last executing test programs: 10.596514225s ago: executing program 4 (id=435): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x80000000, 0x181400) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r3, @ANYBLOB="81060100e0fb010014004f1b0d7a4bcc181960114e0aba51f834d01a7d73d99ff6bea30aee86f59a587d24a55237611b2f25998f9a6c00f9abce24731dcf217cb53debf706e6bd87a2a4d64cee073c3a6edd754066e75014f6cd77c4c5cb8680773cfe5d9258dd7f8203830436be30950f6c0b6b508bb112f2f846d1cb73dba731f614581b8e6eb6cdab5b5a2d0a0c36349f4dc1413e354fcdabd8932553731937359b0691288d91a06ba90ae31e800fa5563a76ee2727fa71bac1a9f3754297a984b84303ca72"], 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf00050000fe880000000000000000000000000001ac1414aa000000000000000000000000000107944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000007000000000000000600000000000000ffff0000000000001c25080000000000abcf000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700006350000020001fd2000000000000000480003"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000014001131251a8e600ed200000a400000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0x8) r10 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) r13 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r13, 0x78f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r10, 0x57de, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r14, @ANYRESDEC=r0], 0x40}}, 0x0) 10.239496123s ago: executing program 4 (id=436): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_io_uring_setup(0x5c6, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000040)={'rose0\x00', 0x10}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(0xffffffffffffffff, 0x7ff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) close(0x3) write$char_usb(r0, &(0x7f0000000080)='V', 0x1) 10.159311341s ago: executing program 1 (id=437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08009f0004000000080026006c090000"], 0x2c}, 0x1, 0x0, 0x0, 0x440000c1}, 0x0) 9.905406436s ago: executing program 1 (id=438): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x40010, 0xffffffffffffffff, 0xbb373000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, &(0x7f00000018c0)) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000275000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000aeb000/0x4000)=nil) 9.399557772s ago: executing program 2 (id=441): socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) eventfd2(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9.356761273s ago: executing program 3 (id=442): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000000c0)={0x9, "d661d1f3c1477e782b5672f328aea5f4e1d9419b00ec677e862d014311b9dc0a", 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) syz_emit_ethernet(0x1011, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xfff2}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44044}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 9.263467272s ago: executing program 1 (id=443): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x100000}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x1}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r4, 0x0) msync(&(0x7f000081e000/0x3000)=nil, 0x3000, 0x6) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="120100030a242bff800410d0e50c01"], 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r1, 0x27e2, 0x0, 0x22, 0x0, 0x0) 7.575957308s ago: executing program 1 (id=444): syz_usb_connect(0x3, 0x24, &(0x7f0000000e40)={{0x12, 0x1, 0x300, 0x94, 0xd5, 0xe1, 0x20, 0x9710, 0x7840, 0x6b91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x8, 0xd0, 0x9, [{{0x9, 0x4, 0x97, 0x0, 0x0, 0xf5, 0xf, 0xae, 0x6}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0xf0, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xbc, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xc000000}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x168}, 0x1, 0x0, 0x0, 0x4000084}, 0x810) 7.443445792s ago: executing program 2 (id=445): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) eventfd2(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.143511251s ago: executing program 0 (id=446): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0xbd, 0x99, 0x2d, 0x40, 0x1943, 0x2250, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x84, 0x6d, 0xcf}}]}}]}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) 6.877262342s ago: executing program 4 (id=447): unshare(0x66000080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffc) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0x61}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="2b010000fcee33403e20888871a8010203010902"], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r6, @ANYRES32=r3, @ANYBLOB="0012000000940400200012800b00010065727370616e00001000028008000700e000000104001200"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.897473388s ago: executing program 3 (id=448): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async, rerun: 64) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (rerun: 64) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000293000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffff801, &(0x7f00000004c0)=[{0x800000000, 0x0, 0xffffffffffffffff}], 0x1, 0xfffffffffffff801, 0x1e, 0x0, 0x8, 0x4e}) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0x1}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4}]}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x148, r8, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0xf}}}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cc13a5590afd17d0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1810184dae85728c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e6aed9a2dca488c5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="51b32ca8030e9a985839c461ab489aed9e536ee8a73cefae"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6c0f49315fbe7149"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c985891563e7c38b51fc38e06cc7ebade15fd23a0b2e5c0b"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a36c28651f33d785065ca5f88dbf5fa4"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e3c9716385c34581464c36f4fa3073d2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c0b52abc216b7f2b5dca70ca8c4703d03ffe65ebcf1ff7f2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2d1f4fe5f0f900e2096969158c85c939eef92e1446507fd3"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="90d03767c242d9f69b9c33c96a872ee20f41760debe2880e14956b2230aa60a5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ee6e68061453cd24018442b004373ba0a8d279836e88a4cfd28b02ed06a31114"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040010}, 0x8c8) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@deltaction={0x1a4, 0x31, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x90, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x22, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbc6}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb1}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfd22}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4c}}]}, @TCA_ACT_TAB={0x4}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) process_madvise(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)='e', 0x1}], 0x2, 0x19, 0x0) 5.43547253s ago: executing program 3 (id=449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}]}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x1, 0x20b61000, 0x0, 0x0, 0x0, 0xfffffff9}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xf, {0x7, 0x7, 0x0, {0x0, 0x9, 0x3, 0x8, 0x0, 0x5, 0x3, 0x8, 0x9, 0xc000, 0xa91, r3, r4, 0x972}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x3d0, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x3a7, 0x142, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@loopback}, @typed={0x11, 0x3e, 0x0, 0x0, @binary="06352bdbd08df49448cf58c016"}, @generic="db07f20738e2182198f60d0bdbf6c38fe21ee0", @typed={0x8, 0x103, 0x0, 0x0, @u32=0x4}, @nested={0x88, 0x117, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @pid=r5}, @typed={0x7a, 0x7d, 0x0, 0x0, @binary="ca2813a7c6821030448cce8ec71571f014741b37b260ba4c4a823df8a554eb2f4252f0eb3ae685b5f22dd42688f512ef5d838aa7e5ba9eb4881d87c95f0ef03c77df8b9c07955014f9c359a4d605e137e4926fc46ca37df3a8aa843e1485f65526bb43d1a0d38a674673d387c0d26b8ee40dda282f40"}]}, @generic="de1eac1e27c4926a62786c368239c0afa93109dca05c01548a5bbe24f662b402557f8656bdaf810f4e1d3e320049f2010f8874146f8406127eb6663d6b3cb871ffd13167c192525d5b10e0d06b0143f801ef7bcbd9a0062413e1381b35d32443557684cd123ddcc3bc6764e73c6261a096be855d4d8a518ebcfcfb5ff292b6321b33dba238e7d5b94151c27376f66f14e61547c78edd8531aca056cc70a7642d65d1a80f204104e56d8913e9f84d99fad0221dcd6c8a610de29ddbb0b422", @nested={0x205, 0x7a, 0x0, 0x1, [@nested={0x191, 0x26, 0x0, 0x1, [@typed={0x8, 0x104, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x4}, @generic="4ca3b19f91097321ff5a5384716fdfc33fce6e1ea50d8fd10cb71da395fbf0a230ded9f552cb261ac868c960055a524b4e6be49653c7a449191e223cfeb2404713f10edf279baa8376b85702c7ed5851068b235816856b31b405a3804db14fb54f65d9c8c3e370209d", @generic, @generic="471d512cfbe23215fe92aa581386e0866e85fd41e86143e2d4c12f9c370f53455ac41e62cb8b9379", @typed={0xc, 0xac, 0x0, 0x0, @u64=0x7}, @generic="ac4989a58c978e6621f1f03d8a1ebfa312396d2fc606971a4287ec11ab4d402d32ca572c6b30868407f8d7882d53f0c611dbd2363b5f774abfef79ceccf9997dc2e45d26469738f263c4658cd22bbab0458bedbcb9b57337fe496f6933249e219572253d574edf988ef6a18bcceff8d6f28828abf965f2b39c51f9c58bc82d8695d5a46df509e1dfa8bd64925a61772ec22c2205db5f348232fd535bbf6a213dc2c9a67a1237379c3aad51b1c86e35eabc2b2b8988c0c4dfea98fe8145c67482b36fcec6ae780e936e11f7f08775da8315562ab0d5b4d7f04f5a089c", @nested={0x4, 0x43}, @nested={0x4, 0x53}]}, @generic="476a4c92763b10998be4d982edfb80e7bc529e414e26fdcca81eec8c1af5a6cf8f90559dbdcade9142d3854a55a202eb49ed90c754fe4f8710fc9497b2948eccd11c428c55", @typed={0x14, 0xaa, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @nested={0xc, 0x61, 0x0, 0x1, [@typed={0x8, 0x5c, 0x0, 0x0, @uid=r3}]}]}, @generic="2dfcdb74ce39ddce47f5485913eb3ae41d3896e905ee"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.358447628s ago: executing program 2 (id=450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_batadv\x00', 0x10) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xffffffff, '\x00', r4, r6, 0x5, 0x4, 0x5}, 0x50) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x40060480) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x3}, 0x50) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') open_tree(r9, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x700, 0x1, 0xfffffffb, 0x401, {{0x7, 0x4, 0x0, 0x15, 0x1c, 0x67, 0x0, 0x4, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xa, [@multicast1]}]}}}}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x10, 0x8001, 0x5, 0x40200, r9, 0x6, '\x00', r10, r6, 0x5, 0x0, 0x0, 0xf}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r11, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r12}, &(0x7f0000000880), &(0x7f00000008c0)=r8}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x800003) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r13 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r14 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x315801, 0x0) ioctl$KVM_X86_SETUP_MCE(r14, 0x4008ae9c, &(0x7f0000000300)={0x12, 0x5, 0x7}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r14, 0x3, {0x0, 0x0, 0x0, 0x2, 0x101, 0x0, 0x0, 0x16, 0xd, "300a7e784a560ab5fbdc8aeb1bd8144a7d36fcbba6a7e4cf3cacd9880ab2b081e1f32307f0f6ec4912862eaa3797826ff83c0ff914b37b3bf3f4d7e8bb298d0a", "2b56078829e8111d68458fbe25f346eb1e2a7cabbf4b254fff9604b19260f148a9441e5028e055bccf11d66bcef13673b9be4426eb6b4a7aeb8cf605c145cdb2", "78ef0f89281b122de9aac66d161b0a33792ca26f8c44cb015bbefd6b48eb112b", [0x1000, 0x4]}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 5.143466134s ago: executing program 3 (id=451): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) (async) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) pidfd_send_signal(r0, 0x21, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000340)={0x1da0, r0, 'id0\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000340)={0x1da0, r0, 'id0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x13, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe5c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x28c, r4, 0xde8, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x8000000000000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x80000000}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xfffffffffffff801}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x100000001}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0xd2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x158}, {0xc, 0x90, 0x3ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5cbd}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xffffffffffff8000}, {0xc, 0x90, 0x6}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4014}, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) (async) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e1d, @remote}, 0x6) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) userfaultfd(0x80001) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x2000c050}, 0x24000040) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x2000c050}, 0x24000040) 4.875638957s ago: executing program 0 (id=452): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x1800, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.691881777s ago: executing program 1 (id=453): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000180818000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r7}) r8 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x30, 0x5, 0x1, 0xfffff033}]}, 0x10) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r9, &(0x7f0000002a40)=[{{}, 0x9}], 0x1, 0x40002000, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r9, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000440)=""/203, 0xcb}], 0x2, &(0x7f0000000600)=""/86, 0x56}, 0x2}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000001680)=""/219, 0xdb}, {&(0x7f0000001780)=""/205, 0xcd}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000001880)=""/97, 0x61}], 0x6, &(0x7f0000001980)=""/147, 0x93}, 0xe}, {{&(0x7f0000001a40)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001ac0)=[{0x0}], 0x1}, 0xffffff80}, {{&(0x7f0000001b00)=@alg, 0x80, &(0x7f0000002000)=[{&(0x7f0000001b80)=""/16, 0x10}, {&(0x7f0000001bc0)=""/245, 0xf5}, {&(0x7f0000001cc0)=""/88, 0x58}, {&(0x7f0000001d40)=""/248, 0xf8}, {&(0x7f0000001e40)=""/31, 0x1f}, {&(0x7f0000003a80)=""/165, 0xa5}, {&(0x7f0000001f40)=""/4, 0x4}], 0x7, &(0x7f0000002080)=""/66, 0x42}, 0xfffffff9}, {{&(0x7f0000002100)=@ieee802154, 0x80, &(0x7f0000002480)=[{&(0x7f0000002180)=""/128, 0x80}, {&(0x7f0000002200)=""/184, 0xb8}, {&(0x7f00000022c0)=""/251, 0xfb}, {&(0x7f00000023c0)=""/147, 0x93}], 0x4}}, {{&(0x7f0000002500)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002580)=""/98, 0x62}, {&(0x7f00000029c0)=""/93, 0x5d}, {&(0x7f0000002680)=""/82, 0x52}], 0x3}, 0x2}], 0x6, 0x60, 0x0) 4.676066926s ago: executing program 3 (id=454): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x4a, 0x4, r2, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000245000/0x3000)=nil, 0x3000, 0x9) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$inet(r8, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x80800}) listen(r8, 0x5) io_uring_enter(r9, 0x3517, 0xc2de, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.519380584s ago: executing program 0 (id=455): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x41d8d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_open_dev$media(&(0x7f0000000b40), 0x2e18, 0x2900) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0xe, 0xc0, {0xc0, 0x9, "72fd66b3655affb339e5fa8369470858ad10aae8ac72b6667dbdc38f6de3ff87b228e325634c035bd8333111de85f60d8b3342145cfa9967a7e239cf45f1783f7fb68092b98f24a2affa87d4de5591c0d65175ab998c10826d00c3f9f00ef79fbd50773ae1fe24a598416dfe86c1350850780c396f7a60438baa3556e24ad90ea5d35305b50b9631ccfdc2d3cb50b308907e7ee3d5ad880de0c1eb1ca8c644f598a2eba0fe92403a337f60bdb3d0088b74991fc404c2ed61bab13a43262b"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0x13, 0xbe, "0fa3ecbae4af540baad2e86d2928745e7d4f887bf54ddb79bea617e2aa085aa187ca98d2fbc610f69826c9bf43ce13b08534fd28b221b75e916066a35002b9255f7db0c6b9ce6fa2ef101e1358c2f1f9ea14c5156fc79dade2f2e009c381aee323de5843b8bd522a8d085ac9f2033bb1793c376607949679abc84c882b798811c8e3e7191c1f37e9b193390ee699bcdf5173f5d3439385ea0d0b58a8aba67d837a2e46ebade29ebe409b096d58041f8c8c251dee12e344854f5bc034d085"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000300)={0xc0, 0x5, 0x6, "efc27bb99c8d"}, &(0x7f0000000340)={0x40, 0x5, 0x4, "43ee5029"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x41d8d000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) syz_open_dev$media(&(0x7f0000000b40), 0x2e18, 0x2900) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0}) (async) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0xe, 0xc0, {0xc0, 0x9, "72fd66b3655affb339e5fa8369470858ad10aae8ac72b6667dbdc38f6de3ff87b228e325634c035bd8333111de85f60d8b3342145cfa9967a7e239cf45f1783f7fb68092b98f24a2affa87d4de5591c0d65175ab998c10826d00c3f9f00ef79fbd50773ae1fe24a598416dfe86c1350850780c396f7a60438baa3556e24ad90ea5d35305b50b9631ccfdc2d3cb50b308907e7ee3d5ad880de0c1eb1ca8c644f598a2eba0fe92403a337f60bdb3d0088b74991fc404c2ed61bab13a43262b"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0x13, 