last executing test programs: 6m43.683952443s ago: executing program 2 (id=691): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x100}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x6feb, 0x3ec0, 0xf, 0x0, 0x39) 6m42.030741054s ago: executing program 2 (id=697): socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x8018, 0xd800, 0x22, &(0x7f0000000180)="0000ffbbc8b5f10000000069c527a0a53c42e49a000000001566235d13e368923907"}, {0x0, 0x0, 0x0, 0x0}], 0x2}) 6m40.589270361s ago: executing program 2 (id=702): r0 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 6m39.716647518s ago: executing program 2 (id=703): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 6m38.825591349s ago: executing program 2 (id=712): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m38.347742733s ago: executing program 2 (id=713): socket$inet6(0xa, 0x80002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map=r3, 0xffffffffffffffff, 0x2c}, 0x20) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x8000000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x7, 0xf9, 0x0, 0xfe, 0x3a, 0x2}, {0x3000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x8080000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000002c0)={0x1000, 0x4, 0x2, 0x5, 0x50}) 6m37.698639273s ago: executing program 32 (id=713): socket$inet6(0xa, 0x80002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map=r3, 0xffffffffffffffff, 0x2c}, 0x20) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x8000000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x7, 0xf9, 0x0, 0xfe, 0x3a, 0x2}, {0x3000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x8080000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000002c0)={0x1000, 0x4, 0x2, 0x5, 0x50}) 6m37.101746213s ago: executing program 4 (id=721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x3) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 6m35.45635857s ago: executing program 4 (id=728): syz_usb_connect(0x5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) 6m34.673275168s ago: executing program 4 (id=731): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x4, "5905d900"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 6m30.429676414s ago: executing program 4 (id=741): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c00, r3) dup2(r2, r0) 6m29.763849472s ago: executing program 4 (id=744): syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r3, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r3], 0x40c}}, 0x0) 6m29.372054198s ago: executing program 4 (id=745): syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c8301020301090229000100"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x1ec8, 0x0, 0xe, 0x0, 0x0) 6m28.862787186s ago: executing program 33 (id=745): syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c8301020301090229000100"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x1ec8, 0x0, 0xe, 0x0, 0x0) 14.340660318s ago: executing program 1 (id=1838): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x80805, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) pipe2(&(0x7f0000000040), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14.024404908s ago: executing program 3 (id=1839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13.662266907s ago: executing program 1 (id=1841): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x2820920) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000b80)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x1, 0x9, 0x653, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @broadcast}, "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"}}}, 0x661) 13.408281978s ago: executing program 3 (id=1842): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r3}, &(0x7f0000000080)=""/44, 0x2c, &(0x7f0000000000)={&(0x7f0000000280)={'wp384\x00'}}) 10.474148517s ago: executing program 1 (id=1848): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) syz_open_dev$dri(0x0, 0x2, 0x98240) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x3}, 0x0) ftruncate(r0, 0x8800000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r3, r0, 0x0, 0x558410e9) 10.46474834s ago: executing program 0 (id=1849): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000004fc0)=[{{&(0x7f0000004380)=@file={0x0, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000046c0)}, {0x0}, {0x0}, {&(0x7f0000004880)="b9db4146c045efbc55b75f153ea495c308ae1263ab13381efcd286164f21b903f8157422920085705cbdf7c3424e9a732d0d83c53b2d7eb7b659b712d2bd2ca8070443f331c8b249a67a49b04241ceb05d8a9cdd7804c430058309fb54f0abd813bc5af5a73ee303fb92fe5da768303034e2c340e9040182f23a89e3", 0x7c}], 0x4, 0x0, 0x108}}, {{&(0x7f0000004ac0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004f80)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x20000080}}], 0x3, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) link(&(0x7f0000000380)='./file1\x00', &(0x7f00000002c0)='./file0\x00') r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000740)={0x2, 0x4e27, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 10.0760187s ago: executing program 0 (id=1853): ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x2) 9.744286612s ago: executing program 3 (id=1854): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000009c0)={0xffffffffffffff9b, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000140)={0x0, 0xb502c7f86c08671e, 0x2, {0x2, 0xb}}, &(0x7f0000000300)={0x0, 0x3, 0xd9, @string={0xd9, 0x3, "78bbf9a528e9c52837e2bb963111471a9b5cdd341b0e8cdd67e81605c5d07b6c6ae1e4012f68eb20450888f55b494a5f5b35c1ee8f541b0c1088032a3ebe79aab299d934ab4635e80cddbe370cb0c2581bf1c95ac5ea800cf25d1f977dfb4f06cc312e4e8c8cb15dd5c3e373347096ee8987a904fe924710ea13f7da51a4e0628ffd808553192a5419788b34548d086638357d38d5475b57f4981dbdbf1ce125ddeb073934e1e7f1d811c16dd25b93e9940030c9a90b38e7dbe657cb77a0c10c03976ea0198f3fc53c0785be33d904930a5078243f0eea"}}, &(0x7f0000000400)={0x0, 0xf, 0xf8, {0x5, 0xf, 0xf8, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0xc, 0x4, 0x401}, @generic={0xcd, 0x10, 0x3, "00ca9e4a37d8bdbfa831ae7714bd40d75117a89f8811f83f35707575975d1c66cc55915f8460ec201dadf504322c1abc6663b8a7fe232c6ce64c8e84755da63d3e8e9dbcd0291ffae5a178b8d5454c64b2ef4a00b4b850aafea0b43b82eef506d4327708ab6cb4f60fc85c56284d780c683a5fa687c9c2ebd00a3670879f6b0d2057bb4cc7b2670ac53fe246ac7b6dbec2387b04f8b2959da53f7cb0bae4dd026586c5deed3e71c26d08d2f7c70fc8e38efbd39b8845275bdeb282b5c747e6689d614bf3d5ab66878a11"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x3, 0xf9, 0x2, 0x40}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x2, 0xe100, 0x4, [0xffff00, 0x18030]}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x9, 0x8, "9eead27d", "16f2b100"}}, &(0x7f0000000080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x3, 0x50, 0x8, 0x0, 0x2}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x20, 0xe, 0x2f, "e0f953fbd3dba30fe043f5ccb1f952d52af63e87cc119f24c879847e06aec7f958f43bee386a0accbefa5b2614b91d"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000640)={0x0, 0x8, 0x1}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0x1c00, 0x4, [0xf000]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000000780)={0x40, 0xb, 0x2, "9781"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x1}, 0x0, &(0x7f0000000840)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x19, 0x2, "e655"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x5ef}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x56}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0xc}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x19101204, 0x0, 0x0, 0x1, 0xe, 0x0, 0x0, 0x20, 0x4}}, 0x50) 8.393772905s ago: executing program 1 (id=1856): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x4}}, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x1) close(r3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000480)={{0x1, 0x200, 0x261, 0x1, 0xffffffff, 0x1}, 0x37a, [0x4, 0x9f, 0x6, 0x7, 0x10000, 0x7f, 0x9, 0xb, 0x17, 0x3, 0x7, 0x80000001, 0xffff0001, 0x81, 0xf24b, 0x81, 0x7, 0x5, 0xffffffff, 0xfffffffd, 0x3295, 0x8, 0x1, 0x6, 0x1, 0x20000, 0x2, 0x642c, 0x101, 0xc, 0x9, 0xff, 0x6, 0xb, 0x4, 0x6, 0x20, 0xdb, 0x943, 0x3, 0x3c, 0x9, 0xd9d3, 0x32c, 0x2, 0x0, 0x8, 0x10000, 0x0, 0x139, 0xffffffff, 0x0, 0x560, 0x7, 0x7, 0x2, 0x4, 0x6, 0x5, 0x4, 0x82bd, 0x4, 0x7f, 0x3, 0x101, 0x7, 0x4, 0x0, 0x46a5, 0x9, 0x2, 0x101, 0x2, 0x81, 0x2c4, 0x2, 0xf1, 0x3, 0x3, 0x9, 0x9, 0x7d, 0x2, 0x9, 0x6e, 0x8, 0xef46, 0x943, 0x1, 0x0, 0x8, 0x7f, 0x4, 0xda6, 0xf360, 0x8, 0x3, 0x9c2, 0x8001, 0x5, 0x100, 0x80000000, 0xffff7fff, 0xffffffff, 0x7, 0x80000000, 0x7, 0xeb, 0x932, 0xffff, 0x0, 0x3, 0x7fffffff, 0x3ff, 0x0, 0x3, 0x7, 0x8, 0x3, 0x10001, 0xfffffff9, 0x4, 0xd, 0x2e, 0xffff, 0x1, 0x0, 0x7, 0x2, 0x80, 0x80000001, 0x0, 0x4, 0xffff7fff, 0x9, 0x80000000, 0x2, 0xf280, 0x2, 0x57, 0x0, 0x1, 0x6, 0x0, 0x397, 0x8, 0x5, 0x9, 0x8, 0x7c4c, 0x5b, 0x2, 0xc, 0x1, 0x5, 0x20, 0x7, 0x6, 0x65d0, 0x10001, 0x6, 0x6, 0x3ff, 0x8, 0x3, 0x5, 0x6, 0x124a, 0x9, 0x1ff, 0x80, 0xc, 0x3, 0x4270000, 0x0, 0x6b994df8, 0x9, 0x6, 0x0, 0x9, 0x9, 0x1ff, 0x9, 0x1000, 0x3ff, 0xffffffff, 0x0, 0x6, 0xffffffff, 0x7ff, 0x311, 0x0, 0x7, 0xfffffdd9, 0x0, 0x79, 0x5, 0xfffffffc, 0x8, 0xd, 0x6944, 0xb, 0x2, 0x8f01, 0x10, 0x3, 0x8, 0x5, 0x40, 0x2, 0x40, 0x9, 0x8, 0x21, 0xffffffff, 0xdf6, 0x3, 0x6, 0x7, 0x9, 0x8, 0x101, 0x8, 0x0, 0x10001, 0x0, 0x81e8, 0x5, 0xa9e, 0x2, 0x9, 0x3, 0x8, 0x2, 0x1, 0x8, 0x1000, 0x80000000, 0x7, 0x7, 0x4, 0x4, 0x7, 0x5, 0xe, 0x2, 0x155, 0x3, 0x8, 0x9, 0x1000, 0xe4ec, 0x0, 0x6, 0xa, 0x0, 0x8, 0x6, 0x3ff, 0x8001, 0x9, 0xa770, 0x7, 0x3ff, 0x2, 0x5, 0xf, 0x3, 0x9, 0x8, 0x3ff, 0x6, 0x100, 0xfffffffe, 0x6, 0x10000, 0x3, 0x2, 0xffff, 0x80, 0x180, 0x1, 0x10000, 0xa672, 0x0, 0x1, 0xca6, 0x3, 0x1ff, 0x0, 0x5, 0x400, 0x6, 0x159, 0x0, 0x5, 0xff, 0x2, 0xd62, 0x77, 0x7fff, 0xbdd5, 0x7, 0x7fff, 0x7, 0x401, 0x100, 0xde87b73, 0x3, 0x5, 0x6, 0xd3d, 0x8, 0x10000000, 0x6, 0x7fffffff, 0x1, 0x3ff, 0x10000, 0xa, 0x2, 0x6, 0x6b, 0x5, 0x3, 0x46, 0x8, 0x2, 0x3, 0xfffffffd, 0x4, 0x1, 0x8, 0x8000, 0x0, 0x35d, 0xfffffffd, 0x100, 0x3, 0x2, 0x2, 0x5, 0xec59, 0x1, 0x666, 0x2, 0x10001, 0x2, 0x0, 0x0, 0x2, 0x6, 0x6, 0xb, 0x5, 0x7fffffff, 0x9b3, 0x100, 0xffc00000, 0x20000000, 0x6, 0x9, 0x0, 0x409, 0xff, 0xfffffffa, 0x6, 0x4, 0x2, 0x5, 0x7, 0x9, 0x5c69, 0x2, 0x7, 0x9, 0x3, 0x505, 0x7, 0x7f, 0x3, 0x5, 0x80, 0x2, 0x1, 0x7, 0x3, 0x9, 0x3, 0xc00000, 0x1, 0xffff, 0x7, 0x0, 0x0, 0x7, 0x6, 0x8, 0x7, 0xb, 0x5, 0x6, 0xff67, 0x3, 0x8, 0x55, 0xfff, 0xfffffffb, 0x7, 0x0, 0x30, 0x63, 0x8, 0xbc00, 0x8, 0xfffffc71, 0x3, 0xa5, 0x6, 0x0, 0xc2f, 0xd75, 0x4, 0x2, 0x9, 0xffffffc0, 0x6, 0x9, 0x8, 0x6, 0x9, 0x6, 0x2, 0x7ff, 0x0, 0x7f, 0x74d067f7, 0x8, 0x9, 0x8, 0x0, 0x7, 0x4, 0x2, 0x8, 0x6, 0x5, 0x9fd5, 0x4, 0x8, 0x8001, 0x8, 0x7, 0x401, 0x8, 0x1b800, 0x2dd, 0x7, 0x9, 0x2, 0x4, 0x5, 0x3, 0xae, 0x8001, 0x0, 0x1ff, 0xa7, 0x800, 0x2, 0x4, 0x7, 0x6, 0x0, 0x0, 0x68, 0x1, 0x7, 0x80000000, 0x8f, 0x1ff, 0x7, 0x7f, 0x0, 0xa0, 0x8, 0x0, 0x6, 0xea, 0x9, 0x6, 0x81, 0x4, 0x8, 0x4, 0x2, 0xfffffe00, 0x9, 0x7fff, 0x0, 0x3, 0xa1, 0x7, 0x7, 0x0, 0xb, 0x8, 0xfffffffb, 0x9, 0x0, 0xc, 0x3, 0xd2, 0x200, 0x7, 0x3, 0xf, 0x3, 0x3ff, 0x42, 0xb697, 0x4, 0x80000, 0x60, 0x9, 0x6, 0x4, 0x6, 0x6, 0xd, 0x2, 0x4, 0x80000001, 0x3, 0xb, 0x5b, 0x6, 0x6, 0x74, 0x8, 0x3, 0x9, 0x0, 0x4, 0x4, 0x7f, 0x3, 0xc, 0x4, 0x8, 0x935a, 0x85, 0x6, 0x6, 0x2, 0xe, 0x3, 0x4, 0x6, 0x9, 0x1, 0x34, 0x5, 0x6, 0x8001, 0x0, 0xffffffff, 0x9, 0x6, 0xbab, 0x8, 0x5, 0x1, 0x4, 0x7, 0x400, 0x2, 0x9, 0x1ff, 0x4, 0x8, 0x7fff, 0x3, 0x7, 0x1, 0x4, 0x7fff, 0x0, 0x1, 0xa, 0x3, 0xa, 0x10000, 0x5, 0x495, 0x4, 0x101, 0x180, 0x3, 0x60d, 0xffffff00, 0x2, 0x8, 0x79f5, 0x2cbd, 0x2, 0x9, 0x6, 0x2, 0x6, 0x9, 0x0, 0xfffff6b8, 0x7, 0x5, 0x10001, 0x7, 0x9, 0x3, 0x81, 0x1, 0x0, 0x10000, 0x80000001, 0x7, 0xff, 0x7fff, 0x7b1f, 0x7, 0xb9e3, 0x5, 0x0, 0x401, 0xd, 0x8e, 0x7, 0x3, 0x80000000, 0x7, 0x8, 0x3, 0x9, 0x0, 0x1, 0xee9, 0x12, 0x100002, 0x80000000, 0x1000, 0x0, 0x6, 0x5, 0x1000000, 0x1, 0x100, 0x9, 0x7, 0x101, 0xcff7, 0x0, 0x1ff, 0x401, 0x6, 0x5ce, 0x0, 0x5, 0x0, 0x8, 0x4, 0xfffffffa, 0x80000001, 0xb7, 0x2, 0x8, 0x9, 0xfffff9ec, 0x1, 0x6, 0x4, 0x401, 0x401, 0x8, 0x4, 0x1, 0x7fff, 0x3, 0x8, 0x8, 0x9, 0x6, 0x2c, 0xa54, 0x40, 0xd634, 0x249d, 0x18, 0x4, 0xd, 0xa26c, 0x1, 0x3, 0x3ff, 0x6a, 0xffffff2a, 0x1, 0x6c, 0x3, 0xabeb, 0x0, 0x0, 0x5, 0x6, 0x4, 0x2, 0x6236, 0x1, 0x9, 0x2, 0x8000, 0x4000000, 0x180000, 0x5, 0x9, 0x3ff, 0x1000000, 0x3, 0x3ff, 0x2, 0x1, 0x9, 0x10000, 0x5, 0xb, 0x62a, 0x7, 0x5, 0xb15, 0x9, 0x2, 0x4, 0x10, 0x8000000, 0x80000001, 0x7fffffff, 0x5, 0x400, 0x7, 0x8, 0x5, 0x7fff, 0x3, 0x5, 0x7, 0x1, 0x800, 0x4, 0x8, 0xe700, 0x2, 0x4, 0x9, 0x7, 0x9, 0x6, 0x12, 0x4, 0xfffffff8, 0x7, 0x7, 0x7, 0x8, 0xfffffffc, 0x6, 0x0, 0x3, 0xcf2, 0x8, 0x7, 0x7ff, 0x7, 0x8, 0x8, 0x9, 0x5, 0x800, 0x7, 0x9f, 0x5, 0x7cd6, 0x2, 0x5e369cb1, 0x1, 0x7fffffff, 0x10, 0x2, 0x5, 0x10001, 0x8, 0x6, 0x8, 0xd4fb, 0x9, 0x6, 0x1, 0x5, 0x9, 0x5, 0xc, 0xfffffff1, 0x400, 0x5, 0x5, 0x3, 0x2, 0x5, 0x9, 0x1, 0x4b, 0x6, 0x78d, 0xc6, 0xec62, 0x4, 0x0, 0x5, 0x101, 0x2, 0x1, 0x9, 0x3365, 0x3, 0x3, 0xfffeffff, 0x3359, 0x200, 0xfffffff2, 0x7, 0x9, 0x5, 0x1, 0x9d, 0x7, 0x3ab, 0x5, 0x1, 0x7ff, 0x101, 0x8000, 0x34e0, 0x1, 0x8, 0x10000, 0x3, 0x7, 0x2, 0x1, 0x7, 0x9, 0x662, 0x6, 0x4db1, 0x3, 0x7fff, 0x6, 0xa021, 0x4, 0x3, 0x4, 0x1, 0x8, 0x40, 0x3, 0x80, 0x3, 0x7ff, 0x7, 0x4, 0x0, 0x3f00, 0xfffffff7, 0x7, 0x7, 0x2, 0x0, 0x1, 0x922c, 0x4, 0x400, 0x401, 0xfffffffe, 0x10, 0x9, 0x5, 0x2, 0x3, 0x4, 0x9, 0x6, 0xb4c, 0x8, 0x2, 0x1, 0x5000000, 0x5, 0x2, 0xf2, 0x6, 0x600d, 0xffff, 0x2, 0x0, 0xc1, 0xff, 0x8, 0xcc3, 0x400, 0x807, 0x5, 0x8, 0x1cce, 0xdb, 0x4, 0x8000, 0x1, 0x0, 0x1, 0x5, 0x1, 0x7, 0x8, 0x0, 0x7, 0x10, 0x5, 0x7f, 0x3, 0xea4, 0x5, 0x1, 0x2, 0x1, 0xf, 0x6, 0x1ff, 0x10001, 0xac73, 0x3, 0x0, 0x7fff, 0x9, 0xffffffff, 0x8, 0x8, 0x200, 0x6, 0xffffff8a, 0x1, 0x81, 0x800, 0x9, 0x8, 0x7ff, 0x101, 0x8000, 0x1, 0x7, 0x10000, 0x101, 0x8, 0x7f, 0x31aea55a, 0x0, 0x7, 0x8, 0x4, 0x1d7f, 0x1, 0x10, 0x2, 0x0, 0xcd6, 0x9, 0x10, 0x0, 0x7, 0x9, 0xfffff7db, 0x2, 0x4, 0x5, 0xc8, 0x4, 0x2, 0xb48, 0x3, 0xfffffffd, 0x2, 0x9, 0x8, 0x4, 0xb, 0x7, 0x8, 0x6, 0x0, 0x3, 0x3, 0x0, 0x4, 0x80000001, 0x1, 0x4, 0x5, 0x5, 0x189d, 0x1, 0x3ff, 0x5, 0x9, 0x9, 0x5, 0xb, 0xe9f, 0x7]}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 7.997263788s ago: executing program 6 (id=1857): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x356}, &(0x7f00000008c0)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x70a, 0x41e3, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) r6 = getpid() syz_pidfd_open(r6, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r6, 0x0, 0x4003) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/247, 0xf7}], 0x1}, 0x3}], 0x1, 0x40010020, 0x0) 7.507130873s ago: executing program 0 (id=1859): syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12) ioprio_set$pid(0x2, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) syz_usb_connect(0x0, 0x33, 0x0, 0x0) 6.865607152s ago: executing program 6 (id=1860): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x4169, &(0x7f00000003c0)={0x0, 0xd490, 0x10100, 0x1}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x44c2, 0x0, 0x2, 0xfffffffd}, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 6.334634359s ago: executing program 3 (id=1861): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0xc081) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e0067"], 0x1c}}, 0x8000) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socket(0x2, 0x80805, 0x0) sendmsg$key(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)={0x2, 0x14, 0xd, 0x2, 0x4, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x1f}, @sadb_key={0x1, 0x9}]}, 0x20}}, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.997606436s ago: executing program 3 (id=1862): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe}, 0x1c) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa1, 0xd8, 0xff, 0x20, 0xcf2, 0x6250, 0x4642, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x36, 0x10, 0x0, 0xc7, 0x3, 0xe8, 0x8}}]}}]}}, 0x0) 5.885449002s ago: executing program 1 (id=1863): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'veth0\x00', 0x42}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) 4.354155563s ago: executing program 5 (id=1865): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000023c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xfd, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x5}]}}}}}}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r1, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f046}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000280)=r3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000200), &(0x7f00000002c0)}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x20058}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0x10}, 0x0) 4.352198644s ago: executing program 6 (id=1866): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001200)={r6, 