acacf280bd159fd9c8893326501439a538a0063497a407b325ccd8a5591326ae40e1227390affc55b1c37a553d71f379013cdd8b6ff00d58dc35289df3a0a839769835c96894382b073cb8ee04e1dae95ac25d4644ff60acf5e7111205602897da477a2ca2c6da8d6ed"}, @NFTA_TABLE_USERDATA={0x75, 0x6, "7797010564856d8f3563049e64ccfed777db847832e3c14568f2e2c78c59b3698dad6a2ae927c8d724c87585bd07c2afdbaf564af2c9f3ed0beda0f0fac5ff2cd1d422d960aae88be582071364628ec5ee21a581390001e7a5aaf2b3d914171f6cd435f33b1dd77ad15e44d8c178daaf47"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x4ac}}, 0x0) 0s ago: executing program 2 (id=8677): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x439, 0xfffffff9, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x814}, 0x40008c0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x48}}, 0x0) chown(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): backs suppressed [ 2588.595027][ T7687] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7481'. [ 2588.639769][T30768] usb 2-1: Using ep0 maxpacket: 8 [ 2588.652362][T30768] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2588.667952][T30768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.684267][T30768] usb 2-1: Product: syz [ 2588.691692][T30768] usb 2-1: Manufacturer: syz [ 2588.696457][T30768] usb 2-1: SerialNumber: syz [ 2588.706112][T30768] usb 2-1: config 0 descriptor?? [ 2588.918260][T30768] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 2589.003587][T30774] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2589.190638][T30774] usb 4-1: Using ep0 maxpacket: 32 [ 2589.201213][T30774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2589.221244][T30774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2589.243065][T30774] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2589.265040][T30774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2589.292324][T30774] usb 4-1: config 0 descriptor?? [ 2589.318526][T30774] hub 4-1:0.0: USB hub found [ 2589.533008][T30768] usb write operation failed. (-71) [ 2589.541052][T30774] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 2589.568377][T30768] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2589.581714][T30768] dvbdev: DVB: registering new adapter (Terratec H7) [ 2589.599057][T30768] usb 2-1: media controller created [ 2589.608805][T30768] usb read operation failed. (-71) [ 2589.620964][T30768] usb write operation failed. (-71) [ 2589.637840][T30768] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 2589.652888][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7487'. [ 2589.660393][T30768] usb 2-1: USB disconnect, device number 29 [ 2589.676048][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7487'. [ 2589.743942][T30774] usbhid 4-1:0.0: can't add hid device: -71 [ 2589.759821][T30774] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2589.791840][T30774] usb 4-1: USB disconnect, device number 34 [ 2590.351730][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.358385][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.425784][ T7719] net_ratelimit: 1991 callbacks suppressed [ 2590.425803][ T7719] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2590.603646][ T7724] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2590.880508][ T7740] netlink: 'syz.3.7503': attribute type 3 has an invalid length. [ 2591.881849][T30774] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2591.891685][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7518'. [ 2591.902020][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7518'. [ 2591.929710][T30763] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2592.050655][T30774] usb 4-1: Using ep0 maxpacket: 32 [ 2592.057791][T30774] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2592.066738][T30774] usb 4-1: config 0 has no interface number 0 [ 2592.079449][T30774] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2592.092860][T30763] usb 3-1: Using ep0 maxpacket: 32 [ 2592.097428][T30774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2592.108481][T30774] usb 4-1: Product: syz [ 2592.115756][T30763] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 2592.119110][T30774] usb 4-1: Manufacturer: syz [ 2592.129225][T30774] usb 4-1: SerialNumber: syz [ 2592.135481][T30763] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2592.146478][T30763] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2592.156206][T30763] usb 3-1: config 1 has no interface number 0 [ 2592.157106][T30774] usb 4-1: config 0 descriptor?? [ 2592.167655][T30763] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2592.176117][T30774] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2592.188235][T30763] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2592.202651][T30763] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2592.214955][T30763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.242472][T30763] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 2592.387376][T30774] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2592.401086][T30774] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2592.471406][T30763] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 2592.841356][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2592.849405][T30774] usb 4-1: USB disconnect, device number 35 [ 2592.868579][T30774] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2592.888549][T30774] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2592.908160][T30763] usb 3-1: USB disconnect, device number 15 [ 2592.911289][T30774] quatech2 4-1:0.51: device disconnected [ 2592.950795][T30763] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 2593.107566][ T7794] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7527'. [ 2593.692457][ T7804] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2593.817853][ T7811] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7532'. [ 2594.394969][ T7817] netlink: 766 bytes leftover after parsing attributes in process `syz.1.7536'. [ 2594.597305][ T7821] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 2594.632373][ T7823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7539'. [ 2595.105405][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7547'. [ 2595.127667][ T7841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7548'. [ 2595.147118][ T7841] netlink: 41 bytes leftover after parsing attributes in process `syz.3.7548'. [ 2595.485776][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state [ 2595.533140][T25103] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2595.563308][T30774] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2595.691988][T25103] usb 2-1: Using ep0 maxpacket: 8 [ 2595.717248][T25103] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2595.737446][T25103] usb 2-1: no configurations [ 2595.743757][T25103] usb 2-1: can't read configurations, error -22 [ 2595.766178][ T7860] netlink: 'syz.2.7557': attribute type 8 has an invalid length. [ 2595.775437][ T7860] sch_fq: defrate 0 ignored. [ 2595.780002][T30774] usb 4-1: Using ep0 maxpacket: 16 [ 2595.850904][T30774] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 2595.859212][T30774] usb 4-1: config 0 has no interface number 0 [ 2595.869037][T30774] usb 4-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 87 [ 2595.977018][T30774] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2595.986361][T30774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2595.999253][T30774] usb 4-1: Product: syz [ 2596.008418][T30774] usb 4-1: Manufacturer: syz [ 2596.017822][T30774] usb 4-1: SerialNumber: syz [ 2596.037557][T30774] usb 4-1: config 0 descriptor?? [ 2596.044249][ T7847] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2596.052048][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 2596.110026][T30774] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2596.280083][T18063] usb 4-1: Failed to submit usb control message: -71 [ 2596.298060][T30774] usb 4-1: USB disconnect, device number 36 [ 2596.308581][T18063] usb 4-1: unable to send the bmi data to the device: -71 [ 2596.316675][T18063] usb 4-1: unable to get target info from device [ 2596.343844][T18063] usb 4-1: could not get target info (-71) [ 2596.354172][T18063] usb 4-1: could not probe fw (-71) [ 2596.801858][ T7894] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7566'. [ 2597.037742][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7573'. [ 2597.087399][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7573'. [ 2597.825433][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7586'. [ 2598.550280][ T7951] tap0: tun_chr_ioctl cmd 2147767520 [ 2598.944371][ T7967] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2599.163480][ T7976] __nla_validate_parse: 2 callbacks suppressed [ 2599.163505][ T7976] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7602'. [ 2599.261926][ T7978] batadv_slave_1: entered promiscuous mode [ 2599.284227][ T7978] macvlan2: entered promiscuous mode [ 2601.070087][ T8022] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7624'. [ 2601.317137][ T8040] bridge0: left allmulticast mode [ 2601.419433][ T8040] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2601.882657][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7638'. [ 2602.050297][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7638'. [ 2602.402556][ T8074] netlink: 'syz.2.7644': attribute type 2 has an invalid length. [ 2603.334929][ T8124] vxcan1: tx drop: invalid da for name 0x0000000000000015 [ 2603.393723][ T8115] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2603.432649][T22853] bridge0: port 2(bridge_slave_1) entered blocking state [ 2603.439981][T22853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2603.629567][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7672'. [ 2603.671065][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7672'. [ 2603.824307][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7674'. [ 2603.838708][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7674'. [ 2603.873300][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7675'. [ 2603.889720][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7675'. [ 2604.845401][ T8158] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7679'. [ 2604.986044][ T8162] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 2605.005376][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7682'. [ 2605.286075][ T8177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7689'. [ 2605.413889][ T8180] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7687'. [ 2605.487405][ T8182] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7688'. [ 2606.252735][ T8203] team_slave_0: entered allmulticast mode [ 2606.313853][ T8203] team_slave_0: entered promiscuous mode [ 2607.363849][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7709'. [ 2607.381227][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7709'. [ 2607.529167][ T8241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7712'. [ 2607.940239][T30776] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2607.950240][ T8254] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7715'. [ 2608.129827][T30776] usb 4-1: Using ep0 maxpacket: 32 [ 2608.138238][T30776] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2608.168905][T30776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2608.220279][T30776] usb 4-1: config 0 descriptor?? [ 2608.245121][T30776] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2608.324717][ T8260] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2609.049801][T30776] gspca_sunplus: reg_w_riv err -71 [ 2609.058040][T30776] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 2609.068675][T30776] usb 4-1: USB disconnect, device number 37 [ 2609.139789][T25103] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 2609.291801][T25103] usb 3-1: New USB device found, idVendor=056a, idProduct=0042, bcdDevice= 0.00 [ 2609.301009][T25103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2609.311871][T25103] usb 3-1: config 0 descriptor?? [ 2609.736986][T25103] hid_parser_main: 218 callbacks suppressed [ 2609.737008][T25103] wacom 0003:056A:0042.007F: unknown main item tag 0x0 [ 2609.753165][T25103] wacom 0003:056A:0042.007F: unknown main item tag 0x0 [ 2609.761206][T25103] wacom 0003:056A:0042.007F: unknown main item tag 0x0 [ 2609.768326][T25103] wacom 0003:056A:0042.007F: unknown main item tag 0x0 [ 2609.776174][T25103] wacom 0003:056A:0042.007F: unknown main item tag 0x0 [ 2609.785252][T25103] wacom 0003:056A:0042.007F: unknown main item tag 0x0 [ 2609.796194][T25103] wacom 0003:056A:0042.007F: unknown main item tag 0x0 [ 2609.803610][T25103] wacom 0003:056A:0042.007F: unknown main item tag 0x0 [ 2609.814308][T25103] wacom 0003:056A:0042.007F: unknown main item tag 0x0 [ 2609.821844][T25103] wacom 0003:056A:0042.007F: unknown main item tag 0x0 [ 2609.832028][T25103] wacom 0003:056A:0042.007F: reserved main item tag 0xd [ 2609.840044][T30768] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2609.849065][T25103] wacom 0003:056A:0042.007F: Unknown device_type for 'HID 056a:0042'. Assuming pen. [ 2609.865583][T25103] wacom 0003:056A:0042.007F: hidraw0: USB HID v7f.fd Device [HID 056a:0042] on usb-dummy_hcd.2-1/input0 [ 2609.882252][T25103] input: Wacom Intuos2 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0042.007F/input/input84 [ 2609.977180][T25103] usb 3-1: USB disconnect, device number 16 [ 2610.001086][T30768] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2610.010713][T30768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2610.022035][T30768] usb 4-1: config 0 descriptor?? [ 2610.029017][T30768] cp210x 4-1:0.0: cp210x converter detected [ 2610.049997][T30776] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2610.209786][T30776] usb 2-1: Using ep0 maxpacket: 32 [ 2610.218847][T30776] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2610.228297][T30776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2610.253343][T30776] usb 2-1: config 0 descriptor?? [ 2610.367257][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7728'. [ 2610.446950][T30768] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 2610.457755][T30768] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 2610.471631][T30768] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2610.488240][T30776] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2610.520702][T30776] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2610.545288][T30776] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2610.566337][T30776] usb 2-1: media controller created [ 2610.609591][T30776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2610.675399][T30774] usb 4-1: USB disconnect, device number 38 [ 2610.691404][ T8277] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 2610.695567][T30774] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2610.717337][T30776] az6027: usb out operation failed. (-71) [ 2610.734302][T30776] az6027: usb out operation failed. (-71) [ 2610.751127][T30776] stb0899_attach: Driver disabled by Kconfig [ 2610.757833][T30774] cp210x 4-1:0.0: device disconnected [ 2610.768714][T30776] az6027: no front-end attached [ 2610.768714][T30776] [ 2610.783077][T30776] az6027: usb out operation failed. (-71) [ 2610.788953][T30776] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2610.808531][T30776] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input87 [ 2610.844915][T30776] dvb-usb: schedule remote query interval to 400 msecs. [ 2610.852052][T30776] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2610.862705][T30776] usb 2-1: USB disconnect, device number 32 [ 2610.957702][T30776] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2611.017885][ T8301] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2611.037116][T22853] bridge0: port 2(bridge_slave_1) entered blocking state [ 2611.044395][T22853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2611.509837][T30768] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2611.639869][T30768] usb 4-1: device descriptor read/64, error -71 [ 2611.890281][T30768] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2611.952986][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 2612.029998][T30768] usb 4-1: device descriptor read/64, error -71 [ 2612.097182][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7747'. [ 2612.162899][T30768] usb usb4-port1: attempt power cycle [ 2612.519847][T30768] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2612.551596][T30768] usb 4-1: device descriptor read/8, error -71 [ 2612.560687][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7756'. [ 2612.589938][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7756'. [ 2612.812002][T30768] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2612.861408][T30768] usb 4-1: device descriptor read/8, error -71 [ 2612.980266][T30768] usb usb4-port1: unable to enumerate USB device [ 2613.179829][T25103] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2613.315498][ T8363] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2613.372682][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 2613.373873][T25103] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2613.379921][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2613.443296][T25103] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2613.473678][T25103] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2613.495076][T25103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2613.531202][ T8358] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2613.571472][T25103] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2614.023046][T25103] usb 2-1: USB disconnect, device number 33 [ 2614.302439][ T8372] netlink: 588 bytes leftover after parsing attributes in process `syz.3.7764'. [ 2614.312967][ T8372] netlink: 588 bytes leftover after parsing attributes in process `syz.3.7764'. [ 2614.572129][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7770'. [ 2614.585801][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7770'. [ 2615.069988][T30768] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2615.119820][T30773] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2615.219967][T30768] usb 2-1: Using ep0 maxpacket: 32 [ 2615.233814][T30768] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 2615.250804][T30768] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 2615.271400][T30773] usb 3-1: Using ep0 maxpacket: 16 [ 2615.271940][T30768] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2615.286794][T30773] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 2615.291876][T30768] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 2615.313198][T30773] usb 3-1: config 0 has no interface number 0 [ 2615.313496][T30768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2615.340418][T30773] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2615.350426][T30773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2615.351364][T30768] usb 2-1: config 0 descriptor?? [ 2615.364153][T30773] usb 3-1: Product: syz [ 2615.375301][T30773] usb 3-1: Manufacturer: syz [ 2615.381478][T30773] usb 3-1: SerialNumber: syz [ 2615.394747][T30773] usb 3-1: config 0 descriptor?? [ 2615.408905][T30773] hub 3-1:0.132: bad descriptor, ignoring hub [ 2615.420759][T30773] hub 3-1:0.132: probe with driver hub failed with error -5 [ 2615.450658][T30773] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input88 [ 2615.742536][T25103] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2615.802501][ T8395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2615.824105][ T8395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2615.858957][T30768] hid_parser_main: 453 callbacks suppressed [ 2615.858982][T30768] nzxt-kraken2 0003:1E71:170E.0080: unknown main item tag 0x0 [ 2615.893730][T30768] nzxt-kraken2 0003:1E71:170E.0080: unknown main item tag 0x0 [ 2615.901922][T25103] usb 4-1: Using ep0 maxpacket: 16 [ 2615.912448][T30768] nzxt-kraken2 0003:1E71:170E.0080: unknown main item tag 0x0 [ 2615.922314][T30768] nzxt-kraken2 0003:1E71:170E.0080: unknown main item tag 0x0 [ 2615.930924][T30768] nzxt-kraken2 0003:1E71:170E.0080: unknown main item tag 0x0 [ 2615.938703][T25103] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2615.951204][T30768] nzxt-kraken2 0003:1E71:170E.0080: unknown main item tag 0x0 [ 2615.958803][T25103] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2615.973019][T30768] nzxt-kraken2 0003:1E71:170E.0080: unknown main item tag 0x0 [ 2615.986086][T25103] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 2615.997660][T30768] nzxt-kraken2 0003:1E71:170E.0080: unknown main item tag 0x0 [ 2616.006642][T30768] nzxt-kraken2 0003:1E71:170E.0080: unknown main item tag 0x0 [ 2616.014446][T25103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2616.023146][T30768] nzxt-kraken2 0003:1E71:170E.0080: unknown main item tag 0x0 [ 2616.034267][T30768] nzxt-kraken2 0003:1E71:170E.0080: item fetching failed at offset 39/40 [ 2616.035338][T25103] usb 4-1: config 0 descriptor?? [ 2616.052051][T30768] nzxt-kraken2 0003:1E71:170E.0080: hid parse failed with -22 [ 2616.063853][T30768] nzxt-kraken2 0003:1E71:170E.0080: probe with driver nzxt-kraken2 failed with error -22 [ 2616.089580][T30768] usb 2-1: USB disconnect, device number 34 [ 2616.296922][ T8415] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7782'. [ 2616.495624][T25103] aureal 0003:0755:2626.0081: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.3-1/input0 [ 2616.745199][T30773] usb 4-1: USB disconnect, device number 43 [ 2616.840815][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7786'. [ 2616.863356][ T4977] usb 3-1: reset high-speed USB device number 17 using dummy_hcd [ 2616.898740][ T4977] usb 3-1: device reset changed ep0 maxpacket size! [ 2616.935833][T30776] usb 3-1: USB disconnect, device number 17 [ 2617.109750][T30776] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2617.291819][T30776] usb 3-1: Using ep0 maxpacket: 8 [ 2617.312655][T30776] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2617.332625][T30776] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2617.350516][T30776] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2617.371645][T30776] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2617.400433][T30776] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2617.433131][T30776] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2617.455645][T30776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2617.671202][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7798'. [ 2617.680828][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7798'. [ 2617.696321][T30776] usb 3-1: GET_CAPABILITIES returned 0 [ 2617.703195][T30776] usbtmc 3-1:16.0: can't read capabilities [ 2617.967226][ T8420] usb 3-1: usbtmc_ioctl_clear_out_halt returned -32 [ 2617.980522][T25103] usb 3-1: USB disconnect, device number 18 [ 2618.262800][ T8464] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7801'. [ 2618.510442][T30763] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2618.669968][T30763] usb 2-1: Using ep0 maxpacket: 8 [ 2618.683390][T30763] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 2618.704282][T30763] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2618.722711][T30763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2618.744384][T30763] usb 2-1: Product: syz [ 2618.755257][T30763] usb 2-1: Manufacturer: syz [ 2618.784477][T30763] usb 2-1: SerialNumber: syz [ 2618.807768][ T8474] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7804'. [ 2618.820373][T30763] usb 2-1: config 0 descriptor?? [ 2618.860906][T30763] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2618.870090][T30763] usb 2-1: setting power ON [ 2618.875847][T30763] dvb-usb: bulk message failed: -22 (2/0) [ 2618.898312][T30763] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2618.911877][T30763] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2618.922333][T30763] usb 2-1: media controller created [ 2618.972318][T30763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2619.010664][T30763] usb 2-1: selecting invalid altsetting 6 [ 2619.024109][T30763] usb 2-1: digital interface selection failed (-22) [ 2619.035382][T30763] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2619.074429][ T8466] dvb-usb: bulk message failed: -22 (3/0) [ 2619.083309][T30763] usb 2-1: setting power OFF [ 2619.099402][ T8466] dvb-usb: bulk message failed: -22 (4/0) [ 2619.121499][ T8466] dvb-usb: bulk message failed: -22 (5/0) [ 2619.130120][T30763] dvb-usb: bulk message failed: -22 (2/0) [ 2619.162086][T30763] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2619.173630][T30763] (NULL device *): no alternate interface [ 2619.333298][T30763] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2619.404530][T30763] usb 2-1: USB disconnect, device number 35 [ 2619.497899][ T8486] syzkaller1: entered promiscuous mode [ 2619.538623][ T8486] syzkaller1: entered allmulticast mode [ 2619.727742][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7813'. [ 2620.022327][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7819'. [ 2620.033004][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7819'. [ 2621.215173][ T8533] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7827'. [ 2621.265101][ T8534] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2621.680215][ T8545] veth0_macvtap: Caught tx_queue_len zero misconfig [ 2622.091878][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7837'. [ 2622.104732][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7837'. [ 2623.011038][ T8579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7848'. [ 2623.021726][ T8579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7848'. [ 2623.140245][T30763] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2623.300881][T30763] usb 2-1: Using ep0 maxpacket: 16 [ 2623.308571][T30763] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 2623.318184][T30763] usb 2-1: config 0 has no interface number 0 [ 2623.328257][T30763] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2623.338683][T30763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2623.358298][T30763] usb 2-1: Product: syz [ 2623.365848][T30763] usb 2-1: Manufacturer: syz [ 2623.374692][T30763] usb 2-1: SerialNumber: syz [ 2623.391493][T30763] usb 2-1: config 0 descriptor?? [ 2623.402258][T30763] hub 2-1:0.132: bad descriptor, ignoring hub [ 2623.408663][T30763] hub 2-1:0.132: probe with driver hub failed with error -5 [ 2623.420295][T30763] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input89 [ 2623.628500][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7856'. [ 2623.685358][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7856'. [ 2623.794091][ T8606] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7857'. [ 2623.828983][ T8610] syzkaller1: entered allmulticast mode [ 2623.922536][T30763] usb 2-1: USB disconnect, device number 36 [ 2625.236444][ T8646] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7873'. [ 2625.349860][T25103] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2625.522304][T25103] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 2625.539704][T25103] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2625.562476][T25103] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2625.588817][T25103] usb 4-1: config 220 has no interface number 2 [ 2625.605387][T25103] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2625.667376][T25103] usb 4-1: config 220 interface 0 has no altsetting 0 [ 2625.685569][T25103] usb 4-1: config 220 interface 76 has no altsetting 0 [ 2625.704348][T25103] usb 4-1: config 220 interface 1 has no altsetting 0 [ 2625.722293][T25103] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2625.736970][T25103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2625.762347][T25103] usb 4-1: Product: syz [ 2625.770690][T25103] usb 4-1: Manufacturer: syz [ 2625.787257][T25103] usb 4-1: SerialNumber: syz [ 2626.035284][T25103] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2626.076407][T25103] uvcvideo 4-1:220.0: No valid video chain found. [ 2626.102224][T25103] usb 4-1: selecting invalid altsetting 0 [ 2626.167136][T25103] usb 4-1: selecting invalid altsetting 0 [ 2626.181155][T25103] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 2626.210420][T25103] usb 4-1: USB disconnect, device number 44 [ 2626.381575][ T8670] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7881'. [ 2626.618633][ T8674] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7883'. [ 2627.001800][ T8685] team_slave_0: left promiscuous mode [ 2627.031902][ T8685] team_slave_0: left allmulticast mode [ 2627.134604][ T8685] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2628.631808][ T8718] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2628.829827][T25103] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2628.972447][ T8724] input: syz0 as /devices/virtual/input/input90 [ 2628.995426][T25103] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 2629.014410][T25103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2629.037306][T25103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2629.047222][T25103] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2629.061388][T25103] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2629.074026][T25103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2629.093273][T25103] usb 2-1: config 0 descriptor?? [ 2629.103073][ T8726] __nla_validate_parse: 2 callbacks suppressed [ 2629.103089][ T8726] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7902'. [ 2629.141804][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7903'. [ 2629.160064][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7903'. [ 