last executing test programs: 54.834843316s ago: executing program 2 (id=411): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60100098}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20000041) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="3a6858a3229c11033c4d9f0ab09e4fd5de8ce0a9863cbc21f2ef3218de002bd48f3eb2ebde0e1618cae70903eea55ab28dc4025f3da7d3006f04312299"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000000123370d0000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500"], 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x68}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getpriority(0x2, 0x0) 52.446045936s ago: executing program 2 (id=419): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x51, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r6) sendmmsg$inet(r3, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)}}], 0x1, 0xf00) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 47.964536797s ago: executing program 2 (id=426): r0 = syz_io_uring_setup(0x7df, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd74) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 47.266884739s ago: executing program 2 (id=427): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r3, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 46.771511117s ago: executing program 3 (id=429): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 43.905540457s ago: executing program 0 (id=435): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 43.105966869s ago: executing program 4 (id=439): r0 = syz_io_uring_setup(0x7df, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd74) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 42.989985023s ago: executing program 2 (id=440): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@multiplanar_fd={0x7, 0x1, 0x4, 0x20, 0x800, {0x77359400}, {0x4, 0x0, 0x5, 0x3, 0x14, 0x6, "bc60c7f6"}, 0x1ad, 0x4, {0x0}, 0x4}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000002c0)={0x48}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000", @ANYRES32=r6, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 42.906948475s ago: executing program 0 (id=441): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r3, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 42.870420025s ago: executing program 4 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3}, 0x80000000}], 0x1, 0xa0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB], 0x84}}, 0x20000000) 42.444500862s ago: executing program 3 (id=443): r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x5423, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x21, &(0x7f0000000100)={0x0, 0x3, 0x0, {[0x87]}}, 0x0, 0x8, &(0x7f0000000600)) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000360000008900000000000000180000000000000029000000360000002e0000000000000024000000000000002900000032000000fc0200"/80, @ANYRES32=0x0, @ANYRESHEX=r3], 0x58}}], 0x2, 0x20001c00) 42.444054483s ago: executing program 4 (id=444): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) socket$inet6(0xa, 0x6, 0x8000003) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x29b1, &(0x7f0000000480)={0x0, 0x46ed, 0x10000, 0x0, 0x98, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x100, 0x5, 0x2, 0x800, 0x1, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", "000000ff0000000000000020", "0000000000000000001000"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x9, 0x0, r1, &(0x7f0000000500), &(0x7f0000000380)='./file0\x00', 0x80, 0x2000}) ioprio_set$uid(0x3, 0x0, 0x2004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) poll(&(0x7f00000001c0), 0x0, 0x1) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$kcm(r8, 0x0, 0x2404c011) close(0xffffffffffffffff) gettid() 40.538628033s ago: executing program 2 (id=445): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r3, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 40.285272142s ago: executing program 4 (id=446): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@multiplanar_fd={0x7, 0x1, 0x4, 0x20, 0x800, {0x77359400}, {0x4, 0x0, 0x5, 0x3, 0x14, 0x6, "bc60c7f6"}, 0x1ad, 0x4, {0x0}, 0x4}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000002c0)={0x48}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f000700", @ANYRES32=r6, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 39.481100942s ago: executing program 1 (id=447): pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181004000000000a1ffffff0000000e000a000d00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000044) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)={0x0, 0x0, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="040f"]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x0, 0x3, 0x1000}, @TCA_CODEL_TARGET={0xfffffffffffffff7, 0x1, 0x8001}]}}]}, 0x44}}, 0x40040) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef9, 0x0, 0x0, 0x884], [0x1000000], [0xfb]], '\x00', [{0x8001}, {0x0, 0x100}, {}, {0x0, 0x1, 0x0, 0x1}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}}, 0x0) 38.842151632s ago: executing program 0 (id=448): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 38.203689175s ago: executing program 3 (id=449): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r2, @ANYBLOB="08002600ad16000008002700030000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 38.081190986s ago: executing program 0 (id=450): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pipe2$9p(&(0x7f0000000240), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d974050100000000", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x44001}, 0x4000) 37.871599644s ago: executing program 3 (id=451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001040)={@link_local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x30, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}, 0x0) 36.337825729s ago: executing program 0 (id=452): r0 = syz_io_uring_setup(0x7df, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd74) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 36.262478732s ago: executing program 3 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3}, 0x80000000}], 0x1, 0xa0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB], 0x84}}, 0x20000000) 35.063731681s ago: executing program 1 (id=454): r0 = syz_io_uring_setup(0x7df, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd74) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 28.46067355s ago: executing program 4 (id=455): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@multiplanar_fd={0x7, 0x1, 0x4, 0x20, 0x800, {0x77359400}, {0x4, 0x0, 0x5, 0x3, 0x14, 0x6, "bc60c7f6"}, 0x1ad, 0x4, {0x0}, 0x4}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000002c0)={0x48}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 24.870458821s ago: executing program 32 (id=445): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r3, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 24.870140397s ago: executing program 1 (id=457): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x51, 0x0, r3}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r4) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)}}], 0x1, 0xf00) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 24.869540666s ago: executing program 3 (id=458): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) socket$inet6(0xa, 0x6, 0x8000003) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x29b1, &(0x7f0000000480)={0x0, 0x46ed, 0x10000, 0x0, 0x98, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x100, 0x5, 0x2, 0x800, 0x1, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", "000000ff0000000000000020", "0000000000000000001000"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000000)={0x9, 0xd6, 0x7fffffff, 0x9, 0xace8, 0x344f, "85ec21e1382c329131320f813d6d7ab7", 0x6, 0x7, 0x2, 0x5, 0x80, 0x2, 0x4}) syz_io_uring_submit(r3, r4, 0x0) ioprio_set$uid(0x3, 0x0, 0x2004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) poll(&(0x7f00000001c0), 0x0, 0x1) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$kcm(r8, 0x0, 0x2404c011) close(0xffffffffffffffff) gettid() 24.834979349s ago: executing program 0 (id=466): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 20.239889605s ago: executing program 4 (id=459): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@multiplanar_fd={0x7, 0x1, 0x4, 0x20, 0x800, {0x77359400}, {0x4, 0x0, 0x5, 0x3, 0x14, 0x6, "bc60c7f6"}, 0x1ad, 0x4, {0x0}, 0x4}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000002c0)={0x48}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvtap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0) 19.757026926s ago: executing program 1 (id=460): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 14.290804472s ago: executing program 1 (id=461): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x51, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r6) sendmmsg$inet(r3, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)}}], 0x1, 0xf00) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 8.940091773s ago: executing program 33 (id=466): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 8.466620546s ago: executing program 34 (id=458): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) socket$inet6(0xa, 0x6, 0x8000003) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x29b1, &(0x7f0000000480)={0x0, 0x46ed, 0x10000, 0x0, 0x98, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x100, 0x5, 0x2, 0x800, 0x1, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", "000000ff0000000000000020", "0000000000000000001000"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000000)={0x9, 0xd6, 0x7fffffff, 0x9, 0xace8, 0x344f, "85ec21e1382c329131320f813d6d7ab7", 0x6, 0x7, 0x2, 0x5, 0x80, 0x2, 0x4}) syz_io_uring_submit(r3, r4, 0x0) ioprio_set$uid(0x3, 0x0, 0x2004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) poll(&(0x7f00000001c0), 0x0, 0x1) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$kcm(r8, 0x0, 0x2404c011) close(0xffffffffffffffff) gettid() 4.413621665s ago: executing program 35 (id=459): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@multiplanar_fd={0x7, 0x1, 0x4, 0x20, 0x800, {0x77359400}, {0x4, 0x0, 0x5, 0x3, 0x14, 0x6, "bc60c7f6"}, 0x1ad, 0x4, {0x0}, 0x4}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000002c0)={0x48}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvtap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0) 0s ago: executing program 1 (id=465): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) syz_io_uring_setup(0x466c, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000001340), &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="c8010000100033060000000000000000ffffffff000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000032000000fe880000000000000000000000000001000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d001400726d64313630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000802000000000000e863654b40a7ad42118bc1dd69d07e3b05cf0dbc9a9aac6130f0d060cb0c958c133115ff9cbb79de1007f5583249a62fe4273013ec2c2cca44c3a2d388d9483ca3000000989c38df9b4658e85d82db8c937a4a92f1d66d12613940d63d661615cb5a4f49b51d4c39fc6e19ffaa2493066188760aed74057011de74a0f99317e7caabc368f5b782bc1c766840b774bc21a001515aaec711914a75f7d27e213ddde3bfd379"], 0x1c8}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x1335f0a6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) kernel console output (not intermixed with test programs): set; falling back to MIDI 1.0 [ 101.666878][ T5937] usb 5-1: invalid MIDI out EP 0 [ 101.704727][ T54] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.891352][ T5895] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.029204][ T54] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 102.044708][ T54] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.129608][ T5937] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 102.139286][ T54] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.280743][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.311003][ T54] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.330909][ T5895] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 102.384536][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.438230][ T5895] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.564363][ T5895] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.638814][ T5895] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.652403][ T54] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.671796][ T54] usb 1-1: invalid MIDI out EP 0 [ 102.676856][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.992744][ T54] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 103.023404][ T5895] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.058178][ T5895] usb 2-1: invalid MIDI out EP 0 [ 103.173799][ T5895] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 103.374861][ T5968] delete_channel: no stack [ 103.622325][ T5895] usb 2-1: USB disconnect, device number 3 [ 103.645804][ T54] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.720703][ T5956] delete_channel: no stack [ 103.754453][ T5914] usb 5-1: USB disconnect, device number 3 [ 103.828935][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.918975][ T54] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 103.933747][ T54] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 103.970543][ T54] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.984514][ T54] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.993912][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.163074][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.340281][ T54] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.349649][ T54] usb 3-1: invalid MIDI out EP 0 [ 104.423152][ T5982] netlink: 'syz.3.19': attribute type 10 has an invalid length. [ 104.508647][ T5982] __nla_validate_parse: 2 callbacks suppressed [ 104.508668][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19'. [ 104.597554][ T5976] delete_channel: no stack [ 104.626592][ T54] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 104.676130][ T5895] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.684075][ T54] usb 3-1: USB disconnect, device number 3 [ 104.889196][ T5895] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 104.900841][ T5895] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.917383][ T5895] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.932157][ T5895] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.941809][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.953816][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.991740][ T5895] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.999522][ T5895] usb 5-1: invalid MIDI out EP 0 [ 105.030674][ T5895] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 105.257884][ T5937] usb 1-1: USB disconnect, device number 4 [ 105.381434][ T5895] usb 5-1: USB disconnect, device number 4 [ 105.391590][ T5986] delete_channel: no stack [ 105.955230][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.007311][ T5937] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.196334][ T5937] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.204569][ T5992] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22'. [ 106.213360][ T5992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22'. [ 106.247729][ T5937] usb 1-1: config 0 has no interfaces? [ 106.264525][ T5992] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22'. [ 106.287962][ T5992] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22'. [ 106.310697][ T5937] usb 1-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 106.344999][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.372551][ T5937] usb 1-1: Product: syz [ 106.385217][ T5937] usb 1-1: Manufacturer: syz [ 106.389877][ T5937] usb 1-1: SerialNumber: syz [ 106.510917][ T5937] usb 1-1: config 0 descriptor?? [ 106.709941][ T6005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.25'. [ 106.719576][ T6005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25'. [ 106.731195][ T6005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.25'. [ 106.743947][ T5990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21'. [ 106.754263][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.788552][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 106.815806][ T5990] ipvlan0: entered promiscuous mode [ 106.830517][ T5990] ipvlan0: left promiscuous mode [ 106.864486][ T54] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.890355][ T5912] usb 1-1: USB disconnect, device number 5 [ 106.929972][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 107.040066][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.067626][ T9] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.088665][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.098790][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.121053][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.175756][ T9] usb 4-1: invalid MIDI out EP 0 [ 107.266268][ T9] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 107.384279][ T54] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 107.400002][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.494322][ T54] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.524452][ T5912] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.661507][ T54] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.680691][ T54] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.690345][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.757707][ T54] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.792942][ T54] usb 2-1: invalid MIDI out EP 0 [ 107.814515][ T5912] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 107.844965][ T5912] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.874536][ T5912] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.893948][ T5912] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.941505][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.969510][ T6002] delete_channel: no stack [ 107.987253][ T54] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 108.199507][ T54] usb 2-1: USB disconnect, device number 4 [ 108.354208][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 108.369363][ T5912] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.373950][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.446451][ T6009] delete_channel: no stack [ 108.494842][ T5912] usb 5-1: invalid MIDI out EP 0 [ 108.742531][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 109.017505][ T5912] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 109.217556][ T5912] usb 5-1: USB disconnect, device number 5 [ 109.251252][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.495265][ T54] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.990997][ T5912] usb 4-1: USB disconnect, device number 3 [ 110.007848][ T5995] delete_channel: no stack [ 110.248852][ T54] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 110.263644][ T54] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.297905][ T54] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.335611][ T54] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.360316][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.448278][ T54] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.470982][ T54] usb 3-1: invalid MIDI out EP 0 [ 110.682878][ T6022] delete_channel: no stack [ 110.708518][ T54] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 110.842352][ T54] usb 3-1: USB disconnect, device number 4 [ 110.961844][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.634961][ T5912] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.834534][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 111.892676][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.905126][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 111.951300][ T9] usb 1-1: can't read configurations, error -71 [ 111.972836][ T6030] __nla_validate_parse: 3 callbacks suppressed [ 111.972855][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 112.087444][ T6036] netlink: 'syz.4.34': attribute type 10 has an invalid length. [ 112.300338][ T6036] netlink: 40 bytes leftover after parsing attributes in process `syz.4.34'. [ 112.374263][ T54] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.640573][ T54] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 112.654609][ T54] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.666386][ T54] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.680605][ T54] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.689801][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.714595][ T54] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.722317][ T54] usb 4-1: invalid MIDI out EP 0 [ 112.758501][ T54] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 112.953560][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.075652][ T6038] delete_channel: no stack [ 113.080645][ T5894] usb 4-1: USB disconnect, device number 4 [ 113.173497][ T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 113.189366][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.238109][ T9] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.260953][ T6036] team0: Port device geneve0 added [ 113.292728][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.316619][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.342763][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.418333][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.429177][ T9] usb 1-1: invalid MIDI out EP 0 [ 113.556952][ T6045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.37'. [ 113.569431][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 113.643109][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.37'. [ 113.663238][ T9] usb 1-1: USB disconnect, device number 7 [ 113.682600][ T6045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.37'. [ 113.711668][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.754430][ T6045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.37'. [ 114.319363][ T5912] usb 2-1: unable to get BOS descriptor or descriptor too short [ 114.599039][ T6051] netlink: 44 bytes leftover after parsing attributes in process `syz.1.40'. [ 114.634348][ T5912] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 114.642823][ T6051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.40'. [ 114.676746][ T6051] netlink: 44 bytes leftover after parsing attributes in process `syz.1.40'. [ 114.676762][ T5912] usb 2-1: can't read configurations, error -71 [ 114.845074][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.005854][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.017040][ T10] usb 5-1: config 0 has no interfaces? [ 115.407337][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 115.447708][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.479132][ T10] usb 5-1: Product: syz [ 115.483488][ T10] usb 5-1: Manufacturer: syz [ 115.544652][ T10] usb 5-1: SerialNumber: syz [ 115.565361][ T10] usb 5-1: config 0 descriptor?? [ 115.699114][ T5894] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.791902][ T6047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.39'. [ 115.850648][ T6047] ipvlan0: entered promiscuous mode [ 115.857023][ T6047] ipvlan0: left promiscuous mode [ 115.879854][ T5894] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 115.910768][ T5894] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.939032][ T5894] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.959080][ T5894] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.978090][ T54] usb 5-1: USB disconnect, device number 6 [ 116.013152][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.046490][ T5894] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.055612][ T5894] usb 1-1: invalid MIDI out EP 0 [ 116.132894][ T5894] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 116.154367][ T5912] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.196769][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.369961][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 117.480740][ T6085] netlink: 'syz.2.49': attribute type 10 has an invalid length. [ 117.531256][ T6085] __nla_validate_parse: 7 callbacks suppressed [ 117.531278][ T6085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.49'. [ 117.699937][ T6085] team0: Port device geneve0 added [ 117.758742][ T6087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.51'. [ 118.835250][ T5912] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.845043][ T5912] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 118.853177][ T5912] usb 4-1: can't read configurations, error -71 [ 118.910008][ T54] usb 1-1: USB disconnect, device number 8 [ 118.971553][ T6061] delete_channel: no stack [ 119.335122][ T5912] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.417554][ T6112] netlink: 36 bytes leftover after parsing attributes in process `syz.0.60'. [ 119.434273][ T5897] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.445130][ T6112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.60'. [ 119.466202][ T5894] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.470079][ T6112] netlink: 36 bytes leftover after parsing attributes in process `syz.0.60'. [ 119.535349][ T6112] netlink: 36 bytes leftover after parsing attributes in process `syz.0.60'. [ 119.581984][ T5912] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 119.641651][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.663450][ T5912] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.692781][ T5894] usb 2-1: config 0 has no interfaces? [ 119.714683][ T5894] usb 2-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 119.742119][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.754886][ T5897] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 119.766372][ T5894] usb 2-1: Product: syz [ 119.770568][ T5894] usb 2-1: Manufacturer: syz [ 119.813415][ T5912] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.828773][ T5894] usb 2-1: SerialNumber: syz [ 119.879749][ T5894] usb 2-1: config 0 descriptor?? [ 119.927725][ T5897] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.078600][ T5912] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.094195][ T5897] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.130770][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.59'. [ 120.139780][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.157878][ T5897] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.168397][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.192458][ T5912] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.221715][ T6119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.63'. [ 120.231726][ T5912] usb 4-1: invalid MIDI out EP 0 [ 120.267767][ T6110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.59'. [ 120.298935][ T6110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.59'. [ 120.324600][ T5897] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.332840][ T5912] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 120.360010][ T5897] usb 3-1: invalid MIDI out EP 0 [ 120.563308][ T6110] ipvlan0: entered promiscuous mode [ 120.650019][ T6110] ipvlan0: left promiscuous mode [ 120.709612][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.970996][ T10] usb 2-1: USB disconnect, device number 7 [ 120.998142][ T5897] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 121.533811][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.776000][ T6140] netlink: 'syz.4.68': attribute type 10 has an invalid length. [ 122.630503][ T5895] usb 3-1: USB disconnect, device number 5 [ 122.644306][ T6107] delete_channel: no stack [ 122.834276][ T5894] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.044496][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 123.150936][ T5897] usb 4-1: USB disconnect, device number 6 [ 123.163781][ T6105] delete_channel: no stack [ 123.182640][ T6147] __nla_validate_parse: 1 callbacks suppressed [ 123.182659][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 123.280609][ T6156] netlink: 44 bytes leftover after parsing attributes in process `syz.4.72'. [ 123.336645][ T6156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.72'. [ 123.345898][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.365794][ T6156] netlink: 44 bytes leftover after parsing attributes in process `syz.4.72'. [ 123.704035][ T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 123.761069][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.812015][ T10] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.894000][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 124.015674][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.195886][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.228437][ T10] usb 3-1: invalid MIDI out EP 0 [ 124.280914][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.78'. [ 124.479304][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 124.836902][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.979365][ T6177] netlink: 'syz.3.81': attribute type 10 has an invalid length. [ 125.034265][ T6177] netlink: 40 bytes leftover after parsing attributes in process `syz.3.81'. [ 125.114295][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 125.371376][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 125.463158][ T9] usb 1-1: config 0 has no interfaces? [ 125.493956][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 125.512257][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.567063][ T9] usb 1-1: Product: syz [ 125.575493][ T9] usb 1-1: Manufacturer: syz [ 125.585136][ T9] usb 1-1: SerialNumber: syz [ 125.608405][ T9] usb 1-1: config 0 descriptor?? [ 125.845946][ T6176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.80'. [ 125.856195][ T6176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.80'. [ 126.002494][ T6176] ipvlan0: entered promiscuous mode [ 126.040161][ T6176] ipvlan0: left promiscuous mode [ 126.132091][ T10] usb 1-1: USB disconnect, device number 9 [ 126.171199][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.222935][ T5897] usb 3-1: USB disconnect, device number 6 [ 126.222968][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 126.272705][ T6152] delete_channel: no stack [ 126.279960][ T5894] usb 2-1: can't read configurations, error -71 [ 126.713220][ T6200] netlink: 44 bytes leftover after parsing attributes in process `syz.4.88'. [ 126.748529][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.88'. [ 127.527345][ T6214] netlink: 'syz.0.94': attribute type 10 has an invalid length. [ 127.818631][ T6214] team0: Port device geneve0 added [ 127.920791][ T6219] fuse: Bad value for 'fd' [ 128.204292][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 128.714799][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 128.754564][ T5896] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.788532][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.824731][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.882039][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.900192][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.928418][ T10] usb 5-1: Product: syz [ 129.039114][ T10] usb 5-1: Manufacturer: syz [ 129.043787][ T10] usb 5-1: SerialNumber: syz [ 129.347375][ T5896] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 129.366013][ T5896] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.383363][ T5896] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.475872][ T5896] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.488656][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.599879][ T10] usb 5-1: 0:2 : does not exist [ 129.643608][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 129.722126][ T5896] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.729328][ T5937] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.759289][ T5896] usb 4-1: invalid MIDI out EP 0 [ 129.765371][ T10] usb 5-1: USB disconnect, device number 7 [ 129.870361][ T5896] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 129.890379][ T5937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.921298][ T5937] usb 3-1: config 0 has no interfaces? [ 129.959295][ T5937] usb 3-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 129.989291][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.006874][ T5937] usb 3-1: Product: syz [ 130.031459][ T5937] usb 3-1: Manufacturer: syz [ 130.047046][ T5937] usb 3-1: SerialNumber: syz [ 130.062403][ T5937] usb 3-1: config 0 descriptor?? [ 130.115687][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.120890][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 130.286209][ T6237] __nla_validate_parse: 5 callbacks suppressed [ 130.286224][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.102'. [ 130.311713][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.102'. [ 130.373663][ T6237] ipvlan0: entered promiscuous mode [ 130.540703][ T6237] ipvlan0: left promiscuous mode [ 130.642964][ T5937] usb 3-1: USB disconnect, device number 7 [ 131.234488][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 131.384569][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 131.523327][ T6258] netlink: 'syz.2.109': attribute type 10 has an invalid length. [ 131.589139][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 131.645095][ T6258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.109'. [ 131.805389][ T10] usb 4-1: USB disconnect, device number 7 [ 131.833956][ T6224] delete_channel: no stack [ 132.226260][ T6268] netlink: 36 bytes leftover after parsing attributes in process `syz.1.111'. [ 132.235417][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.111'. [ 132.286865][ T6268] netlink: 36 bytes leftover after parsing attributes in process `syz.1.111'. [ 132.619223][ T6272] fuse: Bad value for 'fd' [ 132.798901][ T6274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.115'. [ 132.821820][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 132.909601][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.914406][ T5896] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 132.917325][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.104558][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 133.112694][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.138855][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.236299][ T5896] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.253005][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.261843][ T5896] usb 4-1: Product: syz [ 133.267528][ T5896] usb 4-1: Manufacturer: syz [ 133.272186][ T5896] usb 4-1: SerialNumber: syz [ 133.738266][ T5896] usb 4-1: 0:2 : does not exist [ 133.755007][ T5896] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 133.923951][ T5896] usb 4-1: USB disconnect, device number 8 [ 134.142648][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 134.205019][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 134.226611][ T9] usb 5-1: can't read configurations, error -71 [ 134.270876][ T5897] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 134.285467][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.654012][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 134.677055][ T5897] usb 2-1: config 0 has no interfaces? [ 134.695749][ T5897] usb 2-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 134.744709][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.849545][ T5897] usb 2-1: Product: syz [ 134.884179][ T5897] usb 2-1: Manufacturer: syz [ 134.884738][ T5896] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 134.909200][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 135.030951][ T5897] usb 2-1: SerialNumber: syz [ 135.082823][ T5897] usb 2-1: config 0 descriptor?? [ 135.114578][ T5896] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 135.143253][ T5896] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.159014][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 135.189885][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.211187][ T5896] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.253360][ T9] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.285228][ T5896] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.313960][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'. [ 135.322911][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'. [ 135.336539][ T6286] ipvlan0: entered promiscuous mode [ 135.342629][ T6286] ipvlan0: left promiscuous mode [ 135.394403][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.418580][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.446323][ T5897] usb 2-1: USB disconnect, device number 10 [ 135.446532][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.480612][ T5896] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.490732][ T5896] usb 1-1: invalid MIDI out EP 0 [ 135.581898][ T5896] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 135.591508][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.603567][ T9] usb 5-1: invalid MIDI out EP 0 [ 135.765987][ T6295] delete_channel: no stack [ 135.834376][ T5896] usb 1-1: USB disconnect, device number 10 [ 136.055775][ T6306] delete_channel: no stack [ 136.141966][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.224573][ T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 136.288927][ T6308] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 136.298763][ T6308] netlink: 40 bytes leftover after parsing attributes in process `syz.3.127'. [ 136.323487][ T9] usb 5-1: USB disconnect, device number 9 [ 136.663842][ T6317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.129'. [ 136.695473][ T6315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.128'. [ 136.726792][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'. [ 136.743213][ T6315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.128'. [ 136.809499][ T6315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.128'. [ 136.905887][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.475615][ T6326] syz_tun: entered allmulticast mode [ 137.546763][ T6325] syz_tun: left allmulticast mode [ 137.764302][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.024763][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 138.157715][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 138.694264][ T5912] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 138.804319][ T5897] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 138.889928][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.905179][ T5912] usb 3-1: config 0 has no interfaces? [ 138.920089][ T5912] usb 3-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 138.942067][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.977582][ T5912] usb 3-1: Product: syz [ 138.998830][ T5912] usb 3-1: Manufacturer: syz [ 139.025287][ T6351] netlink: 'syz.4.140': attribute type 10 has an invalid length. [ 139.033166][ T6351] netlink: 40 bytes leftover after parsing attributes in process `syz.4.140'. [ 139.042131][ T5912] usb 3-1: SerialNumber: syz [ 139.067630][ T5897] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 139.082870][ T5897] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.103883][ T5912] usb 3-1: config 0 descriptor?? [ 139.127709][ T5897] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.168400][ T5897] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.308389][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.521152][ T6344] ipvlan0: entered promiscuous mode [ 139.527630][ T6344] ipvlan0: left promiscuous mode [ 139.781706][ T5897] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.802387][ T5897] usb 1-1: invalid MIDI out EP 0 [ 139.821576][ T5895] usb 3-1: USB disconnect, device number 8 [ 140.271499][ T6347] delete_channel: no stack [ 140.302677][ T5897] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 140.320703][ T5897] usb 1-1: USB disconnect, device number 11 [ 140.593135][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 140.612178][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 140.623711][ T9] usb 2-1: can't read configurations, error -71 [ 140.627478][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.343222][ T6375] __nla_validate_parse: 7 callbacks suppressed [ 141.343238][ T6375] netlink: 36 bytes leftover after parsing attributes in process `syz.4.149'. [ 141.428423][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.149'. [ 141.484565][ T6375] netlink: 36 bytes leftover after parsing attributes in process `syz.4.149'. [ 141.504289][ T6375] netlink: 36 bytes leftover after parsing attributes in process `syz.4.149'. [ 142.402889][ T6389] netlink: 'syz.2.152': attribute type 10 has an invalid length. [ 142.602616][ T6389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.152'. [ 143.030774][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 143.044433][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.153'. [ 143.484297][ T5912] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 143.688225][ T5912] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.697425][ T5912] usb 5-1: config 0 has no interfaces? [ 143.699542][ T6404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.157'. [ 143.706432][ T5912] usb 5-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 143.743299][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.157'. [ 143.752688][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.767362][ T5912] usb 5-1: Product: syz [ 143.767652][ T6404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.157'. [ 143.775771][ T5912] usb 5-1: Manufacturer: syz [ 143.812200][ T5912] usb 5-1: SerialNumber: syz [ 143.833470][ T5912] usb 5-1: config 0 descriptor?? [ 144.254971][ T6413] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 144.414532][ T6395] ipvlan0: entered promiscuous mode [ 144.421436][ T6395] ipvlan0: left promiscuous mode [ 145.154244][ T5894] usb 5-1: USB disconnect, device number 10 [ 145.683043][ T6427] dummy0: entered promiscuous mode [ 145.704592][ T6427] macsec1: entered promiscuous mode [ 145.894387][ T6427] macsec1: entered allmulticast mode [ 145.899743][ T6427] dummy0: entered allmulticast mode [ 146.030487][ T6424] delete_channel: no stack [ 146.087482][ T5912] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 146.272358][ T5912] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 146.288185][ T5912] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.299794][ T5912] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.344026][ T5912] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.346793][ T6440] netlink: 'syz.4.168': attribute type 10 has an invalid length. [ 146.353856][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.394527][ T6440] __nla_validate_parse: 9 callbacks suppressed [ 146.394544][ T6440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.168'. [ 146.422536][ T5912] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.446074][ T5912] usb 2-1: invalid MIDI out EP 0 [ 146.833184][ T6451] netlink: 36 bytes leftover after parsing attributes in process `syz.2.171'. [ 146.884309][ T6451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.171'. [ 146.907181][ T6451] netlink: 36 bytes leftover after parsing attributes in process `syz.2.171'. [ 147.037631][ T6433] delete_channel: no stack [ 147.050228][ T5912] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 147.282047][ T6456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.174'. [ 147.322420][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.174'. [ 147.351568][ T6456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.174'. [ 147.390753][ T6456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.174'. [ 147.420290][ T5912] usb 2-1: USB disconnect, device number 13 [ 