0x3, 0x51, 0x401}, &(0x7f0000001240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={r6, 0x6}, &(0x7f0000000200)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 3.693898194s ago: executing program 5 (id=1867): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) msgget$private(0x0, 0x260) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0x100) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x5e, 0x2, 0x4, 0x1, 0x0, 0x30, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.444643357s ago: executing program 0 (id=1868): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) io_setup(0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001000c0080000000", @ANYRES32=0x0, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) 3.060016492s ago: executing program 5 (id=1869): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1d7a, 0x1c1400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_script(r3, &(0x7f0000000440)={'#! ', './file0'}, 0xb) write$binfmt_misc(r3, &(0x7f00000001c0)="d4c1ce69a55f02b191d7d08b238b860a09f3a94b0ef55e21", 0x18) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r4, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f000000c400)="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", 0x2000, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f00000000c0)={0x300000000000000, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.825968228s ago: executing program 5 (id=1870): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r0 = syz_io_uring_setup(0x1aed, &(0x7f0000000080)={0x0, 0x80000, 0x10100, 0x5, 0x1000000}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.623736461s ago: executing program 3 (id=1871): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="87426e7f0a23f7c0697e3e6eaa120ba3e32a0ba0b6ba1a0b82bb43ff8e9befa4e96e8b1cb0a934d12866229e630794e1e6cf6a", 0x33, 0x81, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "caf8c695"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(serpent-generic)\x00'}, 0x58) 1.495235791s ago: executing program 0 (id=1872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffe10e}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.494964098s ago: executing program 6 (id=1873): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) r2 = mq_open(&(0x7f0000000180)='$@\x00', 0x1, 0x185, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x7, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/4096, 0x1000, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 1.338840701s ago: executing program 1 (id=1874): ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc044560f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 1.337976784s ago: executing program 5 (id=1875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x2070b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x1, 0x594}}}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.003976132s ago: executing program 6 (id=1876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005e40)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x9, 0x3, 0x2, 0x6}, {0x0, 0x1, 0x0, 0x6c, 0x3, 0x4}, 0x0, 0xa, 0x1cfc}}, @TCA_TBF_BURST={0x8, 0x6, 0x97}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe9ead2c49063e28e}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 863.861944ms ago: executing program 0 (id=1877): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) 685.469005ms ago: executing program 5 (id=1878): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) 0s ago: executing program 6 (id=1879): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f}) kernel console output (not intermixed with test programs): ll! [ 422.596515][ C1] rc rc0: IR event FIFO is full! [ 422.601786][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.608596][ C1] rc rc0: IR event FIFO is full! [ 422.613571][ C1] rc rc0: IR event FIFO is full! [ 422.618514][ C1] rc rc0: IR event FIFO is full! [ 422.623439][ C1] rc rc0: IR event FIFO is full! [ 422.628389][ C1] rc rc0: IR event FIFO is full! [ 422.633324][ C1] rc rc0: IR event FIFO is full! [ 422.638255][ C1] rc rc0: IR event FIFO is full! [ 422.643777][ C1] rc rc0: IR event FIFO is full! [ 422.649090][ C1] rc rc0: IR event FIFO is full! [ 422.654937][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.661650][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 422.681986][ C1] rc rc0: IR event FIFO is full! [ 422.687174][ C1] rc rc0: IR event FIFO is full! [ 422.692120][ C1] rc rc0: IR event FIFO is full! [ 422.697153][ C1] rc rc0: IR event FIFO is full! [ 422.702165][ C1] rc rc0: IR event FIFO is full! [ 422.707093][ C1] rc rc0: IR event FIFO is full! [ 422.712133][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.718402][T10587] rc rc0: two consecutive events of type pulse [ 422.727926][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 422.870042][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 422.920249][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 422.960234][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 422.996140][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 423.037619][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 423.109660][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 423.139620][ T5865] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 423.176314][ T5865] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 423.195018][ T5865] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 423.326764][ T5865] usb 2-1: USB disconnect, device number 23 [ 423.691399][T10590] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1201'. [ 424.080551][ T55] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 424.250147][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 424.264403][ T55] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 424.273996][ T55] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 424.284066][ T55] usb 2-1: Product: syz [ 424.288380][ T55] usb 2-1: Manufacturer: syz [ 424.293125][ T55] usb 2-1: SerialNumber: syz [ 424.306410][ T55] usb 2-1: config 0 descriptor?? [ 424.577593][ T10] usb 2-1: USB disconnect, device number 24 [ 424.683166][T10554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.691490][T10554] team0: Port device bond0 added [ 427.578725][ T5865] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 427.752492][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 427.793077][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 427.953781][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 428.013060][ T5865] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 428.022204][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.032404][ T5865] usb 1-1: Product: syz [ 428.036602][ T5865] usb 1-1: Manufacturer: syz [ 428.042152][ T5865] usb 1-1: SerialNumber: syz [ 428.130164][ T5865] usb 1-1: config 0 descriptor?? [ 428.166523][ T5865] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 428.193114][ T5865] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 428.386171][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'. [ 428.829750][ T5865] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 428.836457][ T5865] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 429.077300][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 429.274907][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 429.294420][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 429.393315][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 429.486539][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 429.520937][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 429.597371][ T5865] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 429.607196][ T5865] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 429.653623][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 429.667868][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 429.694716][ T10] usb 2-1: Product: syz [ 429.703820][ T10] usb 2-1: Manufacturer: syz [ 429.721863][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 429.727112][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 429.960761][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 429.966745][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 430.217906][ T10] usb 2-1: USB disconnect, device number 25 [ 430.288801][T10690] mac80211_hwsim hwsim16 è: renamed from wlan1 (while UP) [ 430.322200][ T5865] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 430.332358][ T5865] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 430.358287][ T5865] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 430.405793][ T5865] usb 1-1: USB disconnect, device number 31 [ 431.057355][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 431.609874][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 431.653747][ T10] usb 7-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 431.715617][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.726311][ T10] usb 7-1: Product: syz [ 431.732543][ T10] usb 7-1: Manufacturer: syz [ 431.739491][ T10] usb 7-1: SerialNumber: syz [ 432.061034][T10715] netlink: 'syz.0.1230': attribute type 10 has an invalid length. [ 432.698070][T10715] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 432.897620][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 433.017494][ T10] snd-usb-audio 7-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 433.030824][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1231'. [ 433.058014][ T10] usb 7-1: USB disconnect, device number 12 [ 433.097041][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1231'. [ 433.141465][ T7217] udevd[7217]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.257379][ T5865] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 433.328014][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1231'. [ 433.347307][ T55] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 433.447518][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 433.458097][ T5865] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 433.482378][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.512519][ T55] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 433.529453][ T55] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.553571][ T5865] usb 1-1: Product: syz [ 433.560552][ T5865] usb 1-1: Manufacturer: syz [ 433.575172][ T5865] usb 1-1: SerialNumber: syz [ 433.580309][ T55] usb 2-1: config 0 has no interface number 0 [ 433.586515][ T55] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 433.604295][ T5865] usb 1-1: config 0 descriptor?? [ 433.627008][ T55] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.641654][ T5865] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 433.700688][ T55] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 433.713572][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.739090][ T55] usb 2-1: Product: syz [ 433.750697][ T55] usb 2-1: Manufacturer: syz [ 433.772043][ T55] usb 2-1: SerialNumber: syz [ 433.808411][ T55] usb 2-1: config 0 descriptor?? [ 434.080885][T10733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 434.220956][ T5865] gspca_sonixj: reg_w1 err -110 [ 434.229749][ T5865] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 434.379170][ T5938] usb 1-1: USB disconnect, device number 32 [ 434.445148][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.480642][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.746412][ T5865] usb 2-1: USB disconnect, device number 26 [ 435.907033][ T55] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 435.938020][ T5956] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 435.990465][ T55] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 436.211703][ T5956] usb 2-1: config 0 has no interfaces? [ 436.220681][ T5956] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 436.230299][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.253912][ T5956] usb 2-1: Product: syz [ 436.269768][ T5956] usb 2-1: Manufacturer: syz [ 436.320824][ T5956] usb 2-1: SerialNumber: syz [ 436.364971][ T5956] usb 2-1: config 0 descriptor?? [ 437.559106][T10768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1245'. [ 439.075163][ T5938] usb 2-1: USB disconnect, device number 27 [ 439.594096][T10777] netlink: 'syz.1.1247': attribute type 7 has an invalid length. [ 439.623297][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 439.646247][T10779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1248'. [ 439.834450][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 440.162856][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.169542][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.324721][T10794] gretap1: entered promiscuous mode [ 441.272568][T10812] tipc: Started in network mode [ 441.282052][T10812] tipc: Node identity 8ed76da1b8f4, cluster identity 4711 [ 441.333795][T10812] tipc: Enabled bearer , priority 0 [ 441.352837][T10814] syzkaller0: entered promiscuous mode [ 441.362780][T10814] syzkaller0: entered allmulticast mode [ 441.538841][T10812] tipc: Resetting bearer [ 441.587173][T10810] tipc: Resetting bearer [ 441.674809][T10810] tipc: Disabling bearer [ 441.936709][T10828] binder_alloc: 10827: binder_alloc_buf, no vma [ 442.369186][T10837] delete_channel: no stack [ 444.015938][T10860] tipc: Cannot configure node identity twice [ 445.198586][ T5868] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 445.209907][ T5868] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 445.231293][T10870] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 445.252883][T10870] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 445.262224][T10870] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 445.271312][T10870] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 445.300197][T10870] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 445.329019][T10870] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 445.363446][T10870] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 445.403399][T10870] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 445.412694][T10870] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 445.606608][T10879] binder: 10878:10879 ioctl 80404805 0 returned -22 [ 445.647665][ T55] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 445.871313][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.882621][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.106561][ T55] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.119927][ T5865] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 446.134963][ T55] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.144899][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.169266][ T55] usb 6-1: config 0 descriptor?? [ 446.290008][ T5865] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 446.299168][ T5865] usb 2-1: config 0 has no interface number 0 [ 446.305731][ T5865] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 446.320805][ T5865] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 446.394933][ T5865] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 446.436938][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.461395][ T5865] usb 2-1: config 0 descriptor?? [ 446.481203][T10886] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 446.546541][ T5865] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 446.604564][ T55] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 446.842714][T10886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.865758][ T55] usb 6-1: USB disconnect, device number 8 [ 446.928812][T10886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.128729][T10897] fido_id[10897]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 447.277517][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 447.349989][T10902] netlink: 'syz.3.1281': attribute type 10 has an invalid length. [ 447.393632][T10902] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 447.456929][T10902] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 447.458872][ T5865] usb 2-1: USB disconnect, device number 28 [ 447.474323][T10902] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 447.525171][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.537295][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.687290][ T55] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 447.737720][ T5938] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 447.939238][ T55] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.060980][ T5938] usb 6-1: Using ep0 maxpacket: 16 [ 448.313479][ T5938] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 448.325863][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 448.349394][ T5938] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 448.354149][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 448.359187][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.373465][ T55] usb 