0xbe, "0fa3ecbae4af540baad2e86d2928745e7d4f887bf54ddb79bea617e2aa085aa187ca98d2fbc610f69826c9bf43ce13b08534fd28b221b75e916066a35002b9255f7db0c6b9ce6fa2ef101e1358c2f1f9ea14c5156fc79dade2f2e009c381aee323de5843b8bd522a8d085ac9f2033bb1793c376607949679abc84c882b798811c8e3e7191c1f37e9b193390ee699bcdf5173f5d3439385ea0d0b58a8aba67d837a2e46ebade29ebe409b096d58041f8c8c251dee12e344854f5bc034d085"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000300)={0xc0, 0x5, 0x6, "efc27bb99c8d"}, &(0x7f0000000340)={0x40, 0x5, 0x4, "43ee5029"}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) 3.641411579s ago: executing program 2 (id=456): sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x41, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.335426816s ago: executing program 2 (id=457): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_io_uring_setup(0x5c6, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000040)={'rose0\x00', 0x10}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(0xffffffffffffffff, 0x7ff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) close(0x3) write$char_usb(r0, &(0x7f0000000080)='V', 0x1) 2.291441657s ago: executing program 4 (id=458): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x16) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640), &(0x7f0000000000), 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x10, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="62f540df", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf25060000003000018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000200776c616e3000000000000000000000000800030003000000"], 0x44}}, 0x20000000) 1.679464945s ago: executing program 4 (id=459): syz_io_uring_setup(0xd38, &(0x7f0000000300)={0x0, 0x61b1, 0x20, 0x1, 0x350}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x3, 0x7}, &(0x7f00000002c0)=0xc) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3, 0x5, 0x7}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3325, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) openat$nullb(0xffffffffffffff9c, 0x0, 0x42000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000380)=0xe) 1.366734146s ago: executing program 4 (id=460): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xf8, 0xa6, 0x20, 0xeb1a, 0x50a6, 0xcefc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb9, 0x2, 0x0, 0x1, 0x91, 0xa4}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2c010) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r1 = socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000100)={0x10002, 0xc0, 0x40, &(0x7f00000001c0)=[0x6, 0x9, 0x8c25, 0x14, 0x7, 0x36, 0x33, 0xffffffffffffffff, 0x80, 0xffffffffffffec4c, 0xf45, 0x8000000000000000, 0x10, 0x2, 0x7ffe, 0x8, 0xffffffffffffffd2, 0x6, 0x7, 0xf, 0x1000, 0x7fffffffffffffff, 0x52, 0xfffffffffffffff6, 0x5a, 0x4, 0x1000000004, 0x612, 0x4, 0x2, 0x4, 0xd, 0x7, 0x8000000000000001, 0x4, 0x9, 0x3, 0x9, 0xc, 0x62, 0x2, 0x824c, 0x8, 0xbe485ef, 0x800000, 0x800, 0x10, 0xfffffffffffffff8, 0xe8, 0x101, 0xffffffffffffffff, 0x10001, 0x6, 0xd995, 0x800000004007, 0x4, 0x6, 0xfffffffffffffbff, 0xfff, 0x8004, 0x4000000000000, 0x80000000, 0x6, 0x4, 0xd7, 0x7fff, 0x800, 0x7, 0x8007ff, 0x298b, 0x3, 0x1, 0x3, 0xd8e, 0x2, 0x9, 0x1, 0x9, 0xf3a, 0xf3dc, 0x5, 0x7, 0x3d6b, 0x55, 0x3ff, 0x59c5, 0x2, 0x9, 0x8000a, 0x1, 0x4, 0x5, 0xa907, 0x1, 0x8000003, 0x6, 0xffffffffffff7fff, 0x1000, 0x40, 0xfffffffffffffffe, 0x12000000, 0x2, 0x10000, 0x6, 0x25, 0x7, 0x8, 0x4, 0x4, 0x4, 0x5fa, 0x20000000000008, 0x9, 0xfffffffffffffffa, 0x5, 0xff, 0x4, 0x2, 0x5, 0x4, 0xf, 0xffff, 0x200000000, 0x8, 0x0, 0xfffffffffffffffe, 0x2, 0x5ae]}) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000005c0)=ANY=[]) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x10000) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4, 0x100000, 0x84, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x7, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 693.676075ms ago: executing program 0 (id=461): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf4, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x1, r5}) 646.818069ms ago: executing program 3 (id=462): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r4 = epoll_create(0x101) r5 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) unlinkat(r6, &(0x7f00000000c0)='./bus\x00', 0x200) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x22, 0x6, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket(0x10, 0x80002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x3}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 460.529868ms ago: executing program 0 (id=463): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100007000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000a00000018210000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.376704ms ago: executing program 0 (id=464): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x200, 0x74fe, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x5dfdbfc, {0x4}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="4814861d1f04"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800d}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001900010029bd7000fedbdf251c5462f7fc04516dff03003c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r4) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) dup2(r5, r5) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x40000000, 0x0, 0x0}, 0x4000) 18.657965ms ago: executing program 1 (id=465): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x400000000000004) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x6664, 0x103300) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) pipe(&(0x7f0000000340)) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r2], 0x54}}, 0x20000000) mremap(&(0x7f00008fd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000100000000000080004003c5d52"], 0x30}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000003c0)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r4, 0x4018aee3, &(0x7f0000000200)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f00000001c0)={0x8000, 0x5, 0x1}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) syz_usb_connect(0xf98c8af9c89c60c4, 0x7d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x41, 0xfa, 0xda, 0x20, 0x41e, 0x3f04, 0x6c54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0xc, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0xb, 0x1, 0xff, 0xa2, 0x1d, 0x1, [], [{{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x0, [@generic={0x50, 0x7, "a8c17c8eae9cd087cfea1d79f90889af35cb08d3a5f8fe29aa62d3384e585d45918124d0bac881822a17caddbd2d40d46aee5e973c606c8cac55a5bd7dafd72bc971df03d0eb6262596def9a43cd"}]}}]}}]}}]}}, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x104) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800010000000009000000b7080000000000007baa00fe000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) kernel console output (not intermixed with test programs): 107.647784][ T5981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.659521][ T5981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.673777][ T5981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.680139][ T6079] support for the xor transformation has been removed. [ 107.692222][ T5981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.716036][ T5981] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 107.755603][ T30] audit: type=1326 audit(1759061013.914:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f28fdd8eec9 code=0x7ffc0000 [ 107.760601][ T5951] usb 5-1: USB disconnect, device number 3 [ 107.796486][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 107.850453][ T30] audit: type=1326 audit(1759061013.914:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fdd8eec9 code=0x7ffc0000 [ 107.881829][ T5981] usb 3-1: SerialNumber: syz [ 107.924011][ T5981] usb 3-1: config 0 descriptor?? [ 107.975852][ T5981] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 107.990704][ T30] audit: type=1326 audit(1759061013.914:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fdd8eec9 code=0x7ffc0000 [ 108.432171][ T5997] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 108.681530][ T5997] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 108.730729][ T5997] usb 4-1: config 0 has no interface number 0 [ 108.749412][ T5997] usb 4-1: config 0 interface 112 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 108.796787][ T5997] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 108.810750][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.847660][ T5997] usb 4-1: Product: syz [ 108.860080][ T5997] usb 4-1: Manufacturer: syz [ 108.874227][ T5997] usb 4-1: SerialNumber: syz [ 108.917096][ T5997] usb 4-1: config 0 descriptor?? [ 108.935730][ T5937] usb 2-1: USB disconnect, device number 3 [ 109.124692][ T5997] mvusb_mdio 4-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 109.170764][ T6085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.179750][ T6085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.306332][ T6096] netlink: 68 bytes leftover after parsing attributes in process `syz.4.35'. [ 109.496731][ T6103] net_ratelimit: 35 callbacks suppressed [ 109.496759][ T6103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.892971][ T6112] loop9: detected capacity change from 0 to 7 [ 109.919247][ T5977] Dev loop9: unable to read RDB block 7 [ 109.935289][ T5977] loop9: unable to read partition table [ 109.964853][ T5977] loop9: partition table beyond EOD, truncated [ 110.067351][ T6112] Dev loop9: unable to read RDB block 7 [ 110.073988][ T6112] loop9: unable to read partition table [ 110.085988][ T6112] loop9: partition table beyond EOD, truncated [ 110.093078][ T6112] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 110.249752][ T6111] netlink: 44 bytes leftover after parsing attributes in process `syz.4.37'. [ 110.261245][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 110.342050][ T6113] sctp: [Deprecated]: syz.4.37 (pid 6113) Use of int in maxseg socket option. [ 110.342050][ T6113] Use struct sctp_assoc_value instead [ 111.028683][ T10] usb 4-1: USB disconnect, device number 4 [ 111.350487][ T5221] bcm5974 3-1:0.0: could not read from device [ 111.420225][ T5221] bcm5974 3-1:0.0: could not read from device [ 111.432225][ T5981] usb 3-1: USB disconnect, device number 3 [ 111.490079][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.684603][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 111.705966][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.743231][ T10] usb 4-1: Product: syz [ 111.758243][ T10] usb 4-1: Manufacturer: syz [ 111.764550][ T10] usb 4-1: SerialNumber: syz [ 112.313777][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 112.381761][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 112.424296][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 112.513274][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 112.574501][ T6134] kvm: pic: non byte write [ 112.575639][ T6138] input: syz0 as /devices/virtual/input/input7 [ 112.642225][ T10] usb 4-1: USB disconnect, device number 5 [ 113.016064][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 113.016084][ T30] audit: type=1804 audit(1759061020.044:40): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.48" name="/newroot/9/file0" dev="tmpfs" ino=64 res=1 errno=0 [ 113.490086][ T5981] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.541989][ T6162] netlink: 'syz.1.51': attribute type 4 has an invalid length. [ 113.590662][ T6163] netlink: 'syz.1.51': attribute type 4 has an invalid length. [ 113.784226][ T5981] usb 3-1: device descriptor read/64, error -71 [ 114.179592][ T5981] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.451664][ T5981] usb 3-1: device descriptor read/64, error -71 [ 114.573662][ T5981] usb usb3-port1: attempt power cycle [ 115.209799][ T5981] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.259520][ T5981] usb 3-1: device descriptor read/8, error -71 [ 115.678423][ T5981] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.811684][ T5981] usb 3-1: device descriptor read/8, error -71 [ 115.935171][ T5981] usb usb3-port1: unable to enumerate USB device [ 116.159898][ T6178] tipc: Enabling of bearer rejected, failed to enable media [ 116.187031][ T5981] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.500233][ T5981] usb 2-1: device descriptor read/64, error -71 [ 116.750148][ T5981] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.760224][ T5937] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 116.900365][ T5981] usb 2-1: device descriptor read/64, error -71 [ 116.950061][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 116.969275][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.020584][ T5981] usb usb2-port1: attempt power cycle [ 117.035303][ T5937] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 117.056045][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.084554][ T5937] usb 3-1: Product: syz [ 117.088942][ T5937] usb 3-1: Manufacturer: syz [ 117.097157][ T5937] usb 3-1: SerialNumber: syz [ 117.105877][ T5937] usb 3-1: config 0 descriptor?? [ 117.122427][ T5937] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 117.380380][ T5981] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.404826][ T6183] capability: warning: `syz.2.57' uses 32-bit capabilities (legacy support in use) [ 117.408822][ T5981] usb 2-1: device descriptor read/8, error -71 [ 117.657443][ T5937] snd_usb_toneport 3-1:0.0: set_interface failed [ 117.687329][ T5937] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 117.713422][ T5937] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 117.726030][ T6192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.60'. [ 117.747836][ T5937] usb 3-1: USB disconnect, device number 8 [ 117.928868][ T5981] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.960777][ T5981] usb 2-1: device descriptor read/8, error -71 [ 118.070739][ T5981] usb usb2-port1: unable to enumerate USB device [ 118.184693][ T6209] netlink: 'syz.3.63': attribute type 4 has an invalid length. [ 118.981798][ T30] audit: type=1800 audit(1759061026.004:41): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.65" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=10520 res=0 errno=0 [ 119.157906][ T6220] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 120.071351][ T6231] capability: warning: `syz.3.70' uses deprecated v2 capabilities in a way that may be insecure [ 120.433135][ T5981] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 120.600900][ T5981] usb 2-1: Using ep0 maxpacket: 8 [ 120.612669][ T5981] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 120.642570][ T5981] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 120.798929][ T5981] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.900214][ T5981] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.935927][ T5981] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.955435][ T5981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.038370][ T6252] bridge_slave_0: left allmulticast mode [ 121.054549][ T6252] bridge_slave_0: left promiscuous mode [ 121.078975][ T6252] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.176523][ T6235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.185178][ T5981] usb 2-1: GET_CAPABILITIES returned 0 [ 121.199652][ T5981] usbtmc 2-1:16.0: can't read capabilities [ 121.206069][ T6257] netlink: 'syz.3.75': attribute type 7 has an invalid length. [ 121.210839][ T6235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.236813][ T6252] bridge_slave_1: left allmulticast mode [ 121.260630][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.75'. [ 121.280284][ T6252] bridge_slave_1: left promiscuous mode [ 121.292571][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.366846][ T6252] bond0: (slave bond_slave_0): Releasing backup interface [ 121.411379][ T6252] bond0: (slave bond_slave_1): Releasing backup interface [ 121.495554][ T6252] team0: Port device team_slave_0 removed [ 121.578718][ T6252] team0: Port device team_slave_1 removed [ 121.598561][ T6252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.606243][ T6252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.625956][ T44] usb 2-1: USB disconnect, device number 8 [ 121.714519][ T6252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.722481][ T6252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.065091][ T6264] loop9: detected capacity change from 0 to 7 [ 122.074634][ T6264] Dev loop9: unable to read RDB block 7 [ 122.080429][ T6264] loop9: unable to read partition table [ 122.091076][ T6264] loop9: partition table beyond EOD, truncated [ 122.126153][ T6264] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 122.358232][ T6272] netlink: 'syz.2.79': attribute type 4 has an invalid length. [ 122.740714][ T6279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.147584][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 123.216378][ T6279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.480662][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.650127][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 124.200366][ T5937] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 124.262579][ T6298] bridge_slave_0: left allmulticast mode [ 124.329278][ T6298] bridge_slave_0: left promiscuous mode [ 124.355061][ T5937] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 124.381863][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.418324][ T5937] usb 2-1: can't read configurations, error -61 [ 124.446916][ T6298] bridge_slave_1: left allmulticast mode [ 124.498907][ T6298] bridge_slave_1: left promiscuous mode [ 124.516171][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.592929][ T6298] bond0: (slave bond_slave_0): Releasing backup interface [ 124.650370][ T6298] bond0: (slave bond_slave_1): Releasing backup interface [ 124.680900][ T5937] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 124.696898][ T6298] team0: Port device team_slave_0 removed [ 124.717878][ T6298] team0: Port device team_slave_1 removed [ 124.734472][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.750168][ T6298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.769007][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.778035][ T6298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.920167][ T5981] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 125.083748][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.098700][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.120100][ T5937] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 125.159204][ T5937] usb 2-1: can't read configurations, error -61 [ 125.166139][ T5981] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 125.176007][ T5981] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 125.187340][ T5937] usb usb2-port1: attempt power cycle [ 125.231459][ T5981] usb 1-1: Manufacturer: syz [ 125.269744][ T5981] usb 1-1: config 0 descriptor?? [ 125.597083][ T5937] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 125.696328][ T5937] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 125.706054][ T5981] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 125.713101][ T5937] usb 2-1: can't read configurations, error -61 [ 125.739573][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.773558][ T5981] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 125.786729][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 125.803078][ T5981] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 125.815050][ T10] usb 4-1: can't read configurations, error -71 [ 125.840091][ T5981] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 125.860542][ T6312] netlink: 36 bytes leftover after parsing attributes in process `syz.3.88'. [ 125.873358][ T5937] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 125.881274][ T5981] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 126.086010][ T6312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'. [ 126.099438][ T5981] cougar 0003:060B:700A.