147.576227][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.815501][ T6463] netlink: 156 bytes leftover after parsing attributes in process `syz.0.186'. [ 147.840358][ T6464] netlink: 164 bytes leftover after parsing attributes in process `syz.4.176'. [ 148.310641][ T54] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 148.473341][ T54] usb 4-1: unable to get BOS descriptor or descriptor too short [ 148.511619][ T54] usb 4-1: config 0 has no interfaces? [ 148.523728][ T54] usb 4-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 148.534291][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.542289][ T54] usb 4-1: Product: syz [ 148.554260][ T54] usb 4-1: Manufacturer: syz [ 148.558998][ T54] usb 4-1: SerialNumber: syz [ 148.566582][ T54] usb 4-1: config 0 descriptor?? [ 148.582547][ T6489] netlink: 'syz.4.184': attribute type 10 has an invalid length. [ 149.235731][ T6491] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 150.013197][ T6493] ipvlan0: entered promiscuous mode [ 150.140319][ T6493] ipvlan0: left promiscuous mode [ 150.413932][ T5894] usb 4-1: USB disconnect, device number 9 [ 151.328148][ T6517] dummy0: entered promiscuous mode [ 151.333420][ T6517] macsec1: entered promiscuous mode [ 151.400174][ T6517] macsec1: entered allmulticast mode [ 151.427950][ T6517] dummy0: entered allmulticast mode [ 151.494303][ T54] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 151.654413][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 151.670725][ T54] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.693169][ T54] usb 4-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 151.707683][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.728193][ T54] usb 4-1: Product: syz [ 151.737566][ T54] usb 4-1: Manufacturer: syz [ 151.750729][ T54] usb 4-1: SerialNumber: syz [ 151.766445][ T54] usb 4-1: config 0 descriptor?? [ 151.820881][ T54] usb 4-1: bad CDC descriptors [ 152.027685][ T6514] delete_channel: no stack [ 152.051015][ T30] audit: type=1326 audit(1744901993.239:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7fc00000 [ 152.087437][ T9] usb 4-1: USB disconnect, device number 10 [ 152.170781][ T30] audit: type=1326 audit(1744901993.239:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f55579 code=0x7fc00000 [ 152.272435][ T30] audit: type=1326 audit(1744901993.239:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7fc00000 [ 152.308607][ T6529] __nla_validate_parse: 15 callbacks suppressed [ 152.308630][ T6529] netlink: 36 bytes leftover after parsing attributes in process `syz.2.198'. [ 152.334598][ T30] audit: type=1326 audit(1744901993.239:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7fc00000 [ 152.356598][ T6529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.198'. [ 152.377894][ T6529] netlink: 36 bytes leftover after parsing attributes in process `syz.2.198'. [ 152.440378][ T30] audit: type=1326 audit(1744901993.249:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7fc00000 [ 152.462479][ T6529] netlink: 36 bytes leftover after parsing attributes in process `syz.2.198'. [ 152.551748][ T30] audit: type=1326 audit(1744901993.249:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7fc00000 [ 152.618955][ T30] audit: type=1326 audit(1744901993.249:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7fc00000 [ 152.694208][ T30] audit: type=1326 audit(1744901993.249:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7fc00000 [ 152.800592][ T30] audit: type=1326 audit(1744901993.249:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7fc00000 [ 152.839098][ T6536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.211'. [ 152.877271][ T6536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.211'. [ 152.898676][ T30] audit: type=1326 audit(1744901993.249:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7fc00000 [ 152.930335][ T6536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.211'. [ 152.948177][ T6536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.211'. [ 153.446195][ T6554] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 153.814298][ T54] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.056767][ T54] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.067177][ T54] usb 3-1: config 0 has no interfaces? [ 154.075455][ T54] usb 3-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 154.084862][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.104525][ T54] usb 3-1: Product: syz [ 154.425148][ T54] usb 3-1: Manufacturer: syz [ 154.429896][ T54] usb 3-1: SerialNumber: syz [ 154.463231][ T54] usb 3-1: config 0 descriptor?? [ 154.679905][ T6558] netlink: 'syz.1.205': attribute type 10 has an invalid length. [ 154.749241][ T6552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.204'. [ 154.758405][ T6552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.204'. [ 154.955652][ T6558] team0: Port device geneve0 added [ 155.092215][ T6552] ipvlan0: entered promiscuous mode [ 155.115447][ T6552] ipvlan0: left promiscuous mode [ 155.524653][ T9] usb 3-1: USB disconnect, device number 9 [ 156.234266][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 156.408886][ T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 156.422219][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.433828][ T9] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.679986][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.698239][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.737404][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.749116][ T9] usb 1-1: invalid MIDI out EP 0 [ 157.021091][ T6579] delete_channel: no stack [ 157.322591][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 157.393485][ T9] usb 1-1: USB disconnect, device number 12 [ 157.417173][ T6596] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.431933][ T6596] __nla_validate_parse: 2 callbacks suppressed [ 157.431950][ T6596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.216'. [ 157.491218][ T6596] Zero length message leads to an empty skb [ 157.708931][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.188083][ T6589] delete_channel: no stack [ 159.574209][ T5894] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 159.763383][ T5894] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 159.774612][ T5894] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.789167][ T5894] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.827016][ T5894] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.851901][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.880000][ T5894] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 159.895419][ T5894] usb 2-1: invalid MIDI out EP 0 [ 160.038134][ T6624] netlink: 'syz.2.223': attribute type 10 has an invalid length. [ 160.046835][ T6624] netlink: 40 bytes leftover after parsing attributes in process `syz.2.223'. [ 160.100903][ T6614] delete_channel: no stack [ 160.198821][ T5894] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 160.254574][ T5937] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 160.480360][ T5894] usb 2-1: USB disconnect, device number 14 [ 160.582618][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.825636][ T5937] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 160.837823][ T5937] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.861569][ T5937] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.907837][ T5937] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.921881][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.955219][ T5937] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.970988][ T5937] usb 1-1: invalid MIDI out EP 0 [ 161.341662][ T6623] delete_channel: no stack [ 161.474052][ T5937] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 161.562651][ T5937] usb 1-1: USB disconnect, device number 13 [ 161.835838][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.883522][ T6636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.229'. [ 161.904205][ T5895] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.065712][ T5895] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.080783][ T5895] usb 3-1: config 0 has no interfaces? [ 162.114808][ T5895] usb 3-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 162.124211][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.132357][ T5895] usb 3-1: Product: syz [ 162.146805][ T5895] usb 3-1: Manufacturer: syz [ 162.296757][ T5895] usb 3-1: SerialNumber: syz [ 162.340742][ T5895] usb 3-1: config 0 descriptor?? [ 162.561073][ T6633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.227'. [ 162.570172][ T6633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.227'. [ 162.584025][ T6633] ipvlan0: entered promiscuous mode [ 162.593507][ T6633] ipvlan0: left promiscuous mode [ 162.723523][ T5912] usb 3-1: USB disconnect, device number 10 [ 162.985221][ T5895] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 163.144430][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 163.366961][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 163.457231][ T5937] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 163.677440][ T6658] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 164.503309][ T5937] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 164.515917][ T5937] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.632616][ T5937] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.674584][ T5937] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.793357][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.815567][ T5897] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 164.837604][ T5937] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.869495][ T5937] usb 5-1: invalid MIDI out EP 0 [ 164.981183][ T5937] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 165.158901][ T5937] usb 5-1: USB disconnect, device number 11 [ 165.430804][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.444776][ T5897] usb 1-1: config 0 has no interfaces? [ 165.454887][ T5897] usb 1-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 165.466596][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.538324][ T5897] usb 1-1: Product: syz [ 165.586257][ T5897] usb 1-1: Manufacturer: syz [ 165.600988][ T5897] usb 1-1: SerialNumber: syz [ 165.681325][ T5897] usb 1-1: config 0 descriptor?? [ 165.709678][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.006099][ T6669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.247'. [ 166.015174][ T6669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.247'. [ 166.135782][ T6669] ipvlan0: entered promiscuous mode [ 166.149967][ T6669] ipvlan0: left promiscuous mode [ 166.179827][ T6679] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 166.247719][ T6679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.239'. [ 166.263000][ T5894] usb 1-1: USB disconnect, device number 14 [ 167.258117][ T5895] usb 4-1: unable to get BOS descriptor or descriptor too short [ 167.297123][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.241'. [ 167.308096][ T5895] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 167.352454][ T5895] usb 4-1: can't read configurations, error -71 [ 168.020001][ T5897] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 168.084209][ T5912] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 168.373887][ T5897] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 168.409381][ T5912] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 168.589521][ T5897] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.601288][ T5912] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.623307][ T6714] netlink: 44 bytes leftover after parsing attributes in process `syz.3.251'. [ 168.714903][ T5897] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.732786][ T5912] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.797892][ T5897] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.811013][ T5912] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.092531][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.113275][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.285289][ T5897] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.303532][ T5897] usb 3-1: invalid MIDI out EP 0 [ 169.324256][ T5896] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 169.527513][ T6704] delete_channel: no stack [ 169.557668][ T5897] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 169.606794][ T5912] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.621044][ T6700] delete_channel: no stack [ 169.718035][ T5912] usb 5-1: invalid MIDI out EP 0 [ 169.724057][ T5897] usb 3-1: USB disconnect, device number 11 [ 169.887313][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.910222][ T5896] usb 4-1: config 0 has no interfaces? [ 169.929081][ T5896] usb 4-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 169.995763][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.085295][ T5896] usb 4-1: Product: syz [ 170.226015][ T5896] usb 4-1: Manufacturer: syz [ 170.544178][ T5896] usb 4-1: SerialNumber: syz [ 170.556830][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.564996][ T5912] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 170.596467][ T5912] usb 5-1: USB disconnect, device number 12 [ 170.666486][ T5896] usb 4-1: config 0 descriptor?? [ 170.931865][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.252'. [ 170.944301][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.252'. [ 170.980504][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.123120][ T6716] ipvlan0: entered promiscuous mode [ 171.152530][ T6716] ipvlan0: left promiscuous mode [ 171.279182][ T5912] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 171.449158][ T5896] usb 4-1: USB disconnect, device number 13 [ 171.681724][ T5912] usb 2-1: config 0 has no interfaces? [ 171.717862][ T5912] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 171.728637][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.737336][ T5912] usb 2-1: Product: syz [ 172.059879][ T5912] usb 2-1: Manufacturer: syz [ 172.159993][ T6737] netlink: 'syz.4.256': attribute type 10 has an invalid length. [ 172.170067][ T6737] netlink: 40 bytes leftover after parsing attributes in process `syz.4.256'. [ 172.183634][ T5912] usb 2-1: SerialNumber: syz [ 172.200150][ T5912] usb 2-1: config 0 descriptor?? [ 174.627172][ T5897] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 174.807784][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 174.914613][ T5896] usb 2-1: USB disconnect, device number 15 [ 174.961643][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'. [ 175.594186][ T54] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 176.055309][ T54] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 176.141339][ T54] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.444638][ T54] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.482940][ T54] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.593793][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.695515][ T54] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.760641][ T54] usb 4-1: invalid MIDI out EP 0 [ 176.956541][ T6782] delete_channel: no stack [ 176.975852][ T54] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 177.046734][ T54] usb 4-1: USB disconnect, device number 14 [ 177.513274][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.396972][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 178.436593][ T5897] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 178.504288][ T5897] usb 1-1: can't read configurations, error -71 [ 178.669878][ T6785] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 178.702999][ T6785] veth1_macvtap: left promiscuous mode [ 178.749081][ T6785] bridge0: port 3(macsec0) entered blocking state [ 178.760289][ T6785] bridge0: port 3(macsec0) entered disabled state [ 178.796754][ T6785] macsec0: entered allmulticast mode [ 178.812407][ T6785] macsec0: entered promiscuous mode [ 179.144305][ T5897] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 179.228264][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 179.258214][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 179.276302][ T6799] fuse: Bad value for 'fd' [ 179.366805][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.411537][ T5897] usb 1-1: config 0 has no interfaces? [ 179.432162][ T5897] usb 1-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 179.441878][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.454359][ T5897] usb 1-1: Product: syz [ 179.458592][ T5897] usb 1-1: Manufacturer: syz [ 179.463204][ T5897] usb 1-1: SerialNumber: syz [ 179.471673][ T5897] usb 1-1: config 0 descriptor?? [ 179.531709][ T6807] netlink: 'syz.2.276': attribute type 10 has an invalid length. [ 179.539808][ T5895] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 179.550440][ T6807] netlink: 40 bytes leftover after parsing attributes in process `syz.2.276'. [ 179.554193][ T54] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 179.694462][ T6785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.270'. [ 179.704016][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 179.711730][ T5895] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.729101][ T5895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.741569][ T6785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.270'. [ 179.759235][ T6785] ipvlan0: entered promiscuous mode [ 179.765565][ T6785] ipvlan0: left promiscuous mode [ 179.788065][ T5895] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.797304][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 179.802921][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.813256][ T5895] usb 2-1: Product: syz [ 179.813374][ T54] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.831381][ T5895] usb 2-1: Manufacturer: syz [ 179.840100][ T5895] usb 2-1: SerialNumber: syz [ 179.849612][ T5937] usb 1-1: USB disconnect, device number 16 [ 179.855690][ T54] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 179.855719][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.855741][ T54] usb 5-1: Product: syz [ 179.978732][ T54] usb 5-1: Manufacturer: syz [ 179.994522][ T54] usb 5-1: SerialNumber: syz [ 180.005244][ T54] usb 5-1: config 0 descriptor?? [ 180.023628][ T54] usb 5-1: bad CDC descriptors [ 180.185019][ T5895] usb 2-1: 0:2 : does not exist [ 180.197196][ T5895] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 180.278951][ T5895] usb 2-1: USB disconnect, device number 16 [ 180.338207][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.388908][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.428376][ T54] usb 5-1: USB disconnect, device number 13 [ 180.498986][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.543177][ T6812] fuse: Bad value for 'fd' [ 180.794720][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 180.962175][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 180.987599][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.038010][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.056338][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.154552][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.209159][ T9] usb 1-1: Product: syz [ 181.240739][ T9] usb 1-1: Manufacturer: syz [ 181.264654][ T9] usb 1-1: SerialNumber: syz [ 181.709364][ T9] usb 1-1: 0:2 : does not exist [ 181.868891][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 182.144636][ T54] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 182.184564][ T9] usb 1-1: USB disconnect, device number 17 [ 182.882929][ T54] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 182.966061][ T54] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.097884][ T54] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.163967][ T54] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.209786][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.244498][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.444452][ T54] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.452381][ T54] usb 5-1: invalid MIDI out EP 0 [ 183.661099][ T6829] delete_channel: no stack [ 183.715363][ T6847] netlink: 'syz.1.290': attribute type 10 has an invalid length. [ 183.727897][ T6847] veth1_macvtap: left promiscuous mode [ 183.770299][ T6847] bridge0: port 3(macsec0) entered blocking state [ 183.850708][ T54] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 183.941619][ T6847] bridge0: port 3(macsec0) entered disabled state [ 183.973696][ T6847] macsec0: entered allmulticast mode [ 183.982999][ T54] usb 5-1: USB disconnect, device number 14 [ 183.991058][ T6847] macsec0: entered promiscuous mode [ 184.015312][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 184.446663][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 184.457221][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.496233][ T9] usb 2-1: config 0 has no interfaces? [ 184.510318][ T6855] netlink: 'syz.0.291': attribute type 10 has an invalid length. [ 184.518302][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 184.548679][ T6855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.291'. [ 184.560387][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.585046][ T9] usb 2-1: Product: syz [ 184.598161][ T9] usb 2-1: Manufacturer: syz [ 184.608153][ T9] usb 2-1: SerialNumber: syz [ 184.734501][ T54] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 184.858667][ T9] usb 2-1: config 0 descriptor?? [ 185.099933][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'. [ 185.109036][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'. [ 185.251992][ T54] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 185.290359][ T6847] ipvlan0: entered promiscuous mode [ 185.308691][ T54] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.333125][ T6847] ipvlan0: left promiscuous mode [ 185.343561][ T54] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.362310][ T54] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.374410][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.475965][ T54] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.483908][ T54] usb 3-1: invalid MIDI out EP 0 [ 185.589058][ T5896] usb 2-1: USB disconnect, device number 17 [ 185.662469][ T54] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 185.784606][ T5895] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 185.927077][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.976510][ T5895] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 185.992204][ T5895] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.015491][ T5895] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.035162][ T5895] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.045678][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.085014][ T5895] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.098119][ T5895] usb 4-1: invalid MIDI out EP 0 [ 186.100586][ T6854] delete_channel: no stack [ 186.150706][ T5912] usb 3-1: USB disconnect, device number 12 [ 186.477364][ T5895] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 186.670134][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.264216][ T5895] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 188.880000][ T5895] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 188.931738][ T5895] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.977978][ T5895] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.021411][ T5895] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.051993][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.113294][ T5895] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.165502][ T5895] usb 3-1: invalid MIDI out EP 0 [ 189.310214][ T6889] delete_channel: no stack [ 189.358039][ T5895] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 189.382440][ T5895] usb 3-1: USB disconnect, device number 13 [ 189.589568][ T5894] usb 4-1: USB disconnect, device number 15 [ 189.949591][ T6868] delete_channel: no stack [ 189.987610][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.018878][ T6910] netlink: 'syz.4.309': attribute type 10 has an invalid length. [ 190.047231][ T6910] veth1_macvtap: left promiscuous mode [ 190.179770][ T6910] bridge0: port 3(macsec0) entered blocking state [ 190.213505][ T6910] bridge0: port 3(macsec0) entered disabled state [ 190.295046][ T6910] macsec0: entered allmulticast mode [ 190.302028][ T6910] macsec0: entered promiscuous mode [ 190.514304][ T5895] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 190.711046][ T6919] netlink: 'syz.1.308': attribute type 10 has an invalid length. [ 190.719174][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.1.308'. [ 190.755251][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 190.764247][ T5895] usb 5-1: config 0 has no interfaces? [ 190.773714][ T5895] usb 5-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 190.795525][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.806781][ T5895] usb 5-1: Product: syz [ 190.814425][ T5895] usb 5-1: Manufacturer: syz [ 190.821145][ T5895] usb 5-1: SerialNumber: syz [ 190.830944][ T5895] usb 5-1: config 0 descriptor?? [ 191.056727][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.309'. [ 191.099043][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.309'. [ 191.392662][ T6910] ipvlan0: entered promiscuous mode [ 191.402770][ T6910] ipvlan0: left promiscuous mode [ 191.512994][ T5896] usb 5-1: USB disconnect, device number 15 [ 192.454302][ T5895] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 192.554995][ T6947] netlink: 'syz.4.320': attribute type 10 has an invalid length. [ 192.584363][ T5912] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 192.647198][ T5895] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 193.030894][ T5895] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.042880][ T5895] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.057945][ T5895] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.070732][ T5912] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 193.082221][ T5912] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.095588][ T5912] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.109157][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.161355][ T5912] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.166194][ T5896] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 193.179702][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.496164][ T5895] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.556006][ T5896] usb 5-1: unable to get BOS descriptor or descriptor too short [ 193.575334][ T5896] usb 5-1: config 0 has no interfaces? [ 193.578878][ T5895] usb 2-1: invalid MIDI out EP 0 [ 193.585431][ T5896] usb 5-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 193.606560][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.663744][ T5896] usb 5-1: Product: syz [ 193.677382][ T5895] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 193.687299][ T5912] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.702934][ T5912] usb 1-1: invalid MIDI out EP 0 [ 193.766606][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.785493][ T5896] usb 5-1: Manufacturer: syz [ 193.803443][ T5896] usb 5-1: SerialNumber: syz [ 193.835356][ T6939] delete_channel: no stack [ 193.912802][ T5896] usb 5-1: config 0 descriptor?? [ 194.050207][ T5912] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 194.115206][ T5912] usb 1-1: USB disconnect, device number 18 [ 194.184063][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.320'. [ 194.208406][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.320'. [ 194.252497][ T6952] netlink: 36 bytes leftover after parsing attributes in process `syz.3.322'. [ 194.327548][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.348851][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.355317][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.365405][ T6947] ipvlan0: entered promiscuous mode [ 194.377350][ T6947] ipvlan0: left promiscuous mode [ 194.385299][ T6952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.322'. [ 194.420651][ T6956] netlink: 'syz.2.323': attribute type 10 has an invalid length. [ 194.428718][ T6956] netlink: 40 bytes leftover after parsing attributes in process `syz.2.323'. [ 194.453521][ T6952] netlink: 36 bytes leftover after parsing attributes in process `syz.3.322'. [ 194.494724][ T6952] netlink: 36 bytes leftover after parsing attributes in process `syz.3.322'. [ 194.609688][ T5896] usb 5-1: USB disconnect, device number 16 [ 194.983449][ T6959] netlink: 'syz.0.324': attribute type 10 has an invalid length. [ 195.022174][ T6961] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 195.149373][ T5894] usb 2-1: USB disconnect, device number 18 [ 195.156824][ T6934] delete_channel: no stack [ 195.384238][ T5896] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 195.943863][ T6971] netlink: 'syz.3.328': attribute type 10 has an invalid length. [ 195.993013][ T6971] veth1_macvtap: left promiscuous mode [ 196.035541][ T6971] bridge0: port 3(macsec0) entered blocking state [ 196.050633][ T6971] bridge0: port 3(macsec0) entered disabled state [ 196.144680][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short [ 196.162648][ T5896] usb 1-1: config 0 has no interfaces? [ 196.183830][ T5896] usb 1-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 196.198981][ T6971] macsec0: entered allmulticast mode [ 196.208447][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.230079][ T5896] usb 1-1: Product: syz [ 196.246770][ T6971] macsec0: entered promiscuous mode [ 196.254560][ T5912] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 196.262227][ T5896] usb 1-1: Manufacturer: syz [ 196.267442][ T5896] usb 1-1: SerialNumber: syz [ 196.274176][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 196.282862][ T5896] usb 1-1: config 0 descriptor?? [ 196.481852][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 196.492366][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.515524][ T5912] usb 4-1: unable to get BOS descriptor or descriptor too short [ 196.549650][ T6959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.324'. [ 196.563827][ T9] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.565666][ T5912] usb 4-1: config 0 has no interfaces? [ 196.586993][ T5912] usb 4-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 196.596180][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.605378][ T5912] usb 4-1: Product: syz [ 196.610824][ T5912] usb 4-1: Manufacturer: syz [ 196.616231][ T5912] usb 4-1: SerialNumber: syz [ 196.626740][ T6959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.324'. [ 196.635637][ T5912] usb 4-1: config 0 descriptor?? [ 196.661628][ T6959] ipvlan0: entered promiscuous mode [ 196.675003][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.694458][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.700376][ T6959] ipvlan0: left promiscuous mode [ 196.725223][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.737078][ T9] usb 5-1: invalid MIDI out EP 0 [ 196.856892][ T5894] usb 1-1: USB disconnect, device number 19 [ 196.907254][ T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 196.948219][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.328'. [ 196.960572][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.328'. [ 196.978836][ T6971] ipvlan0: entered promiscuous mode [ 197.073387][ T6971] ipvlan0: left promiscuous mode [ 197.076310][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.182913][ T5894] usb 4-1: USB disconnect, device number 16 [ 197.236873][ T5912] usb 5-1: USB disconnect, device number 17 [ 197.253782][ T6968] delete_channel: no stack [ 197.773684][ T6979] delete_channel: no stack [ 197.798426][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 197.798446][ T30] audit: type=1326 audit(1744902038.979:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 197.862654][ T30] audit: type=1326 audit(1744902038.979:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 197.945524][ T30] audit: type=1326 audit(1744902038.979:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 197.974263][ T5912] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 198.100330][ T30] audit: type=1326 audit(1744902038.979:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 198.122077][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.134252][ T30] audit: type=1326 audit(1744902038.979:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 198.155988][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.163922][ T30] audit: type=1326 audit(1744902038.979:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 198.171056][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 198.185905][ T30] audit: type=1326 audit(1744902038.979:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 198.185955][ T30] audit: type=1326 audit(1744902039.019:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 198.236014][ T30] audit: type=1326 audit(1744902039.019:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 198.257728][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.278577][ T6996] netlink: 'syz.3.336': attribute type 10 has an invalid length. [ 198.300832][ T6996] netlink: 40 bytes leftover after parsing attributes in process `syz.3.336'. [ 198.314293][ T30] audit: type=1326 audit(1744902039.019:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7fc00000 [ 198.400639][ T6992] netlink: 220 bytes leftover after parsing attributes in process `syz.0.335'. [ 198.747837][ T7004] netlink: 'syz.4.338': attribute type 10 has an invalid length. [ 198.808175][ T7002] netlink: 'syz.1.337': attribute type 10 has an invalid length. [ 198.816199][ T7002] netlink: 40 bytes leftover after parsing attributes in process `syz.1.337'. [ 199.104214][ T5894] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 199.369179][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 199.470368][ T5894] usb 5-1: config 0 has no interfaces? [ 199.515562][ T5894] usb 5-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 199.538215][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.612105][ T5894] usb 5-1: Product: syz [ 199.621413][ T5894] usb 5-1: Manufacturer: syz [ 199.629456][ T5894] usb 5-1: SerialNumber: syz [ 199.705083][ T5894] usb 5-1: config 0 descriptor?? [ 199.843349][ T7014] netlink: 'syz.3.341': attribute type 10 has an invalid length. [ 199.882892][ T7014] netlink: 40 bytes leftover after parsing attributes in process `syz.3.341'. [ 200.378195][ T7004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.338'. [ 200.389299][ T7004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.338'. [ 200.459110][ T7004] ipvlan0: entered promiscuous mode [ 200.526893][ T7004] ipvlan0: left promiscuous mode [ 200.644254][ T5896] usb 5-1: USB disconnect, device number 18 [ 201.691106][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.734744][ T5912] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 201.760534][ T5912] usb 1-1: can't read configurations, error -71 [ 201.818079][ T7027] netlink: 'syz.0.347': attribute type 10 has an invalid length. [ 202.045566][ T7035] netlink: 'syz.3.349': attribute type 10 has an invalid length. [ 202.134201][ T5912] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 202.297545][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.305491][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 202.314866][ T5912] usb 1-1: config 0 has no interfaces? [ 202.338657][ T5912] usb 1-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 202.357260][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.371001][ T5912] usb 1-1: Product: syz [ 202.380379][ T5912] usb 1-1: Manufacturer: syz [ 202.390460][ T5912] usb 1-1: SerialNumber: syz [ 202.404698][ T5912] usb 1-1: config 0 descriptor?? [ 202.465768][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 202.474946][ T24] usb 4-1: config 0 has no interfaces? [ 202.482674][ T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 202.494983][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.508046][ T24] usb 4-1: Product: syz [ 202.524813][ T24] usb 4-1: Manufacturer: syz [ 202.535372][ T24] usb 4-1: SerialNumber: syz [ 202.559962][ T24] usb 4-1: config 0 descriptor?? [ 202.633603][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.347'. [ 202.642683][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.347'. [ 202.657325][ T7027] ipvlan0: entered promiscuous mode [ 202.665864][ T7027] ipvlan0: left promiscuous mode [ 202.935127][ T5896] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 202.961588][ T7046] netlink: 'syz.4.352': attribute type 10 has an invalid length. [ 202.981025][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.349'. [ 203.001805][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.349'. [ 203.017662][ T5894] usb 1-1: USB disconnect, device number 21 [ 203.050317][ T7035] ipvlan0: entered promiscuous mode [ 203.088821][ T7035] ipvlan0: left promiscuous mode [ 203.114773][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 203.122505][ T5896] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 203.131891][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.150984][ T5896] usb 2-1: config 0 descriptor?? [ 203.175481][ T5896] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 203.202919][ T24] usb 4-1: USB disconnect, device number 17 [ 203.214567][ T5896] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.239747][ T5896] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 203.246869][ T5896] usb 2-1: media controller created [ 203.264496][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 203.276437][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.348964][ T5896] usb 2-1: selecting invalid altsetting 1 [ 203.356904][ T5896] set interface failed [ 203.357349][ T5896] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 203.385689][ T5896] error writing reg: 0xff, val: 0x00 [ 203.436366][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.450032][ T5896] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 203.461776][ T9] usb 5-1: config 0 has no interfaces? [ 203.472070][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 203.484232][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.492258][ T9] usb 5-1: Product: syz [ 203.497462][ T9] usb 5-1: Manufacturer: syz [ 203.502095][ T9] usb 5-1: SerialNumber: syz [ 203.512117][ T9] usb 5-1: config 0 descriptor?? [ 203.770925][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.352'. [ 203.796913][ T7055] netlink: 'syz.0.354': attribute type 10 has an invalid length. [ 203.833964][ T7055] netlink: 40 bytes leftover after parsing attributes in process `syz.0.354'. [ 203.843664][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.352'. [ 204.232192][ T7046] ipvlan0: entered promiscuous mode [ 204.242503][ T7046] ipvlan0: left promiscuous mode [ 205.000683][ T9] usb 5-1: USB disconnect, device number 19 [ 205.430710][ T24] usb 2-1: USB disconnect, device number 19 [ 205.484256][ T54] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 205.644178][ T54] usb 1-1: Using ep0 maxpacket: 16 [ 205.669174][ T7068] netlink: 220 bytes leftover after parsing attributes in process `syz.0.357'. [ 205.987771][ T7085] netlink: 'syz.3.365': attribute type 10 has an invalid length. [ 206.374734][ T5897] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 206.693695][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.990657][ T5897] usb 4-1: config 0 has no interfaces? [ 207.205790][ T5897] usb 4-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 207.264233][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.274789][ T5897] usb 4-1: Product: syz [ 207.282702][ T5897] usb 4-1: Manufacturer: syz [ 207.287851][ T5897] usb 4-1: SerialNumber: syz [ 207.313234][ T5897] usb 4-1: config 0 descriptor?? [ 207.375774][ T7096] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 207.383880][ T7096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.367'. [ 207.616017][ T7085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.365'. [ 207.661767][ T7085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.365'. [ 207.766019][ T7085] ipvlan0: entered promiscuous mode [ 207.899005][ T7085] ipvlan0: left promiscuous mode [ 208.107956][ T7101] netlink: 'syz.4.368': attribute type 10 has an invalid length. [ 208.119269][ T7101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.368'. [ 208.129035][ T5937] usb 4-1: USB disconnect, device number 18 [ 208.330649][ T54] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.376672][ T54] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 208.434304][ T54] usb 1-1: can't read configurations, error -71 [ 209.414769][ T5937] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 209.673200][ T5937] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 209.685824][ T5937] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.742561][ T5937] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.779381][ T5937] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.798706][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.853495][ T5937] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.871580][ T5937] usb 4-1: invalid MIDI out EP 0 [ 210.242014][ T7115] delete_channel: no stack [ 210.283694][ T5937] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 210.353438][ T5937] usb 4-1: USB disconnect, device number 19 [ 210.392944][ T7136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.378'. [ 210.467520][ T7136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.378'. [ 210.510747][ T7136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.378'. [ 210.570353][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.584978][ T7136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.378'. [ 210.758334][ T7135] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 210.971750][ T7145] netlink: 'syz.3.379': attribute type 10 has an invalid length. [ 210.984132][ T7145] netlink: 40 bytes leftover after parsing attributes in process `syz.3.379'. [ 211.794842][ T7123] Bluetooth: hci4: command 0x0406 tx timeout [ 211.800881][ T7123] Bluetooth: hci1: command 0x0406 tx timeout [ 211.807663][ T7123] Bluetooth: hci2: command 0x0406 tx timeout [ 211.813681][ T7123] Bluetooth: hci0: command 0x0406 tx timeout [ 211.820262][ T7123] Bluetooth: hci3: command 0x0406 tx timeout [ 212.114393][ T5896] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 212.265249][ T5896] usb 1-1: device descriptor read/64, error -71 [ 212.361331][ T7159] netlink: 'syz.2.383': attribute type 10 has an invalid length. [ 212.394664][ T7159] veth1_macvtap: left promiscuous mode [ 212.425266][ T7159] bridge0: port 3(macsec0) entered blocking state [ 212.431869][ T7159] bridge0: port 3(macsec0) entered disabled state [ 212.593480][ T7159] macsec0: entered allmulticast mode [ 212.619282][ T7159] macsec0: entered promiscuous mode [ 212.804283][ T5896] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 212.834261][ T5897] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 212.998863][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short [ 213.008602][ T5897] usb 3-1: config 0 has no interfaces? [ 213.025250][ T5897] usb 3-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 213.044209][ T5896] usb 1-1: device descriptor read/64, error -71 [ 213.069682][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.085084][ T5897] usb 3-1: Product: syz [ 213.092293][ T5897] usb 3-1: Manufacturer: syz [ 213.106043][ T5897] usb 3-1: SerialNumber: syz [ 213.116808][ T7171] netlink: 'syz.3.386': attribute type 10 has an invalid length. [ 213.127825][ T7171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.386'. [ 213.173870][ T5897] usb 3-1: config 0 descriptor?? [ 213.184514][ T5896] usb usb1-port1: attempt power cycle [ 213.272594][ T7172] netlink: 'syz.1.385': attribute type 10 has an invalid length. [ 213.307511][ T7172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.385'. [ 213.552031][ T5896] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 213.613178][ T5896] usb 1-1: device descriptor read/8, error -71 [ 213.619793][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.383'. [ 213.631507][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.383'. [ 213.668695][ T7159] ipvlan0: entered promiscuous mode [ 213.698471][ T7159] ipvlan0: left promiscuous mode [ 213.914214][ T5896] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 213.953270][ T5896] usb 1-1: device descriptor read/8, error -71 [ 213.983872][ T5937] usb 3-1: USB disconnect, device number 14 [ 214.064500][ T5896] usb usb1-port1: unable to enumerate USB device [ 214.118172][ T7178] syz_tun: entered allmulticast mode [ 214.150282][ T7177] syz_tun: left allmulticast mode [ 214.704830][ T7153] delete_channel: no stack [ 215.434222][ T5912] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 215.444843][ T5897] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 215.596322][ T7204] netlink: 'syz.1.397': attribute type 10 has an invalid length. [ 215.614518][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 215.636163][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.644201][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 215.661968][ T5897] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 215.725826][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.310364][ T5897] usb 3-1: config 0 descriptor?? [ 216.321958][ T5897] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 216.368391][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'. [ 216.426754][ T5897] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 216.518929][ T5937] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 216.523901][ T5897] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 216.778343][ T5897] usb 3-1: media controller created [ 216.872141][ T5937] usb 2-1: unable to get BOS descriptor or descriptor too short [ 216.889494][ T5937] usb 2-1: config 0 has no interfaces? [ 216.889495][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.913410][ T5937] usb 2-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 216.985797][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.009820][ T5937] usb 2-1: Product: syz [ 217.027111][ T5937] usb 2-1: Manufacturer: syz [ 217.053205][ T5937] usb 2-1: SerialNumber: syz [ 217.066987][ T5897] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 217.077135][ T5937] usb 2-1: config 0 descriptor?? [ 217.084686][ T5897] error writing reg: 0xff, val: 0x00 [ 217.230876][ T5897] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 217.553247][ T7204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.397'. [ 217.622027][ T7204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.397'. [ 217.771247][ T7215] netlink: 'syz.4.399': attribute type 10 has an invalid length. [ 217.775806][ T7204] ipvlan0: entered promiscuous mode [ 217.784563][ T7215] netlink: 40 bytes leftover after parsing attributes in process `syz.4.399'. [ 217.804799][ T7204] ipvlan0: left promiscuous mode [ 218.213871][ T5896] usb 2-1: USB disconnect, device number 20 [ 218.579947][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.596246][ T5912] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 218.694321][ T5912] usb 1-1: can't read configurations, error -71 [ 218.791357][ T54] usb 3-1: USB disconnect, device number 15 [ 218.998776][ T7228] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 219.011620][ T7228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.403'. [ 219.025999][ T7228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.403'. [ 219.070858][ T7228] ipvlan0: entered promiscuous mode [ 219.093544][ T7228] ipvlan0: left promiscuous mode [ 219.324156][ T5912] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 219.474282][ T5937] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 219.556391][ T5912] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 219.566670][ T5912] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.577898][ T5912] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.590999][ T5912] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.603093][ T7240] netlink: 'syz.1.402': attribute type 10 has an invalid length. [ 219.613056][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.625998][ T7240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.402'. [ 219.709446][ T5937] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 219.714715][ T5912] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.750362][ T5937] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.813823][ T5912] usb 1-1: invalid MIDI out EP 0 [ 219.867001][ T5937] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.916030][ T5937] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.928218][ T5912] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 220.044573][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.061571][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.099265][ T5937] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.111312][ T5937] usb 4-1: invalid MIDI out EP 0 [ 220.223542][ T5937] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 220.511860][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.781202][ T7232] delete_channel: no stack [ 220.798628][ T5912] usb 4-1: USB disconnect, device number 20 [ 220.985894][ T24] usb 1-1: USB disconnect, device number 29 [ 221.075878][ T7249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.409'. [ 221.086324][ T7226] delete_channel: no stack [ 222.117721][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 222.744675][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 222.804540][ T7269] netlink: 'syz.0.414': attribute type 10 has an invalid length. [ 223.194539][ T5912] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 223.355399][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 223.367816][ T5912] usb 1-1: config 0 has no interfaces? [ 223.389432][ T5912] usb 1-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 223.401772][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.410197][ T5912] usb 1-1: Product: syz [ 223.414731][ T5912] usb 1-1: Manufacturer: syz [ 223.419535][ T5912] usb 1-1: SerialNumber: syz [ 223.431693][ T5912] usb 1-1: config 0 descriptor?? [ 223.468170][ T7278] netlink: 'syz.3.416': attribute type 10 has an invalid length. [ 223.476972][ T7278] netlink: 40 bytes leftover after parsing attributes in process `syz.3.416'. [ 223.830568][ T7283] netlink: 'syz.4.418': attribute type 10 has an invalid length. [ 223.842002][ T7269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'. [ 223.896278][ T7269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'. [ 223.924738][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.418'. [ 223.964577][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.418'. [ 224.184282][ T5912] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 224.193192][ T7269] ipvlan0: entered promiscuous mode [ 224.298060][ T7269] ipvlan0: left promiscuous mode [ 224.357341][ T5912] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 224.368439][ T5912] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 224.443785][ T7283] ipvlan0: entered promiscuous mode [ 224.638794][ T5912] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.651865][ T5912] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.658248][ T7283] ipvlan0: left promiscuous mode [ 224.696179][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.713697][ T5897] usb 1-1: USB disconnect, device number 30 [ 224.959795][ T5912] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.005230][ T5912] usb 3-1: invalid MIDI out EP 0 [ 225.117221][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.147548][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 225.159156][ T24] usb 2-1: can't read configurations, error -71 [ 225.219546][ T7285] delete_channel: no stack [ 225.242632][ T5912] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 225.256200][ T5912] usb 3-1: USB disconnect, device number 16 [ 225.525266][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.566347][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.421'. [ 226.103909][ T7303] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 226.174275][ T5897] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 226.474250][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 226.678394][ T7309] fuse: Bad value for 'fd' [ 227.239430][ T7313] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 227.318535][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 228.157877][ T7320] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 229.405556][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 229.427803][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 229.472960][ T5897] usb 5-1: can't read configurations, error -71 [ 229.824200][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 230.035525][ T7339] netlink: 'syz.4.430': attribute type 10 has an invalid length. [ 230.043318][ T7339] netlink: 40 bytes leftover after parsing attributes in process `syz.4.430'. [ 230.082294][ T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 230.096854][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.118101][ T24] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.131256][ T54] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 230.204253][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 230.213576][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.238258][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.253491][ T24] usb 3-1: invalid MIDI out EP 0 [ 230.306322][ T24] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 230.316577][ T54] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 230.328457][ T54] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.339882][ T54] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.389028][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.408277][ T54] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 230.419316][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.519547][ T7332] delete_channel: no stack [ 230.524613][ T5895] usb 3-1: USB disconnect, device number 17 [ 230.843560][ T54] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.998195][ T54] usb 1-1: invalid MIDI out EP 0 [ 231.073833][ T7344] netlink: 'syz.1.432': attribute type 10 has an invalid length. [ 231.083336][ T7344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.432'. [ 231.126278][ T7338] delete_channel: no stack [ 231.195998][ T7346] netlink: 'syz.4.433': attribute type 10 has an invalid length. [ 231.250902][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.433'. [ 231.265805][ T54] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 231.290307][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.433'. [ 231.308989][ T54] usb 1-1: USB disconnect, device number 31 [ 231.493515][ T7346] ipvlan0: entered promiscuous mode [ 231.524940][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.554708][ T7346] ipvlan0: left promiscuous mode [ 232.283400][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.436'. [ 232.545348][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 232.673241][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.438'. [ 233.698773][ T5895] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 234.174600][ T7374] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 234.917989][ T5895] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 234.954663][ T5895] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 234.984236][ T5897] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 234.998999][ T5895] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.085177][ T7384] netlink: 'syz.4.444': attribute type 10 has an invalid length. [ 235.092967][ T7384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.444'. [ 235.113398][ T5895] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.139887][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.166371][ T5897] usb 4-1: config 0 has no interfaces? [ 235.181586][ T5897] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 235.199791][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.210713][ T5895] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.222294][ T5897] usb 4-1: Product: syz [ 235.341513][ T5895] usb 1-1: invalid MIDI out EP 0 [ 235.352018][ T5897] usb 4-1: Manufacturer: syz [ 235.358199][ T5897] usb 4-1: SerialNumber: syz [ 235.419997][ T5897] usb 4-1: config 0 descriptor?? [ 235.452056][ T5895] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 235.781184][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.339942][ T5937] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 236.767097][ T5937] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 236.805353][ T5937] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.833975][ T5937] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.994215][ T7399] netlink: 'syz.1.447': attribute type 10 has an invalid length. [ 237.036687][ T7395] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 237.132898][ T5937] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.146968][ T5895] usb 1-1: USB disconnect, device number 32 [ 237.182767][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.195805][ T7369] delete_channel: no stack [ 237.271871][ T5937] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 237.281899][ T5937] usb 3-1: invalid MIDI out EP 0 [ 237.648676][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 237.757349][ T5937] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 237.794248][ T9] usb 2-1: device descriptor read/64, error -71 [ 237.825394][ T5895] usb 4-1: USB disconnect, device number 21 [ 237.986945][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.034441][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 238.151394][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 238.194574][ T9] usb 2-1: device descriptor read/64, error -71 [ 238.228232][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 238.237311][ T7407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.450'. [ 239.380339][ T9] usb usb2-port1: attempt power cycle [ 244.964097][ C1] sched: DL replenish lagged too much [ 252.350678][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 253.417174][ T10] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 