2629.264213][ T8732] netlink: 710 bytes leftover after parsing attributes in process `syz.3.7905'. [ 2629.523601][T25103] plantronics 0003:047F:FFFF.0082: reserved main item tag 0xd [ 2629.540638][T25103] plantronics 0003:047F:FFFF.0082: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2629.792246][ T8756] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7914'. [ 2629.822234][T30773] usb 2-1: USB disconnect, device number 37 [ 2630.294622][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7920'. [ 2630.305576][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7920'. [ 2630.492829][ T8776] syzkaller1: entered promiscuous mode [ 2630.499421][ T8776] syzkaller1: entered allmulticast mode [ 2631.045300][ T8793] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7927'. [ 2631.357357][ T8806] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7929'. [ 2631.403593][ T8811] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7931'. [ 2631.509721][T30773] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2631.684228][T30773] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2631.714854][T30773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2631.747039][T30773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2631.774203][T30773] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2631.802948][T30773] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2631.815802][T30773] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2631.835523][T30773] usb 4-1: Manufacturer: syz [ 2631.863611][T30773] usb 4-1: config 0 descriptor?? [ 2632.288226][T30773] hid_parser_main: 54 callbacks suppressed [ 2632.288242][T30773] appleir 0003:05AC:8243.0083: unknown main item tag 0x0 [ 2632.344419][T30773] appleir 0003:05AC:8243.0083: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2632.571572][T30773] usb 4-1: USB disconnect, device number 45 [ 2632.643121][ T8825] fido_id[8825]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2633.919703][T30768] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2634.089836][T30768] usb 4-1: Using ep0 maxpacket: 16 [ 2634.109996][T30768] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2634.127749][T30768] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2634.167954][T30768] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2634.194437][T30768] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2634.232799][T30768] usb 4-1: config 7 interface 0 has no altsetting 0 [ 2634.247103][T30768] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 2634.256953][T30768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2634.611785][ T8897] __nla_validate_parse: 7 callbacks suppressed [ 2634.612096][ T8897] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7966'. [ 2634.746461][T30768] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0084/input/input92 [ 2634.834720][T30768] kye 0003:0458:5010.0084: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 2634.980957][T30768] usb 4-1: USB disconnect, device number 46 [ 2636.054273][ T8945] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7983'. [ 2637.439753][T30773] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2637.599838][T30773] usb 3-1: Using ep0 maxpacket: 8 [ 2637.609121][T30773] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2637.618451][T30773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2637.637556][T30773] usb 3-1: Product: syz [ 2637.649996][T30773] usb 3-1: Manufacturer: syz [ 2637.656261][T30773] usb 3-1: SerialNumber: syz [ 2637.673796][T30773] usb 3-1: config 0 descriptor?? [ 2637.893850][T30773] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 2637.905463][ T9003] kvm: user requested TSC rate below hardware speed [ 2637.947505][ T9004] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8010'. [ 2638.300738][ T9013] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8013'. [ 2638.742076][ T9023] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8019'. [ 2639.007880][T30773] usb write operation failed. (-71) [ 2639.029441][T30773] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2639.055515][T30773] dvbdev: DVB: registering new adapter (Terratec H7) [ 2639.077040][T30773] usb 3-1: media controller created [ 2639.096425][T30773] usb read operation failed. (-71) [ 2639.120763][T30773] usb write operation failed. (-71) [ 2639.143231][T30773] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 2639.187168][T30773] usb 3-1: USB disconnect, device number 19 [ 2639.645011][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8024'. [ 2639.661352][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8024'. [ 2639.699713][T30773] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2639.870686][T30773] usb 3-1: Using ep0 maxpacket: 16 [ 2639.890778][T30773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2639.921192][T30773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2639.949393][T30773] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2639.979770][T30773] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2639.999136][T30773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2640.033250][T30773] usb 3-1: config 0 descriptor?? [ 2640.496305][T30773] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0085/input/input93 [ 2640.556626][T30773] microsoft 0003:045E:07DA.0085: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 2640.717648][T25103] usb 3-1: USB disconnect, device number 20 [ 2641.018074][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8036'. [ 2641.051668][ T9076] netlink: 'syz.1.8036': attribute type 5 has an invalid length. [ 2641.078049][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8036'. [ 2641.103044][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8036'. [ 2641.113087][ T9076] netlink: 'syz.1.8036': attribute type 5 has an invalid length. [ 2641.121684][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8036'. [ 2641.612269][ T9110] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8046'. [ 2641.727525][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8052'. [ 2641.753290][ T9115] netlink: 'syz.3.8052': attribute type 5 has an invalid length. [ 2641.766647][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8052'. [ 2641.781124][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8052'. [ 2641.792644][ T9115] netlink: 'syz.3.8052': attribute type 5 has an invalid length. [ 2642.446712][ T30] audit: type=1326 audit(1783565219.141:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.2.8065" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x0 [ 2643.912053][ T9174] input: syz0 as /devices/virtual/input/input94 [ 2644.029786][T30773] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2644.189768][T30773] usb 3-1: Using ep0 maxpacket: 16 [ 2644.202040][T30773] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2644.222298][T30773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2644.246923][T30773] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2644.276481][T30773] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2644.313275][T30773] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2644.329053][T30773] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2644.351062][T30773] usb 3-1: Manufacturer: syz [ 2644.368175][T30773] usb 3-1: config 0 descriptor?? [ 2644.817437][ T9194] bridge0: port 1(bridge_slave_0) entered disabled state [ 2644.895808][ T9196] __nla_validate_parse: 6 callbacks suppressed [ 2644.895821][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8085'. [ 2644.925282][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8085'. [ 2645.073064][ T9205] bridge0: port 2(bridge_slave_1) entered disabled state [ 2645.172167][ T9205] bridge6: port 2(veth0_to_bond) entered disabled state [ 2645.220955][ T9205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2645.281375][ T9205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2645.325402][ T9212] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8087'. [ 2645.399576][ T9205] bridge4: left promiscuous mode [ 2645.416851][ T9205] bridge4: left allmulticast mode [ 2645.442601][ T9205] bond2: left promiscuous mode [ 2645.457011][ T9205] vlan0: left allmulticast mode [ 2645.778156][ T9215] input: syz1 as /devices/virtual/input/input95 [ 2646.401623][ T9235] kernel read not supported for file /eth0 (pid: 9235 comm: syz.0.8099) [ 2646.411343][ T30] audit: type=1800 audit(1783565223.111:2466): pid=9235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8099" name="eth0" dev="mqueue" ino=159764 res=0 errno=0 [ 2646.573389][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8103'. [ 2646.584407][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8103'. [ 2646.718503][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8104'. [ 2646.794755][T30773] usb 3-1: USB disconnect, device number 21 [ 2647.745083][ T9281] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8113'. [ 2647.839686][T30776] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2648.002914][T30776] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2648.021670][T30776] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2648.048204][T30776] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2648.074583][T30776] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2648.103719][T30776] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2648.127180][T30776] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2648.156174][T30776] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2648.182873][T30776] usb 2-1: Product: syz [ 2648.195585][T30776] usb 2-1: Manufacturer: syz [ 2648.222298][T30776] cdc_wdm 2-1:1.0: skipping garbage [ 2648.239139][T30776] cdc_wdm 2-1:1.0: skipping garbage [ 2648.273536][T30776] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2648.282321][T30776] cdc_wdm 2-1:1.0: Unknown control protocol [ 2648.494599][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2648.501360][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2648.507613][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2648.514189][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2648.520618][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2648.527217][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2648.533431][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2648.540015][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2648.546263][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2648.552842][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2648.559088][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2648.565665][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2648.571929][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2648.578504][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2648.584775][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2648.591381][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2648.597893][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2648.604498][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2648.610833][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2648.617432][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2648.674588][T30776] usb 2-1: USB disconnect, device number 38 [ 2648.680657][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2649.430605][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8135'. [ 2649.458468][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8135'. [ 2649.660810][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8140'. [ 2650.063291][ T9351] __nla_validate_parse: 1 callbacks suppressed [ 2650.063304][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8147'. [ 2650.082453][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8147'. [ 2650.268482][ T9356] hsr0: entered promiscuous mode [ 2650.284857][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8148'. [ 2650.849084][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8153'. [ 2650.880302][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8153'. [ 2650.901679][ T9368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8153'. [ 2651.249699][T25103] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2651.412626][T25103] usb 2-1: Using ep0 maxpacket: 8 [ 2651.424545][T25103] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2651.447131][T25103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2651.467339][T25103] usb 2-1: Product: syz [ 2651.471926][T25103] usb 2-1: Manufacturer: syz [ 2651.479661][T25103] usb 2-1: SerialNumber: syz [ 2651.496650][T25103] usb 2-1: config 0 descriptor?? [ 2651.718349][T25103] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 2651.791380][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.799193][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.886651][T30763] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 2651.906665][T30763] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2652.319927][T30763] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2652.481389][T30763] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2652.502167][T30763] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2652.516068][T30763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2652.531558][T30763] usb 4-1: config 0 descriptor?? [ 2652.545291][T30763] pwc: Askey VC010 type 2 USB webcam detected. [ 2652.746571][T25103] usb write operation failed. (-71) [ 2652.755878][T25103] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2652.767537][T25103] dvbdev: DVB: registering new adapter (Terratec H7) [ 2652.774853][T25103] usb 2-1: media controller created [ 2652.780768][T25103] usb read operation failed. (-71) [ 2652.786251][T25103] usb write operation failed. (-71) [ 2652.794555][T25103] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 2652.807471][T25103] usb 2-1: USB disconnect, device number 39 [ 2652.955648][T30763] pwc: recv_control_msg error -71 req 02 val 2b00 [ 2652.968563][T30763] pwc: recv_control_msg error -71 req 02 val 2700 [ 2652.976518][T30763] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2652.983958][T30763] pwc: recv_control_msg error -71 req 04 val 1000 [ 2652.991793][T30763] pwc: recv_control_msg error -71 req 04 val 1300 [ 2652.998534][T30763] pwc: recv_control_msg error -71 req 04 val 1400 [ 2653.005764][T30763] pwc: recv_control_msg error -71 req 02 val 2000 [ 2653.012940][T30763] pwc: recv_control_msg error -71 req 02 val 2100 [ 2653.020210][T30763] pwc: recv_control_msg error -71 req 04 val 1500 [ 2653.027311][T30763] pwc: recv_control_msg error -71 req 02 val 2500 [ 2653.034914][T30763] pwc: recv_control_msg error -71 req 02 val 2400 [ 2653.056163][T30763] pwc: recv_control_msg error -71 req 02 val 2600 [ 2653.069476][T30763] pwc: recv_control_msg error -71 req 02 val 2900 [ 2653.079566][T30763] pwc: recv_control_msg error -71 req 02 val 2800 [ 