7-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 448.405393][ T55] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 448.419627][ T5938] usb 6-1: Product: syz [ 448.423912][ T5938] usb 6-1: Manufacturer: syz [ 448.431871][ T5938] usb 6-1: SerialNumber: syz [ 448.457919][ T55] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 448.470872][ T55] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 448.481838][ T55] usb 7-1: Manufacturer: syz [ 448.489293][ T55] usb 7-1: config 0 descriptor?? [ 448.595598][ T5938] usb 6-1: config 0 descriptor?? [ 448.612861][T10919] binder: BINDER_SET_CONTEXT_MGR already set [ 448.613145][ T5938] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 448.621541][T10919] binder: 10918:10919 ioctl 4018620d 2000000002c0 returned -16 [ 448.648190][ T5938] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 448.699077][T10919] binder: 10918:10919 ioctl c0306201 200000000580 returned -14 [ 448.726454][T10919] binder: 10918:10919 ioctl c0306201 200000000240 returned -11 [ 449.051848][T10933] binder_alloc: 10932: binder_alloc_buf, no vma [ 449.063395][ T55] usb 7-1: USB disconnect, device number 13 [ 449.214508][ T5938] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 449.230683][ T5938] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 449.279012][ T5868] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 449.289148][ T5868] Bluetooth: hci2: Injecting HCI hardware error event [ 449.298385][ T5183] Bluetooth: hci2: hardware error 0x00 [ 449.361146][T10937] netlink: 'syz.1.1291': attribute type 10 has an invalid length. [ 449.379924][T10937] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 449.948098][ T5938] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 450.167345][ T5954] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 450.420550][ T5954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.437385][ T5954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.497961][ T5954] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 450.547295][ T5954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.579025][ T5954] usb 7-1: config 0 descriptor?? [ 450.847452][ T5938] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 450.854723][ T5938] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 450.867673][ T5938] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 450.882190][ T5938] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 450.927674][ T5938] usb 6-1: USB disconnect, device number 9 [ 451.058974][ T5954] usbhid 7-1:0.0: can't add hid device: -71 [ 451.086239][ T5954] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 451.126126][ T5954] usb 7-1: USB disconnect, device number 14 [ 451.367489][ T5183] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 451.614187][ T5935] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 452.169383][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 452.227321][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 452.265171][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 452.301611][ T5935] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 452.341386][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.356952][ T5935] usb 2-1: Product: syz [ 452.357736][ T5865] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 452.361636][ T5935] usb 2-1: Manufacturer: syz [ 452.376613][ T5935] usb 2-1: SerialNumber: syz [ 452.384931][ T5935] usb 2-1: config 0 descriptor?? [ 452.595956][ T5865] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.677532][ T5865] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 452.787473][ T48] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 452.807307][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.907800][ T5865] usb 6-1: config 0 descriptor?? [ 452.999349][ T5865] pwc: Askey VC010 type 2 USB webcam detected. [ 453.044333][ T55] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 453.057288][ T48] usb 7-1: Using ep0 maxpacket: 16 [ 453.217412][ T48] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 453.244595][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.262243][ T48] usb 7-1: config 0 descriptor?? [ 453.294918][ T48] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 453.389707][ T55] usb 1-1: config 1 interface 0 has no altsetting 0 [ 453.401765][ T55] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 453.413382][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.421801][ T55] usb 1-1: Product: syz [ 453.429133][ T5865] pwc: recv_control_msg error -32 req 02 val 2b00 [ 453.436560][ T55] usb 1-1: Manufacturer: syz [ 453.441933][ T55] usb 1-1: SerialNumber: syz [ 453.447350][ T5865] pwc: recv_control_msg error -32 req 02 val 2700 [ 453.461355][ T5865] pwc: recv_control_msg error -32 req 02 val 2c00 [ 453.470447][ T5865] pwc: recv_control_msg error -32 req 04 val 1000 [ 453.481421][ T5865] pwc: recv_control_msg error -32 req 04 val 1300 [ 453.501807][ T5865] pwc: recv_control_msg error -32 req 04 val 1400 [ 453.509615][ T5865] pwc: recv_control_msg error -32 req 02 val 2000 [ 453.520610][ T5865] pwc: recv_control_msg error -32 req 02 val 2100 [ 453.528090][ T5865] pwc: recv_control_msg error -32 req 04 val 1500 [ 453.535459][ T5865] pwc: recv_control_msg error -32 req 02 val 2500 [ 453.687395][ T5956] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 453.745308][ T5865] pwc: recv_control_msg error -71 req 02 val 2600 [ 453.770639][ T5865] pwc: recv_control_msg error -71 req 02 val 2900 [ 453.778049][ T5865] pwc: recv_control_msg error -71 req 02 val 2800 [ 453.788904][ T5865] pwc: recv_control_msg error -71 req 04 val 1100 [ 453.798110][ T5865] pwc: recv_control_msg error -71 req 04 val 1200 [ 453.817345][ T5865] pwc: Registered as video103. [ 453.838447][ T5865] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input25 [ 453.876118][ T5865] usb 6-1: USB disconnect, device number 10 [ 454.125414][ T55] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 454.404034][ T5956] usb 4-1: unable to get BOS descriptor or descriptor too short [ 454.420137][ T5956] usb 4-1: no configurations [ 454.425015][ T5956] usb 4-1: can't read configurations, error -22 [ 454.464417][T11010] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 454.471253][T11010] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 454.483907][T11010] vhci_hcd vhci_hcd.0: Device attached [ 454.554466][ C0] usblp0: nonzero write bulk status received: -71 [ 454.569714][ T9] usb 1-1: USB disconnect, device number 33 [ 454.584882][ T9] usblp0: removed [ 454.747687][ T55] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 455.586811][T11011] vhci_hcd: connection reset by peer [ 455.632421][T10644] vhci_hcd: stop threads [ 455.723151][T10644] vhci_hcd: release socket [ 455.735456][T10644] vhci_hcd: disconnect device [ 456.001989][ T48] gspca_sonixj: reg_w1 err -71 [ 456.090787][ T48] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 456.159586][ T48] usb 7-1: USB disconnect, device number 15 [ 457.448775][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 457.493970][ T9] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 460.074309][ T55] vhci_hcd: vhci_device speed not set [ 460.936027][T11087] mmap: syz.5.1325 (11087) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 461.109444][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1326'. [ 461.482781][T11085] bond0: (slave syz_tun): Releasing backup interface [ 462.097418][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1329'. [ 464.330225][T11118] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 467.036434][T11143] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3095185786 (6190371572 ns) > initial count (5484635560 ns). Using initial count to start timer. [ 468.507323][ T55] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 468.601700][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 468.716649][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 468.763803][ T55] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 468.807440][ T55] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 468.820011][T11158] gtp0: entered allmulticast mode [ 468.825550][T11158] bond1: (slave gtp0): The slave device specified does not support setting the MAC address [ 468.847844][ T5954] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 468.856464][ T55] usb 6-1: Product: syz [ 468.871919][ T55] usb 6-1: Manufacturer: syz [ 468.885760][ T55] usb 6-1: SerialNumber: syz [ 468.908053][T11158] bond1: (slave gtp0): Error -95 calling set_mac_address [ 468.911777][ T55] usb 6-1: config 0 descriptor?? [ 469.017377][ T5954] usb 4-1: Using ep0 maxpacket: 8 [ 469.033937][ T5954] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 469.057098][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.066383][ T5954] usb 4-1: Product: syz [ 469.071318][ T5954] usb 4-1: Manufacturer: syz [ 469.076384][ T5954] usb 4-1: SerialNumber: syz [ 469.122692][ T5954] usb 4-1: config 0 descriptor?? [ 469.150358][ T5954] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 469.175451][ T5938] usb 6-1: USB disconnect, device number 11 [ 469.909893][T11170] bridge1: entered allmulticast mode [ 469.980696][T11172] batman_adv: batadv0: Adding interface: macsec1 [ 469.987071][T11172] batman_adv: batadv0: The MTU of interface macsec1 is too small (1504) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 470.025524][T11172] batman_adv: batadv0: Interface activated: macsec1 [ 471.802449][ T5954] gspca_sonixj: reg_w1 err -71 [ 471.847479][ T5954] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 471.862390][ T5954] usb 4-1: USB disconnect, device number 27 [ 472.797342][ T5935] iguanair 2-1:0.0: failed to get version [ 472.826717][ T5935] iguanair 2-1:0.0: probe with driver iguanair failed with error -110 [ 472.840526][ T5935] usb 2-1: USB disconnect, device number 29 [ 473.045231][T11224] dvmrp0: entered allmulticast mode [ 473.346127][T11239] netlink: 'syz.1.1371': attribute type 1 has an invalid length. [ 473.403204][T11239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 473.414950][T11244] vlan0: entered promiscuous mode [ 473.434339][T11244] bond2: entered promiscuous mode [ 473.476534][T11244] vlan0: entered allmulticast mode [ 473.619686][T11244] bond2: entered allmulticast mode [ 473.738612][T11239] bond2: (slave gretap1): making interface the new active one [ 473.746646][T11239] gretap1: entered promiscuous mode [ 473.827599][T11239] gretap1: entered allmulticast mode [ 474.015377][T11239] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 474.486370][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'. [ 474.516964][T11254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1373'. [ 475.145046][T11271] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1379'. [ 475.164370][T11270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1380'. [ 475.476240][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 475.523701][T11262] input: syz1 as /devices/virtual/input/input26 [ 476.572820][T11296] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 476.583880][T11296] vlan2: entered promiscuous mode [ 476.593522][T11296] bond0: entered promiscuous mode [ 476.601979][T11296] bond_slave_0: entered promiscuous mode [ 476.611041][T11296] bond_slave_1: entered promiscuous mode [ 478.117352][ T5935] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 478.277323][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 478.284976][ T5935] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 478.294062][ T5935] usb 4-1: config 0 has no interface number 0 [ 478.306239][ T5935] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 478.322074][ T5935] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 478.333897][ T5935] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 478.345755][ T5935] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 478.358834][ T5935] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 478.367960][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.379335][ T5935] usb 4-1: config 0 descriptor?? [ 478.391241][ T5935] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 478.652567][ T5954] usb 4-1: USB disconnect, device number 28 [ 478.664398][ T5954] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 478.707564][ T5935] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 478.882240][ T5935] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 478.891626][ T5935] usb 7-1: config 0 has no interface number 0 [ 478.908692][ T5935] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 478.923511][ T5935] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 478.939129][ T5935] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 43776, setting to 64 [ 478.955897][ T5935] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 478.969487][ T5935] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.004802][ T5935] usb 7-1: Product: syz [ 479.014239][ T5935] usb 7-1: Manufacturer: syz [ 479.022179][ T5935] usb 7-1: SerialNumber: syz [ 479.036496][ T5935] usb 7-1: config 0 descriptor?? [ 479.044583][T11315] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 479.052568][T11315] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 479.061961][ T5935] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 479.084313][ T5935] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 479.304769][T11329] bond3: entered promiscuous mode [ 479.315257][T11329] bond3: entered allmulticast mode [ 479.321802][T11329] 8021q: adding VLAN 0 to HW filter on device bond3 [ 479.458522][T11329] bond3 (unregistering): Released all slaves [ 479.493598][T11328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.514185][T11333] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 479.525296][T11333] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 479.600088][T10644] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 479.622757][T10644] bond1: (slave macvlan2): link status up again after 0 ms [ 479.662751][T10644] bond1: (slave macvlan2): link status up again after 0 ms [ 479.689440][ T67] bond1: (slave macvlan2): link status up again after 0 ms [ 479.697115][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 479.728135][ T67] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 479.817324][ T5991] usb 7-1: USB disconnect, device number 16 [ 479.818178][ T155] bond1: (slave macvlan2): failed to get link speed/duplex [ 479.846753][ T5991] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 479.893937][ T5991] cyberjack 7-1:0.69: device disconnected [ 479.987097][T11345] loop7: detected capacity change from 0 to 16384 [ 480.749337][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 480.820143][T11348] loop7: detected capacity change from 16384 to 0 [ 480.822011][ C1] I/O error, dev loop7, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 2 [ 480.826989][ C0] I/O error, dev loop7, sector 16120 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.895735][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 481.048089][ T155] bond1: (slave macvlan2): failed to get link speed/duplex [ 481.437465][ T5954] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 481.603259][ T5954] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.622393][ T5954] usb 6-1: config 0 has no interfaces? [ 481.727063][ T5954] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 481.756707][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.883830][ T5954] usb 6-1: config 0 descriptor?? [ 482.894546][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1409'. [ 482.928859][T11370] dummy0: entered promiscuous mode [ 483.068622][T11370] dummy0: left promiscuous mode [ 483.527334][ T55] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 483.780357][ T55] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 483.858065][ T55] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 483.882574][ T55] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 483.902665][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.947691][T11373] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 483.987034][ T55] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 484.221669][ T55] usb 2-1: USB disconnect, device number 30 [ 484.599152][T11386] netlink: 'syz.6.1413': attribute type 4 has an invalid length. [ 484.616859][T11386] netlink: 'syz.6.1413': attribute type 4 has an invalid length. [ 484.625775][T10176] net_ratelimit: 23 callbacks suppressed [ 484.625791][T10176] bond1: (slave macvlan2): failed to get link speed/duplex [ 484.753811][T10176] bond1: (slave macvlan2): failed to get link speed/duplex [ 484.893303][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 485.065056][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 485.092963][ T5935] usb 6-1: USB disconnect, device number 12 [ 485.158357][ T55] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 485.211613][ T155] bond1: (slave macvlan2): failed to get