253.494373][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.586057][ T7435] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 253.676997][ T10] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.374204][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 254.483859][ T7441] netlink: 'syz.3.458': attribute type 10 has an invalid length. [ 254.594239][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.690667][ T7441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.458'. [ 254.733543][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 255.376188][ T10] usb 2-1: invalid MIDI out EP 0 [ 255.659075][ T7443] delete_channel: no stack [ 255.931365][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.940837][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.475714][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 256.682464][ T10] usb 2-1: USB disconnect, device number 26 [ 257.539645][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.345843][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.364518][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.372135][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.380613][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.394393][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.213835][ T7459] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 272.599259][ T5849] Bluetooth: hci2: command tx timeout [ 273.804393][ T56] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.825494][ T56] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.846803][ T56] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.886881][ T56] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.912830][ T56] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.573419][ T7388] delete_channel: no stack [ 274.684114][ T56] Bluetooth: hci2: command tx timeout [ 275.174385][ T10] usb 3-1: USB disconnect, device number 18 [ 275.340968][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.456534][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.471605][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.480176][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.488267][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.902684][ T7457] delete_channel: no stack [ 276.195935][ T5849] Bluetooth: hci5: command tx timeout [ 276.589226][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.744548][ T5849] Bluetooth: hci2: command tx timeout [ 276.837012][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.845739][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.853494][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.864233][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.314507][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.627498][ T7459] usb 2-1: device descriptor read/64, error -71 [ 277.705546][ T56] Bluetooth: hci3: command tx timeout [ 278.128139][ T7459] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 278.189583][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 278.326494][ T56] Bluetooth: hci5: command tx timeout [ 278.441438][ T7459] usb 2-1: device descriptor read/64, error -32 [ 278.698561][ T7459] usb usb2-port1: attempt power cycle [ 278.829975][ T5849] Bluetooth: hci2: command tx timeout [ 279.131189][ T5847] syz-executor (5847) used greatest stack depth: 19096 bytes left [ 279.149224][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.386565][ T7462] chnl_net:caif_netlink_parms(): no params data found [ 279.763105][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.784158][ T5849] Bluetooth: hci3: command tx timeout [ 280.271828][ T5849] Bluetooth: hci0: command tx timeout [ 280.329204][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.351617][ T5849] Bluetooth: hci5: command tx timeout [ 280.599487][ T7462] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.613747][ T7462] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.622494][ T7462] bridge_slave_0: entered allmulticast mode [ 280.635591][ T7462] bridge_slave_0: entered promiscuous mode [ 280.674577][ T7462] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.683608][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.705545][ T7462] bridge_slave_1: entered allmulticast mode [ 280.713515][ T7462] bridge_slave_1: entered promiscuous mode [ 281.027847][ T7462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.072610][ T7462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.461127][ T7462] team0: Port device team_slave_0 added [ 281.557992][ T7462] team0: Port device team_slave_1 added [ 281.587362][ T7469] chnl_net:caif_netlink_parms(): no params data found [ 281.801214][ T7467] chnl_net:caif_netlink_parms(): no params data found [ 281.851284][ T52] macsec0: left allmulticast mode [ 281.856668][ T52] macsec0: left promiscuous mode [ 281.863366][ T52] bridge0: port 3(macsec0) entered disabled state [ 281.875205][ T5849] Bluetooth: hci3: command tx timeout [ 281.915466][ T52] bridge_slave_1: left allmulticast mode [ 281.921205][ T52] bridge_slave_1: left promiscuous mode [ 281.956178][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.151669][ T52] bridge_slave_0: left allmulticast mode [ 282.164140][ T52] bridge_slave_0: left promiscuous mode [ 282.169925][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.347857][ T5849] Bluetooth: hci0: command tx timeout [ 282.424378][ T5849] Bluetooth: hci5: command tx timeout [ 282.929480][ T52] team0: Port device geneve0 removed [ 283.260425][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.296222][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.316215][ T52] bond0 (unregistering): Released all slaves [ 283.429327][ T7462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.441390][ T7462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.481589][ T7462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.578238][ T7476] chnl_net:caif_netlink_parms(): no params data found [ 283.596898][ T7462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.603890][ T7462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.636767][ T7462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.963179][ T5849] Bluetooth: hci3: command tx timeout [ 284.016775][ T7462] hsr_slave_0: entered promiscuous mode [ 284.023497][ T7462] hsr_slave_1: entered promiscuous mode [ 284.039210][ T7462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.053392][ T7462] Cannot create hsr debugfs directory [ 284.429856][ T5849] Bluetooth: hci0: command tx timeout [ 284.437699][ T7469] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.454246][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.461560][ T7469] bridge_slave_0: entered allmulticast mode [ 284.496703][ T7469] bridge_slave_0: entered promiscuous mode [ 284.593929][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.614266][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.624820][ T7467] bridge_slave_0: entered allmulticast mode [ 284.642686][ T7467] bridge_slave_0: entered promiscuous mode [ 284.668225][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.684354][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.692030][ T7467] bridge_slave_1: entered allmulticast mode [ 284.726568][ T7467] bridge_slave_1: entered promiscuous mode [ 284.782187][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.809963][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.824612][ T7469] bridge_slave_1: entered allmulticast mode [ 284.844624][ T7469] bridge_slave_1: entered promiscuous mode [ 285.285270][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.310556][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.318791][ T7476] bridge_slave_0: entered allmulticast mode [ 285.333903][ T7476] bridge_slave_0: entered promiscuous mode [ 285.416111][ T7467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.437421][ T7469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.483373][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.491427][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.523448][ T7476] bridge_slave_1: entered allmulticast mode [ 285.538645][ T7476] bridge_slave_1: entered promiscuous mode [ 285.610037][ T7467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.660570][ T7469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.951949][ T7476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.991378][ T7476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.099344][ T7467] team0: Port device team_slave_0 added [ 286.131118][ T7467] team0: Port device team_slave_1 added [ 286.152564][ T7469] team0: Port device team_slave_0 added [ 286.168957][ T7469] team0: Port device team_slave_1 added [ 286.504671][ T5849] Bluetooth: hci0: command tx timeout [ 286.865595][ T7476] team0: Port device team_slave_0 added [ 286.999895][ T52] hsr_slave_0: left promiscuous mode [ 287.017351][ T52] hsr_slave_1: left promiscuous mode [ 287.044305][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.057567][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.089531][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.105302][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.164127][ T52] [ 287.166596][ T52] ============================================ [ 287.172760][ T52] WARNING: possible recursive locking detected [ 287.178967][ T52] 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 Not tainted [ 287.186101][ T52] -------------------------------------------- [ 287.192267][ T52] kworker/u8:3/52 is trying to acquire lock: [ 287.198350][ T52] ffff88807f6d4d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 287.208532][ T52] [ 287.208532][ T52] but task is already holding lock: [ 287.215915][ T52] ffff88807f6d4d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 287.227548][ T52] and the lock comparison function returns 0: [ 287.233635][ T52] [ 287.233635][ T52] other info that might help us debug this: [ 287.241725][ T52] Possible unsafe locking scenario: [ 287.241725][ T52] [ 287.249197][ T52] CPU0 [ 287.252495][ T52] ---- [ 287.255791][ T52] lock(&dev_instance_lock_key#3); [ 287.261034][ T52] lock(&dev_instance_lock_key#3); [ 287.266305][ T52] [ 287.266305][ T52] *** DEADLOCK *** [ 287.266305][ T52] [ 287.274465][ T52] May be due to missing lock nesting notation [ 287.274465][ T52] [ 287.282826][ T52] 5 locks held by kworker/u8:3/52: [ 287.287950][ T52] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 287.298961][ T52] #1: ffffc90000be7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 287.309543][ T52] #2: ffffffff900f0a90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 287.318999][ T52] #3: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 287.329137][ T52] #4: ffff88807f6d4d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 287.341205][ T52] [ 287.341205][ T52] stack backtrace: [ 287.347224][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 287.347251][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.347266][ T52] Workqueue: netns cleanup_net [ 287.347314][ T52] Call Trace: [ 287.347322][ T52] [ 287.347331][ T52] dump_stack_lvl+0x241/0x360 [ 287.347364][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.347394][ T52] ? __pfx__printk+0x10/0x10 [ 287.347422][ T52] ? print_lock+0x171/0x1a0 [ 287.347448][ T52] print_deadlock_bug+0x2be/0x2d0 [ 287.347488][ T52] validate_chain+0x928/0x24e0 [ 287.347525][ T52] __lock_acquire+0xad5/0xd80 [ 287.347549][ T52] lock_acquire+0x116/0x2f0 [ 287.347568][ T52] ? dev_set_allmulti+0x11c/0x270 [ 287.347592][ T52] __mutex_lock+0x1a5/0x10c0 [ 287.347617][ T52] ? dev_set_allmulti+0x11c/0x270 [ 287.347633][ T52] ? preempt_schedule+0xe4/0xf0 [ 287.347654][ T52] ? preempt_schedule_common+0x84/0xd0 [ 287.347681][ T52] ? dev_set_allmulti+0x11c/0x270 [ 287.347698][ T52] ? __pfx___mutex_lock+0x10/0x10 [ 287.347725][ T52] ? lockdep_hardirqs_on+0x9d/0x150 [ 287.347749][ T52] ? __local_bh_enable_ip+0x168/0x200 [ 287.347770][ T52] ? macsec_dev_stop+0x264/0x440 [ 287.347788][ T52] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 287.347810][ T52] dev_set_allmulti+0x11c/0x270 [ 287.347831][ T52] macsec_dev_stop+0x2b8/0x440 [ 287.347851][ T52] ? __pfx_macsec_dev_stop+0x10/0x10 [ 287.347875][ T52] ? dev_deactivate_many+0xc09/0xca0 [ 287.347908][ T52] ? __pfx_dev_deactivate_many+0x10/0x10 [ 287.347938][ T52] ? notifier_call_chain+0x3cc/0x3f0 [ 287.347963][ T52] ? __pfx_macsec_dev_stop+0x10/0x10 [ 287.347983][ T52] __dev_close_many+0x3d7/0x760 [ 287.348033][ T52] ? __pfx___dev_close_many+0x10/0x10 [ 287.348066][ T52] dev_close_many+0x250/0x4c0 [ 287.348097][ T52] ? __pfx_dev_close_many+0x10/0x10 [ 287.348125][ T52] ? __lock_acquire+0xad5/0xd80 [ 287.348149][ T52] unregister_netdevice_many_notify+0x628/0x2510 [ 287.348179][ T52] ? lockdep_hardirqs_on+0x9d/0x150 [ 287.348204][ T52] ? __local_bh_enable_ip+0x168/0x200 [ 287.348224][ T52] ? batadv_tt_local_remove+0x119/0x230 [ 287.348246][ T52] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 287.348265][ T52] ? batadv_tt_local_remove+0x119/0x230 [ 287.348294][ T52] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 287.348327][ T52] ? unregister_netdevice_queue+0x2c4/0x400 [ 287.348354][ T52] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 287.348386][ T52] default_device_exit_batch+0x7ff/0x880 [ 287.348422][ T52] ? __pfx_default_device_exit_batch+0x10/0x10 [ 287.348454][ T52] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 287.348484][ T52] ? cfg802154_pernet_exit+0xc3/0xe0 [ 287.348503][ T52] ? __pfx_default_device_exit_batch+0x10/0x10 [ 287.348535][ T52] cleanup_net+0x8af/0xd60 [ 287.348569][ T52] ? __pfx_cleanup_net+0x10/0x10 [ 287.348605][ T52] ? process_scheduled_works+0x9cb/0x18e0 [ 287.348628][ T52] process_scheduled_works+0xac3/0x18e0 [ 287.348664][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.348702][ T52] ? assign_work+0x367/0x3d0 [ 287.348726][ T52] worker_thread+0x870/0xd50 [ 287.348756][ T52] ? __kthread_parkme+0x1a8/0x200 [ 287.348781][ T52] ? __pfx_worker_thread+0x10/0x10 [ 287.348804][ T52] kthread+0x7b7/0x940 [ 287.348832][ T52] ? __pfx_worker_thread+0x10/0x10 [ 287.348855][ T52] ? __pfx_kthread+0x10/0x10 [ 287.348881][ T52] ? __pfx_kthread+0x10/0x10 [ 287.348907][ T52] ? __pfx_kthread+0x10/0x10 [ 287.348933][ T52] ? __pfx_kthread+0x10/0x10 [ 287.348960][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.348980][ T52] ? lockdep_hardirqs_on+0x9d/0x150 [ 287.349002][ T52] ? __pfx_kthread+0x10/0x10 [ 287.349029][ T52] ret_from_fork+0x4b/0x80 [ 287.349049][ T52] ? __pfx_kthread+0x10/0x10 [ 287.349076][ T52] ret_from_fork_asm+0x1a/0x30 [ 287.349101][ T52] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)