2653.087817][T30763] pwc: recv_control_msg error -71 req 04 val 1100 [ 2653.096877][T30763] pwc: recv_control_msg error -71 req 04 val 1200 [ 2653.109459][T30763] pwc: Registered as video103. [ 2653.131966][T30763] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input96 [ 2653.186135][T30763] usb 4-1: USB disconnect, device number 47 [ 2653.554072][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8181'. [ 2653.569295][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8181'. [ 2653.795159][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8185'. [ 2653.815811][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8185'. [ 2655.204548][ T9502] syzkaller1: entered promiscuous mode [ 2655.220736][ T9502] syzkaller1: entered allmulticast mode [ 2655.608061][ T9518] ªªªªªª: renamed from vlan0 [ 2656.304814][ T9538] __nla_validate_parse: 2 callbacks suppressed [ 2656.304831][ T9538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8220'. [ 2656.323209][ T9538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8220'. [ 2656.389866][T30776] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2656.491504][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8223'. [ 2656.506146][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8223'. [ 2656.554786][T30776] usb 4-1: Using ep0 maxpacket: 32 [ 2656.562620][T30776] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2656.578604][T30776] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2656.600426][T30776] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2656.619722][T30776] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2656.642983][T30776] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2656.662084][T30776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2656.684219][T30776] usb 4-1: Product: syz [ 2656.696935][T30776] usb 4-1: Manufacturer: syz [ 2656.710366][T30776] usb 4-1: SerialNumber: syz [ 2656.742829][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2656.763544][T30776] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input97 [ 2657.010649][T30776] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2657.039044][T30776] (id 0x00) [ 2657.230336][T30776] rc_core: IR keymap rc-imon-pad not found [ 2657.259145][T30776] Registered IR keymap rc-empty [ 2657.286216][T30776] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2657.334654][T30776] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2657.401291][ T9564] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8228'. [ 2657.425720][T30776] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 2657.499172][T30776] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input98 [ 2657.621105][T30776] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:48> initialized [ 2657.654264][T30776] usb 4-1: USB disconnect, device number 48 [ 2657.881336][T30773] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2658.049944][T30773] usb 2-1: Using ep0 maxpacket: 8 [ 2658.065627][T30773] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2658.086605][T30773] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 2658.106152][T30773] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2658.130799][T30773] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2658.152122][T30773] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 2658.171241][T30773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2658.189335][T30773] usb 2-1: Product: syz [ 2658.201611][T30773] usb 2-1: Manufacturer: syz [ 2658.209806][T30773] usb 2-1: SerialNumber: syz [ 2658.228413][ T9576] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2658.302519][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8238'. [ 2658.461981][T30773] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2658.470706][T30773] usb 2-1: MIDIStreaming interface descriptor not found [ 2658.634739][T30773] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 2658.652212][T30773] usb 2-1: can't set first interface for hiFace device. [ 2658.679713][T30773] snd-usb-hiface 2-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 2658.700790][T30773] usb 2-1: USB disconnect, device number 40 [ 2658.729790][T25103] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2658.754531][ T1909] udevd[1909]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2658.891835][T25103] usb 3-1: Using ep0 maxpacket: 8 [ 2658.899306][T25103] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2658.909046][T25103] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2658.923539][T25103] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2658.934626][T25103] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2658.948031][T25103] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2658.962134][T25103] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2658.975932][T25103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2659.109678][T30773] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2659.213442][T25103] usb 3-1: usb_control_msg returned -32 [ 2659.221408][T25103] usbtmc 3-1:16.0: can't read capabilities [ 2659.279679][T30773] usb 2-1: Using ep0 maxpacket: 8 [ 2659.293986][T30773] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2659.311366][T30773] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 2659.337143][T30773] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2659.358703][T30773] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2659.382561][T30773] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 2659.399356][T30773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2659.410610][T30773] usb 2-1: Product: syz [ 2659.420915][T30773] usb 2-1: Manufacturer: syz [ 2659.431591][T30773] usb 2-1: SerialNumber: syz [ 2659.447523][ T9576] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2659.462524][ T9612] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8248'. [ 2659.508018][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8249'. [ 2659.521962][ T9615] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8249'. [ 2659.541791][ T9615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8249'. [ 2659.892719][T30773] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2659.900292][T30773] usb 2-1: MIDIStreaming interface descriptor not found [ 2659.984882][ T9622] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 2660.037462][T30773] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 2660.092308][ T9576] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2660.188428][T25103] usb 3-1: USB disconnect, device number 22 [ 2660.448196][T30773] usb 2-1: USB disconnect, device number 41 [ 2660.610215][ T2183] udevd[2183]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2660.949919][T25103] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2660.963995][ T9637] sit1: entered allmulticast mode [ 2661.126363][T25103] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2661.160141][T25103] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2661.202110][T25103] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2661.247107][T25103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2661.279503][T25103] usb 4-1: SerialNumber: syz [ 2661.518422][ T9652] input: syz0 as /devices/virtual/input/input99 [ 2661.543187][T25103] usb 4-1: 0:2 : does not exist [ 2661.684662][T25103] usb 4-1: USB disconnect, device number 49 [ 2661.787114][ T2115] udevd[2115]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2662.020045][T30773] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2662.062696][ T9667] __nla_validate_parse: 2 callbacks suppressed [ 2662.062715][ T9667] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8270'. [ 2662.103471][ T30] audit: type=1326 audit(1783565238.801:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9668 comm="syz.3.8272" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe30ec code=0x0 [ 2662.209698][T30773] usb 3-1: Using ep0 maxpacket: 8 [ 2662.216578][T30773] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2662.227883][T30773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2662.250341][T30773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2662.274200][T30773] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2662.301963][T30773] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2662.316714][T30773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2662.547932][T30773] usb 3-1: GET_CAPABILITIES returned 0 [ 2662.559282][T30773] usbtmc 3-1:16.0: can't read capabilities [ 2662.783152][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.792253][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.814329][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.823422][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.832471][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.841510][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.850559][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.859608][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.872239][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.897062][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.906154][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.915211][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.924281][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.933344][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.943490][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.952645][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2662.998638][T30763] usb 3-1: USB disconnect, device number 23 [ 2663.401269][ T9706] sit0: entered promiscuous mode [ 2663.414384][ T9706] netlink: 'syz.1.8288': attribute type 1 has an invalid length. [ 2663.431558][ T9706] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8288'. [ 2663.553389][ T30] audit: type=1326 audit(1783565240.251:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.1.8289" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fff0ec code=0x0 [ 2663.820803][ T9716] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8291'. [ 2664.460027][T30773] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2664.624732][ T9727] input: syz1 as /devices/virtual/input/input100 [ 2664.635251][T30773] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 2664.656274][T30773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2664.668543][T30773] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2664.684948][T30773] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2664.702931][T30773] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 2664.714023][T30773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2664.732030][T30773] usb 4-1: Product: syz [ 2664.737442][T30773] usb 4-1: Manufacturer: syz [ 2664.742860][T30773] usb 4-1: SerialNumber: syz [ 2664.756930][T30773] usb 4-1: config 0 descriptor?? [ 2664.766124][T30773] redrat3 4-1:0.0: Couldn't find all endpoints [ 2664.830080][T25103] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2664.981913][T30773] usb 4-1: USB disconnect, device number 50 [ 2664.992805][T25103] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2665.007603][T25103] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2665.022040][T25103] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2665.034438][T25103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2665.042574][T25103] usb 3-1: Product: syz [ 2665.046772][T25103] usb 3-1: Manufacturer: syz [ 2665.052413][T25103] usb 3-1: SerialNumber: syz [ 2665.278968][T25103] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2665.439715][T30773] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 2665.469334][T25103] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2665.478787][T25103] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 2665.529762][T30763] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2665.591402][T30773] usb 4-1: config 246 has an invalid interface number: 166 but max is 0 [ 2665.600191][T30773] usb 4-1: config 246 has no interface number 0 [ 2665.606512][T30773] usb 4-1: config 246 interface 166 altsetting 118 has an endpoint descriptor with address 0x92, changing to 0x82 [ 2665.618897][T30773] usb 4-1: config 246 interface 166 altsetting 118 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2665.629537][T30773] usb 4-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2665.643442][T30773] usb 4-1: config 246 interface 166 has no altsetting 0 [ 2665.652409][T30773] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 2665.661811][T30773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2665.669895][T30773] usb 4-1: Product: syz [ 2665.674347][T30773] usb 4-1: Manufacturer: syz [ 2665.678973][T30773] usb 4-1: SerialNumber: syz [ 2665.687194][T30763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2665.698778][T30763] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2665.708388][T30763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2665.723399][T30763] usb 2-1: config 0 descriptor?? [ 2665.874397][T25103] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 2665.932992][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8301'. [ 2665.947901][T30763] usbhid 2-1:0.0: can't add hid device: -71 [ 2665.960294][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8301'. [ 2665.964569][T30763] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2665.978594][T25103] usb 3-1: USB disconnect, device number 24 [ 2666.008036][T30763] usb 2-1: USB disconnect, device number 42 [ 2666.098409][ T2115] udevd[2115]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2666.305803][T30773] usb 4-1: Limiting number of CPorts to U8_MAX [ 2666.318491][T30773] usb 4-1: Not enough endpoints found in device, aborting! [ 2666.460462][T30763] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2666.536564][T30773] usb 4-1: USB disconnect, device number 51 [ 2666.609800][T30763] usb 2-1: Using ep0 maxpacket: 32 [ 2666.616697][T30763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2666.628421][T30763] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2666.637787][T30763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2666.648363][T30763] usb 2-1: config 0 descriptor?? [ 2666.657363][T30763] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2666.668351][T30763] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2667.060509][T30774] usb 2-1: USB disconnect, device number 43 [ 2667.087043][T30774] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 2667.175866][ T9758] netlink: 'syz.4.8309': attribute type 4 has an invalid length. [ 2667.184991][ T9758] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8309'. [ 2667.306608][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8312'. [ 2667.336683][ T9763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8312'. [ 2667.361623][ T9763] ip6erspan0: entered promiscuous mode [ 2667.492886][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8315'. [ 