link speed/duplex [ 485.338079][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 485.360239][ T55] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 485.368984][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 485.378694][ T55] usb 7-1: config 179 has no interface number 0 [ 485.397357][ T55] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 485.436071][ T55] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 485.486950][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 485.503022][ T55] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 485.535006][ T55] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 485.564952][ T5991] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 485.639133][ T55] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 485.650235][T10176] bond1: (slave macvlan2): failed to get link speed/duplex [ 485.654251][ T55] usb 7-1: config 179 interface 65 has no altsetting 0 [ 485.667411][ T55] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 485.677130][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.735520][ T55] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input27 [ 485.985381][ T155] bond1: (slave macvlan2): failed to get link speed/duplex [ 486.012977][ T5991] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.023406][ T5991] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 486.047083][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.056055][ T5218] input input27: unable to receive magic message: -110 [ 486.079458][ T5218] input input27: unable to receive magic message: -32 [ 486.107553][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 486.118554][ T5218] input input27: unable to receive magic message: -32 [ 486.136007][ T5954] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 486.161467][ T5991] usb 2-1: config 0 descriptor?? [ 486.173853][ T5218] input input27: unable to receive magic message: -32 [ 486.188441][ T5991] pwc: Askey VC010 type 2 USB webcam detected. [ 486.225764][ T5218] input input27: unable to receive magic message: -32 [ 486.255550][ T5218] input input27: unable to receive magic message: -32 [ 486.299776][ T5954] usb 4-1: config 0 has no interfaces? [ 486.311207][ T5954] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 486.324257][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.420699][ T5954] usb 4-1: Product: syz [ 486.434910][ T5954] usb 4-1: Manufacturer: syz [ 486.440917][ T5954] usb 4-1: SerialNumber: syz [ 486.453582][ T5954] usb 4-1: config 0 descriptor?? [ 486.594333][ T5991] pwc: recv_control_msg error -32 req 02 val 2b00 [ 486.602304][ T5991] pwc: recv_control_msg error -32 req 02 val 2700 [ 486.610141][ T5991] pwc: recv_control_msg error -32 req 02 val 2c00 [ 486.618257][ T5991] pwc: recv_control_msg error -32 req 04 val 1000 [ 486.626038][ T5991] pwc: recv_control_msg error -32 req 04 val 1300 [ 486.633967][ T5991] pwc: recv_control_msg error -32 req 04 val 1400 [ 486.641737][ T5991] pwc: recv_control_msg error -32 req 02 val 2000 [ 486.649685][ T5991] pwc: recv_control_msg error -32 req 02 val 2100 [ 486.658913][ T5991] pwc: recv_control_msg error -32 req 04 val 1500 [ 486.667801][ T5991] pwc: recv_control_msg error -32 req 02 val 2500 [ 486.686354][ T5954] usb 4-1: USB disconnect, device number 29 [ 486.887348][ T5991] pwc: recv_control_msg error -71 req 02 val 2600 [ 486.903242][ T5991] pwc: recv_control_msg error -71 req 02 val 2900 [ 486.910886][ T5991] pwc: recv_control_msg error -71 req 02 val 2800 [ 486.919746][ T5991] pwc: recv_control_msg error -71 req 04 val 1100 [ 486.986210][ T5991] pwc: recv_control_msg error -71 req 04 val 1200 [ 487.007504][ T5991] pwc: Registered as video103. [ 487.028590][ T5991] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 487.077050][ T5991] usb 2-1: USB disconnect, device number 31 [ 487.689398][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 488.103775][ T5991] usb 7-1: USB disconnect, device number 17 [ 488.109996][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 488.617344][ T55] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 488.874098][ T55] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 488.936474][ T55] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 489.007415][ T55] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 489.026774][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.450319][T11414] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 489.485802][ T55] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.687855][ T1113] net_ratelimit: 24 callbacks suppressed [ 489.687875][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 489.997719][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 490.026273][ T55] usb 2-1: USB disconnect, device number 32 [ 490.172029][T10182] bond1: (slave macvlan2): failed to get link speed/duplex [ 490.382576][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 490.591054][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 491.151571][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 491.451006][ T155] bond1: (slave macvlan2): failed to get link speed/duplex [ 492.217889][T10644] bond1: (slave macvlan2): failed to get link speed/duplex [ 492.480912][ T6213] bond1: (slave macvlan2): failed to get link speed/duplex [ 492.607329][ T6213] bond1: (slave macvlan2): failed to get link speed/duplex [ 493.567469][ T30] audit: type=1804 audit(1755042664.827:346): pid=11460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1434" name="/newroot/286/file1" dev="fuse" ino=1 res=1 errno=0 [ 494.475110][T11475] Lens A: ================= START STATUS ================= [ 494.493220][T11475] Lens A: Focus, Absolute: 0 [ 494.542462][T11475] Lens A: ================== END STATUS ================== [ 494.707389][ T67] net_ratelimit: 12 callbacks suppressed [ 494.707403][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 494.849346][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.045482][ T155] bond1: (slave macvlan2): failed to get link speed/duplex [ 495.797356][ T155] bond1: (slave macvlan2): failed to get link speed/duplex [ 495.877421][ T5935] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 495.998849][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 496.109349][ T5935] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.135313][ T5935] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 496.141234][T10176] bond1: (slave macvlan2): failed to get link speed/duplex [ 496.144364][ T5935] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 496.375399][ T5935] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.689832][ T5935] usb 7-1: config 0 descriptor?? [ 496.837448][T10182] bond1: (slave macvlan2): failed to get link speed/duplex [ 496.998051][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 497.097309][ T5935] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 497.129935][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 497.255525][ T5954] usb 7-1: USB disconnect, device number 18 [ 497.257779][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 497.290720][ T5935] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 497.313611][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.327414][ T5935] usb 2-1: Product: syz [ 497.331615][ T5935] usb 2-1: Manufacturer: syz [ 497.359275][ T5935] usb 2-1: SerialNumber: syz [ 497.397403][ T5935] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 497.430098][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 497.523451][ T5938] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 497.543379][T11514] loop6: detected capacity change from 0 to 524287999 [ 497.566520][ T5962] buffer_io_error: 942 callbacks suppressed [ 497.566538][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.585976][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.597305][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.616821][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.659478][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.676206][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.685147][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.693891][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.702584][ T5962] ldm_validate_partition_table(): Disk read failed. [ 497.710631][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.726844][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.765495][ T5962] Dev loop6: unable to read RDB block 0 [ 497.783760][ T5962] loop6: unable to read partition table [ 497.828442][T11514] ldm_validate_partition_table(): Disk read failed. [ 497.835673][T11514] Dev loop6: unable to read RDB block 0 [ 497.866683][T11514] loop6: unable to read partition table [ 497.887514][T11514] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 498.286598][ T5233] ldm_validate_partition_table(): Disk read failed. [ 498.295420][ T5233] Dev loop6: unable to read RDB block 0 [ 498.302723][ T5233] loop6: unable to read partition table [ 498.676575][T11531] fuse: root generation should be zero [ 498.798166][ T5938] usb 2-1: Service connection timeout for: 256 [ 498.804873][ T5938] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 498.840077][ T5938] ath9k_htc: Failed to initialize the device [ 498.878753][ T5938] usb 2-1: ath9k_htc: USB layer deinitialized [ 499.117441][ T5865] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 499.269972][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.284777][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.297225][ T5865] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 499.315965][ T5865] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 499.325528][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.339029][ T5865] usb 7-1: config 0 descriptor?? [ 499.836302][ T55] usb 2-1: USB disconnect, device number 33 [ 499.842342][ T1113] net_ratelimit: 20 callbacks suppressed [ 499.842362][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 499.905619][ T5865] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 499.932223][ T5865] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 499.941571][ T5865] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 499.950139][T10176] bond1: (slave macvlan2): failed to get link speed/duplex [ 499.954913][ T5865] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 499.966052][ T5865] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 499.974151][ T5865] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 499.982317][ T5865] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 499.990380][ T5865] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 499.998925][ T5865] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 500.016571][ T5865] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 500.059961][ T5865] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 500.067549][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 500.326391][ T5954] usb 7-1: USB disconnect, device number 19 [ 500.350903][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 500.517328][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 500.522580][T11546] fido_id[11546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 500.703266][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 500.837798][T10182] bond1: (slave macvlan2): failed to get link speed/duplex [ 500.957353][T10182] bond1: (slave macvlan2): failed to get link speed/duplex [ 501.141770][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 501.311266][T11559] netlink: 'syz.6.1461': attribute type 10 has an invalid length. [ 501.418041][T11559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.438723][T11559] team0: Port device bond0 added [ 501.456966][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 501.607753][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.614283][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.847319][T11568] binder: 11567:11568 ioctl c0306201 200000000080 returned -14 [ 501.917735][ T5954] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 502.083231][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 502.120286][ T5954] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 502.150306][ T5954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.193863][ T5954] usb 2-1: config 0 has no interface number 0 [ 502.222756][ T5954] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 502.252658][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.279700][ T5954] usb 2-1: config 0 descriptor?? [ 502.311791][ T5954] usb 2-1: Found UVC 0.00 device (0bd3:05f4) [ 502.325940][ T5954] usb 2-1: No valid video chain found. [ 502.540542][ T5954] usb 2-1: USB disconnect, device number 34 [ 502.864159][ T30] audit: type=1800 audit(1755042674.137:347): pid=11592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1468" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 504.950966][ T67] net_ratelimit: 25 callbacks suppressed [ 504.950982][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 505.797886][T10182] bond1: (slave macvlan2): failed to get link speed/duplex [ 505.959232][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 506.118375][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 506.321366][T10182] bond1: (slave macvlan2): failed to get link speed/duplex [ 506.437811][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 506.547360][ T155] bond1: (slave macvlan2): failed to get link speed/duplex [ 506.687779][ T155] bond1: (slave macvlan2): failed to get link speed/duplex [ 506.797367][ T155] bond1: (slave macvlan2): failed to get link speed/duplex [ 506.907971][ T155] bond1: (slave macvlan2): failed to get link speed/duplex [ 508.727635][ T55] delete_channel: no stack [ 509.237482][ T55] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 509.407324][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 509.958402][ T155] net_ratelimit: 22 callbacks suppressed [ 509.958421][ T155] bond1: (slave macvlan2): failed to get link speed/duplex [ 510.152611][ T155] bond1: (slave macvlan2): failed to get link speed/duplex [ 510.160244][ T5865] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 510.317114][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 510.482365][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 510.490911][ T5865] usb 7-1: Using ep0 maxpacket: 16 [ 510.499255][ T5865] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 510.561434][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 510.603911][ T155] bond1: (slave macvlan2): failed to get link speed/duplex [ 510.715915][ T5865] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 510.725566][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 510.736017][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.744961][ T5865] usb 7-1: Product: syz [ 510.751630][ T5865] usb 7-1: Manufacturer: syz [ 510.766960][ T5865] usb 7-1: SerialNumber: syz [ 510.970325][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 510.999527][ T5865] usb 7-1: config 0 descriptor?? [ 511.016597][ T5865] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 511.036168][ T5865] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 511.108954][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 511.227650][ T67] bond1: (slave macvlan2): failed to get link speed/duplex [ 511.383961][T10182] bond1: (slave macvlan2): failed to get link speed/duplex [ 512.148644][ T5865] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 512.238631][ T5865] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 512.941760][ T55] usb 2-1: unable to get BOS descriptor or descriptor too short [ 513.000082][ T5865] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 513.018352][ T5865] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 513.053611][ T5865] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 513.067280][ T55] usb 2-1: no configurations [ 513.071912][ T55] usb 2-1: can't read configurations, error -22 [ 513.337336][ T5865] em28xx 7-1:0.0: AC97 command still being executed: not handled properly! [ 513.346595][ T5865] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 513.527683][ T5865] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 513.557476][ T5865] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 513.639279][ T5865] usb 7-1: USB disconnect, device number 20 [ 514.668651][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1501'. [ 515.501406][ T5935] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 515.912732][ T5935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.930451][ T5935] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 515.946582][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.967893][ T5935] usb 6-1: config 0 descriptor?? [ 515.989732][ T5935] pwc: Askey VC010 type 2 USB webcam detected. [ 516.174422][T11729] binder: 11728:11729 ioctl c0306201 200000000640 returned -22 [ 516.434423][ T5935] pwc: recv_control_msg error -32 req 02 val 2b00 [ 516.444517][ T5935] pwc: recv_control_msg error -32 req 02 val 2700 [ 516.586354][ T5935] pwc: recv_control_msg error -32 req 02 val 2c00 [ 516.595072][ T5935] pwc: recv_control_msg error -32 req 04 val 1000 [ 516.624308][ T5935] pwc: recv_control_msg error -32 req 04 val 1300 [ 516.638666][ T5935] pwc: recv_control_msg error -32 req 04 val 1400 [ 516.657058][ T5935] pwc: recv_control_msg error -32 req 02 val 2000 [ 516.703564][ T5935] pwc: recv_control_msg error -32 req 02 val 2100 [ 516.721347][ T5935] pwc: recv_control_msg error -32 req 04 val 1500 [ 516.746075][ T5935] pwc: recv_control_msg error -32 req 02 val 2500 [ 516.774186][ T5935] pwc: recv_control_msg error -32 req 02 val 2400 [ 516.826360][T11743] netlink: 'syz.6.1510': attribute type 4 has an invalid length. [ 516.888013][T11743] netlink: 'syz.6.1510': attribute type 4 has an invalid length. [ 516.991917][ T5935] pwc: recv_control_msg error -71 req 02 val 2900 [ 517.004133][ T5935] pwc: recv_control_msg error -71 req 02 val 2800 [ 517.015876][ T5935] pwc: recv_control_msg error -71 req 04 val 1100 [ 517.028856][ T5935] pwc: recv_control_msg error -71 req 04 val 1200 [ 517.046140][ T5935] pwc: Registered as video103. [ 517.064807][ T5935] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30 [ 517.121828][ T5935] usb 6-1: USB disconnect, device number 13 [ 517.157706][ T5865] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 517.677955][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.039721][ T5865] usb 2-1: config 0 has no interfaces? [ 518.055211][ T5865] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 518.174922][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.278106][ T5865] usb 2-1: config 0 descriptor?? [ 518.422278][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1514'. [ 518.456355][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1514'. [ 518.501896][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1514'. [ 518.523878][T11745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.537661][T11745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.555527][T11745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.571340][T11745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.580535][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1514'. [ 518.587763][ T5991] usb 2-1: USB disconnect, device number 37 [ 518.616792][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1514'. [ 519.843061][T11782] vlan0: entered promiscuous mode [ 519.848729][T11782] vlan0: left allmulticast mode [ 521.570832][ T5865] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 521.767953][ T5865] usb 6-1: Using ep0 maxpacket: 8 [ 521.895740][ T5865] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 521.916436][ T5865] usb 6-1: config 0 has no interface number 0 [ 521.924971][ T5865] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 521.943707][ T5865] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 522.141726][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.154264][ T5865] usb 6-1: Product: syz [ 522.483356][ T5865] usb 6-1: Manufacturer: syz [ 522.572125][ T5865] usb 6-1: SerialNumber: syz [ 522.821190][ T5865] usb 6-1: config 0 descriptor?? [ 523.172302][ T5865] msi2500 6-1:0.246: Registered as swradio24 [ 523.184414][ T5865] msi2500 6-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 523.297455][ T55] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 523.609470][ T55] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 523.668304][ T55] usb 2-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 523.761149][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.876883][ T55] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 523.963659][ T7217] udevd[7217]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.670370][ T55] usb 2-1: USB disconnect, device number 38 [ 524.995157][ T5865] usb 6-1: USB disconnect, device number 14 [ 525.016882][T11834] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 526.930041][T11861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1542'. [ 527.078003][T11862] wireguard0: entered promiscuous mode [ 527.083676][T11862] wireguard0: entered allmulticast mode [ 528.014871][T11882] kvm: pic: non byte write [ 528.045724][T11882] kvm: pic: non byte write [ 528.079593][T11882] kvm: pic: non byte write [ 528.114088][T11882] kvm: pic: non byte write [ 528.130136][T11882] kvm: pic: single mode not supported [ 528.130152][T11882] kvm: pic: level sensitive irq not supported [ 529.191279][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1550'. [ 533.957926][ T5865] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 534.064959][T11940] tipc: Started in network mode [ 534.079156][T11940] tipc: Node identity a66c7d8945ec, cluster identity 4711 [ 534.123282][T11940] tipc: Enabled bearer , priority 0 [ 534.147541][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 534.154842][ T5865] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.171658][ T5865] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 534.206305][T11942] syzkaller0: entered promiscuous mode [ 534.230831][ T5865] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 534.270570][T11942] syzkaller0: entered allmulticast mode [ 534.296651][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.325872][ T5865] usb 4-1: Product: syz [ 534.355691][ T5865] usb 4-1: Manufacturer: syz [ 534.366085][ T5865] usb 4-1: SerialNumber: syz [ 534.580460][T11946] tipc: Resetting bearer [ 534.629683][ T5865] usb 4-1: 0:2 : does not exist [ 534.656836][T11938] tipc: Resetting bearer [ 534.737588][ T5865] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 534.825634][ T5865] usb 4-1: USB disconnect, device number 30 [ 534.836368][T11938] tipc: Disabling bearer [ 534.996951][T11936] udevd[11936]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.527579][T11955] kernel read not supported for file /½ Iqî"ûIvÃQhþµ“3žJÇÈyûxÐîÃüv÷Lª=QÿW-™. Gaǹ”óW£ (pid: 11955 comm: syz.1.1566) [ 535.547028][ T30] audit: type=1800 audit(1755042706.817:348): pid=11955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1566" name=BD16204971EE22FB4976C3015168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D5118FF572D05992E1A09476115C7B9949DF357A3 dev="mqueue" ino=46646 res=0 errno=0 [ 535.950800][ T55] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 536.189239][ T55] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 536.199814][ T55] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 536.253510][ T55] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 536.334249][ T55] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 536.434806][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 536.448383][ T55] usb 6-1: Product: syz [ 536.456628][ T55] usb 6-1: Manufacturer: syz [ 536.461823][ T55] usb 6-1: SerialNumber: syz [ 536.782258][T11981] kvm: pic: non byte write [ 536.799124][ T55] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 537.252649][ T55] usb 6-1: USB disconnect, device number 15 [ 537.314139][ T55] usblp0: removed [ 537.475939][ T30] audit: type=1326 audit(1755042708.747:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a21d8ebe9 code=0x7ffc0000 [ 537.550350][T11994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.563821][ T30] audit: type=1326 audit(1755042708.777:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a21d8ebe9 code=0x7ffc0000 [ 537.608346][T11994] batadv_slave_0: entered promiscuous mode [ 537.647406][ T5991] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 537.686040][ T30] audit: type=1326 audit(1755042708.787:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a21d8ebe9 code=0x7ffc0000 [ 537.753328][ T30] audit: type=1326 audit(1755042708.787:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a21d8ebe9 code=0x7ffc0000 [ 537.819758][ T30] audit: type=1326 audit(1755042708.787:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f6a21d8ebe9 code=0x7ffc0000 [ 537.843441][ T5991] usb 2-1: Using ep0 maxpacket: 16 [ 537.869659][ T5991] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 537.921722][ T5991] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.961204][ T30] audit: type=1326 audit(1755042708.787:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a21d8ebe9 code=0x7ffc0000 [ 538.101647][ T5991] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 538.237856][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.264985][ T5991] usb 2-1: Product: syz [ 538.275084][ T30] audit: type=1326 audit(1755042708.797:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a21d8ebe9 code=0x7ffc0000 [ 538.305822][ T5991] usb 2-1: Manufacturer: syz [ 538.315167][ T5991] usb 2-1: SerialNumber: syz [ 538.372553][ T30] audit: type=1326 audit(1755042708.797:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a21d8ebe9 code=0x7ffc0000 [ 538.414375][ T30] audit: type=1326 audit(1755042708.797:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a21d8ebe9 code=0x7ffc0000 [ 538.604411][ T5991] usb 2-1: 0:2 : does not exist [ 538.666024][ T5991] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 538.823368][ T5991] usb 2-1: USB disconnect, device number 39 [ 538.990445][T11991] udevd[11991]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.364916][T12012] netlink: 'syz.5.1582': attribute type 10 has an invalid length. [ 539.375644][T12012] bridge0: port 3(team0) entered blocking state [ 539.383709][T12012] bridge0: port 3(team0) entered disabled state [ 539.433282][T12012] team0: entered allmulticast mode [ 539.452746][T12012] team_slave_0: entered allmulticast mode [ 539.491041][T12012] team_slave_1: entered allmulticast mode [ 539.533029][T12012] team0: entered promiscuous mode [ 539.552954][T12012] team_slave_0: entered promiscuous mode [ 539.588968][T12012] team_slave_1: entered promiscuous mode [ 539.621546][T12012] bridge0: port 3(team0) entered blocking state [ 539.628049][T12012] bridge0: port 3(team0) entered forwarding state [ 541.243079][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 541.258807][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 541.288657][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 541.302361][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 541.310643][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 541.647081][T12024] loop2: detected capacity change from 0 to 7 [ 541.671014][T12024] loop2: p1 p4 [ 541.677013][T12024] loop2: partition table partially beyond EOD, truncated [ 541.692424][T12024] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 541.715267][T12024] loop2: p4 start 36 is beyond EOD, truncated [ 541.774720][T11991] udevd[11991]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 542.169028][T12032] tipc: Enabled bearer , priority 0 [ 542.213166][T12022] chnl_net:caif_netlink_parms(): no params data found [ 542.269404][T12032] syzkaller0: entered promiscuous mode [ 542.275002][T12032] syzkaller0: entered allmulticast mode [ 542.512638][T12035] tipc: Resetting bearer [ 542.593158][T12031] tipc: Resetting bearer [ 542.656773][T12031] tipc: Disabling bearer [ 542.969507][T12022] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.006377][T12022] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.014310][T12022] bridge_slave_0: entered allmulticast mode [ 543.318804][T12022] bridge_slave_0: entered promiscuous mode [ 543.328170][T12022] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.335694][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.347597][T12022] bridge_slave_1: entered allmulticast mode [ 543.356421][T12022] bridge_slave_1: entered promiscuous mode [ 543.367481][ T5868] Bluetooth: hci0: command tx timeout [ 543.471715][T12022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.506097][T12022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.901119][T12022] team0: Port device team_slave_0 added [ 543.933556][T12022] team0: Port device team_slave_1 added [ 544.086762][T12022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.124351][T12022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.237939][T12022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.313834][T12022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.349739][T12022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.767422][T12022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.326713][T12022] hsr_slave_0: entered promiscuous mode [ 545.359966][T12022] hsr_slave_1: entered promiscuous mode [ 545.376755][T12022] debugfs: 'hsr0' already exists in 'hsr' [ 545.427782][T12022] Cannot create hsr debugfs directory [ 545.437738][ T5868] Bluetooth: hci0: command tx timeout [ 547.110368][ T5991] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 547.277869][ T5991] usb 7-1: Using ep0 maxpacket: 32 [ 547.292018][ T5991] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 547.307271][ T5991] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 547.315907][ T5991] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.430750][ T5991] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 547.449977][ T5991] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 547.466237][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.486203][ T5991] usb 7-1: config 0 descriptor?? [ 547.546250][ T5868] Bluetooth: hci0: command tx timeout [ 547.738887][T12022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 547.764300][T12022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 547.821505][T12022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 547.858060][T12022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 547.919631][ T5991] usb 7-1: USB disconnect, device number 21 [ 548.035644][T12022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.084937][T12022] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.105305][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.112505][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.155262][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.162591][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.440683][T12022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.571177][T12022] veth0_vlan: entered promiscuous mode [ 548.634159][T12022] veth1_vlan: entered promiscuous mode [ 548.735784][T12022] veth0_macvtap: entered promiscuous mode [ 548.763504][T12022] veth1_macvtap: entered promiscuous mode [ 548.945261][T12022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.980885][T12022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.106057][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.121499][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.408112][ T1113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.422697][ T1113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.500440][T12093] macvlan2: entered allmulticast mode [ 549.506331][T12093] bond_slave_0: entered promiscuous mode [ 549.512422][T12093] bond_slave_1: entered promiscuous mode [ 549.518146][T12093] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 549.525486][T12093] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 549.534832][T12093] bond0: entered allmulticast mode [ 549.540387][T12093] bond_slave_0: entered allmulticast mode [ 549.546211][T12093] bond_slave_1: entered allmulticast mode [ 549.552249][T12093] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 549.597869][ T5868] Bluetooth: hci0: command tx timeout [ 549.617305][T12093] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 549.704789][T12093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 549.748434][T12093] team0: Port device macvlan2 added [ 549.801094][T11993] net_ratelimit: 18 callbacks suppressed [ 549.801134][T11993] Set syz1 is full, maxelem 65536 reached [ 550.062260][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.081054][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.230701][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.250103][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.959053][T12115] binder: 12111:12115 ioctl c00c620f 200000000500 returned -22 [ 551.237469][ T55] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 551.307284][ T48] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 551.567574][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 551.627484][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 551.749778][ T48] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 551.818219][ T55] usb 4-1: config 0 has no interfaces? [ 551.827311][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.857363][ T48] usb 2-1: Product: syz [ 551.861715][ T48] usb 2-1: Manufacturer: syz [ 551.866382][ T48] usb 2-1: SerialNumber: syz [ 551.889546][ T55] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 551.925065][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.985898][ T48] r8152-cfgselector 2-1: Unknown version 0x0000 [ 552.067658][ T55] usb 4-1: Product: syz [ 552.071873][ T55] usb 4-1: Manufacturer: syz [ 552.077364][ T48] r8152-cfgselector 2-1: config 0 descriptor?? [ 552.096462][ T55] usb 4-1: SerialNumber: syz [ 552.105462][ T55] usb 4-1: config 0 descriptor?? [ 552.351061][ T55] usb 4-1: USB disconnect, device number 31 [ 552.558849][ T48] r8152-cfgselector 2-1: Unknown version 0x0000 [ 552.601462][ T48] r8152-cfgselector 2-1: bad CDC descriptors [ 552.611687][ T48] r8152-cfgselector 2-1: USB disconnect, device number 40 [ 554.913265][ T5865] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 555.097560][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 555.120714][ T5865] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 555.170145][ T5865] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 555.220004][ T5865] usb 6-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 555.267248][ T5865] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 555.328859][ T5865] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 555.396031][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.666763][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1610'. [ 555.696091][ T5935] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 555.894723][ T5865] usb 6-1: USB disconnect, device number 16 [ 556.724897][T12187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.748381][T12187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.352690][ T5935] usb 7-1: unable to get BOS descriptor or descriptor too short [ 557.362832][ T5935] usb 7-1: no configurations [ 557.367609][ T5935] usb 7-1: can't read configurations, error -22 [ 558.203626][T12204] netlink: zone id is out of range [ 558.210722][T12204] netlink: zone id is out of range [ 558.215955][T12204] netlink: zone id is out of range [ 558.221618][T12204] netlink: zone id is out of range [ 558.227195][T12204] netlink: zone id is out of range [ 558.232961][T12204] netlink: zone id is out of range [ 558.241690][T12204] netlink: zone id is out of range [ 558.247568][T12204] netlink: zone id is out of range [ 558.253132][T12204] netlink: zone id is out of range [ 558.259171][T12204] netlink: zone id is out of range [ 561.153171][T12213] syz.0.1619 (12213): drop_caches: 1 [ 562.667457][ T5954] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 562.834287][ T5954] usb 7-1: Using ep0 maxpacket: 32 [ 562.846241][ T5954] usb 7-1: config 0 has no interfaces? [ 562.855609][ T5954] usb 7-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 562.873353][ T5954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.889201][ T5954] usb 7-1: Product: syz [ 562.893626][ T5954] usb 7-1: Manufacturer: syz [ 562.898689][ T5954] usb 7-1: SerialNumber: syz [ 562.910356][ T5954] usb 7-1: config 0 descriptor?? [ 562.992128][T12246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1628'. [ 563.046847][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.053867][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.439618][ T55] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 564.642784][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 564.657484][ T55] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 564.670816][ T55] usb 2-1: config 0 has no interface number 0 [ 564.691476][ T55] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3 [ 564.704133][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.715154][ T55] usb 2-1: Product: syz [ 564.724416][ T55] usb 2-1: Manufacturer: syz [ 564.734036][ T55] usb 2-1: SerialNumber: syz [ 564.763946][ T55] usb 2-1: config 0 descriptor?? [ 564.805089][ T55] usb 2-1: bad CDC descriptors [ 565.093958][ T5954] hid_parser_main: 3 callbacks suppressed [ 565.093973][ T5954] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 565.170434][ T5954] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 565.357728][ T5183] Bluetooth: hci0: command 0x0405 tx timeout [ 566.112172][ T5954] usb 7-1: USB disconnect, device number 24 [ 566.357865][ T5954] usb 2-1: USB disconnect, device number 41 [ 566.747071][T12283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.986114][ T55] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 568.207321][ T48] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 568.288586][ T55] usb 7-1: Using ep0 maxpacket: 16 [ 568.295487][ T55] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 568.306924][ T55] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 568.337638][ T55] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 568.367368][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 568.380711][ T48] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 568.418315][ T48] usb 2-1: config 0 has no interface number 0 [ 568.457304][ T55] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 568.523130][ T48] usb 2-1: config 0 interface 184 has no altsetting 0 [ 568.742394][ T55] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 568.814426][ T55] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 568.868802][ T55] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.880208][ T48] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 568.917249][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 568.925362][ T55] usb 7-1: SerialNumber: syz [ 568.930435][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.961922][ T48] usb 2-1: Product: syz [ 568.974173][ T48] usb 2-1: Manufacturer: syz [ 568.979344][T12292] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 569.015555][ T48] usb 2-1: SerialNumber: syz [ 569.022270][T12292] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 569.045290][ T48] usb 2-1: config 0 descriptor?? [ 569.077090][ T48] smsc75xx v1.0.0 [ 569.092093][ T48] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 569.141247][ T48] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 569.323109][T12310] cgroup: fork rejected by pids controller in /syz3 [ 569.681264][T12302] bond3: entered allmulticast mode [ 569.688224][T12302] 8021q: adding VLAN 0 to HW filter on device bond3 [ 569.981350][ T5938] usb 7-1: USB disconnect, device number 25 [ 570.104620][T12626] tipc: Enabled bearer , priority 0 [ 570.119104][T12626] syzkaller0: entered promiscuous mode [ 570.125121][T12626] syzkaller0: entered allmulticast mode [ 570.160421][T12626] tipc: Resetting bearer [ 570.175620][T12625] tipc: Resetting bearer [ 570.212412][T12625] tipc: Disabling bearer [ 571.916185][ T5938] usb 2-1: USB disconnect, device number 42 [ 572.153352][T12645] sit0: entered promiscuous mode [ 572.254018][T12645] netlink: 'syz.5.1648': attribute type 1 has an invalid length. [ 572.266823][T12645] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1648'. [ 572.276130][T12645] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 575.367834][ T48] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 575.619314][ T48] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 575.628244][ T48] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 575.661754][ T48] usb 7-1: config 0 has no interface number 0 [ 575.682998][ T48] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 575.736059][ T48] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 4096, setting to 8 [ 575.754127][ T48] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 575.764679][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.775860][ T48] usb 7-1: config 0 descriptor?? [ 576.090848][ T5935] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 576.300968][ T5935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.580687][ T5935] usb 2-1: config 0 has no interfaces? [ 576.599448][ T5935] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 576.616806][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.648647][ T5935] usb 2-1: Product: syz [ 576.748131][ T5935] usb 2-1: Manufacturer: syz [ 576.757021][ T5935] usb 2-1: SerialNumber: syz [ 576.776328][ T5935] usb 2-1: config 0 descriptor?? [ 577.101883][ T48] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.21/input/input31 [ 577.164294][T12684] kvm: pic: non byte write [ 577.270977][T12686] vlan2: entered promiscuous mode [ 577.276180][T12686] team0: entered promiscuous mode [ 577.284676][T12686] team_slave_0: entered promiscuous mode [ 577.291070][T12686] team_slave_1: entered promiscuous mode [ 577.677426][ T5938] usb 7-1: USB disconnect, device number 26 [ 577.677512][ C1] keyspan_remote 7-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 578.643141][ T5935] usb 2-1: USB disconnect, device number 43 [ 579.362223][ T5935] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 579.541054][ T5935] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 579.565921][ T5935] usb 2-1: config 0 has no interface number 1 [ 579.774967][ T5935] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 579.948248][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.968233][ T5935] usb 2-1: config 0 descriptor?? [ 580.006150][ T5935] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 580.013451][ T5935] usb 2-1: MIDIStreaming interface descriptor not found [ 580.176177][ T5935] gspca_main: spca561-2.14.0 probing abcd:cdee [ 580.243380][ T5935] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 580.275018][ T5935] usb 2-1: USB disconnect, device number 44 [ 581.277480][ T5954] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 581.485804][T12736] team0: Port device bond0 removed [ 581.498166][T12736] bridge_slave_0: left allmulticast mode [ 581.507253][ T5954] usb 6-1: Using ep0 maxpacket: 32 [ 581.508564][T12736] bridge_slave_0: left promiscuous mode [ 581.593508][ T5954] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 581.621271][T12736] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.807416][ T55] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 581.867281][ T5954] usb 6-1: config 0 has no interface number 0 [ 581.893261][ T5954] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 581.893764][T12738] netlink: 'syz.0.1670': attribute type 10 has an invalid length. [ 581.907107][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.956473][ T5954] usb 6-1: Product: syz [ 581.962099][T12736] bridge_slave_1: left allmulticast mode [ 581.968473][ T5954] usb 6-1: Manufacturer: syz [ 581.973201][ T5954] usb 6-1: SerialNumber: syz [ 581.978102][T12736] bridge_slave_1: left promiscuous mode [ 581.981291][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 581.986901][T12736] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.001996][ T5954] usb 6-1: config 0 descriptor?? [ 582.013645][ T5954] smsc95xx v2.0.0 [ 582.020269][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'. [ 582.210590][ T55] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 582.290953][T12736] bond0: (slave bond_slave_0): Releasing backup interface [ 582.306052][ T55] usb 2-1: config 0 has no interface number 0 [ 582.327323][ T55] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 582.329060][T12736] bond_slave_0: left promiscuous mode [ 582.348911][T12736] bond0: (slave bond_slave_1): Releasing backup interface [ 582.387342][ T55] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 582.399735][T12736] bond_slave_1: left promiscuous mode [ 582.406214][T12736] team_slave_0: left promiscuous mode [ 582.416438][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.425986][ T5954] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 582.444287][T12736] team0: Port device team_slave_0 removed [ 582.451219][ T5954] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 582.477204][ T55] usb 2-1: Product: syz [ 582.481449][ T55] usb 2-1: Manufacturer: syz [ 582.501648][T12736] team_slave_1: left promiscuous mode [ 582.512328][T12736] team0: Port device team_slave_1 removed [ 582.523852][ T55] usb 2-1: SerialNumber: syz [ 582.524110][T12736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.539745][T12736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.549270][T12736] bond0: (slave netdevsim0): Releasing backup interface [ 582.583801][T12736] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 582.594707][T12736] bond2: (slave geneve2): Releasing active interface [ 582.610969][T12736] bond2: (slave geneve2): the permanent HWaddr of slave - f2:8f:37:a6:83:f2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 582.648082][T12736] bond2: (slave ip6gretap1): making interface the new active one [ 582.651250][ T55] usb 2-1: config 0 descriptor?? [ 582.684749][T12736] bond2: (slave ip6gretap1): Releasing active interface [ 582.718559][T12736] batman_adv: batadv0: Interface deactivated: macsec1 [ 582.746105][T12736] batman_adv: batadv0: Removing interface: macsec1 [ 582.866227][T12743] tipc: Enabling of bearer rejected, failed to enable media [ 582.877654][T12738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.885500][T12738] team0: Port device bond0 added [ 582.986678][ T55] msi2500 2-1:0.246: Registered as swradio24 [ 583.057930][ T55] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 585.798636][ T55] usb 2-1: USB disconnect, device number 45 [ 585.845544][ T5954] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 585.864346][ T5954] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 585.897243][ T5954] usb 6-1: USB disconnect, device number 17 [ 587.777365][ T55] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 588.039560][ T55] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.155196][ T55] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 588.207620][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.412425][ T55] usb 2-1: config 0 descriptor?? [ 588.496840][ T55] pwc: Askey VC010 type 2 USB webcam detected. [ 588.627104][T12806] netlink: 'syz.3.1686': attribute type 1 has an invalid length. [ 588.887438][ T55] pwc: recv_control_msg error -32 req 02 val 2b00 [ 588.926808][ T55] pwc: recv_control_msg error -32 req 02 val 2700 [ 588.943606][ T55] pwc: recv_control_msg error -32 req 02 val 2c00 [ 588.947327][T12806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1686'. [ 588.974476][ T55] pwc: recv_control_msg error -32 req 04 val 1000 [ 589.001884][T12808] bond1: (slave geneve2): making interface the new active one [ 589.011042][ T55] pwc: recv_control_msg error -32 req 04 val 1300 [ 589.038730][ T55] pwc: recv_control_msg error -32 req 04 val 1400 [ 589.098314][ T55] pwc: recv_control_msg error -32 req 02 val 2000 [ 589.108205][T12808] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 589.121606][ T155] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 589.161956][ T55] pwc: recv_control_msg error -32 req 02 val 2100 [ 589.166437][T12806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 589.204756][ T55] pwc: recv_control_msg error -32 req 04 val 1500 [ 589.213660][ T155] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 589.246854][ T155] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 589.284504][ T55] pwc: recv_control_msg error -32 req 02 val 2500 [ 589.307679][ T55] pwc: recv_control_msg error -32 req 02 val 2400 [ 589.334341][ T155] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 589.334345][ T55] pwc: recv_control_msg error -32 req 02 val 2600 [ 589.589962][ T55] pwc: recv_control_msg error -71 req 02 val 2800 [ 589.596907][ T55] pwc: recv_control_msg error -71 req 04 val 1100 [ 589.637984][ T55] pwc: recv_control_msg error -71 req 04 val 1200 [ 589.666666][ T55] pwc: Registered as video103. [ 589.964896][ T55] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 590.038877][ T55] usb 2-1: USB disconnect, device number 46 [ 590.268021][T12829] netlink: 'syz.6.1690': attribute type 4 has an invalid length. [ 590.500241][T12832] netlink: 'syz.6.1690': attribute type 4 has an invalid length. [ 592.542575][ T48] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 592.734709][ T48] usb 7-1: config 0 has no interfaces? [ 592.748631][ T48] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 592.757925][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.765978][ T48] usb 7-1: Product: syz [ 593.357336][ T48] usb 7-1: Manufacturer: syz [ 593.362419][ T48] usb 7-1: SerialNumber: syz [ 593.371795][ T48] usb 7-1: config 0 descriptor?? [ 594.907584][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 594.907600][ T30] audit: type=1800 audit(1755042766.147:378): pid=12857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1696" name="bus" dev="ramfs" ino=49800 res=0 errno=0 [ 596.253079][ T55] usb 7-1: USB disconnect, device number 27 [ 596.605091][T12880] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 596.682131][T12888] kvm: pic: non byte read [ 596.695881][T12888] kvm: pic: level sensitive irq not supported [ 596.695931][T12888] kvm: pic: non byte read [ 597.293378][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1705'. [ 597.576775][T12904] ptrace attach of "./syz-executor exec"[12022] was attempted by "./syz-executor exec"[12904] [ 597.900570][T12907] tipc: Started in network mode [ 598.017273][ T55] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 