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 126.163245][ T5937] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 126.179034][ T5937] usb 2-1: can't read configurations, error -61 [ 126.208801][ T5937] usb usb2-port1: unable to enumerate USB device [ 126.328481][ T6318] netlink: 52 bytes leftover after parsing attributes in process `syz.2.89'. [ 126.458541][ T6318] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 126.616490][ T6321] warning: `syz.3.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.538850][ T5937] usb 1-1: USB disconnect, device number 2 [ 127.974506][ T6348] netlink: 'syz.0.97': attribute type 4 has an invalid length. [ 128.850144][ T6363] kvm: pic: non byte write [ 128.880889][ T6365] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 128.930229][ T6363] kvm: pic: non byte write [ 128.960393][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 129.176772][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.209401][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.258376][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.296013][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 129.323630][ T10] usb 2-1: SerialNumber: syz [ 129.456236][ T6376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.508962][ T6376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.562345][ T6351] kvm: pic: non byte write [ 129.583612][ T6351] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147483648 (4294967296 ns) > initial count (3880 ns). Using initial count to start timer. [ 129.647926][ T10] usb 2-1: 0:2 : does not exist [ 129.665005][ T10] usb 2-1: unit 5: unexpected type 0x09 [ 129.751842][ T10] usb 2-1: USB disconnect, device number 13 [ 129.835891][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.868472][ T6382] fuse: Invalid gid '0x0000000000000004' [ 130.347913][ T6389] netlink: 68 bytes leftover after parsing attributes in process `syz.1.108'. [ 130.707410][ T6399] loop2: detected capacity change from 0 to 7 [ 130.734635][ T5977] Dev loop2: unable to read RDB block 7 [ 130.756663][ T5977] loop2: unable to read partition table [ 130.765816][ T5977] loop2: partition table beyond EOD, truncated [ 130.785485][ T6399] Dev loop2: unable to read RDB block 7 [ 130.825142][ T6399] loop2: unable to read partition table [ 130.850939][ T6399] loop2: partition table beyond EOD, truncated [ 130.893100][ T6399] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 131.247065][ T6416] netlink: 'syz.0.114': attribute type 4 has an invalid length. [ 131.340547][ T5929] IPVS: starting estimator thread 0... [ 131.786376][ T6419] IPVS: using max 36 ests per chain, 86400 per kthread [ 132.078366][ T6424] netlink: 68 bytes leftover after parsing attributes in process `syz.3.119'. [ 132.343116][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 133.615640][ T6448] tipc: Started in network mode [ 133.629475][ T6449] loop2: detected capacity change from 0 to 7 [ 133.646560][ T6448] tipc: Node identity d255268172b2, cluster identity 4711 [ 133.675876][ T6448] tipc: Enabled bearer , priority 0 [ 133.698136][ T6449] Dev loop2: unable to read RDB block 7 [ 133.704869][ T6449] loop2: unable to read partition table [ 133.718422][ T6452] tipc: Resetting bearer [ 133.718867][ T6449] loop2: partition table beyond EOD, truncated [ 133.738966][ T6449] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 133.775330][ T6447] tipc: Disabling bearer [ 133.912707][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.100186][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 134.138147][ T10] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 134.198521][ T10] usb 4-1: config 0 has no interface number 0 [ 134.221988][ T10] usb 4-1: config 0 interface 89 has no altsetting 0 [ 134.236868][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 134.262877][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.290200][ T10] usb 4-1: Product: syz [ 134.301017][ T10] usb 4-1: Manufacturer: syz [ 134.306127][ T10] usb 4-1: SerialNumber: syz [ 134.321764][ T10] usb 4-1: config 0 descriptor?? [ 134.338420][ T6465] binder: 6463:6465 ioctl 4018620d 0 returned -22 [ 134.346361][ T10] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 134.360559][ T10] em28xx 4-1:0.89: Video interface 89 found: bulk [ 134.414743][ T6467] netlink: 68 bytes leftover after parsing attributes in process `syz.2.132'. [ 134.670170][ T6472] netlink: 'syz.2.133': attribute type 4 has an invalid length. [ 134.976341][ T10] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 135.307098][ T10] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 135.356000][ T5951] hid (null): bogus close delimiter [ 135.374035][ T10] em28xx 4-1:0.89: board has no eeprom [ 135.412962][ T5951] hid-generic 0004:0001:0009.0005: reserved main item tag 0xe [ 135.432168][ T5951] hid-generic 0004:0001:0009.0005: unknown main item tag 0x4 [ 135.444880][ T5951] hid-generic 0004:0001:0009.0005: unexpected long global item [ 135.458734][ T5951] hid-generic 0004:0001:0009.0005: probe with driver hid-generic failed with error -22 [ 135.505066][ T10] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 135.515775][ T10] em28xx 4-1:0.89: analog set to bulk mode. [ 135.532582][ T5951] em28xx 4-1:0.89: Registering V4L2 extension [ 135.598188][ T10] usb 4-1: USB disconnect, device number 8 [ 135.642481][ T10] em28xx 4-1:0.89: Disconnecting em28xx [ 135.790346][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 135.816810][ T6490] input: syz0 as /devices/virtual/input/input9 [ 136.092265][ T5951] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 136.116536][ T5951] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 136.136697][ T5951] em28xx 4-1:0.89: No AC97 audio processor [ 136.349236][ T6497] kvm: kvm [6493]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 136.422920][ T5951] usb 4-1: Decoder not found [ 136.429800][ T5951] em28xx 4-1:0.89: failed to create media graph [ 136.438164][ T5951] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 136.795348][ T5951] em28xx 4-1:0.89: Registering snapshot button... [ 136.830570][ T5951] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input10 [ 136.876697][ T5951] em28xx 4-1:0.89: Remote control support is not available for this card. [ 137.015645][ T10] em28xx 4-1:0.89: Closing input extension [ 137.045070][ T10] em28xx 4-1:0.89: Deregistering snapshot button [ 137.070213][ T6502] loop2: detected capacity change from 0 to 7 [ 137.105292][ T6502] Dev loop2: unable to read RDB block 7 [ 137.164092][ T6502] loop2: unable to read partition table [ 137.248489][ T6502] loop2: partition table beyond EOD, truncated [ 137.270739][ T6502] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 137.334316][ T10] em28xx 4-1:0.89: Freeing device [ 137.754287][ T6510] tipc: Enabled bearer , priority 0 [ 137.769685][ T6513] random: crng reseeded on system resumption [ 138.073729][ T6509] tipc: Disabling bearer [ 138.094990][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.102350][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.429895][ T6523] netlink: 68 bytes leftover after parsing attributes in process `syz.2.143'. [ 138.691615][ T6528] binder: 6526:6528 ioctl 4018620d 0 returned -22 [ 138.847977][ T6537] netlink: 44 bytes leftover after parsing attributes in process `syz.2.149'. [ 139.050145][ T44] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 139.109356][ T6540] loop2: detected capacity change from 0 to 7 [ 139.138320][ T6540] Dev loop2: unable to read RDB block 7 [ 139.145430][ T6540] loop2: unable to read partition table [ 139.152485][ T6540] loop2: partition table beyond EOD, truncated [ 139.158925][ T6540] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 139.260144][ T44] usb 1-1: device descriptor read/64, error -71 [ 139.303846][ T6544] netlink: 'syz.1.151': attribute type 4 has an invalid length. [ 139.830056][ T44] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 139.892718][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.970189][ T44] usb 1-1: device descriptor read/64, error -71 [ 140.100082][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 140.105178][ T44] usb usb1-port1: attempt power cycle [ 140.107913][ T10] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 44 [ 140.125020][ T10] usb 5-1: can't read configurations, error -22 [ 140.261599][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.287818][ T6552] syzkaller0: entered promiscuous mode [ 140.294257][ T6552] syzkaller0: entered allmulticast mode [ 140.420159][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 140.445813][ T10] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 44 [ 140.479078][ T6550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.483632][ T10] usb 5-1: can't read configurations, error -22 [ 140.497261][ T10] usb usb5-port1: attempt power cycle [ 140.520168][ T44] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 140.551901][ T44] usb 1-1: device descriptor read/8, error -71 [ 140.739772][ T6560] netlink: 68 bytes leftover after parsing attributes in process `syz.1.157'. [ 140.831762][ T44] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 140.860178][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.888964][ T44] usb 1-1: device descriptor read/8, error -71 [ 140.900973][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 140.908684][ T10] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 44 [ 140.924938][ T10] usb 5-1: can't read configurations, error -22 [ 141.013331][ T44] usb usb1-port1: unable to enumerate USB device [ 141.060209][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 141.380983][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 141.389305][ T10] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 44 [ 141.398369][ T10] usb 5-1: can't read configurations, error -22 [ 141.413989][ T10] usb usb5-port1: unable to enumerate USB device [ 141.765336][ T6570] netlink: 'syz.1.160': attribute type 25 has an invalid length. [ 141.780287][ T6570] netlink: 'syz.1.160': attribute type 20 has an invalid length. [ 141.788104][ T6570] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.177458][ T6583] binder: 6581:6583 ioctl 4018620d 0 returned -22 [ 142.621606][ T6587] netlink: 'syz.0.164': attribute type 4 has an invalid length. [ 142.648831][ T6589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.521050][ T5997] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 144.160119][ T5997] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 144.190104][ T5997] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 144.263765][ T5997] usb 5-1: Product: syz [ 144.288176][ T5997] usb 5-1: Manufacturer: syz [ 144.333849][ T5997] usb 5-1: SerialNumber: syz [ 144.367337][ T5997] usb 5-1: config 0 descriptor?? [ 144.591624][ T5997] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 144.640540][ T5997] asix 5-1:0.0: probe with driver asix failed with error -61 [ 144.797617][ T5997] usb 5-1: USB disconnect, device number 8 [ 145.298185][ T6619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.171'. [ 145.314769][ T6619] netlink: 'syz.3.171': attribute type 1 has an invalid length. [ 145.470076][ T5997] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 145.489737][ T6625] netlink: 100 bytes leftover after parsing attributes in process `syz.4.177'. [ 145.510594][ T6623] sctp: [Deprecated]: syz.2.176 (pid 6623) Use of int in max_burst socket option deprecated. [ 145.510594][ T6623] Use struct sctp_assoc_value instead [ 145.701352][ T5997] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.711460][ T5997] usb 1-1: config 127 has an invalid interface number: 181 but max is 0 [ 145.730237][ T5997] usb 1-1: config 127 has no interface number 0 [ 145.740471][ T5997] usb 1-1: config 127 interface 181 altsetting 249 endpoint 0xC is Bulk; changing to Interrupt [ 145.770577][ T5997] usb 1-1: config 127 interface 181 altsetting 249 endpoint 0x6 is Bulk; changing to Interrupt [ 145.780716][ T5981] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 145.794712][ T5997] usb 1-1: config 127 interface 181 has no altsetting 0 [ 145.940417][ T5981] usb 5-1: device descriptor read/64, error -71 [ 146.192216][ T5981] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 146.299348][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 146.331862][ T5981] usb 5-1: device descriptor read/64, error -71 [ 146.440527][ T5981] usb usb5-port1: attempt power cycle [ 146.877560][ T5981] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 147.054755][ T5981] usb 5-1: device descriptor read/8, error -71 [ 147.160377][ T5937] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 147.300099][ T5981] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 147.331414][ T5981] usb 5-1: device descriptor read/8, error -71 [ 147.400110][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 147.450536][ T5981] usb usb5-port1: unable to enumerate USB device [ 147.550206][ T5929] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 147.599091][ T5937] usb 2-1: config 0 has no interfaces? [ 147.617915][ T5937] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.629128][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.640917][ T5937] usb 2-1: Product: syz [ 147.645205][ T5937] usb 2-1: Manufacturer: syz [ 147.654981][ T5937] usb 2-1: SerialNumber: syz [ 147.663852][ T5937] usb 2-1: config 0 descriptor?? [ 147.720623][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 147.925876][ T6669] netlink: 'syz.3.185': attribute type 4 has an invalid length. [ 147.948960][ T5929] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 148.163427][ T5929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 148.206022][ T5929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.218092][ T5929] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.231607][ T5997] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=12.8b [ 148.234493][ T5929] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.254703][ T5997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.255075][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.334553][ T5997] usb 1-1: can't set config #127, error -71 [ 148.388542][ T5997] usb 1-1: USB disconnect, device number 7 [ 148.479442][ T6673] tipc: Started in network mode [ 148.518514][ T5929] usb 3-1: GET_CAPABILITIES returned 0 [ 148.524293][ T5929] usbtmc 3-1:16.0: can't read capabilities [ 148.532279][ T6673] tipc: Node identity 62aa0999d0d5, cluster identity 4711 [ 148.570767][ T6673] tipc: Enabled bearer , priority 0 [ 148.665947][ T6674] syzkaller0: entered promiscuous mode [ 148.682625][ T6674] syzkaller0: entered allmulticast mode [ 148.846142][ T6674] tipc: Resetting bearer [ 149.062069][ T6674] tipc: Disabling bearer [ 149.073169][ T5981] usb 3-1: USB disconnect, device number 9 [ 149.180934][ T5929] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 149.494859][ T5929] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 149.508798][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.640280][ T5929] usb 5-1: Product: syz [ 149.671451][ T5929] usb 5-1: Manufacturer: syz [ 149.682964][ T5929] usb 5-1: SerialNumber: syz [ 149.691581][ T5929] usb 5-1: config 0 descriptor?? [ 149.902480][ T5929] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 149.925346][ T5929] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 150.093607][ T5929] usb 2-1: USB disconnect, device number 14 [ 150.119680][ T6699] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 150.207887][ T6701] netlink: 68 bytes leftover after parsing attributes in process `syz.2.193'. [ 150.228798][ T6703] netlink: 68 bytes leftover after parsing attributes in process `syz.2.193'. [ 150.291152][ T6707] openvswitch: netlink: IP tunnel dst address not specified [ 150.426573][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.197'. [ 150.603547][ T6716] netlink: 'syz.2.197': attribute type 1 has an invalid length. [ 150.819309][ T5937] usb 5-1: USB disconnect, device number 13 [ 150.983606][ T6722] process 'syz.4.198' launched './file0' with NULL argv: empty string added [ 151.292823][ T6719] bond1: (slave geneve2): making interface the new active one [ 151.302531][ T6719] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 151.338734][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.197'. [ 151.347913][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.398471][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.485906][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.514443][ T36] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.569447][ T6716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.344874][ T6748] netlink: 'syz.3.204': attribute type 4 has an invalid length. [ 153.595616][ T6755] tipc: Enabled bearer , priority 0 [ 153.700435][ T6759] syzkaller0: entered promiscuous mode [ 153.705964][ T6759] syzkaller0: entered allmulticast mode [ 153.851167][ T6755] tipc: Resetting bearer [ 153.893393][ T6755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'. [ 154.160066][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 154.172119][ T6766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.327973][ T6754] tipc: Resetting bearer [ 154.333695][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 154.377876][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.392258][ T6754] tipc: Disabling bearer [ 154.429394][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.483055][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 154.544448][ T10] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 154.580078][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.630288][ T10] usb 5-1: config 0 descriptor?? [ 154.742261][ T6775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.214'. [ 154.910231][ T5937] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 155.068509][ T10] asus 0003:0B05:1ABE.0006: hidraw0: USB HID v0.00 Device [HID 0b05:1abe] on usb-dummy_hcd.4-1/input0 [ 155.092101][ T10] asus 0003:0B05:1ABE.0006: Asus input not registered [ 155.259737][ T10] asus 0003:0B05:1ABE.0006: probe with driver asus failed with error -12 [ 155.493966][ T10] usb 5-1: USB disconnect, device number 14 [ 156.545771][ T6785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.218'. [ 156.662754][ T6785] Zero length message leads to an empty skb [ 157.200074][ T958] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 157.370874][ T958] usb 5-1: Using ep0 maxpacket: 16 [ 157.413864][ T958] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 157.435280][ T958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.453583][ T958] usb 5-1: config 0 descriptor?? [ 157.693044][ T6800] netlink: 'syz.0.221': attribute type 4 has an invalid length. [ 158.083985][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 158.218736][ T958] lenovo 0003:17EF:6047.0007: hidraw0: USB HID v1.01 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 158.247392][ T6793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.258719][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.267708][ T6793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.287285][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.302104][ T958] lenovo 0003:17EF:6047.0007: Failed to switch F7/9/11 mode: -71 [ 158.311285][ T958] lenovo 0003:17EF:6047.0007: Failed to switch middle button: -71 [ 158.328490][ T958] lenovo 0003:17EF:6047.0007: Fn-lock setting failed: -71 [ 158.348511][ T6808] x_tables: ip_tables: udp match: only valid for protocol 17 [ 158.358089][ T958] lenovo 0003:17EF:6047.0007: Sensitivity setting failed: -71 [ 158.432583][ T958] usb 5-1: USB disconnect, device number 15 [ 158.630813][ T6810] pim6reg: entered allmulticast mode [ 158.817651][ T6809] fido_id[6809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 159.229270][ T6817] binder: 6814:6817 ioctl c0306201 0 returned -14 [ 159.480346][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 159.640095][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 159.667789][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 159.699400][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.722172][ T10] usb 5-1: Product: syz [ 159.733177][ T10] usb 5-1: Manufacturer: syz [ 159.748099][ T10] usb 5-1: SerialNumber: syz [ 159.785258][ T10] usb 5-1: config 0 descriptor?? [ 160.038104][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.264157][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 160.356993][ T10] usb 5-1: USB disconnect, device number 16 [ 161.215929][ T6846] fuse: Bad value for 'user_id' [ 161.226760][ T6845] netlink: 'syz.4.233': attribute type 10 has an invalid length. [ 161.257565][ T6846] fuse: Bad value for 'user_id' [ 161.313125][ T6845] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 161.357654][ T6656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.382945][ T6656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.397788][ T6847] netlink: 228 bytes leftover after parsing attributes in process `syz.2.232'. [ 161.408162][ T6849] netlink: 228 bytes leftover after parsing attributes in process `syz.2.232'. [ 162.278541][ T6857] sctp: [Deprecated]: syz.2.236 (pid 6857) Use of int in max_burst socket option. [ 162.278541][ T6857] Use struct sctp_assoc_value instead [ 162.549152][ T6866] netlink: 'syz.0.237': attribute type 4 has an invalid length. [ 162.871951][ T6872] binder: 6868:6872 ioctl c0306201 0 returned -14 [ 163.160127][ T958] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 163.354232][ T958] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 163.374245][ T958] usb 5-1: config 5 has no interface number 0 [ 163.388420][ T958] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 163.404195][ T958] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 163.414235][ T958] usb 5-1: config 5 interface 123 has no altsetting 0 [ 163.427442][ T958] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 163.437066][ T958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.445530][ T958] usb 5-1: Product: syz [ 163.455436][ T958] usb 5-1: Manufacturer: syz [ 163.462814][ T958] usb 5-1: SerialNumber: syz [ 163.970316][ T44] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 164.142393][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.163370][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.251643][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 164.261944][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.393256][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.417195][ T958] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 164.584999][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.597315][ T958] usb 5-1: USB disconnect, device number 17 [ 164.795408][ T44] usb 2-1: config 0 descriptor?? [ 165.261304][ T44] plantronics 0003:047F:FFFF.0008: ignoring exceeding usage max [ 165.333763][ T44] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 165.451126][ T6881] loop6: detected capacity change from 0 to 63 [ 165.506644][ T5993] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.607556][ T5993] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.665669][ T5993] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.744606][ T5993] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.791122][ T5993] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.134688][ T6908] input: syz1 as /devices/virtual/input/input11 [ 166.501190][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 166.720141][ T10] usb 3-1: device descriptor read/64, error -71 [ 167.033944][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 167.191481][ T10] usb 3-1: device descriptor read/64, error -71 [ 167.301659][ T10] usb usb3-port1: attempt power cycle [ 167.315674][ T5929] usb 2-1: USB disconnect, device number 15 [ 167.400432][ T5981] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 167.415436][ T6929] netlink: 'syz.1.254': attribute type 4 has an invalid length. [ 167.632117][ T5981] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 167.640855][ T5981] usb 1-1: config 1 has no interface number 0 [ 167.646999][ T5981] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 167.662474][ T5981] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 167.682797][ T5981] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.705014][ T5981] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 167.714275][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 167.724626][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.742629][ T5981] usb 1-1: Product: syz [ 167.750830][ T10] usb 3-1: device descriptor read/8, error -71 [ 167.757618][ T5981] usb 1-1: Manufacturer: syz [ 167.777852][ T5981] usb 1-1: SerialNumber: syz [ 167.836611][ T6923] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 167.990078][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 168.089578][ T10] usb 3-1: device descriptor read/8, error -71 [ 168.105814][ T6923] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 168.230320][ T10] usb usb3-port1: unable to enumerate USB device [ 168.348877][ T5981] usb 1-1: Incompatible driver and firmware versions [ 168.430322][ T5981] usb 1-1: USB disconnect, device number 8 [ 168.857008][ T6938] sctp: [Deprecated]: syz.1.257 (pid 6938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.857008][ T6938] Use struct sctp_sack_info instead [ 169.364658][ T6950] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.490310][ T5951] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 169.692538][ T5951] usb 5-1: unable to get BOS descriptor or descriptor too short [ 169.703918][ T5951] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 169.721664][ T5951] usb 5-1: can't read configurations, error -71 [ 169.887310][ T44] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 170.032097][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 170.060470][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 170.071321][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 170.091723][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 170.106821][ T44] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 170.124857][ T44] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 170.153430][ T44] usb 4-1: Product: syz [ 170.173907][ T44] usb 4-1: Manufacturer: syz [ 170.194208][ T44] usb 4-1: SerialNumber: syz [ 170.200083][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 170.212361][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.234851][ T10] usb 3-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.346607][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 170.379634][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.413956][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.449672][ T10] usb 3-1: Product: syz [ 170.466768][ T10] usb 3-1: Manufacturer: syz [ 170.470301][ T44] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 170.479750][ T10] usb 3-1: SerialNumber: syz [ 170.520033][ T44] usb 4-1: Handspring Visor / Palm OS: port 82, is for unknown use [ 170.550039][ T44] usb 4-1: Handspring Visor / Palm OS: port 223, is for HotSync use [ 170.609838][ T44] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 170.688459][ T44] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 170.710135][ T44] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 170.735182][ T10] usb 3-1: bad CDC descriptors [ 170.782659][ T44] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 170.802522][ T10] usb 3-1: USB disconnect, device number 14 [ 170.855668][ T44] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 170.913169][ T44] usb 4-1: USB disconnect, device number 10 [ 170.966393][ T44] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 171.038961][ T44] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 171.079720][ T44] visor 4-1:1.0: device disconnected [ 171.224962][ T6975] netlink: 'syz.4.267': attribute type 4 has an invalid length. [ 171.867417][ T6985] netlink: zone id is out of range [ 171.872804][ T6985] netlink: zone id is out of range [ 171.878093][ T6985] netlink: zone id is out of range [ 171.883315][ T6985] netlink: zone id is out of range [ 171.888458][ T6985] netlink: zone id is out of range [ 171.893640][ T6985] netlink: zone id is out of range [ 171.898782][ T6985] netlink: zone id is out of range [ 171.904968][ T6985] netlink: zone id is out of range [ 171.910936][ T6985] netlink: zone id is out of range [ 172.110382][ T5997] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 172.280162][ T5997] usb 3-1: Using ep0 maxpacket: 32 [ 172.288007][ T5997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.329016][ T5997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.330459][ T44] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.368276][ T6988] kthread_run failed with err -4 [ 172.380389][ T5997] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 172.430806][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.511041][ T5997] usb 3-1: config 0 descriptor?? [ 172.763074][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 172.780719][ T5997] usbhid 3-1:0.0: can't add hid device: -71 [ 172.786798][ T5997] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 172.841407][ T44] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 172.869526][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.891963][ T5997] usb 3-1: USB disconnect, device number 15 [ 172.918392][ T44] usb 4-1: config 0 descriptor?? [ 172.960264][ T5951] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 173.131825][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 173.153392][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.198419][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.243655][ T5951] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.283441][ T5951] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 173.327808][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.374659][ T5951] usb 1-1: config 0 descriptor?? [ 173.445329][ T5951] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 173.509126][ T5221] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 173.535593][ T5221] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 173.583794][ T5221] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 173.655841][ T5221] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 173.681560][ T6996] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 173.706252][ T5930] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 173.722513][ T5951] usb 1-1: USB disconnect, device number 9 [ 173.749567][ T5221] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 174.434868][ T1157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.682233][ T1157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.757107][ T44] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 174.770142][ T44] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 174.802220][ T44] asix 4-1:0.0: probe with driver asix failed with error -71 [ 174.842367][ T44] usb 4-1: USB disconnect, device number 11 [ 174.879009][ T1157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.961946][ T1157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.470308][ T44] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 175.652348][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.663469][ T5997] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 175.828123][ T30] audit: type=1326 audit(1759061082.714:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fdd8eec9 code=0x7ffc0000 [ 175.873868][ T30] audit: type=1326 audit(1759061082.714:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f28fdd8eec9 code=0x7ffc0000 [ 175.880883][ T44] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 176.018196][ T30] audit: type=1326 audit(1759061082.714:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fdd8eec9 code=0x7ffc0000 [ 176.020797][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.087485][ T5997] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.132514][ T5997] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 176.176720][ T44] usb 1-1: Product: syz [ 176.205667][ T30] audit: type=1326 audit(1759061082.724:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f28fdd8eec9 code=0x7ffc0000 [ 176.216473][ T44] usb 1-1: Manufacturer: syz [ 176.247713][ T5997] usb 2-1: config 0 interface 0 has no altsetting 0 [ 176.287346][ T5997] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 176.327032][ T44] usb 1-1: SerialNumber: syz [ 176.350034][ T5997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.357462][ T30] audit: type=1326 