2667.510351][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8315'. [ 2667.632179][ T9774] ip6tnl3: entered promiscuous mode [ 2667.786958][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8319'. [ 2667.935376][ T9787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8318'. [ 2667.979181][ T9787] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8318'. [ 2668.370138][T30773] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2668.552164][T30773] usb 3-1: config 0 has no interfaces? [ 2668.566782][T30773] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2668.592503][T30773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2668.618963][T30773] usb 3-1: config 0 descriptor?? [ 2668.882280][T30773] usb 3-1: USB disconnect, device number 25 [ 2669.389841][ T2695] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2669.463155][T30773] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2669.581654][ T2695] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2669.598987][ T2695] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2669.614466][ T2695] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 2669.625842][ T2695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2669.639734][ T2695] usb 2-1: config 0 descriptor?? [ 2669.640679][T30773] usb 4-1: Using ep0 maxpacket: 16 [ 2669.659486][T30773] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2669.670453][T30773] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2669.682017][T30773] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2669.691536][T30773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2669.700098][T30773] usb 4-1: Product: syz [ 2669.705148][T30773] usb 4-1: Manufacturer: syz [ 2669.712340][T30773] usb 4-1: SerialNumber: syz [ 2669.728233][T30773] usb 4-1: 0:2 : does not exist [ 2669.735862][T30773] usb 4-1: unit 9 not found! [ 2669.744187][ T9837] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8341'. [ 2669.754699][ T9837] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8341'. [ 2669.769760][T30774] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 2669.928965][T30773] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 2669.942116][T30773] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 2669.951662][T30774] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2669.966106][T30774] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2669.980232][T30774] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2670.007589][T30774] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2670.008758][T30773] usb 4-1: USB disconnect, device number 52 [ 2670.026462][T30774] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2670.038972][T30774] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2670.047355][T30774] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2670.063138][T30774] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2670.079684][T30774] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2670.082522][ T2115] udevd[2115]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2670.093747][T30774] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2670.121287][T30774] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2670.136417][T30774] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2670.147461][T30774] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2670.159325][T30774] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2670.170947][T30774] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2670.184635][T30774] usb 3-1: string descriptor 0 read error: -22 [ 2670.194004][T30774] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2670.203100][T30774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2670.219951][T30774] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2670.469972][T30773] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2670.605668][T25103] usb 3-1: USB disconnect, device number 26 [ 2670.640878][T30773] usb 4-1: Using ep0 maxpacket: 16 [ 2670.651809][T30773] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2670.662650][T30773] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2670.677245][T30773] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2670.686719][T30773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2670.695778][T30773] usb 4-1: Product: syz [ 2670.700788][T30773] usb 4-1: Manufacturer: syz [ 2670.705392][T30773] usb 4-1: SerialNumber: syz [ 2670.716943][T30773] usb 4-1: 0:2 : does not exist [ 2670.722014][T30773] usb 4-1: unit 9 not found! [ 2671.237610][ T9855] input: syz0 as /devices/virtual/input/input101 [ 2671.328843][T30773] usb 4-1: 4:0: failed to get current value for ch 1 (-22) [ 2671.345129][T30773] usb 4-1: 4:0: failed to get current value for ch 6 (-22) [ 2671.368369][T30773] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 2671.405793][T30773] usb 4-1: USB disconnect, device number 53 [ 2671.431462][ T2115] udevd[2115]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2672.137349][T25103] usb 2-1: USB disconnect, device number 44 [ 2672.220138][T30763] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2672.381224][T30763] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2672.391187][T30763] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2672.404557][T30763] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2672.414445][T30763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2672.422567][T30763] usb 4-1: Product: syz [ 2672.427142][T30763] usb 4-1: Manufacturer: syz [ 2672.432521][T30763] usb 4-1: SerialNumber: syz [ 2672.619736][T30774] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2672.648317][T30763] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2672.769795][ T2695] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2672.771222][T30774] usb 2-1: config 0 has no interfaces? [ 2672.785494][T30774] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2672.794926][T30774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2672.803019][T30774] usb 2-1: Product: syz [ 2672.807293][T30774] usb 2-1: Manufacturer: syz [ 2672.812431][T30774] usb 2-1: SerialNumber: syz [ 2672.819710][T30774] usb 2-1: config 0 descriptor?? [ 2672.848425][T30763] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2672.857334][T30763] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 2672.919719][ T2695] usb 3-1: Using ep0 maxpacket: 16 [ 2672.928367][ T2695] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2672.938294][ T2695] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 2672.958448][ T2695] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 2672.968429][ T2695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2672.977360][ T2695] usb 3-1: Product: syz [ 2672.981990][ T2695] usb 3-1: Manufacturer: syz [ 2672.986686][ T2695] usb 3-1: SerialNumber: syz [ 2673.123896][ T9878] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 2673.145211][T25103] usb 2-1: USB disconnect, device number 45 [ 2673.261954][T30763] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2673.270717][T30763] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 2673.462475][T30763] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 2673.500784][ T2695] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 2673.514484][T30763] usb 4-1: USB disconnect, device number 54 [ 2673.522386][ T2695] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2673.557620][ T2115] udevd[2115]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2673.757238][ T2695] usb 3-1: 2:1 : invalid Cluster Descriptor size [ 2673.776540][ T9892] __nla_validate_parse: 2 callbacks suppressed [ 2673.776552][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8363'. [ 2673.825649][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8363'. [ 2673.977168][T30773] usb 3-1: USB disconnect, device number 27 [ 2674.059793][T30774] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2674.220239][T30774] usb 2-1: Using ep0 maxpacket: 16 [ 2674.236076][T30774] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2674.251249][ T9902] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8365'. [ 2674.267740][T30774] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2674.284903][T30774] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2674.304537][T30774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2674.319644][T30774] usb 2-1: Product: syz [ 2674.327772][T30774] usb 2-1: Manufacturer: syz [ 2674.336432][T30774] usb 2-1: SerialNumber: syz [ 2674.353792][T30774] usb 2-1: config 0 descriptor?? [ 2674.613985][T30774] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input102 [ 2674.942092][T30774] rc_core: IR keymap rc-imon-pad not found [ 2674.972079][T30774] Registered IR keymap rc-empty [ 2674.985851][T30774] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2675.006443][T30774] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2675.070885][T30774] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2675.101976][T30774] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input103 [ 2675.134367][T30774] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:46> initialized [ 2675.546098][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2675.554303][T30774] usb 2-1: USB disconnect, device number 46 [ 2675.890281][T30773] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2675.922327][ T9926] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8374'. [ 2676.079834][T30773] usb 4-1: Using ep0 maxpacket: 8 [ 2676.099307][T30773] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2676.145716][T30773] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2676.179245][T30773] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 2676.191964][T30773] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 2676.208761][T30773] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2676.222656][T30773] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2676.236570][T30773] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2676.249178][T30773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2676.282654][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8377'. [ 2676.378565][ T9932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2676.477089][T30773] usb 4-1: GET_CAPABILITIES returned 0 [ 2676.491732][T30773] usbtmc 4-1:16.0: can't read capabilities [ 2676.700233][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.709364][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.718464][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.770551][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.779695][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.788799][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.799976][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.809102][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.818158][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.827217][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.905040][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.914163][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.923246][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.932304][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.972817][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2676.981967][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2677.042655][T30774] usb 4-1: USB disconnect, device number 55 [ 2677.596432][ T9972] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2678.407591][T10002] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8404'. [ 2679.211173][T10024] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8414'. [ 2679.243558][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8414'. [ 2679.748895][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8418'. [ 2679.994008][T10041] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8417'. [ 2680.052785][T10049] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 2680.210388][ T2695] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2680.314469][T10059] input: syz1 as /devices/virtual/input/input104 [ 2680.371231][ T2695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2680.416326][ T2695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2680.459867][ T2695] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2680.480333][ T2695] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2680.504400][ T2695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2680.552872][T10062] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8428'. [ 2680.567171][ T2695] usb 4-1: config 0 descriptor?? [ 2681.023214][ T2695] plantronics 0003:047F:FFFF.0087: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2681.798648][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8440'. [ 2681.811525][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8440'. [ 2682.727073][T10114] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8448'. [ 2683.061592][T10122] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 2683.116353][T30763] usb 4-1: USB disconnect, device number 56 [ 2683.236562][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8455'. [ 2683.270708][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8455'. [ 2683.559982][T30763] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2683.739716][T30763] usb 4-1: Using ep0 maxpacket: 32 [ 2683.757215][T30763] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 2683.788908][T30763] usb 4-1: config 0 has no interface number 0 [ 2683.807665][T30763] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2683.843597][T30763] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2683.875154][T30763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2683.903412][T30763] usb 4-1: Product: syz [ 2683.929755][T30763] usb 4-1: Manufacturer: syz [ 2683.943698][T30763] usb 4-1: SerialNumber: syz [ 2683.950602][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 2683.957800][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 2683.979390][T10137] batman_adv: batadv0: Interface deactivated: dummy0 [ 2684.001566][T30763] usb 4-1: config 0 descriptor?? [ 2684.052048][T30763] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2684.085534][T30763] em28xx 4-1:0.132: Video interface 132 found: [ 2684.098650][T10137] bridge7: port 2(veth0_to_bond) entered disabled state [ 2684.139220][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2684.315296][T10137] bond2: left promiscuous mode [ 2684.321274][T10137] vlan2: left allmulticast mode [ 2684.326576][T10137] bond3: left promiscuous mode [ 2684.349052][T10138] geneve2: entered promiscuous mode [ 2684.371356][ T8152] netdevsim netdevsim0 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 2684.381362][ T8152] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 2684.389524][ T8152] netdevsim netdevsim0 : set [1, 1] type 2 family 0 port 55392 - 0 [ 2684.398753][ T8152] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2684.408591][ T8152] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2684.418007][ T8152] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 55392 - 0 [ 2684.434178][T30763] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 2684.445125][ T8152] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2684.454758][ T8152] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2684.464331][ T8152] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 55392 - 0 [ 2684.473618][ T8152] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2684.483191][ T8152] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2684.492534][ T8152] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 55392 - 0 [ 2684.519902][T30768] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2684.679803][T30768] usb 3-1: Using ep0 maxpacket: 8 [ 2684.693719][T30768] usb 3-1: config 0 has no interfaces? [ 2684.712498][T30768] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 2684.733579][T30768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2684.754611][T30768] usb 3-1: Product: syz [ 2684.764285][T30768] usb 3-1: Manufacturer: syz [ 2684.773252][T30768] usb 3-1: SerialNumber: syz [ 2684.790442][T30768] usb 3-1: config 0 descriptor?? [ 2684.846617][T30763] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 2684.860272][T30763] em28xx 4-1:0.132: board has no eeprom [ 2684.941054][T30763] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2684.959351][T30763] em28xx 4-1:0.132: analog set to bulk mode. [ 2684.966669][T30768] em28xx 4-1:0.132: Registering V4L2 extension [ 2685.019332][T10152] loop4: detected capacity change from 0 to 7 [ 2685.039180][T10152] Dev loop4: unable to read RDB block 7 [ 2685.052553][T10152] loop4: unable to read partition table [ 2685.065065][T10152] loop4: partition table beyond EOD, truncated [ 2685.091066][T10152] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2685.122662][ T4992] Dev loop4: unable to read RDB block 7 [ 2685.128451][ T4992] loop4: unable to read partition table [ 2685.135899][ T4992] loop4: partition table beyond EOD, truncated [ 2685.147599][T30763] usb 3-1: USB disconnect, device number 28 [ 2685.155236][T30776] usb 4-1: USB disconnect, device number 57 [ 2685.173554][T30768] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 2685.186939][T30768] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 2685.187089][T30776] em28xx 4-1:0.132: Disconnecting em28xx [ 2685.323377][T30768] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 2685.332538][T30768] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 2685.342128][T30768] em28xx 4-1:0.132: No AC97 audio processor [ 2685.384131][T30768] usb 4-1: Decoder not found [ 2685.395971][T30768] em28xx 4-1:0.132: failed to create media graph [ 2685.406187][T30768] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 2685.421628][T30768] em28xx 4-1:0.132: Remote control support is not available for this card. [ 2685.440950][T30776] em28xx 4-1:0.132: Closing input extension [ 2685.476684][T30776] em28xx 4-1:0.132: Freeing device [ 2685.898970][T10179] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2686.002905][T30774] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2686.083360][ T30] audit: type=1326 audit(1783565262.781:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.3.8475" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe30ec code=0x0 [ 2686.160604][T30774] usb 3-1: Using ep0 maxpacket: 8 [ 2686.171228][T30774] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2686.182766][T30774] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2686.193152][T30774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2686.212381][T30774] usb 3-1: config 0 descriptor?? [ 2686.223724][T30774] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2687.211024][T10154] Set syz1 is full, maxelem 65536 reached [ 2687.448306][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8478'. [ 2687.458827][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8478'. [ 2687.658884][T30774] usb 3-1: USB disconnect, device number 29 [ 2688.149861][T30768] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2688.252744][T10209] netlink: 136 bytes leftover after parsing attributes in process `syz.2.8485'. [ 2688.316266][T30768] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2688.317953][T10211] syzkaller0: entered allmulticast mode [ 2688.364220][T30768] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2688.382386][T30768] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2688.422342][T30768] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2688.439767][T30768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2688.464271][T30768] usb 4-1: config 0 descriptor?? [ 2688.541029][T10220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8490'. [ 2688.906815][T30768] plantronics 0003:047F:FFFF.0088: reserved main item tag 0xd [ 2688.952161][T30768] plantronics 0003:047F:FFFF.0088: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2689.193890][T30768] usb 4-1: USB disconnect, device number 58 [ 2689.494362][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8499'. [ 2689.503548][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8499'. [ 2689.917231][T10245] binder: 10244:10245 ioctl c0306201 80000040 returned -14 [ 2690.314583][T30776] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2690.365244][T10259] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8504'. [ 2690.383034][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8505'. [ 2690.399400][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8505'. [ 2690.480081][T30776] usb 4-1: Using ep0 maxpacket: 16 [ 2690.492998][T30776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2690.509261][T30776] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2690.520331][T30776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2690.536140][T30776] usb 4-1: Product: syz [ 2690.540989][T30776] usb 4-1: Manufacturer: syz [ 2690.550732][T30776] usb 4-1: SerialNumber: syz [ 2690.562813][T30776] usb 4-1: config 0 descriptor?? [ 2690.574891][T30776] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2690.586814][T30776] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 2691.181072][T30776] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2691.510812][T30768] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2691.551813][T10270] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8508'. [ 2691.682684][T30768] usb 3-1: Using ep0 maxpacket: 32 [ 2691.691784][T30768] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2691.701477][T30768] usb 3-1: config 0 has no interface number 0 [ 2691.721820][T30768] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2691.746465][T30768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2691.769099][T30768] usb 3-1: Product: syz [ 2691.782934][T30768] usb 3-1: Manufacturer: syz [ 2691.797993][T30768] usb 3-1: SerialNumber: syz [ 2691.813805][T30776] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2691.823891][T30768] usb 3-1: config 0 descriptor?? [ 2691.833651][T30776] em28xx 4-1:0.0: board has no eeprom [ 2691.845110][T30768] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2691.857789][T30768] usb 3-1: selecting invalid altsetting 1 [ 2691.867176][T30768] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2691.886811][T30768] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2691.900795][T30776] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2691.916418][T30776] em28xx 4-1:0.0: dvb set to bulk mode. [ 2691.925327][T30768] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2691.932136][T30774] em28xx 4-1:0.0: Binding DVB extension [ 2691.950044][T30763] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 2691.958158][T30776] usb 4-1: USB disconnect, device number 59 [ 2691.972367][T30768] usb 3-1: media controller created [ 2692.003948][T30776] em28xx 4-1:0.0: Disconnecting em28xx [ 2692.062508][T30768] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2692.086264][T30774] em28xx 4-1:0.0: Registering input extension [ 2692.096706][T30776] em28xx 4-1:0.0: Closing input extension [ 2692.130482][T30763] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2692.148746][T30776] em28xx 4-1:0.0: Freeing device [ 2692.154166][T30763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2692.164617][T30768] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2692.174884][T30768] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2692.182259][T30763] usb 2-1: Product: syz [ 2692.188441][T30763] usb 2-1: Manufacturer: syz [ 2692.194954][T30763] usb 2-1: SerialNumber: syz [ 2692.195123][T30768] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2692.217304][T30763] usb 2-1: config 0 descriptor?? [ 2692.261587][T30768] usb 3-1: USB disconnect, device number 30 [ 2692.434807][T30763] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2692.887188][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8517'. [ 2692.900076][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8517'. [ 2693.185107][T10302] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8519'. [ 2693.599461][T10309] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8521'. [ 2693.654400][T30763] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2693.684495][T30763] usb 2-1: USB disconnect, device number 47 [ 2693.781621][T10311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8522'. [ 2693.795709][T10311] netlink: 'syz.2.8522': attribute type 8 has an invalid length. [ 2693.812030][T10311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8522'. [ 2693.843433][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8522'. [ 2693.880143][T10312] netlink: 'syz.2.8522': attribute type 8 has an invalid length. [ 2693.906313][T10312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8522'. [ 2694.140328][T10314] netlink: 820 bytes leftover after parsing attributes in process `syz.2.8523'. [ 2694.151845][T10314] netlink: 820 bytes leftover after parsing attributes in process `syz.2.8523'. [ 2694.789713][T30776] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2694.962216][T30776] usb 2-1: Using ep0 maxpacket: 32 [ 2694.979709][T30776] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2694.996105][T30776] usb 2-1: config 0 has no interface number 0 [ 2695.012552][T30776] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2695.029621][T30776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2695.049621][T30776] usb 2-1: Product: syz [ 2695.053878][T30776] usb 2-1: Manufacturer: syz [ 2695.064971][T30776] usb 2-1: SerialNumber: syz [ 2695.076006][T30776] usb 2-1: config 0 descriptor?? [ 2695.100626][T30776] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2695.130979][T30776] usb 2-1: selecting invalid altsetting 1 [ 2695.146971][T30776] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2695.175343][T30776] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2695.195945][T30776] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2695.206271][T30776] usb 2-1: media controller created [ 2695.265557][T30776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2695.569709][T30774] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2695.759797][T30774] usb 3-1: Using ep0 maxpacket: 32 [ 2695.782101][T30774] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2695.807839][T30774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2695.856540][T30774] usb 3-1: config 0 descriptor?? [ 2695.888357][T30774] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2695.980713][ T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 55392 - 0 [ 2696.180177][ T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 55392 - 0 [ 2696.350895][T10323] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2696.363762][ T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 55392 - 0 [ 2696.385540][T30776] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2696.403812][T30776] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2696.416431][T30776] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2696.567118][T30776] usb 2-1: USB disconnect, device number 48 [ 2696.778836][T29003] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2696.788337][T29003] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2696.795441][T30773] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2696.810515][T29003] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2696.824627][T29003] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2696.832833][T29003] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2696.833973][ T47] netdevsim netdevsim0  (unregistering): unset [1, 1] type 2 family 0 port 55392 - 0 [ 2696.877612][T27435] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2696.886799][T27435] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2696.895342][T27435] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2696.905879][T27435] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2696.916557][T27435] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2696.977953][T30773] usb 4-1: Using ep0 maxpacket: 8 [ 2696.992805][T30773] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2697.008852][T30773] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2697.019304][T30773] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2697.031207][T30773] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2697.049411][T30773] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2697.093627][T30773] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2697.116566][T30773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2697.349376][T30774] usb 3-1: USB disconnect, device number 31 [ 2697.369403][T30773] usb 4-1: usb_control_msg returned -32 [ 2697.375209][T30773] usbtmc 4-1:16.0: can't read capabilities [ 2697.675989][ T47] bridge_slave_1: left allmulticast mode [ 2697.691485][T30763] usb 4-1: USB disconnect, device number 60 [ 2697.700345][ T47] bridge_slave_1: left promiscuous mode [ 2697.708722][T10356] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 2697.721880][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 2697.773861][ T47] bridge_slave_0: left allmulticast mode [ 2697.783013][ T47] bridge_slave_0: left promiscuous mode [ 2697.788921][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 2697.865870][ T47] veth9: left allmulticast mode [ 2697.891507][ T47] veth9: left promiscuous mode [ 2697.902214][ T47] bridge6: port 2(veth9) entered disabled state [ 2697.926181][ T47] veth7: left allmulticast mode [ 2697.946669][ T47] veth7: left promiscuous mode [ 2697.960054][ T47] bridge6: port 1(veth7) entered disabled state [ 2697.988886][ T47] veth13: left allmulticast mode [ 2698.002520][ T47] veth13: left promiscuous mode [ 2698.013140][ T47] bridge7: port 3(veth13) entered disabled state [ 2698.036683][ T47] veth0_to_bond: left allmulticast mode [ 2698.049123][ T47] veth0_to_bond: left promiscuous mode [ 2698.076700][ T47] bridge7: port 2(veth0_to_bond) entered disabled state [ 2698.098846][ T47] veth11: left allmulticast mode [ 2698.114489][ T47] veth11: left promiscuous mode [ 2698.127374][ T47] bridge7: port 1(veth11) entered disabled state [ 2698.159355][ T47] dvmrp8: left allmulticast mode [ 2698.230158][T30774] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2698.395385][T30774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2698.418250][T30774] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2698.440618][T30774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2698.481712][T30774] usb 3-1: config 0 descriptor?? [ 2698.752201][T30774] usbhid 3-1:0.0: can't add hid device: -71 [ 2698.759917][T30774] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2698.778744][T30774] usb 3-1: USB disconnect, device number 32 [ 2698.845862][ T47] bond0 (unregistering): (slave gretap1): Releasing active interface [ 2698.857604][ T47] bond0 (unregistering): (slave gretap1): the permanent HWaddr of slave - 26:62:96:0a:51:14 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2698.991950][T27435] Bluetooth: hci0: command tx timeout [ 2699.096230][ T47] team0: Port device bridge1 removed [ 2699.128029][ T47] bond0 (unregistering): (slave bridge3): Releasing active interface [ 2699.189874][ T47] bond1 (unregistering): Released all slaves [ 2699.214099][ T47] bond0 (unregistering): Released all slaves [ 2699.239103][ T47] bond2 (unregistering): Released all slaves [ 2699.266812][ T47] bond3 (unregistering): Released all slaves [ 2699.290929][T30774] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2699.356568][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2699.458178][T30774] usb 3-1: Using ep0 maxpacket: 32 [ 2699.461716][ T47] tipc: Disabling bearer [ 2699.465839][T30774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2699.483895][T30774] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2699.493712][T30774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2699.494197][ T47] tipc: Left network mode [ 2699.509656][T30774] usb 3-1: config 0 descriptor?? [ 2699.521340][T30774] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2699.535746][T30774] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2699.814815][T10360] bridge0: port 1(bridge_slave_0) entered blocking state [ 2699.847340][T10360] bridge0: port 1(bridge_slave_0) entered disabled state [ 2699.867767][T10360] bridge_slave_0: entered allmulticast mode [ 2699.892816][T10360] bridge_slave_0: entered promiscuous mode [ 2700.090209][T10358] usb 3-1: USB disconnect, device number 33 [ 2700.096315][T10360] bridge0: port 2(bridge_slave_1) entered blocking state [ 2700.110852][T10360] bridge0: port 2(bridge_slave_1) entered disabled state [ 2700.123640][T10358] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 2700.141802][T10360] bridge_slave_1: entered allmulticast mode [ 2700.185210][T10360] bridge_slave_1: entered promiscuous mode [ 2700.254829][T10424] __nla_validate_parse: 2 callbacks suppressed [ 2700.254846][T10424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8555'. [ 2700.374853][T10360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2700.411433][T10360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2700.590998][T10360] team0: Port device team_slave_0 added [ 2700.602789][T10360] team0: Port device team_slave_1 added [ 2700.658342][ T47] hsr_slave_0: left promiscuous mode [ 2700.689884][T10358] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2700.690107][ T47] hsr_slave_1: left promiscuous mode [ 2700.739315][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2700.765654][ T47] batman_adv: batadv0: Removing interface: dummy0 [ 2700.861139][T10358] usb 4-1: Using ep0 maxpacket: 8 [ 2700.875799][T10358] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2700.886458][T10358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2700.923525][T10358] usb 4-1: Product: syz [ 2700.927841][T10358] usb 4-1: Manufacturer: syz [ 2700.939110][T10358] usb 4-1: SerialNumber: syz [ 2700.954831][T10358] usb 4-1: config 0 descriptor?? [ 2700.964130][T10358] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2701.070809][T27435] Bluetooth: hci0: command tx timeout [ 2701.129326][ T47] team0 (unregistering): Port device team_slave_0 removed [ 2701.342614][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2701.384602][T10360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2701.396772][T10360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2701.425441][T10360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2701.543357][T10360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2701.559706][T10360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2701.590229][T10360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2701.746517][T10360] hsr_slave_0: entered promiscuous mode [ 2701.754318][T10360] hsr_slave_1: entered promiscuous mode [ 2701.802228][T30773] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2701.959696][T30772] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2702.014596][T30773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2702.035446][T30773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2702.049665][T30773] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2702.069834][T30773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2702.081412][ T47] IPVS: stop unused estimator thread 0... [ 2702.094431][T30773] usb 2-1: config 0 descriptor?? [ 2702.158759][T30772] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2702.180386][T30772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2702.193795][T30772] usb 3-1: Product: syz [ 2702.207181][T30772] usb 3-1: Manufacturer: syz [ 2702.216462][T30772] usb 3-1: SerialNumber: syz [ 2702.325436][T10360] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2702.340847][T10360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2702.350099][T10360] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2702.368982][T10360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2702.382617][T10360] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2702.396582][T10360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2702.406277][T10360] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2702.426593][T10360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2702.438676][T10358] gspca_sonixj: i2c_w8 err -71 [ 2702.460852][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2702.539874][T10358] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 2702.551691][T30773] keytouch 0003:0926:3333.0089: fixing up Keytouch IEC report descriptor [ 2702.570715][T10358] usb 4-1: USB disconnect, device number 61 [ 2702.611590][T30773] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0089/input/input107 [ 2702.644144][T10360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2702.684092][T10360] 8021q: adding VLAN 0 to HW filter on device team0 [ 2702.709196][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 2702.716431][ T9568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2702.779453][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state [ 2702.786692][ T9568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2702.827587][T30773] keytouch 0003:0926:3333.0089: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2702.875644][T30773] usb 2-1: USB disconnect, device number 49 [ 2703.027348][T10479] fido_id[10479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2703.053644][T10360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2703.149886][T27435] Bluetooth: hci0: command tx timeout [ 2703.228630][T10360] veth0_vlan: entered promiscuous mode [ 2703.278153][T30772] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2703.290435][T10360] veth1_vlan: entered promiscuous mode [ 2703.386891][T10360] veth0_macvtap: entered promiscuous mode [ 2703.446771][T10360] veth1_macvtap: entered promiscuous mode [ 2703.512937][T10490] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8563'. [ 2703.528677][T10360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2703.559401][T10360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2703.600188][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2703.655948][ T9568] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2703.677264][ T9568] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2703.706074][ T9568] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2703.804714][T30772] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2703.809517][ T9568] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2703.871801][T30772] usb 3-1: USB disconnect, device number 34 [ 2703.942107][T30772] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 2704.159897][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2704.222920][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2704.307666][T18063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2704.346703][T18063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2704.769886][ T30] audit: type=1804 audit(1783565281.461:2470): pid=10507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8543" name="/newroot/0/file1" dev="tmpfs" ino=18 res=1 errno=0 [ 2705.013538][T10517] KVM: debugfs: duplicate directory 10517-4 [ 2705.229869][T27435] Bluetooth: hci0: command tx timeout [ 2705.773891][T27435] Bluetooth: hci0: unexpected cc 0x0c0d length: 7 > 5 [ 2705.879907][T10358] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2706.009734][T30772] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2706.031695][T10358] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2706.040617][T10358] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2706.050907][T10358] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2706.059764][T30763] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2706.060067][T10358] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2706.079120][T10358] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2706.092108][T10358] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2706.101353][T10358] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2706.109368][T10358] usb 3-1: Product: syz [ 2706.114526][T10358] usb 3-1: Manufacturer: syz [ 2706.125209][T10358] cdc_wdm 3-1:1.0: skipping garbage [ 2706.132204][T10358] cdc_wdm 3-1:1.0: skipping garbage [ 2706.138586][T10358] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2706.144627][T10358] cdc_wdm 3-1:1.0: Unknown control protocol [ 2706.169990][T30772] usb 6-1: Using ep0 maxpacket: 8 [ 2706.180219][T30772] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2706.189365][T30772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2706.198708][T30772] usb 6-1: Product: syz [ 2706.203115][T30772] usb 6-1: Manufacturer: syz [ 2706.207740][T30772] usb 6-1: SerialNumber: syz [ 2706.214975][T30772] usb 6-1: config 0 descriptor?? [ 2706.219769][T30763] usb 2-1: Using ep0 maxpacket: 32 [ 2706.227923][T30763] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 2706.237602][T30763] usb 2-1: config 0 has no interface number 0 [ 2706.244183][T30763] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2706.254339][T30763] usb 2-1: config 0 interface 89 has no altsetting 0 [ 2706.263916][T30763] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 2706.276079][T30763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2706.284772][T30763] usb 2-1: Product: syz [ 2706.289074][T30763] usb 2-1: Manufacturer: syz [ 2706.293828][T30763] usb 2-1: SerialNumber: syz [ 2706.301204][T30763] usb 2-1: config 0 descriptor?? [ 2706.310575][T30763] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2706.320282][T30763] em28xx 2-1:0.89: Video interface 89 found: [ 2706.432560][T30772] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 2706.926390][T30763] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 2707.268365][T25103] usb 3-1: USB disconnect, device number 35 [ 2707.351466][T30763] em28xx 2-1:0.89: AC97 command still being executed: not handled properly! [ 2707.451558][T30772] usb write operation failed. (-71) [ 2707.474548][T30772] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2707.488036][T30772] dvbdev: DVB: registering new adapter (Terratec H7) [ 2707.494905][T30772] usb 6-1: media controller created [ 2707.501831][T30772] usb read operation failed. (-71) [ 2707.507374][T30772] usb write operation failed. (-71) [ 2707.518020][T30772] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 2707.538253][T30763] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 2707.558971][T30763] em28xx 2-1:0.89: board has no eeprom [ 2707.560931][T30772] usb 6-1: USB disconnect, device number 2 [ 2707.639672][T30763] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 2707.647440][T30763] em28xx 2-1:0.89: analog set to bulk mode. [ 2707.655375][T25103] em28xx 2-1:0.89: Registering V4L2 extension [ 2707.661678][T10580] netlink: 'syz.2.8597': attribute type 3 has an invalid length. [ 2707.682433][T30763] usb 2-1: USB disconnect, device number 50 [ 2707.700487][T30763] em28xx 2-1:0.89: Disconnecting em28xx [ 2707.739277][T25103] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 2707.760581][T25103] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 2707.770592][T25103] em28xx 2-1:0.89: No AC97 audio processor [ 2707.784247][T25103] usb 2-1: Decoder not found [ 2707.788926][T25103] em28xx 2-1:0.89: failed to create media graph [ 2707.800363][T25103] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 2707.811283][T25103] em28xx 2-1:0.89: Registering snapshot button... [ 2707.823401][T25103] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input108 [ 2707.844269][T25103] em28xx 2-1:0.89: Remote control support is not available for this card. [ 2707.853780][T30763] em28xx 2-1:0.89: Closing input extension [ 2707.860276][T30763] em28xx 2-1:0.89: Deregistering snapshot button [ 2708.001777][T30763] em28xx 2-1:0.89: Freeing device [ 2708.014295][T10587] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8598'. [ 2708.408980][T10601] pim6reg1: entered promiscuous mode [ 2708.447502][T10601] pim6reg1: entered allmulticast mode [ 2708.574152][T10608] input: syz0 as /devices/virtual/input/input109 [ 2708.727539][T10610] ALSA: mixer_oss: invalid OSS volume '' [ 2709.039988][T10619] syzkaller1: entered promiscuous mode [ 2709.054131][T10619] syzkaller1: entered allmulticast mode [ 2709.160251][T30763] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 2709.331884][T30763] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2709.352222][T30763] usb 4-1: not running at top speed; connect to a high speed hub [ 2709.369664][T30763] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 2709.387533][T30763] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 