598.103093][T12907] tipc: Node identity de1d14b3a0d3, cluster identity 4711 [ 598.117577][T12907] tipc: Enabled bearer , priority 0 [ 598.162875][T12908] syzkaller0: entered promiscuous mode [ 598.176498][T12908] syzkaller0: entered allmulticast mode [ 598.475629][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 598.864142][ T55] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 598.888927][T12907] tipc: Resetting bearer [ 598.894956][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.922123][ T55] usb 7-1: Product: syz [ 598.935104][T12906] tipc: Resetting bearer [ 598.949266][ T55] usb 7-1: Manufacturer: syz [ 598.972275][ T55] usb 7-1: SerialNumber: syz [ 599.007844][ T55] usb 7-1: config 0 descriptor?? [ 599.015158][T12906] tipc: Disabling bearer [ 599.434449][ T55] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 599.591836][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1713'. [ 599.894846][T12924] kvm: pic: non byte write [ 599.925343][ T48] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 600.097753][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 600.108985][ T48] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 600.120980][T12928] netlink: 'syz.5.1714': attribute type 3 has an invalid length. [ 600.129398][T12928] netlink: 'syz.5.1714': attribute type 3 has an invalid length. [ 600.157478][T12928] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1714'. [ 600.202141][ T48] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 600.495115][ T48] usb 2-1: config 135 has no interface number 0 [ 600.555485][ T48] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.721623][ T48] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 600.731181][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.747291][ T48] usb 2-1: Product: syz [ 600.752825][ T48] usb 2-1: Manufacturer: syz [ 600.766346][ T48] usb 2-1: SerialNumber: syz [ 600.786104][ T48] uvcvideo 2-1:135.230: probe with driver uvcvideo failed with error -22 [ 601.280604][ T55] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 601.309623][ T55] usb 7-1: USB disconnect, device number 28 [ 602.141349][T12951] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 602.141349][T12951] The task syz.6.1719 (12951) triggered the difference, watch for misbehavior. [ 603.239387][ T48] usb 2-1: USB disconnect, device number 47 [ 603.858592][T12970] tipc: Enabled bearer , priority 0 [ 603.889505][T12970] syzkaller0: entered promiscuous mode [ 603.910109][T12970] syzkaller0: entered allmulticast mode [ 604.127890][T12973] tipc: Resetting bearer [ 604.144973][T12976] ptrace attach of "./syz-executor exec"[8499] was attempted by "./syz-executor exec"[12976] [ 604.221343][T12968] tipc: Resetting bearer [ 604.274633][T12968] tipc: Disabling bearer [ 607.237477][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 607.387293][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 607.408036][ T9] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 607.432418][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.469705][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 607.487779][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.504111][ T9] usb 6-1: Product: syz [ 607.515296][ T9] usb 6-1: Manufacturer: syz [ 607.525461][ T9] usb 6-1: SerialNumber: syz [ 607.647745][ T5991] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 607.667344][ T5954] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 607.978891][ T9] usb 6-1: 0:2 : does not exist [ 607.989103][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 608.018373][ T9] usb 6-1: USB disconnect, device number 18 [ 608.513408][ T5954] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.555636][ T5954] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 608.676857][ T5954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.706000][ T5954] usb 7-1: config 0 descriptor?? [ 608.734793][T11991] udevd[11991]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 608.761741][ T5954] pwc: Askey VC010 type 2 USB webcam detected. [ 609.137913][T13016] tipc: Enabled bearer , priority 0 [ 609.160232][T13016] syzkaller0: entered promiscuous mode [ 609.168903][ T5954] pwc: recv_control_msg error -32 req 02 val 2b00 [ 609.188173][ T5954] pwc: recv_control_msg error -32 req 02 val 2700 [ 609.194902][T13016] syzkaller0: entered allmulticast mode [ 609.205442][ T5954] pwc: recv_control_msg error -32 req 02 val 2c00 [ 609.228108][ T5954] pwc: recv_control_msg error -32 req 04 val 1000 [ 609.416777][ T5954] pwc: recv_control_msg error -32 req 04 val 1300 [ 609.421398][T13022] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1739'. [ 609.439843][T13016] tipc: Resetting bearer [ 609.446520][ T5954] pwc: recv_control_msg error -32 req 04 val 1400 [ 609.455248][T13015] tipc: Resetting bearer [ 609.477525][ T5954] pwc: recv_control_msg error -32 req 02 val 2000 [ 609.512336][T13022] kvm: kvm [13019]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008d) [ 609.521076][ T5954] pwc: recv_control_msg error -32 req 02 val 2100 [ 609.530902][ T5954] pwc: recv_control_msg error -32 req 04 val 1500 [ 609.531401][T13015] tipc: Disabling bearer [ 609.554402][ T5954] pwc: recv_control_msg error -32 req 02 val 2500 [ 609.572872][ T5954] pwc: recv_control_msg error -32 req 02 val 2400 [ 609.591503][ T5954] pwc: recv_control_msg error -32 req 02 val 2600 [ 609.804817][ T5954] pwc: recv_control_msg error -71 req 02 val 2800 [ 609.814101][ T5954] pwc: recv_control_msg error -71 req 04 val 1100 [ 609.823893][ T5954] pwc: recv_control_msg error -71 req 04 val 1200 [ 609.841216][ T5954] pwc: Registered as video103. [ 609.847399][ T55] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 609.856931][ T5954] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input33 [ 610.283250][ T55] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.293025][ T5954] usb 7-1: USB disconnect, device number 29 [ 610.312102][ T55] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.364868][ T55] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 610.419930][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 610.460789][ T55] usb 2-1: SerialNumber: syz [ 610.809331][ T55] usb 2-1: 0:2 : does not exist [ 610.853427][ T55] usb 2-1: unit 5: unexpected type 0x0d [ 610.977561][ T5991] usb 4-1: device descriptor read/64, error -71 [ 611.046389][ T55] usb 2-1: USB disconnect, device number 48 [ 611.166211][T11991] udevd[11991]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.267257][ T5991] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 611.457296][ T5991] usb 4-1: Using ep0 maxpacket: 16 [ 612.026573][T13059] bridge0: port 4(gretap0) entered blocking state [ 612.051300][T13059] bridge0: port 4(gretap0) entered disabled state [ 612.067732][T13059] gretap0: entered allmulticast mode [ 612.089787][T13059] gretap0: entered promiscuous mode [ 612.377766][T13059] bridge0: port 4(gretap0) entered blocking state [ 612.384761][T13059] bridge0: port 4(gretap0) entered forwarding state [ 612.403141][T13061] gretap0: left allmulticast mode [ 612.494237][T13061] gretap0: left promiscuous mode [ 612.538710][T13061] bridge0: port 4(gretap0) entered disabled state [ 613.770342][ T5991] usb 4-1: unable to get BOS descriptor or descriptor too short [ 613.796939][ T5991] usb 4-1: no configurations [ 613.807239][ T5991] usb 4-1: can't read configurations, error -22 [ 613.841100][ T5991] usb usb4-port1: attempt power cycle [ 614.487232][ T30] audit: type=1326 audit(1755042785.717:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13096 comm="syz.6.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7838ebe9 code=0x7ffc0000 [ 614.622054][ T30] audit: type=1326 audit(1755042785.717:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13096 comm="syz.6.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7838ebe9 code=0x7ffc0000 [ 614.693553][ T30] audit: type=1326 audit(1755042785.717:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13096 comm="syz.6.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a7838ebe9 code=0x7ffc0000 [ 614.830119][ T30] audit: type=1326 audit(1755042785.717:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13096 comm="syz.6.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7838ebe9 code=0x7ffc0000 [ 614.895661][ T30] audit: type=1326 audit(1755042785.717:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13096 comm="syz.6.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8a7838ebe9 code=0x7ffc0000 [ 614.942160][ T30] audit: type=1326 audit(1755042785.717:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13096 comm="syz.6.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7838ebe9 code=0x7ffc0000 [ 614.964522][ C0] vkms_vblank_simulate: vblank timer overrun [ 615.022739][ T30] audit: type=1326 audit(1755042785.717:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13096 comm="syz.6.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7838ebe9 code=0x7ffc0000 [ 615.045254][ C0] vkms_vblank_simulate: vblank timer overrun [ 615.136647][ T30] audit: type=1326 audit(1755042785.717:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13096 comm="syz.6.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7838ebe9 code=0x7ffc0000 [ 615.606526][T13114] netlink: 'syz.1.1761': attribute type 33 has an invalid length. [ 615.615860][T13114] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1761'. [ 615.825441][T13119] tipc: Enabled bearer , priority 0 [ 615.834337][T13119] syzkaller0: entered promiscuous mode [ 615.845988][T13119] syzkaller0: entered allmulticast mode [ 615.886195][T13119] tipc: Resetting bearer [ 615.897765][T13118] tipc: Resetting bearer [ 615.921021][T13118] tipc: Disabling bearer [ 616.652058][T13132] tipc: Enabled bearer , priority 0 [ 616.677602][T13132] syzkaller0: entered promiscuous mode [ 616.685075][T13132] syzkaller0: entered allmulticast mode [ 616.725831][ T5991] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 616.769006][T13132] tipc: Resetting bearer [ 616.788829][T13131] tipc: Resetting bearer [ 616.828007][T13131] tipc: Disabling bearer [ 616.877510][ T5991] usb 2-1: Using ep0 maxpacket: 16 [ 617.418078][T13138] tipc: Enabled bearer , priority 0 [ 617.446138][T13138] syzkaller0: entered promiscuous mode [ 617.457339][ T48] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 617.465000][T13138] syzkaller0: entered allmulticast mode [ 617.622897][T13138] tipc: Resetting bearer [ 617.629250][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 617.684737][ T48] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 617.697741][T13137] tipc: Resetting bearer [ 617.742695][ T48] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 617.791273][ T48] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 617.792281][T13137] tipc: Disabling bearer [ 617.808541][ T48] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 617.849818][T13141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.948282][T13150] tipc: Enabled bearer , priority 0 [ 618.005611][T13145] syzkaller0: entered promiscuous mode [ 618.022037][T13145] syzkaller0: entered allmulticast mode [ 618.058646][ T48] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.123511][ T48] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 618.132811][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.291075][T13150] tipc: Resetting bearer [ 618.347897][T13144] tipc: Resetting bearer [ 618.392892][T13144] tipc: Disabling bearer [ 618.458123][ T48] usb 6-1: usb_control_msg returned -32 [ 618.468415][ T48] usbtmc 6-1:16.0: can't read capabilities [ 619.037836][ T5954] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 619.083113][T13161] usbtmc 6-1:16.0: stb usb_control_msg returned -32 [ 619.237469][ T5954] usb 7-1: Using ep0 maxpacket: 16 [ 619.246837][ T5954] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 619.256713][ T5954] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 619.306929][ T5954] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 619.364884][ T5954] usb 7-1: config 1 has no interface number 1 [ 619.397090][ T5954] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 619.443608][ T5954] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 619.481478][ T5954] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 619.494667][ T5954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.527729][ T5954] usb 7-1: Product: syz [ 619.560572][ T5954] usb 7-1: Manufacturer: syz [ 619.565493][ T5954] usb 7-1: SerialNumber: syz [ 620.089758][T13166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 620.744970][ T5991] usb 2-1: unable to get BOS descriptor or descriptor too short [ 620.753249][ T5991] usb 2-1: no configurations [ 620.780336][ T5991] usb 2-1: can't read configurations, error -22 [ 620.823325][ T5954] usb 7-1: USB disconnect, device number 30 [ 621.038969][T11991] udevd[11991]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.909458][T13176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.021063][ T55] usb 6-1: USB disconnect, device number 20 [ 624.486210][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.486249][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.622076][T13210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 625.705147][T13209] tipc: Enabling of bearer rejected, failed to enable media [ 627.841901][T13230] tipc: Enabled bearer , priority 0 [ 627.890635][T13230] syzkaller0: entered promiscuous mode [ 627.912067][T13230] syzkaller0: entered allmulticast mode [ 628.327510][T13229] tipc: Resetting bearer [ 628.365300][T13229] tipc: Disabling bearer [ 630.567282][ T5991] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 630.746305][ T5991] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 630.785833][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 630.914907][ T5991] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.075750][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 631.145667][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 631.181133][ T5991] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 631.209382][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 631.279733][ T5991] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.346715][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 631.373533][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 631.406906][ T5991] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 631.423580][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 631.456209][ T5991] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.497304][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 631.532050][ T5991] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 631.560534][ T5991] usb 7-1: string descriptor 0 read error: -22 [ 631.567027][ T5991] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 631.576755][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.622328][ T5991] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 632.066486][T13246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.075550][T13246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.138283][ T5991] usb 7-1: USB disconnect, device number 31 [ 632.973406][T13274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1797'. [ 632.983072][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'. [ 635.177438][ T48] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 635.342595][ T48] usb 4-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 635.357169][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.442609][ T48] usb 4-1: config 0 descriptor?? [ 636.176587][T13310] tipc: Enabled bearer , priority 0 [ 636.210229][T13310] syzkaller0: entered promiscuous mode [ 636.223784][T13310] syzkaller0: entered allmulticast mode [ 636.355404][T13310] tipc: Resetting bearer [ 636.372170][T13309] tipc: Resetting bearer [ 636.434576][T13309] tipc: Disabling bearer [ 636.452621][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1807'. [ 636.553954][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1807'. [ 637.981820][ T48] usbhid 4-1:0.0: can't add hid device: -71 [ 638.087866][ T48] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 638.117506][ T48] usb 4-1: USB disconnect, device number 35 [ 640.008254][T13341] tipc: Enabled bearer , priority 0 [ 640.062183][T13341] syzkaller0: entered promiscuous mode [ 640.069341][T13341] syzkaller0: entered allmulticast mode [ 640.170729][T13341] tipc: Resetting bearer [ 640.201603][T13340] tipc: Resetting bearer [ 640.458462][T13340] tipc: Disabling bearer [ 643.720206][T13373] tipc: Enabled bearer , priority 0 [ 643.729321][T13371] syzkaller0: entered promiscuous mode [ 643.738814][T13371] syzkaller0: entered allmulticast mode [ 643.776521][T13371] tipc: Resetting bearer [ 643.907221][ T55] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 644.001482][T13370] tipc: Resetting bearer [ 644.110354][ T55] usb 7-1: Using ep0 maxpacket: 32 [ 644.156873][ T55] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 644.180383][T13370] tipc: Disabling bearer [ 644.201876][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 644.261991][ T55] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 644.287234][ T55] usb 7-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 644.299535][ T55] usb 7-1: Product: syz [ 644.305828][ T55] usb 7-1: Manufacturer: syz [ 644.315948][ T55] usb 7-1: SerialNumber: syz [ 644.347560][ T55] usb 7-1: config 0 descriptor?? [ 644.427170][ T55] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 644.637471][T13386] tipc: Started in network mode [ 644.642437][T13386] tipc: Node identity 3a5d809d0f78, cluster identity 4711 [ 644.657773][T13386] tipc: Enabled bearer , priority 0 [ 644.666838][T13386] syzkaller0: entered promiscuous mode [ 644.672494][T13386] syzkaller0: entered allmulticast mode [ 644.735172][T13386] tipc: Resetting bearer [ 644.743635][T13385] tipc: Resetting bearer [ 644.770010][T13385] tipc: Disabling bearer [ 645.441620][ T1043] usb 7-1: Failed to submit usb control message: -110 [ 645.477942][ T1043] usb 7-1: unable to send the bmi data to the device: -110 [ 645.485283][ T1043] usb 7-1: unable to get target info from device [ 645.535817][ T1043] usb 7-1: could not get target info (-110) [ 645.543386][ T1043] usb 7-1: could not probe fw (-110) [ 645.807986][ T5955] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 645.969608][T13393] tipc: Enabled bearer , priority 0 [ 645.986840][T13394] syzkaller0: entered promiscuous mode [ 645.993341][T13394] syzkaller0: entered allmulticast mode [ 646.010469][T13393] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 646.029485][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 646.036236][T13393] tipc: Resetting bearer [ 646.043528][T13392] tipc: Resetting bearer [ 646.069140][ T5955] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 646.087396][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.096323][T13392] tipc: Disabling bearer [ 646.112181][ T5955] usb 4-1: Product: syz [ 646.122618][ T5955] usb 4-1: Manufacturer: syz [ 646.127617][ T5955] usb 4-1: SerialNumber: syz [ 646.138216][ T5955] usb 4-1: config 0 descriptor?? [ 646.383077][ T5955] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 646.552507][ T55] usb 7-1: USB disconnect, device number 32 [ 646.624058][T13389] net_ratelimit: 17 callbacks suppressed [ 646.624078][T13389] Dead loop on virtual device ip6_vti0, fix it urgently! [ 648.029772][ T5955] usb write operation failed. (-71) [ 648.054794][ T5955] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 648.066450][ T5955] dvbdev: DVB: registering new adapter (Terratec H7) [ 648.101925][ T5955] usb 4-1: media controller created [ 648.116258][ T5955] usb read operation failed. (-71) [ 648.126442][ T5955] usb write operation failed. (-71) [ 648.151380][ T5955] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 648.194957][ T5955] usb 4-1: USB disconnect, device number 36 [ 648.247355][ T5935] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 648.489845][ T5935] usb 6-1: Using ep0 maxpacket: 8 [ 648.503671][ T5935] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 648.539651][ T5935] usb 6-1: config 0 has no interface number 0 [ 648.577890][T13424] tipc: Enabled bearer , priority 0 [ 648.587295][T13424] syzkaller0: entered promiscuous mode [ 648.610121][T13424] syzkaller0: entered allmulticast mode [ 648.616466][ T5935] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 648.691287][T13424] tipc: Resetting bearer [ 648.697424][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.697452][ T5935] usb 6-1: Product: syz [ 648.697467][ T5935] usb 6-1: Manufacturer: syz [ 648.697486][ T5935] usb 6-1: SerialNumber: syz [ 648.746004][T13423] tipc: Resetting bearer [ 648.778143][ T5935] usb 6-1: config 0 descriptor?? [ 648.810800][T13423] tipc: Disabling bearer [ 648.948515][ T5935] msi2500 6-1:0.246: Registered as swradio24 [ 648.979835][ T5935] msi2500 6-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 649.189710][T13434] tipc: Enabled bearer , priority 0 [ 649.202014][T13434] syzkaller0: entered promiscuous mode [ 649.210533][T13434] syzkaller0: entered allmulticast mode [ 649.388197][T13434] tipc: Resetting bearer [ 649.399551][T13431] tipc: Resetting bearer [ 650.278134][ T5991] tipc: Node number set to 891650205 [ 650.302080][T13431] tipc: Disabling bearer [ 650.505316][T13444] tipc: Enabled bearer , priority 0 [ 650.568085][T13445] syzkaller0: entered promiscuous mode [ 650.573728][T13445] syzkaller0: entered allmulticast mode [ 650.603929][T13444] tipc: Resetting bearer [ 650.623361][T13443] tipc: Resetting bearer [ 650.690780][T13443] tipc: Disabling bearer [ 651.299369][ T5991] usb 6-1: USB disconnect, device number 21 [ 653.722848][T13473] tipc: Enabled bearer , priority 0 [ 653.781420][T13479] syzkaller0: entered promiscuous mode [ 653.786964][T13479] syzkaller0: entered allmulticast mode [ 653.799056][T13480] syzkaller0: entered promiscuous mode [ 653.804640][T13480] syzkaller0: entered allmulticast mode [ 653.815371][T13473] tipc: Resetting bearer [ 654.041620][T13471] tipc: Resetting bearer [ 654.151130][T13471] tipc: Disabling bearer [ 655.416233][T13491] kvm: kvm [13490]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffcf00000000 [ 655.442179][T13491] kvm: kvm [13490]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 655.466174][T13491] kvm: kvm [13490]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfffffff800000000 [ 655.477098][T13491] kvm: kvm [13490]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 655.674752][ T5954] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 655.872231][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.914575][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.947785][ T5954] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 655.987072][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.020011][ T5954] usb 4-1: config 0 descriptor?? [ 656.112360][T13514] binder: 13512:13514 ioctl c00c620f 0 returned -14 [ 656.121476][T13514] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1855'. [ 657.243279][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 657.567410][ T5954] uclogic 0003:256C:006D.0011: v1 frame probing failed: -71 [ 657.574813][ T5954] uclogic 0003:256C:006D.0011: failed probing parameters: -71 [ 657.592761][ T9] usb 6-1: config 0 has no interfaces? [ 657.631436][ T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 657.658337][ T5954] uclogic 0003:256C:006D.0011: probe with driver uclogic failed with error -71 [ 657.712892][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.756592][ T9] usb 6-1: Product: syz [ 657.761470][ T5954] usb 4-1: USB disconnect, device number 37 [ 657.775430][ T9] usb 6-1: Manufacturer: syz [ 657.931865][ T9] usb 6-1: SerialNumber: syz [ 657.950247][ T5865] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 657.969948][ T9] usb 6-1: config 0 descriptor?? [ 658.226555][ T5865] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.261165][ T5865] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 658.374700][ T5865] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 658.426999][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 658.513029][ T5865] usb 7-1: SerialNumber: syz [ 658.864018][ T5865] usb 7-1: 0:2 : does not exist [ 658.916101][ T5865] usb 7-1: USB disconnect, device number 33 [ 659.298092][ T55] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 659.549181][ T55] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.561531][ T55] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 659.574829][ T55] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 659.616345][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.627384][ T5991] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 659.644110][ T5954] usb 6-1: USB disconnect, device number 22 [ 659.692839][ T55] usb 2-1: config 0 descriptor?? [ 659.787458][ T5991] usb 4-1: Using ep0 maxpacket: 32 [ 659.804426][ T5991] usb 4-1: config 0 has an invalid interface number: 54 but max is 0 [ 659.813225][ T5991] usb 4-1: config 0 has no interface number 0 [ 659.820157][ T5991] usb 4-1: config 0 interface 54 has no altsetting 0 [ 659.831252][ T5991] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 659.841169][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.849485][ T5991] usb 4-1: Product: syz [ 659.856984][ T5991] usb 4-1: Manufacturer: syz [ 659.871984][ T5991] usb 4-1: SerialNumber: syz [ 659.903231][ T5991] usb 4-1: config 0 descriptor?? [ 661.133893][T13562] syz_tun: entered allmulticast mode [ 661.155744][T13562] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1867'. [ 661.280350][T13561] syz_tun: left allmulticast mode [ 661.370811][T13569] loop6: detected capacity change from 0 to 1 [ 661.602465][T13569] Dev loop6: unable to read RDB block 1 [ 661.611714][T13569] loop6: unable to read partition table [ 661.618282][T13569] loop6: partition table beyond EOD, truncated [ 661.842950][T13569] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 662.697727][ T5991] ums_eneub6250 4-1:0.54: USB Mass Storage device detected [ 662.875231][ T5991] usb 4-1: USB disconnect, device number 38 [ 663.015247][ T5954] usb 2-1: USB disconnect, device number 51 [ 663.048670][T13586] tipc: Enabled bearer , priority 0 [ 663.081121][T13586] syzkaller0: entered promiscuous mode [ 663.086636][T13586] syzkaller0: entered allmulticast mode [ 663.157947][T13592] tipc: Enabled bearer , priority 0 [ 663.175105][T13586] tipc: Resetting bearer [ 663.182420][T13592] syzkaller0: entered promiscuous mode [ 663.194102][T13592] syzkaller0: entered allmulticast mode [ 663.202656][T13585] tipc: Resetting bearer [ 663.343388][ T5991] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 663.352976][T13585] tipc: Disabling bearer [ 663.381190][T13592] tipc: Resetting bearer [ 663.396475][T13591] tipc: Resetting bearer [ 663.532883][ T5991] usb 4-1: Using ep0 maxpacket: 16 [ 663.558233][ T5991] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 663.575150][ T5991] usb 4-1: config 0 has no interface number 0 [ 663.602632][ T5991] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.615396][T13591] tipc: Disabling bearer [ 663.633014][ T5991] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.633169][T13602] tipc: Enabled bearer , priority 0 [ 663.657102][T13598] syzkaller0: entered promiscuous mode [ 663.673244][T13598] syzkaller0: entered allmulticast mode [ 663.695530][ T5991] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 663.735781][ T5991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.793353][ T5991] usb 4-1: config 0 descriptor?? [ 663.799590][T13598] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 663.812814][T13598] tipc: Resetting bearer [ 663.820354][T13597] tipc: Resetting bearer [ 664.142770][T13597] tipc: Disabling bearer [ 664.652651][ T5991] uclogic 0003:28BD:0071.0012: pen parameters not found [ 664.660310][ T36] ------------[ cut here ]------------ [ 664.666264][ T36] WARNING: CPU: 0 PID: 36 at io_uring/io_uring.c:2981 io_ring_exit_work+0x4ed/0x930 [ 664.667845][ T5991] uclogic 0003:28BD:0071.0012: interface is invalid, ignoring [ 664.675883][ T36] Modules linked in: [ 664.688235][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 664.700957][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 664.711157][ T36] Workqueue: iou_exit io_ring_exit_work [ 664.716737][ T36] RIP: 0010:io_ring_exit_work+0x4ed/0x930 [ 664.722589][ T36] Code: c6 05 38 e2 61 0e 01 48 c7 c7 20 5e e2 8b be 24 00 00 00 48 c7 c2 c0 5d e2 8b e8 1e 1d 72 00 e9 7b fe ff ff e8 c4 42 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 664.742289][ T36] RSP: 0018:ffffc90000ac78e0 EFLAGS: 00010293 [ 664.748545][ T36] RAX: ffffffff812b68ec RBX: 0000000100008db2 RCX: ffff8881412f9e00 [ 664.756532][ T36] RDX: 0000000000000000 RSI: fffffffffffffff6 RDI: 0000000000000000 [ 664.764899][ T36] RBP: ffffc90000ac7a70 R08: ffffc90000ac7867 R09: 1ffff92000158f0c [ 664.772956][ T36] R10: dffffc0000000000 R11: fffff52000158f0d R12: 0000000100008da8 [ 664.781652][ T36] R13: ffff888054eec310 R14: ffff888054eec480 R15: dffffc0000000000 [ 664.790743][ T36] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 664.800336][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 664.807266][ T36] CR2: 0000001b2e223ffc CR3: 000000004fdca000 CR4: 00000000003526f0 [ 664.815266][ T36] Call Trace: [ 664.818626][ T36] [ 664.821613][ T36] ? __pfx_io_ring_exit_work+0x10/0x10 [ 664.827073][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 664.832883][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 664.838708][ T36] process_scheduled_works+0xade/0x17b0 [ 664.844264][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 664.850286][ T36] worker_thread+0x8a0/0xda0 [ 664.854909][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 664.861299][ T36] ? __kthread_parkme+0x7b/0x200 [ 664.866272][ T36] kthread+0x70e/0x8a0 [ 664.870407][ T36] ? __pfx_worker_thread+0x10/0x10 [ 664.875537][ T36] ? __pfx_kthread+0x10/0x10 [ 664.880350][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 664.885582][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.891568][ T36] ? __pfx_kthread+0x10/0x10 [ 664.896176][ T36] ret_from_fork+0x3f9/0x770 [ 664.901341][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 664.906469][ T36] ? __switch_to_asm+0x39/0x70 [ 664.911299][ T36] ? __switch_to_asm+0x33/0x70 [ 664.916074][ T36] ? __pfx_kthread+0x10/0x10 [ 664.920737][ T36] ret_from_fork_asm+0x1a/0x30 [ 664.925524][ T36] [ 664.928615][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 664.935903][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 664.948091][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 664.958209][ T36] Workqueue: iou_exit io_ring_exit_work [ 664.963781][ T36] Call Trace: [ 664.967081][ T36] [ 664.970020][ T36] dump_stack_lvl+0x99/0x250 [ 664.974776][ T36] ? __asan_memcpy+0x40/0x70 [ 664.979370][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.984580][ T36] ? __pfx__printk+0x10/0x10 [ 664.989284][ T36] vpanic+0x281/0x750 [ 664.993463][ T36] ? __pfx__printk+0x10/0x10 [ 664.998139][ T36] ? __pfx_vpanic+0x10/0x10 [ 665.002819][ T36] ? is_bpf_text_address+0x26/0x2b0 [ 665.008021][ T36] panic+0xb9/0xc0 [ 665.011821][ T36] ? __pfx_panic+0x10/0x10 [ 665.016235][ T36] __warn+0x31b/0x4b0 [ 665.020236][ T36] ? io_ring_exit_work+0x4ed/0x930 [ 665.025350][ T36] ? io_ring_exit_work+0x4ed/0x930 [ 665.030491][ T36] report_bug+0x2be/0x4f0 [ 665.034840][ T36] ? io_ring_exit_work+0x4ed/0x930 [ 665.039978][ T36] ? io_ring_exit_work+0x4ed/0x930 [ 665.045085][ T36] ? io_ring_exit_work+0x4ef/0x930 [ 665.050194][ T36] handle_bug+0x84/0x160 [ 665.054428][ T36] exc_invalid_op+0x1a/0x50 [ 665.058919][ T36] asm_exc_invalid_op+0x1a/0x20 [ 665.063772][ T36] RIP: 0010:io_ring_exit_work+0x4ed/0x930 [ 665.069487][ T36] Code: c6 05 38 e2 61 0e 01 48 c7 c7 20 5e e2 8b be 24 00 00 00 48 c7 c2 c0 5d e2 8b e8 1e 1d 72 00 e9 7b fe ff ff e8 c4 42 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 665.089084][ T36] RSP: 0018:ffffc90000ac78e0 EFLAGS: 00010293 [ 665.095212][ T36] RAX: ffffffff812b68ec RBX: 0000000100008db2 RCX: ffff8881412f9e00 [ 665.103208][ T36] RDX: 0000000000000000 RSI: fffffffffffffff6 RDI: 0000000000000000 [ 665.111256][ T36] RBP: ffffc90000ac7a70 R08: ffffc90000ac7867 R09: 1ffff92000158f0c [ 665.119231][ T36] R10: dffffc0000000000 R11: fffff52000158f0d R12: 0000000100008da8 [ 665.127216][ T36] R13: ffff888054eec310 R14: ffff888054eec480 R15: dffffc0000000000 [ 665.135195][ T36] ? io_ring_exit_work+0x4ec/0x930 [ 665.140406][ T36] ? __pfx_io_ring_exit_work+0x10/0x10 [ 665.145902][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 665.151715][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 665.157596][ T36] process_scheduled_works+0xade/0x17b0 [ 665.163233][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 665.169201][ T36] worker_thread+0x8a0/0xda0 [ 665.173785][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 665.180227][ T36] ? __kthread_parkme+0x7b/0x200 [ 665.185164][ T36] kthread+0x70e/0x8a0 [ 665.189224][ T36] ? __pfx_worker_thread+0x10/0x10 [ 665.194314][ T36] ? __pfx_kthread+0x10/0x10 [ 665.198888][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 665.204074][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.209416][ T36] ? __pfx_kthread+0x10/0x10 [ 665.214032][ T36] ret_from_fork+0x3f9/0x770 [ 665.218712][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 665.223909][ T36] ? __switch_to_asm+0x39/0x70 [ 665.228666][ T36] ? __switch_to_asm+0x33/0x70 [ 665.233425][ T36] ? __pfx_kthread+0x10/0x10 [ 665.238010][ T36] ret_from_fork_asm+0x1a/0x30 [ 665.242766][ T36] [ 665.246058][ T36] Kernel Offset: disabled [ 665.250369][ T36] Rebooting in 86400 seconds..