audit(1759061082.724:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fdd8eec9 code=0x7ffc0000 [ 176.481363][ T30] audit: type=1326 audit(1759061082.724:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f28fdd8eec9 code=0x7ffc0000 [ 176.542343][ T44] usb 1-1: config 0 descriptor?? [ 176.548444][ T5997] usb 2-1: config 0 descriptor?? [ 176.597824][ T5997] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 176.643690][ T30] audit: type=1326 audit(1759061082.724:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fdd8eec9 code=0x7ffc0000 [ 176.644876][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.691774][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.712054][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.728825][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.743008][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.763076][ T30] audit: type=1326 audit(1759061082.724:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f28fdd8eec9 code=0x7ffc0000 [ 176.829381][ T30] audit: type=1326 audit(1759061082.734:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fdd8eec9 code=0x7ffc0000 [ 176.889629][ T30] audit: type=1326 audit(1759061082.734:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f28fdd8eec9 code=0x7ffc0000 [ 177.670642][ T7082] netlink: 'syz.2.284': attribute type 4 has an invalid length. [ 177.886304][ T1157] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 177.956968][ T1157] bond0 (unregistering): Released all slaves [ 178.830973][ T51] Bluetooth: hci1: command tx timeout [ 179.651939][ T44] usb 1-1: probing VID:PID(2201:012C) [ 179.659393][ T44] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 179.730100][ T44] vub300 1-1:0.0: probe with driver vub300 failed with error -22 [ 180.020611][ T44] usb 1-1: USB disconnect, device number 10 [ 180.460255][ T44] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 180.600375][ T44] usb 1-1: device descriptor read/64, error -71 [ 180.640292][ T5937] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 180.682660][ T5221] bcm5974 2-1:0.0: could not read from device [ 180.733185][ T5221] bcm5974 2-1:0.0: could not read from device [ 180.749097][ T5997] usb 2-1: USB disconnect, device number 16 [ 180.809049][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 180.828975][ T5221] bcm5974 2-1:0.0: could not read from device [ 180.843798][ T44] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 180.851720][ T5937] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 180.882709][ T5937] usb 3-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 180.891200][ T51] Bluetooth: hci1: command tx timeout [ 180.910071][ T5937] usb 3-1: Product: syz [ 180.915289][ T5937] usb 3-1: Manufacturer: syz [ 180.925485][ T5937] usb 3-1: SerialNumber: syz [ 180.954832][ T5937] usb 3-1: config 0 descriptor?? [ 181.030874][ T44] usb 1-1: device descriptor read/64, error -71 [ 181.036783][ T7116] gretap0: entered promiscuous mode [ 181.061365][ T7116] macsec1: entered promiscuous mode [ 181.066831][ T7116] macsec1: entered allmulticast mode [ 181.079848][ T7116] gretap0: entered allmulticast mode [ 181.103372][ T7116] gretap0: left allmulticast mode [ 181.122854][ T7116] gretap0: left promiscuous mode [ 181.141405][ T44] usb usb1-port1: attempt power cycle [ 181.205907][ T7077] chnl_net:caif_netlink_parms(): no params data found [ 181.350751][ T1157] hsr_slave_0: left promiscuous mode [ 181.358044][ T1157] hsr_slave_1: left promiscuous mode [ 181.374731][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.385876][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.421133][ T1157] veth1_macvtap: left promiscuous mode [ 181.429179][ T5937] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 181.451608][ T1157] veth0_macvtap: left promiscuous mode [ 181.457401][ T1157] veth1_vlan: left promiscuous mode [ 181.468321][ T5937] asix 3-1:0.0: probe with driver asix failed with error -71 [ 181.478306][ T1157] veth0_vlan: left promiscuous mode [ 181.510081][ T44] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 181.527205][ T5937] usb 3-1: USB disconnect, device number 16 [ 181.570466][ T44] usb 1-1: device descriptor read/8, error -71 [ 181.810088][ T44] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 181.830691][ T44] usb 1-1: device descriptor read/8, error -71 [ 181.940716][ T44] usb usb1-port1: unable to enumerate USB device [ 182.970176][ T51] Bluetooth: hci1: command tx timeout [ 183.494146][ T44] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 183.680166][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 183.705030][ T44] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 183.721834][ T44] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 183.731952][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 183.790556][ T44] usb 1-1: config 1 has no interface number 0 [ 183.840449][ T44] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.858952][ T44] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 183.873176][ T44] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 183.888356][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.955353][ T44] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 184.041539][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.048908][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.096808][ T7077] bridge_slave_0: entered allmulticast mode [ 184.107304][ T7077] bridge_slave_0: entered promiscuous mode [ 184.323038][ T44] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 184.327380][ T5981] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 184.416215][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.429527][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.458808][ T7077] bridge_slave_1: entered allmulticast mode [ 184.523001][ T7077] bridge_slave_1: entered promiscuous mode [ 184.593903][ T5981] usb 4-1: unable to get BOS descriptor or descriptor too short [ 184.622241][ T5981] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 184.657905][ T5929] usb 1-1: USB disconnect, device number 15 [ 184.665553][ T5929] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 184.721950][ T5981] usb 4-1: string descriptor 0 read error: -22 [ 184.735391][ T5981] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 184.764056][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.071699][ T5981] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 185.071707][ T51] Bluetooth: hci1: command tx timeout [ 185.206913][ T7077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.284599][ T7077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.616153][ T7077] team0: Port device team_slave_0 added [ 185.638035][ T7077] team0: Port device team_slave_1 added [ 185.764034][ T5981] usb 4-1: device descriptor read/64, error -71 [ 185.909580][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.939740][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.037086][ T7077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.092579][ T5981] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 186.153560][ T7181] netlink: 'syz.0.298': attribute type 4 has an invalid length. [ 186.401895][ T7155] input: syz0 as /devices/virtual/input/input15 [ 186.415974][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.425441][ T5981] usb 4-1: unable to get BOS descriptor or descriptor too short [ 186.435026][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 186.495007][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.522600][ T5981] usb 4-1: device firmware changed [ 186.542507][ T5981] usb 4-1: USB disconnect, device number 12 [ 186.558190][ T7077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.059488][ T7077] hsr_slave_0: entered promiscuous mode [ 187.081290][ T7077] hsr_slave_1: entered promiscuous mode [ 187.718734][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 188.310080][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 188.490831][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 188.506494][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 188.537277][ T10] usb 3-1: config 0 has no interface number 0 [ 188.564861][ T10] usb 3-1: config 0 interface 2 has no altsetting 0 [ 188.615918][ T10] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 188.632888][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.654626][ T10] usb 3-1: Product: syz [ 188.658955][ T10] usb 3-1: Manufacturer: syz [ 188.664136][ T10] usb 3-1: SerialNumber: syz [ 188.692613][ T10] usb 3-1: config 0 descriptor?? [ 189.064236][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.114647][ T7219] program syz.0.303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.380431][ C1] sd 0:0:1:0: [sda] tag#5987 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 189.391081][ C1] sd 0:0:1:0: [sda] tag#5987 CDB: Write(6) 0a 00 00 00 73 d0 [ 189.864225][ T10] usb 3-1: USB disconnect, device number 17 [ 190.438056][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.589817][ T7077] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.685363][ T7077] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.750424][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 190.787184][ T7077] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.838143][ T7077] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.910079][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 190.938602][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.987854][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 191.010837][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 191.085697][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 191.145113][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 191.175948][ T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 191.201647][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 191.222913][ T10] usb 3-1: Product: syz [ 191.236625][ T7252] loop9: detected capacity change from 0 to 7 [ 191.243003][ T10] usb 3-1: Manufacturer: syz [ 191.247640][ T10] usb 3-1: SerialNumber: syz [ 191.275082][ T7252] Dev loop9: unable to read RDB block 7 [ 191.298125][ T10] usb 3-1: config 0 descriptor?? [ 191.304880][ T7252] loop9: unable to read partition table [ 191.320786][ T7077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.336574][ T7252] loop9: partition table beyond EOD, truncated [ 191.373377][ T7252] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 191.438049][ T7077] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.558313][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.565635][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.566188][ T10] radio-si470x 3-1:0.0: DeviceID=0x4fe2 ChipID=0x667b [ 191.638108][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.645383][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.768305][ T10] radio-si470x 3-1:0.0: software version 79, hardware version 226 [ 192.015424][ T10] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 192.032547][ T7077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.044396][ T10] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 192.067853][ T10] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 192.117947][ T10] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 192.193014][ T10] usb 3-1: USB disconnect, device number 18 [ 192.295447][ T7281] netlink: 'syz.0.313': attribute type 4 has an invalid length. [ 192.356349][ T7077] veth0_vlan: entered promiscuous mode [ 192.652942][ T7077] veth1_vlan: entered promiscuous mode [ 192.870288][ T7077] veth0_macvtap: entered promiscuous mode [ 192.918101][ T7077] veth1_macvtap: entered promiscuous mode [ 193.393369][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.504268][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.517803][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.1.314'. [ 193.594731][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 193.627059][ T7302] netlink: 36 bytes leftover after parsing attributes in process `syz.1.314'. [ 193.686947][ T1157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.760605][ T1157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.820250][ T7298] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 193.842684][ T1157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.979410][ T1157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.537010][ T6656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.556278][ T6656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.791778][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.815434][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.983845][ T7324] loop9: detected capacity change from 0 to 7 [ 195.036363][ T7324] Dev loop9: unable to read RDB block 7 [ 195.065386][ T7324] loop9: unable to read partition table [ 195.110427][ T7324] loop9: partition table beyond EOD, truncated [ 195.163250][ T7324] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 195.893117][ T5981] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 196.223926][ T5981] usb 1-1: Using ep0 maxpacket: 16 [ 196.496162][ T5981] usb 1-1: config index 0 descriptor too short (expected 1810, got 18) [ 196.527813][ T5981] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 196.587469][ T5981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.618392][ T5981] usb 1-1: config 0 descriptor?? [ 196.738939][ T5981] gspca_main: etoms-2.14.0 probing 102c:6151 [ 196.840045][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 196.856533][ T30] audit: type=1326 audit(1759061103.814:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4bfd8eec9 code=0x7ffc0000 [ 196.895235][ T30] audit: type=1326 audit(1759061103.814:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4bfd8eec9 code=0x7ffc0000 [ 197.337516][ T5981] usb 1-1: USB disconnect, device number 16 [ 197.755410][ T5981] hid-generic 0081:0011:FFFFFF81.0009: item fetching failed at offset 2/5 [ 197.820732][ T5981] hid-generic 0081:0011:FFFFFF81.0009: probe with driver hid-generic failed with error -22 [ 198.352887][ T7379] netlink: 68 bytes leftover after parsing attributes in process `syz.2.328'. [ 198.584273][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.329'. [ 198.659911][ T7385] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 199.413119][ T7402] loop9: detected capacity change from 0 to 7 [ 199.442997][ T7403] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 2, id = 0 [ 199.545191][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.554629][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.594610][ T7402] Dev loop9: unable to read RDB block 7 [ 199.691545][ T7402] loop9: unable to read partition table [ 199.697609][ T7402] loop9: partition table beyond EOD, truncated [ 199.707625][ T7402] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 200.460354][ T5870] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 200.494654][ T5997] hid-generic 0081:0011:FFFFFF81.000A: item fetching failed at offset 2/5 [ 200.545585][ T5997] hid-generic 0081:0011:FFFFFF81.000A: probe with driver hid-generic failed with error -22 [ 200.620336][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 200.627891][ T5870] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 200.636513][ T5870] usb 4-1: config 0 has no interface number 0 [ 200.645238][ T5870] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 200.654783][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.671902][ T5870] usb 4-1: Product: syz [ 200.689533][ T5870] usb 4-1: Manufacturer: syz [ 200.740113][ T5870] usb 4-1: SerialNumber: syz [ 200.758028][ T5870] usb 4-1: config 0 descriptor?? [ 200.807340][ T5870] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 200.838871][ T5870] dvb-usb: bulk message failed: -22 (2/0) [ 200.875551][ T30] audit: type=1326 audit(1759061107.904:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 200.923453][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.941510][ T5870] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 200.953023][ T30] audit: type=1326 audit(1759061107.904:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 200.965955][ T7405] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 200.992865][ T5870] usb 4-1: media controller created [ 201.008945][ T7415] cxusb: i2c wr: len=79 is too big! [ 201.008945][ T7415] [ 201.110419][ T30] audit: type=1326 audit(1759061107.904:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 201.132618][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.158061][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.248729][ T30] audit: type=1326 audit(1759061107.904:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 201.322396][ T5870] cxusb: set interface failed [ 201.327120][ T5870] dvb-usb: bulk message failed: -22 (1/0) [ 201.358946][ T30] audit: type=1326 audit(1759061107.904:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 201.381122][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.600153][ T30] audit: type=1326 audit(1759061107.934:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 201.749757][ T5870] DVB: Unable to find symbol lgdt330x_attach() [ 201.779621][ T5870] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 201.789344][ T30] audit: type=1326 audit(1759061107.934:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 201.811509][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.888905][ T30] audit: type=1326 audit(1759061107.934:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 201.912238][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.100329][ T30] audit: type=1326 