2709.415058][T30763] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 2709.427871][T30763] usb 4-1: config 14 has no interface number 0 [ 2709.435830][T30763] usb 4-1: config 14 has no interface number 1 [ 2709.443122][T30763] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2709.455473][T30763] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2709.479250][T30763] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2709.505033][T30763] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2709.520632][T30763] usb 4-1: config 14 interface 57 has no altsetting 0 [ 2709.531206][T30763] usb 4-1: config 14 interface 228 has no altsetting 0 [ 2709.541312][T10637] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8618'. [ 2709.553430][T30763] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2709.563267][T30763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2709.575577][T30763] usb 4-1: Product: syz [ 2709.588466][T30763] usb 4-1: Manufacturer: syz [ 2709.600844][T30763] usb 4-1: SerialNumber: syz [ 2710.011699][T10649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8623'. [ 2710.029030][T10649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8623'. [ 2710.062472][T30763] legousbtower 4-1:14.57: interrupt endpoints not found [ 2710.428572][T10664] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8626'. [ 2710.461401][T30763] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 2710.495872][T30763] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 2711.110518][T10683] usb 4-1: Couldn't submit interrupt_in_urb -90 [ 2711.212642][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8634'. [ 2711.305941][T10358] usb 4-1: USB disconnect, device number 62 [ 2711.346891][T10358] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 2712.392133][T30768] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2712.569790][T30768] usb 4-1: Using ep0 maxpacket: 8 [ 2712.588103][T30768] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2712.618631][T30768] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2712.639680][T30768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2712.662885][T30768] usb 4-1: Product: syz [ 2712.677291][T30768] usb 4-1: Manufacturer: syz [ 2712.698350][T30768] usb 4-1: SerialNumber: syz [ 2712.732087][T30768] usb 4-1: config 0 descriptor?? [ 2712.747768][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8656'. [ 2712.753760][T30768] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2712.790329][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8656'. [ 2712.982179][T10744] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8658'. [ 2712.992201][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8659'. [ 2713.023650][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8659'. [ 2713.233361][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.240553][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.960388][T30768] gspca_zc3xx: reg_w_i err -71 [ 2714.531521][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8675'. [ 2714.552861][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8675'. [ 2714.589980][T30768] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2714.606703][T30768] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2714.631590][T30768] usb 4-1: USB disconnect, device number 63 [ 2714.802001][T10786] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8674'. [ 2714.847771][T10795] IPv6: sit2: Disabled Multicast RS [ 2714.895331][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8678'. [ 2714.925517][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8678'. [ 2715.615202][T10818] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8680'. [ 2716.357304][ T30] audit: type=1326 audit(1783565293.051:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.1.8681" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7fc00000 [ 2716.530034][T30772] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2716.712195][T30772] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2716.734572][T30772] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2716.767212][T30772] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2716.781722][T30772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2716.799802][T30772] usb 6-1: Product: syz [ 2716.807697][T30772] usb 6-1: Manufacturer: syz [ 2716.822629][T30772] usb 6-1: SerialNumber: syz [ 2716.839652][T30772] usb 6-1: config 0 descriptor?? [ 2717.059224][T30768] usb 6-1: USB disconnect, device number 3 [ 2774.672119][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.678779][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 2822.829803][T27435] Bluetooth: hci0: command 0x0406 tx timeout [ 2836.112099][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.119009][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 2874.509782][ T31] INFO: task kworker/0:3:18982 blocked for more than 143 seconds. [ 2874.517879][ T31] Tainted: G L syzkaller #0 [ 2874.524458][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2874.533153][ T31] task:kworker/0:3 state:D stack:21816 pid:18982 tgid:18982 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2874.545254][ T31] Workqueue: usb_hub_wq hub_event [ 2874.550522][ T31] Call Trace: [ 2874.553834][ T31] [ 2874.556774][ T31] __schedule+0x17d9/0x56c0 [ 2874.561448][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 2874.566485][ T31] ? __pfx___schedule+0x10/0x10 [ 2874.571407][ T31] ? schedule+0x90/0x2b0 [ 2874.575664][ T31] schedule+0x164/0x2b0 [ 2874.579877][ T31] usb_kill_urb+0x1cf/0x2f0 [ 2874.584388][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2874.589406][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2874.595698][ T31] usb_start_wait_urb+0x22a/0x5b0 [ 2874.600895][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2874.606478][ T31] usb_control_msg+0x234/0x3e0 [ 2874.611350][ T31] hub_port_init+0xb0b/0x28c0 [ 2874.616259][ T31] hub_event+0x24e8/0x4d30 [ 2874.620737][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 2874.625882][ T31] ? __pfx_hub_event+0x10/0x10 [ 2874.630792][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 2874.636547][ T31] ? rcu_is_watching+0x15/0xb0 [ 2874.641411][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 2874.647157][ T31] process_scheduled_works+0xa8e/0x14e0 [ 2874.652795][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2874.658790][ T31] ? assign_work+0x3cf/0x5d0 [ 2874.663426][ T31] worker_thread+0xa47/0xfb0 [ 2874.668063][ T31] kthread+0x388/0x470 [ 2874.672303][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2874.677582][ T31] ? __pfx_kthread+0x10/0x10 [ 2874.682251][ T31] ret_from_fork+0x514/0xb70 [ 2874.686852][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2874.692019][ T31] ? __switch_to+0xc89/0x1420 [ 2874.696701][ T31] ? __pfx_kthread+0x10/0x10 [ 2874.701314][ T31] ret_from_fork_asm+0x1a/0x30 [ 2874.706089][ T31] [ 2874.709097][ T31] INFO: task kworker/0:4:25102 blocked for more than 143 seconds. [ 2874.717301][ T31] Tainted: G L syzkaller #0 [ 2874.723869][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2874.732577][ T31] task:kworker/0:4 state:D stack:21744 pid:25102 tgid:25102 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2874.744636][ T31] Workqueue: usb_hub_wq hub_event [ 2874.750121][ T31] Call Trace: [ 2874.753433][ T31] [ 2874.756354][ T31] __schedule+0x17d9/0x56c0 [ 2874.760985][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 2874.766028][ T31] ? __pfx___schedule+0x10/0x10 [ 2874.770980][ T31] ? schedule+0x90/0x2b0 [ 2874.775255][ T31] schedule+0x164/0x2b0 [ 2874.779399][ T31] usb_kill_urb+0x1cf/0x2f0 [ 2874.783969][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2874.789000][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2874.795224][ T31] usb_start_wait_urb+0x22a/0x5b0 [ 2874.800337][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2874.805915][ T31] usb_control_msg+0x234/0x3e0 [ 2874.810801][ T31] hub_port_init+0xb0b/0x28c0 [ 2874.815528][ T31] hub_event+0x24e8/0x4d30 [ 2874.820367][ T31] ? __pfx_hub_event+0x10/0x10 [ 2874.825150][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 2874.831032][ T31] ? rcu_is_watching+0x15/0xb0 [ 2874.835831][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 2874.841604][ T31] process_scheduled_works+0xa8e/0x14e0 [ 2874.847170][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2874.853238][ T31] ? assign_work+0x3cf/0x5d0 [ 2874.857854][ T31] worker_thread+0xa47/0xfb0 [ 2874.862511][ T31] kthread+0x388/0x470 [ 2874.866588][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2874.871875][ T31] ? __pfx_kthread+0x10/0x10 [ 2874.876497][ T31] ret_from_fork+0x514/0xb70 [ 2874.881140][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2874.886264][ T31] ? __switch_to+0xc89/0x1420 [ 2874.891054][ T31] ? __pfx_kthread+0x10/0x10 [ 2874.895683][ T31] ret_from_fork_asm+0x1a/0x30 [ 2874.900499][ T31] [ 2874.903590][ T31] [ 2874.903590][ T31] Showing all locks held in the system: [ 2874.911429][ T31] 2 locks held by kworker/0:1/11: [ 2874.916468][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2874.927807][ T31] #1: ffffc90000107c40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2874.939990][ T31] 1 lock held by khungtaskd/31: [ 2874.944843][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2874.955251][ T31] 2 locks held by getty/5384: [ 2874.960016][ T31] #0: ffff8880362260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2874.969962][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 2874.980134][ T31] 5 locks held by kworker/0:3/18982: [ 2874.985461][ T31] #0: ffff888022aae140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2874.996892][ T31] #1: ffffc90003547c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2875.008810][ T31] #2: ffff88802b4fd1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 2875.017742][ T31] #3: ffff88802b522568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 2875.027929][ T31] #4: ffff88802b3ba660 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 2875.037722][ T31] 5 locks held by kworker/0:4/25102: [ 2875.043041][ T31] #0: ffff888022aae140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2875.054397][ T31] #1: ffffc900032b7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2875.066349][ T31] #2: ffff88802b6611d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 2875.078587][ T31] #3: ffff88802b6c6568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 2875.088577][ T31] #4: ffff88802b569f60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 2875.098322][ T31] [ 2875.100697][ T31] ============================================= [ 2875.100697][ T31] [ 2875.109101][ T31] NMI backtrace for cpu 1 [ 2875.109114][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2875.109129][ T31] Tainted: [L]=SOFTLOCKUP [ 2875.109132][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2875.109139][ T31] Call Trace: [ 2875.109145][ T31] [ 2875.109150][ T31] dump_stack_lvl+0xe8/0x150 [ 2875.109172][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2875.109257][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2875.109274][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 2875.109287][ T31] sys_info+0x135/0x170 [ 2875.109297][ T31] watchdog+0xfd7/0x1030 [ 2875.109317][ T31] ? watchdog+0x1c7/0x1030 [ 2875.109332][ T31] kthread+0x388/0x470 [ 2875.109350][ T31] ? __pfx_watchdog+0x10/0x10 [ 2875.109361][ T31] ? __pfx_kthread+0x10/0x10 [ 2875.109375][ T31] ret_from_fork+0x514/0xb70 [ 2875.109392][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2875.109407][ T31] ? __switch_to+0xc89/0x1420 [ 2875.109421][ T31] ? __pfx_kthread+0x10/0x10 [ 2875.109436][ T31] ret_from_fork_asm+0x1a/0x30 [ 2875.109452][ T31] [ 2875.109457][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2875.225121][ C0] NMI backtrace for cpu 0 [ 2875.225140][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2875.225164][ C0] Tainted: [L]=SOFTLOCKUP [ 2875.225170][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2875.225181][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2875.225210][ C0] Code: dc 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 ca 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2875.225227][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000242 [ 2875.225242][ C0] RAX: 0000000004094929 RBX: ffffffff819ab450 RCX: 0000000080000001 [ 2875.225255][ C0] RDX: 0000000000000001 RSI: ffffffff8e229caa RDI: ffffffff8c4bd380 [ 2875.225268][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 2875.225282][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 2875.225294][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 2875.225308][ C0] FS: 0000000000000000(0000) GS:ffff888124f59000(0000) knlGS:0000000000000000 [ 2875.225323][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2875.225335][ C0] CR2: 0000560c5b9d5168 CR3: 000000000e946000 CR4: 00000000003526f0 [ 2875.225350][ C0] Call Trace: [ 2875.225357][ C0] [ 2875.225364][ C0] default_idle+0x9/0x20 [ 2875.225388][ C0] default_idle_call+0x72/0xb0 [ 2875.225413][ C0] do_idle+0x2e0/0x540 [ 2875.225436][ C0] ? __pfx_do_idle+0x10/0x10 [ 2875.225462][ C0] cpu_startup_entry+0x43/0x60 [ 2875.225484][ C0] rest_init+0x2de/0x300 [ 2875.225500][ C0] start_kernel+0x392/0x3e0 [ 2875.225523][ C0] x86_64_start_reservations+0x24/0x30 [ 2875.225550][ C0] x86_64_start_kernel+0x137/0x1b0 [ 2875.225575][ C0] common_startup_64+0x13e/0x157 [ 2875.225602][ C0] [ 2875.406634][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2875.413486][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2875.424151][ T31] Tainted: [L]=SOFTLOCKUP [ 2875.428464][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2875.438508][ T31] Call Trace: [ 2875.441790][ T31] [ 2875.444712][ T31] vpanic+0x56c/0xa60 [ 2875.448696][ T31] ? __pfx___schedule+0x10/0x10 [ 2875.453540][ T31] ? __pfx_vpanic+0x10/0x10 [ 2875.458046][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 2875.464201][ T31] panic+0xc5/0xd0 [ 2875.467923][ T31] ? __pfx_panic+0x10/0x10 [ 2875.472334][ T31] ? preempt_schedule_common+0x82/0xd0 [ 2875.477787][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 2875.483156][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 2875.489300][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 2875.495446][ T31] watchdog+0x1030/0x1030 [ 2875.499771][ T31] ? watchdog+0x1c7/0x1030 [ 2875.504184][ T31] kthread+0x388/0x470 [ 2875.508245][ T31] ? __pfx_watchdog+0x10/0x10 [ 2875.512910][ T31] ? __pfx_kthread+0x10/0x10 [ 2875.517495][ T31] ret_from_fork+0x514/0xb70 [ 2875.522077][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2875.527180][ T31] ? __switch_to+0xc89/0x1420 [ 2875.531851][ T31] ? __pfx_kthread+0x10/0x10 [ 2875.536441][ T31] ret_from_fork_asm+0x1a/0x30 [ 2875.541205][ T31] [ 2875.544474][ T31] Kernel Offset: disabled [ 2875.548822][ T31] Rebooting in 86400 seconds..