audit(1759061109.094:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 202.190377][ T5870] rc_core: IR keymap rc-dvico-portable not found [ 202.207342][ T5870] Registered IR keymap rc-empty [ 202.222601][ T30] audit: type=1326 audit(1759061109.094:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 202.244779][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.272118][ T5870] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 202.318308][ T5870] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input16 [ 202.362176][ T30] audit: type=1326 audit(1759061109.094:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 202.415016][ T30] audit: type=1326 audit(1759061109.094:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 202.452712][ T5870] dvb-usb: schedule remote query interval to 100 msecs. [ 202.459767][ T5870] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 202.512495][ T30] audit: type=1326 audit(1759061109.094:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 202.561729][ T5997] dvb-usb: bulk message failed: -22 (1/0) [ 202.605752][ T5870] usb 4-1: USB disconnect, device number 13 [ 202.632556][ T30] audit: type=1326 audit(1759061109.094:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 203.661595][ T30] audit: type=1326 audit(1759061109.094:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 203.738458][ T5870] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 203.758641][ T30] audit: type=1326 audit(1759061109.094:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cc18eec9 code=0x7ffc0000 [ 203.780807][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.812410][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 203.842028][ T7466] vim2m vim2m.0: vidioc_s_fmt queue busy [ 204.088986][ T30] audit: type=1326 audit(1759061109.094:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38cc18d710 code=0x7ffc0000 [ 205.117442][ T7477] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.654186][ T7487] netlink: 68 bytes leftover after parsing attributes in process `syz.3.352'. [ 205.686884][ T5981] hid-generic 0081:0011:FFFFFF81.000B: item fetching failed at offset 2/5 [ 205.804632][ T5981] hid-generic 0081:0011:FFFFFF81.000B: probe with driver hid-generic failed with error -22 [ 207.040145][ T5870] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 207.211325][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 207.220818][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.232855][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.305728][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 207.330149][ T5870] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 207.360843][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.360869][ T5981] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 207.439140][ T5870] usb 2-1: config 0 descriptor?? [ 207.516875][ T5981] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 207.534312][ T5981] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 207.556129][ T5981] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 207.581886][ T5981] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 207.615338][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.624961][ T5981] usb 3-1: Product: syz [ 207.629308][ T5981] usb 3-1: Manufacturer: syz [ 207.634160][ T5981] usb 3-1: SerialNumber: syz [ 207.654703][ T5981] usb 3-1: config 0 descriptor?? [ 207.681077][ T7512] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 207.689280][ T7512] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 207.713587][ T5981] usb 3-1: ucan: probing device on interface #0 [ 207.861435][ T7500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.891101][ T7500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.929061][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.945084][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.970534][ T5981] usb 3-1: ucan: device protocol version 0 is not supported [ 207.979373][ T5981] usb 3-1: ucan: probe failed; try to update the device firmware [ 208.259792][ T44] usb 3-1: USB disconnect, device number 19 [ 208.810649][ T44] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 208.876310][ T7532] netlink: 68 bytes leftover after parsing attributes in process `syz.4.363'. [ 208.982474][ T44] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 208.992135][ T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.024709][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.083215][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.104037][ T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.116221][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.160740][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.184016][ T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.193299][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.230157][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.244492][ T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.256291][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.268065][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.288236][ T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.298490][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 209.299069][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.347745][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.366167][ T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.376090][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.388923][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.398185][ T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.418738][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.437553][ T958] hid-generic 0081:0011:FFFFFF81.000C: item fetching failed at offset 2/5 [ 209.440201][ T10] usb 5-1: device descriptor read/64, error -71 [ 209.450691][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.465755][ T958] hid-generic 0081:0011:FFFFFF81.000C: probe with driver hid-generic failed with error -22 [ 209.479632][ T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.494492][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.508294][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.557295][ T44] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 209.568122][ T44] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 209.610293][ T5870] usbhid 2-1:0.0: can't add hid device: -71 [ 209.616493][ T5870] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 209.631257][ T44] usb 1-1: Product: syz [ 209.636347][ T44] usb 1-1: Manufacturer: syz [ 209.644293][ T5870] usb 2-1: USB disconnect, device number 18 [ 209.669145][ T44] usb 1-1: SerialNumber: syz [ 209.688074][ T44] usb 1-1: config 0 descriptor?? [ 209.725843][ T44] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 209.730319][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 209.910060][ T10] usb 5-1: device descriptor read/64, error -71 [ 210.000680][ T5981] usb 1-1: USB disconnect, device number 17 [ 210.022196][ T10] usb usb5-port1: attempt power cycle [ 210.109120][ T5981] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 210.298088][ T5929] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 210.500065][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 210.545045][ T5929] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.553473][ T5929] usb 2-1: config 0 has no interface number 0 [ 210.560063][ T10] usb 5-1: device descriptor read/8, error -71 [ 210.571839][ T5929] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 210.588345][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.616864][ T5929] usb 2-1: Product: syz [ 210.626999][ T5929] usb 2-1: Manufacturer: syz [ 210.637145][ T5929] usb 2-1: SerialNumber: syz [ 210.661231][ T5929] usb 2-1: config 0 descriptor?? [ 210.879787][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 210.894428][ T5929] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 210.932249][ T10] usb 5-1: device descriptor read/8, error -71 [ 210.939840][ T5929] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 211.012989][ T5929] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 211.193502][ T10] usb usb5-port1: unable to enumerate USB device [ 211.260211][ T5929] usb 2-1: media controller created [ 211.461063][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.242931][ T5929] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 212.398048][ T5929] usb 2-1: USB disconnect, device number 19 [ 212.458967][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.373'. [ 213.280254][ T5870] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 213.610142][ T7578] bond1: entered promiscuous mode [ 213.617285][ T7578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.670188][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.690077][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 213.706109][ T5870] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 213.715884][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.733024][ T5870] usb 3-1: config 0 descriptor?? [ 213.747559][ T5870] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 213.754607][ T5870] dvb-usb: bulk message failed: -22 (3/0) [ 214.174372][ T5997] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 214.183643][ T5870] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 214.205008][ T5870] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 214.220027][ T5870] usb 3-1: media controller created [ 214.254090][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.361044][ T5997] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 214.372980][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.403901][ T5870] dvb-usb: bulk message failed: -22 (6/0) [ 214.416026][ T5997] usb 5-1: Product: syz [ 214.428150][ T5997] usb 5-1: Manufacturer: syz [ 214.437823][ T5870] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 214.448761][ T5997] usb 5-1: SerialNumber: syz [ 214.467629][ T5870] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 214.497697][ T5997] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 214.557172][ T5937] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 214.577562][ T5870] dvb-usb: schedule remote query interval to 150 msecs. [ 214.620422][ T5870] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 214.699996][ T5870] usb 3-1: USB disconnect, device number 20 [ 214.866732][ T5870] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 215.033015][ T5997] hid-generic 0081:0011:FFFFFF81.000D: item fetching failed at offset 2/5 [ 215.059692][ T7590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.101341][ T5997] hid-generic 0081:0011:FFFFFF81.000D: probe with driver hid-generic failed with error -22 [ 215.124592][ T7590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.324020][ T5870] usb 5-1: USB disconnect, device number 24 [ 215.395806][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.480637][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.580078][ T5997] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 215.690740][ T5937] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 215.698048][ T5937] ath9k_htc: Failed to initialize the device [ 215.790779][ T5870] usb 5-1: ath9k_htc: USB layer deinitialized [ 215.825931][ T5997] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 215.965713][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.974907][ T5997] usb 4-1: Product: syz [ 215.979119][ T5997] usb 4-1: Manufacturer: syz [ 215.987075][ T5997] usb 4-1: SerialNumber: syz [ 216.002363][ T5997] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 216.059212][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 216.100131][ T44] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 216.235253][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 216.323540][ T5986] usb 4-1: USB disconnect, device number 14 [ 216.370831][ T7603] loop9: detected capacity change from 0 to 7 [ 216.380321][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.395209][ T7603] Dev loop9: unable to read RDB block 7 [ 216.440218][ T7603] loop9: unable to read partition table [ 216.483913][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.495219][ T7603] loop9: partition table beyond EOD, truncated [ 216.499546][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 216.519290][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.528555][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.551691][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 216.571502][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.590567][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.625024][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 216.688509][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.690151][ T7603] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 216.720394][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.747528][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 216.794039][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.824331][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.844762][ T5929] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 216.880463][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 216.912137][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.935746][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.968902][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 216.985285][ T5875] Bluetooth: hci3: command 0x0406 tx timeout [ 216.985461][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 216.991451][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 216.991494][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 217.012468][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.021650][ T5929] usb 1-1: device descriptor read/64, error -71 [ 217.038710][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.050763][ T7610] IPVS: length: 157 != 24 [ 217.051183][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.071752][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.096101][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.107588][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.136595][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 217.180840][ T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 217.220251][ T44] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 217.227358][ T44] ath9k_htc: Failed to initialize the device [ 217.250072][ T5986] usb 4-1: ath9k_htc: USB layer deinitialized [ 217.263096][ T10] usb 2-1: Product: syz [ 217.284946][ T10] usb 2-1: Manufacturer: syz [ 217.290490][ T5929] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 217.315314][ T10] usb 2-1: SerialNumber: syz [ 217.350751][ T10] usb 2-1: config 0 descriptor?? [ 217.381487][ T10] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 217.394197][ T7614] tap0: tun_chr_ioctl cmd 1074025678 [ 217.401885][ T7614] tap0: group set to 0 [ 217.460397][ T5929] usb 1-1: device descriptor read/64, error -71 [ 217.610889][ T5929] usb usb1-port1: attempt power cycle [ 217.629022][ T5986] usb 2-1: USB disconnect, device number 20 [ 217.639274][ T5986] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 217.660253][ T5870] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 217.858429][ T7625] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 217.870334][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 217.887149][ T5870] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 217.900665][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.925211][ T5870] usb 5-1: Product: syz [ 217.939306][ T5870] usb 5-1: Manufacturer: syz [ 217.970197][ T5929] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 217.972991][ T5870] usb 5-1: SerialNumber: syz [ 217.995653][ T5870] usb 5-1: config 0 descriptor?? [ 218.001028][ T5929] usb 1-1: device descriptor read/8, error -71 [ 218.018598][ T5870] usb 5-1: bad CDC descriptors [ 218.038715][ T5870] usb 5-1: unsupported MDLM descriptors [ 218.219129][ T5870] usb 5-1: USB disconnect, device number 25 [ 218.240087][ T5929] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 218.274607][ T5929] usb 1-1: device descriptor read/8, error -71 [ 218.412900][ T5929] usb usb1-port1: unable to enumerate USB device [ 219.610067][ T5878] Bluetooth: hci1: command 0x0405 tx timeout [ 219.685023][ T7642] netlink: 'syz.0.391': attribute type 4 has an invalid length. [ 219.807190][ T5878] Bluetooth: hci0: command 0x0406 tx timeout [ 219.813485][ T7617] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 220.155423][ T7617] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 220.419617][ T7617] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 220.442921][ T7617] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 220.483144][ T7617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 220.489184][ T7617] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 220.502048][ T7617] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 220.508124][ T7617] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 220.517426][ T7617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 220.523658][ T7617] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 220.535161][ T7617] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 220.830144][ T5929] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 220.909427][ T7648] loop9: detected capacity change from 0 to 7 [ 221.000104][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 221.023871][ T5929] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.042612][ T5977] Dev loop9: unable to read RDB block 7 [ 221.061216][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.080631][ T5977] loop9: unable to read partition table [ 221.101316][ T5977] loop9: partition table beyond EOD, truncated [ 221.128091][ T5929] usb 2-1: config 0 has no interface number 0 [ 221.187144][ T5929] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 221.213143][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.228946][ T5929] usb 2-1: config 0 descriptor?? [ 221.288427][ T7648] Dev loop9: unable to read RDB block 7 [ 221.288477][ T7648] loop9: unable to read partition table [ 221.288734][ T7648] loop9: partition table beyond EOD, truncated [ 221.288777][ T7648] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 221.680682][ T7662] [U]  [ 221.683957][ T7662] [U] K{ [ 221.687007][ T7662] [U] t 1ŠFfˊ`GJgo/mC [ 221.693980][ T7662] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 221.709546][ T7662] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 221.780193][ T7662] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 221.856751][ T5866] Bluetooth: hci0: command 0x0406 tx timeout [ 221.858646][ T7662] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 221.964364][ T7662] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 221.975725][ T7662] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 221.987305][ T7662] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 222.104092][ T7662] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 222.124473][ T7662] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 222.138101][ T7662] [U] 22Ʃx?0;3u [ 222.148836][ T7662] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 222.173831][ T7662] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 222.183334][ T7662] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 222.191954][ T7662] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 222.198142][ T7662] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 222.210499][ T7662] [U] ec [ 222.213643][ T7662] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 222.273427][ T7661] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 222.388530][ T5951] usb 2-1: USB disconnect, device number 21 [ 222.490226][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 222.490295][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 222.598642][ T5878] Bluetooth: hci1: command 0x0405 tx timeout [ 222.598719][ T5878] Bluetooth: hci4: command 0x0405 tx timeout [ 222.603575][ T5929] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 222.621916][ T7670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 222.958434][ T5986] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 223.042608][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.120146][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.120204][ T5929] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 223.120301][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.139776][ T5986] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.139831][ T5986] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 223.139857][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.151216][ T5929] usb 1-1: config 0 descriptor?? [ 223.161360][ T5986] usb 3-1: config 0 descriptor?? [ 223.357857][ T7677] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:21 [ 223.384202][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.384793][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.392002][ T5870] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 223.541397][ T5870] usb 2-1: device descriptor read/64, error -71 [ 223.587470][ T7679] syzkaller0: entered promiscuous mode [ 223.587497][ T7679] syzkaller0: entered allmulticast mode [ 223.589318][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.589894][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.650518][ T5986] usbhid 3-1:0.0: can't add hid device: -71 [ 223.650642][ T5986] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 223.667066][ T5986] usb 3-1: USB disconnect, device number 21 [ 223.790188][ T5870] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 223.920718][ T5870] usb 2-1: device descriptor read/64, error -71 [ 224.030437][ T5870] usb usb2-port1: attempt power cycle [ 224.300152][ T5997] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 224.350005][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 224.371929][ T5870] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 224.393486][ T5870] usb 2-1: device descriptor read/8, error -71 [ 224.450190][ T5997] usb 5-1: device descriptor read/64, error -71 [ 224.500967][ T44] usb 4-1: device descriptor read/64, error -71 [ 224.573075][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 224.573138][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 224.630609][ T5870] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 224.631695][ T5929] usbhid 1-1:0.0: can't add hid device: -71 [ 224.650422][ T5878] Bluetooth: hci1: command 0x0405 tx timeout [ 224.658421][ T5866] Bluetooth: hci4: command 0x0405 tx timeout [ 224.665528][ T5870] usb 2-1: device descriptor read/8, error -71 [ 224.668544][ T5929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 224.690327][ T5997] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 224.732792][ T5929] usb 1-1: USB disconnect, device number 22 [ 224.750033][ T44] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 224.781405][ T5870] usb usb2-port1: unable to enumerate USB device [ 224.840553][ T5997] usb 5-1: device descriptor read/64, error -71 [ 224.871371][ T7693] loop9: detected capacity change from 0 to 7 [ 224.881883][ T5977] Dev loop9: unable to read RDB block 7 [ 224.887863][ T5977] loop9: unable to read partition table [ 224.898163][ T5977] loop9: partition table beyond EOD, truncated [ 224.900064][ T44] usb 4-1: device descriptor read/64, error -71 [ 224.925283][ T7693] Dev loop9: unable to read RDB block 7 [ 224.931390][ T7693] loop9: unable to read partition table [ 224.937477][ T7693] loop9: partition table beyond EOD, truncated [ 224.945539][ T7693] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 224.955486][ T5997] usb usb5-port1: attempt power cycle [ 225.033196][ T44] usb usb4-port1: attempt power cycle [ 225.230572][ T7699] loop2: detected capacity change from 0 to 7 [ 225.251497][ T7699] Dev loop2: unable to read RDB block 7 [ 225.257590][ T7699] loop2: unable to read partition table [ 225.272993][ T7699] loop2: partition table beyond EOD, truncated [ 225.279383][ T7699] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 225.340541][ T5997] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 225.400021][ T44] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 225.431501][ T5997] usb 5-1: device descriptor read/8, error -71 [ 225.444603][ T44] usb 4-1: device descriptor read/8, error -71 [ 225.710032][ T5997] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 225.720124][ T44] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 225.760788][ T5997] usb 5-1: device descriptor read/8, error -71 [ 225.800766][ T44] usb 4-1: device descriptor read/8, error -71 [ 225.885460][ T5997] usb usb5-port1: unable to enumerate USB device [ 225.912205][ T44] usb usb4-port1: unable to enumerate USB device [ 226.740057][ T5866] Bluetooth: hci1: command 0x0405 tx timeout [ 226.838605][ T7716] syzkaller0: entered promiscuous mode [ 226.848271][ T7716] syzkaller0: entered allmulticast mode [ 227.247133][ T7723] tipc: Failed to remove unknown binding: 66,1,1/0:1608599018/1608599020 [ 227.295679][ T7723] tipc: Failed to remove unknown binding: 66,1,1/0:1608599018/1608599020 [ 227.768789][ T7729] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 227.780034][ T5870] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 227.950118][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 228.052261][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.078891][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.200528][ T5870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.224701][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.247204][ T5870] usb 5-1: Product: syz [ 228.263545][ T5870] usb 5-1: Manufacturer: syz [ 228.288758][ T5870] usb 5-1: SerialNumber: syz [ 228.302949][ T7735] loop9: detected capacity change from 0 to 7 [ 228.325396][ T7735] Dev loop9: unable to read RDB block 7 [ 228.350190][ T7735] loop9: unable to read partition table [ 228.356216][ T7735] loop9: partition table beyond EOD, truncated [ 228.376367][ T7735] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 228.948302][ T7738] loop6: detected capacity change from 0 to 524287999 [ 229.268430][ T5870] usb 5-1: 0:192 : does not exist [ 229.440182][ T5870] usb 5-1: USB disconnect, device number 30 [ 229.512410][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.574655][ T7746] input: syz0 as /devices/virtual/input/input18 [ 230.091597][ T5951] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 230.450086][ T5870] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 230.511664][ T5951] usb 5-1: no configurations [ 230.520140][ T5951] usb 5-1: can't read configurations, error -22 [ 230.700182][ T5951] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 230.780051][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 230.828220][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.901170][ T5951] usb 5-1: no configurations [ 230.906002][ T5951] usb 5-1: can't read configurations, error -22 [ 230.915439][ T5951] usb usb5-port1: attempt power cycle [ 230.928225][ T7758] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.426'. [ 230.945000][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 230.958072][ T7764] sctp: [Deprecated]: syz.2.428 (pid 7764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.958072][ T7764] Use struct sctp_sack_info instead [ 231.091860][ T5870] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 231.177718][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.246231][ T5986] hid-generic 0081:0011:FFFFFF81.000E: item fetching failed at offset 2/5 [ 231.258135][ T5870] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 231.279082][ T5986] hid-generic 0081:0011:FFFFFF81.000E: probe with driver hid-generic failed with error -22 [ 231.300605][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.315241][ T5870] usb 4-1: Product: syz [ 231.320288][ T5951] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 231.364852][ T5870] usb 4-1: Manufacturer: syz [ 231.365894][ T5951] usb 5-1: no configurations [ 231.376728][ T5951] usb 5-1: can't read configurations, error -22 [ 231.397263][ T5870] usb 4-1: SerialNumber: syz [ 231.420087][ T5929] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 231.471230][ T5870] usb 4-1: config 0 descriptor?? [ 231.531018][ T5951] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 231.574621][ T5951] usb 5-1: no configurations [ 231.579271][ T5951] usb 5-1: can't read configurations, error -22 [ 231.603149][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.616701][ T5951] usb usb5-port1: unable to enumerate USB device [ 231.623318][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.651501][ T5870] mcba_usb 4-1:0.0: Can't find endpoints [ 231.697668][ T5929] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 231.770502][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.915967][ T5929] usb 2-1: config 0 descriptor?? [ 232.220179][ T5870] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 232.370472][ T5929] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 232.390823][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 232.406566][ T5870] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 232.417269][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.434513][ T5870] usb 3-1: Product: syz [ 232.438980][ T5870] usb 3-1: Manufacturer: syz [ 232.444778][ T5870] usb 3-1: SerialNumber: syz [ 232.502242][ T5870] usb 3-1: config 0 descriptor?? [ 232.641616][ T7766] ip6gre2: entered promiscuous mode [ 232.681830][ T5981] usb 2-1: USB disconnect, device number 26 [ 232.732847][ T5870] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 232.935108][ T5870] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 232.966952][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'. [ 233.018770][ T7783] netlink: 80 bytes leftover after parsing attributes in process `syz.0.434'. [ 233.028557][ T5870] usb 3-1: USB disconnect, device number 22 [ 233.560291][ T44] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 233.741068][ T44] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 233.791739][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.844434][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.869412][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 233.893557][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.913828][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.968021][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 234.003655][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.025842][ T5981] usb 4-1: USB disconnect, device number 20 [ 234.032925][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.077257][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 234.102372][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.137325][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.195225][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 234.254711][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.313492][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.646144][ T7811] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 234.668257][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 234.691077][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.720162][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.070498][ T5981] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 235.208960][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 235.302200][ T5981] usb 4-1: config 0 has no interfaces? [ 235.307799][ T5981] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 235.314150][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.337520][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.394004][ T5981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.412536][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 235.443313][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.460254][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.471192][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 235.480826][ T44] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 235.489900][ T44] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 235.505297][ T44] usb 5-1: Product: syz [ 235.508115][ T5981] usb 4-1: config 0 descriptor?? [ 235.509497][ T44] usb 5-1: Manufacturer: syz [ 235.525567][ T44] usb 5-1: SerialNumber: syz [ 235.579561][ T44] usb 5-1: config 0 descriptor?? [ 235.615195][ T44] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 235.825798][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 235.835002][ T5929] usb 5-1: USB disconnect, device number 35 [ 235.843636][ T5929] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 235.895520][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 235.982516][ T7815] vxlan0: entered promiscuous mode [ 236.007684][ T6657] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.031998][ T6657] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.077167][ T6657] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.141529][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.515943][ T5929] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 236.790051][ T44] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 237.034460][ T44] usb 1-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 237.068155][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.099405][ T44] usb 1-1: Product: syz [ 237.103061][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 237.108234][ T44] usb 1-1: Manufacturer: syz [ 237.123745][ T44] usb 1-1: SerialNumber: syz [ 237.145320][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.176187][ T5929] usb 2-1: config 3 has an invalid interface number: 151 but max is 0 [ 237.204282][ T5929] usb 2-1: config 3 has no interface number 0 [ 237.296934][ T5929] usb 2-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice=6b.91 [ 237.317648][ T44] usb 1-1: config 0 descriptor?? [ 237.329842][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.352909][ T44] go7007 1-1:0.0: Sensoray 2250 found [ 237.358498][ T44] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 237.361992][ T5929] usb 2-1: Product: syz [ 237.421864][ T5870] usb 4-1: USB disconnect, device number 21 [ 237.429124][ T5929] usb 2-1: Manufacturer: syz [ 237.536990][ T5929] usb 2-1: SerialNumber: syz [ 237.583204][ T7823] unknown channel width for channel at 909000KHz? [ 237.590693][ T7823] unknown channel width for channel at 909000KHz? [ 237.622455][ T7823] unknown channel width for channel at 909000KHz? [ 237.650196][ T7831] unknown channel width for channel at 909000KHz? [ 237.794341][ T7831] unknown channel width for channel at 909000KHz? [ 237.800979][ T44] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 237.840076][ T7831] unknown channel width for channel at 909000KHz? [ 237.851618][ T5937] usb 1-1: USB disconnect, device number 23 [ 237.899040][ T5929] mos7840 2-1:3.151: required endpoints missing [ 237.969552][ T5929] usb 2-1: USB disconnect, device number 27 [ 237.995643][ T44] usb 5-1: config 0 has no interfaces? [ 238.030140][ T44] usb 5-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 238.039851][ T7838] netlink: 916 bytes leftover after parsing attributes in process `syz.3.449'. [ 238.049849][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.072017][ T44] usb 5-1: Product: syz [ 238.076240][ T44] usb 5-1: Manufacturer: syz [ 238.088997][ T44] usb 5-1: SerialNumber: syz [ 238.102356][ T44] usb 5-1: config 0 descriptor?? [ 238.140235][ T7838] net_ratelimit: 226 callbacks suppressed [ 238.140298][ T7838] openvswitch: netlink: Flow key attr not present in new flow. [ 238.187879][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'. [ 238.497409][ T7840] syzkaller1: tun_chr_ioctl cmd 19466 [ 238.608397][ T7843] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 238.643547][ T7843] syzkaller1: linktype set to 0 [ 239.314802][ T44] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 239.749125][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 239.809691][ T44] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 239.819285][ T44] usb 1-1: config 0 has no interface number 0 [ 239.829472][ T44] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.923337][ T44] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 239.944170][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.993777][ T44] usb 1-1: Product: syz [ 240.017379][ T44] usb 1-1: Manufacturer: syz [ 240.088516][ T7862] dvmrp0: entered allmulticast mode [ 240.267838][ T44] usb 1-1: SerialNumber: syz [ 240.356539][ T44] usb 1-1: config 0 descriptor?? [ 240.435666][ T44] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 240.453666][ T44] em28xx 1-1:0.132: Video interface 132 found: [ 240.494117][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.700207][ T5951] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 240.860102][ T44] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 240.910855][ T5951] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 241.000468][ T5870] usb 5-1: USB disconnect, device number 36 [ 241.023226][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.110320][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.152036][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 241.213575][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.240991][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.284334][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 241.314658][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.325681][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.359085][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 241.373085][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.407677][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.516274][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 241.575445][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.594736][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.673184][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 241.716607][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.727422][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.766069][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 241.795008][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.834760][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.902096][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 241.924280][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.936937][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.025665][ T44] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 242.052540][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 242.069212][ T44] em28xx 1-1:0.132: board has no eeprom [ 242.112394][ T5951] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 242.137161][ T5951] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 242.160291][ T44] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 242.187160][ T5951] usb 3-1: Product: syz [ 242.200207][ T44] em28xx 1-1:0.132: analog set to bulk mode. [ 242.206339][ T5997] em28xx 1-1:0.132: Registering V4L2 extension [ 242.210014][ T5951] usb 3-1: Manufacturer: syz [ 242.217130][ T5951] usb 3-1: SerialNumber: syz [ 242.324428][ T5951] usb 3-1: config 0 descriptor?? [ 242.370053][ T5870] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 242.390159][ T5951] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 242.400759][ T44] usb 1-1: USB disconnect, device number 24 [ 242.407690][ T44] em28xx 1-1:0.132: Disconnecting em28xx [ 242.601064][ T5944] usb 3-1: USB disconnect, device number 23 [ 242.631484][ T5870] usb 5-1: config 0 has an invalid interface number: 185 but max is 0 [ 242.680858][ T5944] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 242.696042][ T5870] usb 5-1: config 0 has no interface number 0 [ 242.736268][ T5870] usb 5-1: config 0 interface 185 has no altsetting 0 [ 242.790477][ T5870] usb 5-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice=ce.fc [ 242.809786][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.839817][ T5870] usb 5-1: Product: syz [ 242.851171][ T5870] usb 5-1: Manufacturer: syz [ 242.858422][ T5870] usb 5-1: SerialNumber: syz [ 242.907671][ T5870] usb 5-1: config 0 descriptor?? [ 242.927627][ T5997] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 242.939691][ T5997] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 242.952017][ T5870] em28xx 5-1:0.185: audio device (eb1a:50a6): interface 185, class 1 [ 243.109133][ T5997] em28xx 1-1:0.132: No AC97 audio processor [ 243.123953][ T5997] usb 1-1: Decoder not found [ 243.128615][ T5997] em28xx 1-1:0.132: failed to create media graph [ 243.336426][ T5997] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 243.383450][ T5997] em28xx 1-1:0.132: Remote control support is not available for this card. [ 243.385407][ T7888] ================================================================== [ 243.400173][ T7888] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 243.407592][ T7888] Read of size 8 at addr ffff88806c9c8740 by task v4l_id/7888 [ 243.415080][ T7888] [ 243.417446][ T7888] CPU: 0 UID: 0 PID: 7888 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 243.417472][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.417494][ T7888] Call Trace: [ 243.417503][ T7888] [ 243.417512][ T7888] dump_stack_lvl+0x189/0x250 [ 243.417542][ T7888] ? rcu_is_watching+0x15/0xb0 [ 243.417564][ T7888] ? __kasan_check_byte+0x12/0x40 [ 243.417595][ T7888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.417619][ T7888] ? rcu_is_watching+0x15/0xb0 [ 243.417640][ T7888] ? lock_release+0x4b/0x3e0 [ 243.417673][ T7888] ? __virt_addr_valid+0x1c8/0x5c0 [ 243.417702][ T7888] ? __virt_addr_valid+0x4a5/0x5c0 [ 243.417730][ T7888] print_report+0xca/0x240 [ 243.417750][ T7888] ? v4l2_fh_open+0xc7/0x430 [ 243.417771][ T7888] kasan_report+0x118/0x150 [ 243.417803][ T7888] ? v4l2_fh_open+0xc7/0x430 [ 243.417828][ T7888] v4l2_fh_open+0xc7/0x430 [ 243.417854][ T7888] em28xx_v4l2_open+0x157/0x9a0 [ 243.417893][ T7888] v4l2_open+0x20f/0x360 [ 243.417918][ T7888] chrdev_open+0x4c9/0x5e0 [ 243.417939][ T7888] ? __pfx_chrdev_open+0x10/0x10 [ 243.417965][ T7888] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 243.418003][ T7888] ? __pfx_chrdev_open+0x10/0x10 [ 243.418020][ T7888] do_dentry_open+0x950/0x13f0 [ 243.418050][ T7888] vfs_open+0x3b/0x340 [ 243.418070][ T7888] ? path_openat+0x2ecd/0x3830 [ 243.418097][ T7888] path_openat+0x2ee5/0x3830 [ 243.418122][ T7888] ? arch_stack_walk+0xfc/0x150 [ 243.418157][ T7888] ? stack_depot_save_flags+0x40/0x860 [ 243.418198][ T7888] ? __pfx_path_openat+0x10/0x10 [ 243.418222][ T7888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.418255][ T7888] do_filp_open+0x1fa/0x410 [ 243.418279][ T7888] ? __lock_acquire+0xab9/0xd20 [ 243.418311][ T7888] ? __pfx_do_filp_open+0x10/0x10 [ 243.418348][ T7888] ? _raw_spin_unlock+0x28/0x50 [ 243.418367][ T7888] ? alloc_fd+0x64c/0x6c0 [ 243.418403][ T7888] do_sys_openat2+0x121/0x1c0 [ 243.418427][ T7888] ? __pfx_do_sys_openat2+0x10/0x10 [ 243.418450][ T7888] ? exc_page_fault+0x76/0xf0 [ 243.418473][ T7888] ? do_user_addr_fault+0xc8a/0x1390 [ 243.418494][ T7888] __x64_sys_openat+0x138/0x170 [ 243.418520][ T7888] do_syscall_64+0xfa/0x3b0 [ 243.418544][ T7888] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.418565][ T7888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.418586][ T7888] ? clear_bhb_loop+0x60/0xb0 [ 243.418610][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.418631][ T7888] RIP: 0033:0x7f5ebb5dd407 [ 243.418655][ T7888] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 243.418674][ T7888] RSP: 002b:00007fff606d7d40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 243.418697][ T7888] RAX: ffffffffffffffda RBX: 00007f5ebb551880 RCX: 00007f5ebb5dd407 [ 243.418725][ T7888] RDX: 0000000000000000 RSI: 00007fff606d9f1b RDI: ffffffffffffff9c [ 243.418739][ T7888] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 243.418752][ T7888] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 243.418764][ T7888] R13: 00007fff606d7f90 R14: 00007f5ebb836000 R15: 000056436d3db4d8 [ 243.418787][ T7888] [ 243.418795][ T7888] [ 243.728633][ T7888] Allocated by task 5997: [ 243.732973][ T7888] kasan_save_track+0x3e/0x80 [ 243.737665][ T7888] __kasan_kmalloc+0x93/0xb0 [ 243.742269][ T7888] __kmalloc_cache_noprof+0x230/0x3d0 [ 243.747660][ T7888] em28xx_v4l2_init+0x10b/0x2e70 [ 243.752615][ T7888] em28xx_init_extension+0x120/0x1c0 [ 243.757947][ T7888] process_scheduled_works+0xade/0x17b0 [ 243.763512][ T7888] worker_thread+0x8a0/0xda0 [ 243.768292][ T7888] kthread+0x711/0x8a0 [ 243.772383][ T7888] ret_from_fork+0x439/0x7d0 [ 243.777072][ T7888] ret_from_fork_asm+0x1a/0x30 [ 243.781890][ T7888] [ 243.784233][ T7888] Freed by task 5997: [ 243.788217][ T7888] kasan_save_track+0x3e/0x80 [ 243.792915][ T7888] kasan_save_free_info+0x46/0x50 [ 243.797958][ T7888] __kasan_slab_free+0x5b/0x80 [ 243.802735][ T7888] kfree+0x18e/0x440 [ 243.806650][ T7888] em28xx_v4l2_init+0x1683/0x2e70 [ 243.811703][ T7888] em28xx_init_extension+0x120/0x1c0 [ 243.817007][ T7888] process_scheduled_works+0xade/0x17b0 [ 243.822560][ T7888] worker_thread+0x8a0/0xda0 [ 243.827167][ T7888] kthread+0x711/0x8a0 [ 243.831248][ T7888] ret_from_fork+0x439/0x7d0 [ 243.835847][ T7888] ret_from_fork_asm+0x1a/0x30 [ 243.840627][ T7888] [ 243.842962][ T7888] The buggy address belongs to the object at ffff88806c9c8000 [ 243.842962][ T7888] which belongs to the cache kmalloc-8k of size 8192 [ 243.857017][ T7888] The buggy address is located 1856 bytes inside of [ 243.857017][ T7888] freed 8192-byte region [ffff88806c9c8000, ffff88806c9ca000) [ 243.870990][ T7888] [ 243.873314][ T7888] The buggy address belongs to the physical page: [ 243.879738][ T7888] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6c9c8 [ 243.888514][ T7888] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 243.897017][ T7888] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 243.904576][ T7888] page_type: f5(slab) [ 243.908561][ T7888] raw: 00fff00000000040 ffff88801a442280 ffffea0001ec4600 dead000000000004 [ 243.917146][ T7888] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 243.925732][ T7888] head: 00fff00000000040 ffff88801a442280 ffffea0001ec4600 dead000000000004 [ 243.934408][ T7888] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 243.943086][ T7888] head: 00fff00000000003 ffffea0001b27201 00000000ffffffff 00000000ffffffff [ 243.951762][ T7888] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 243.960467][ T7888] page dumped because: kasan: bad access detected [ 243.966893][ T7888] page_owner tracks the page as allocated [ 243.972625][ T7888] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6056, tgid 6026 (syz.3.18), ts 105277660149, free_ts 90726256563 [ 243.994439][ T7888] post_alloc_hook+0x240/0x2a0 [ 243.999228][ T7888] get_page_from_freelist+0x21e4/0x22c0 [ 244.004783][ T7888] __alloc_frozen_pages_noprof+0x181/0x370 [ 244.010594][ T7888] alloc_pages_mpol+0x232/0x4a0 [ 244.015458][ T7888] allocate_slab+0x8a/0x370 [ 244.019966][ T7888] ___slab_alloc+0xbeb/0x1420 [ 244.024748][ T7888] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 244.031282][ T7888] kmalloc_reserve+0x136/0x290 [ 244.036056][ T7888] __alloc_skb+0x142/0x2d0 [ 244.040481][ T7888] skb_copy+0x188/0x800 [ 244.044651][ T7888] sctp_make_reassembled_event+0x58e/0x970 [ 244.050469][ T7888] sctp_ulpq_tail_data+0xacb/0xed0 [ 244.055592][ T7888] sctp_do_sm+0x1a0e/0x5a20 [ 244.060109][ T7888] sctp_assoc_bh_rcv+0x3f2/0x630 [ 244.065055][ T7888] sctp_backlog_rcv+0x167/0x3f0 [ 244.069923][ T7888] __release_sock+0x24c/0x350 [ 244.074610][ T7888] page last free pid 5853 tgid 5853 stack trace: [ 244.080935][ T7888] free_unref_folios+0xdbd/0x1520 [ 244.085974][ T7888] folios_put_refs+0x559/0x640 [ 244.090747][ T7888] free_pages_and_swap_cache+0x277/0x520 [ 244.096393][ T7888] tlb_flush_mmu+0x3a0/0x680 [ 244.101000][ T7888] tlb_finish_mmu+0xc3/0x1d0 [ 244.105600][ T7888] vms_clear_ptes+0x42c/0x540 [ 244.110306][ T7888] vms_complete_munmap_vmas+0x206/0x8a0 [ 244.115865][ T7888] do_vmi_align_munmap+0x358/0x420 [ 244.120995][ T7888] do_vmi_munmap+0x253/0x2e0 [ 244.125605][ T7888] __vm_munmap+0x23b/0x3d0 [ 244.130058][ T7888] __x64_sys_munmap+0x60/0x70 [ 244.134925][ T7888] do_syscall_64+0xfa/0x3b0 [ 244.139450][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.145364][ T7888] [ 244.147698][ T7888] Memory state around the buggy address: [ 244.154221][ T7888] ffff88806c9c8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.162310][ T7888] ffff88806c9c8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.170380][ T7888] >ffff88806c9c8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.178442][ T7888] ^ [ 244.184598][ T7888] ffff88806c9c8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.192665][ T7888] ffff88806c9c8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.200725][ T7888] ================================================================== [ 244.212261][ T7888] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 244.219489][ T7888] CPU: 0 UID: 0 PID: 7888 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 244.228438][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.238521][ T7888] Call Trace: [ 244.241820][ T7888] [ 244.244817][ T7888] dump_stack_lvl+0x99/0x250 [ 244.249439][ T7888] ? __asan_memcpy+0x40/0x70 [ 244.254062][ T7888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.259321][ T7888] ? __pfx__printk+0x10/0x10 [ 244.263949][ T7888] vpanic+0x281/0x750 [ 244.267952][ T7888] ? preempt_schedule+0xae/0xc0 [ 244.272821][ T7888] ? __pfx_vpanic+0x10/0x10 [ 244.277345][ T7888] ? preempt_schedule_common+0x83/0xd0 [ 244.282826][ T7888] ? preempt_schedule+0xae/0xc0 [ 244.287704][ T7888] ? __pfx_preempt_schedule+0x10/0x10 [ 244.293088][ T7888] panic+0xb9/0xc0 [ 244.296833][ T7888] ? __pfx_panic+0x10/0x10 [ 244.301272][ T7888] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 244.307184][ T7888] ? v4l2_fh_open+0xc7/0x430 [ 244.311785][ T7888] check_panic_on_warn+0x89/0xb0 [ 244.316742][ T7888] ? v4l2_fh_open+0xc7/0x430 [ 244.321340][ T7888] end_report+0x78/0x160 [ 244.325597][ T7888] kasan_report+0x129/0x150 [ 244.330321][ T7888] ? v4l2_fh_open+0xc7/0x430 [ 244.334959][ T7888] v4l2_fh_open+0xc7/0x430 [ 244.339407][ T7888] em28xx_v4l2_open+0x157/0x9a0 [ 244.344285][ T7888] v4l2_open+0x20f/0x360 [ 244.348545][ T7888] chrdev_open+0x4c9/0x5e0 [ 244.352967][ T7888] ? __pfx_chrdev_open+0x10/0x10 [ 244.357926][ T7888] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 244.364287][ T7888] ? __pfx_chrdev_open+0x10/0x10 [ 244.369237][ T7888] do_dentry_open+0x950/0x13f0 [ 244.374038][ T7888] vfs_open+0x3b/0x340 [ 244.378133][ T7888] ? path_openat+0x2ecd/0x3830 [ 244.382919][ T7888] path_openat+0x2ee5/0x3830 [ 244.387527][ T7888] ? arch_stack_walk+0xfc/0x150 [ 244.392408][ T7888] ? stack_depot_save_flags+0x40/0x860 [ 244.397920][ T7888] ? __pfx_path_openat+0x10/0x10 [ 244.402884][ T7888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.408999][ T7888] do_filp_open+0x1fa/0x410 [ 244.413532][ T7888] ? __lock_acquire+0xab9/0xd20 [ 244.418434][ T7888] ? __pfx_do_filp_open+0x10/0x10 [ 244.423498][ T7888] ? _raw_spin_unlock+0x28/0x50 [ 244.428369][ T7888] ? alloc_fd+0x64c/0x6c0 [ 244.432731][ T7888] do_sys_openat2+0x121/0x1c0 [ 244.437442][ T7888] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.442666][ T7888] ? exc_page_fault+0x76/0xf0 [ 244.447358][ T7888] ? do_user_addr_fault+0xc8a/0x1390 [ 244.452657][ T7888] __x64_sys_openat+0x138/0x170 [ 244.457527][ T7888] do_syscall_64+0xfa/0x3b0 [ 244.462048][ T7888] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.467260][ T7888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.473337][ T7888] ? clear_bhb_loop+0x60/0xb0 [ 244.478021][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.483926][ T7888] RIP: 0033:0x7f5ebb5dd407 [ 244.488364][ T7888] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 244.507989][ T7888] RSP: 002b:00007fff606d7d40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 244.516431][ T7888] RAX: ffffffffffffffda RBX: 00007f5ebb551880 RCX: 00007f5ebb5dd407 [ 244.524507][ T7888] RDX: 0000000000000000 RSI: 00007fff606d9f1b RDI: ffffffffffffff9c [ 244.532488][ T7888] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 244.540475][ T7888] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 244.548469][ T7888] R13: 00007fff606d7f90 R14: 00007f5ebb836000 R15: 000056436d3db4d8 [ 244.556474][ T7888] [ 244.559706][ T7888] Kernel Offset: disabled [ 244.564044][ T7888] Rebooting in 86400 seconds..