last executing test programs: 13.058183184s ago: executing program 2 (id=627): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(r3) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff70790008340201210126"], 0x0) r4 = socket$inet(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 12.441454421s ago: executing program 3 (id=629): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4040010) 12.101858017s ago: executing program 4 (id=633): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0xb1, @multicast2, 0x4e23, 0x2, 'lc\x00', 0x2, 0x3, 0x2}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4e20, 0x1, 0x80a, 0xffffff81, 0x12d5c}}, 0x44) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x8, @multicast2, 0x4e23, 0x3, 'wlc\x00', 0x6, 0x8003, 0x1815}, {@rand_addr=0x64010100, 0xce20, 0x4, 0x3, 0x80812f58, 0x12d58}}, 0x44) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a0080000002000800000000040008800fc5f4e6a846e6f6ec0f662d65ac84f39514a463ec851377d393fcfdc118fc8acabb2ca567a0fda6652aa1c03a66c414ccdaeda53db74f82a7b0a6c497f0b204bfbcfc576072472f68b1cc8673f30fa643d317e2"], 0x20}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 12.002734045s ago: executing program 1 (id=634): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/56, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) rseq(0x0, 0x0, 0x4000000000, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 11.169156427s ago: executing program 0 (id=635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/76, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000600)={0x17}) r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000300)={{0x0, 0x6}, 'port1\x00', 0x8, 0x8100d, 0x2, 0x6, 0x1, 0x401, 0x5, 0x0, 0x5, 0xd}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) pread64(r0, &(0x7f000001a240)=""/102387, 0x18ff3, 0x100008) 9.631858446s ago: executing program 3 (id=637): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) preadv2(r4, 0x0, 0x0, 0x3, 0xfffffffd, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb200"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 8.981816713s ago: executing program 2 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) alarm(0x9) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) 7.39115093s ago: executing program 0 (id=639): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) eventfd(0x401) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902"], 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8003, 0x103800) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000002c0)={0x0, 0x1, 0x3011, 0x1}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @loopback}}}}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) 6.834304862s ago: executing program 1 (id=640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000009, 0xffffffff, 0x0, 0x0, 0x2, 0x7fffffff, 0x203, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x8, 0x0, 0x0, 0x3, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, &(0x7f0000000040)) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000600)=[@code={0x1, 0x7d, {"67660f7ec640839900080000eb66baf80cb838966784ef66bafc0cedc744240000000080c74424029823853cc7442406000000000f011c24450b21c401245def40df36b9470a00000f32b9b7080000b805000000ba000000000f30b9a30a0000b800000000ba000000800f30"}}, @code={0x1, 0x65, {"b805000000b9350000000f01d93ef30f090f01c466b819000f00d066baf80cb8b2f07b8def66bafc0c66edc4e1b05dbf0000000066baf80cb830b2d68aef66bafc0ced0f01d12e2e0f01c88fe9f801a585680000"}}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x71, {"0f30c74424000b000000c7442402b6000000c7442406000000000f011c24460f236f66baf80cb8684b2d84ef66bafc0c66b8e87566efc4e3c5695a0f0466bad104b0aeeef33e400f0f66a00cc441e05704b3c481f829960080000026f20f23f0"}}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x2, 0x18, {0x55, 0x10}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x9d, 0xfff}}, @uexit={0x0, 0x18}, @code={0x1, 0x65, {"c422e5beebb8010000000f01d966bad10466b82e5266ef2e460f20c536440f0f0c5fa7c4617850f3c744240048982765c74424020e000000c7442406000000000f011c24b9361001c00f3264478afd66470f5cf5"}}, @code={0x1, 0x50, {"450fc77498000f01596966b82c018ee066f0418351d700c462518c13b8010000000f01d98fe9c09b2666baf80cb89408168eef66bafc0c66ed0f01d10f01d1"}}, @code={0x1, 0x49, {"8fc978c321470f204666bad00466edf2ab0f220165450f6a5800c462790c3266baf80cb870a2b18bef66bafc0ced66400f01f8c4617c53e9"}}, @cpuid={0x2, 0x18, {0x9, 0x63da7efe}}, @code={0x1, 0x5a, {"f20f01b300000000c744240036010000c74424027bba0000ff2c24640f06c4a2e1de43eb0fc75c5100b9250900000f328f2978c232450f7997006800008fe99097aafbd56b990f01dc"}}, @code={0x1, 0x7a, {"66baf80cb82459f08def66bafc0c66b8920066ef66b83c000f00d88fa9b09b8562000000b805000000b9f60000000f01c1c482fd317b0066ba4000ec0f5c30b8010000000f01c166b826008ec0c744240003000000c74424024d070000c7442406000000000f011424"}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x2, 0x18, {0x131, 0xffffff47}}, @code={0x1, 0x5e, {"66b868008ee8460f01c3c461e055b90000000066b818010f00d80fc7af00000000643e420f30c4217b2dab000000008fa9889ab6a01cefb966baf80cb8780dc984ef66bafc0cb009ee3e0f01d1"}}, @uexit={0x0, 0x18, 0x3ff}], 0x4a3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 6.782726955s ago: executing program 4 (id=641): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000440)={0xde, 0x1ff, 0xf}) socketpair(0x18, 0x0, 0x2, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000004c0)={0x49, 0x7fff, 0x4}) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df0000000000000109022400010000100009040008020300000009210000ff0122070009058103ff03000035"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x1, 'j'}, @main=@item_4={0x3, 0x0, 0x9, "5f72be78"}]}}, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x4, 0xd8, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 6.619279292s ago: executing program 1 (id=642): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r5, r6, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r3) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001043, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000280)=0x4, 0x4) 5.823720914s ago: executing program 4 (id=643): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000080)) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='-'], 0x27) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) 5.597986698s ago: executing program 3 (id=644): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.439232164s ago: executing program 3 (id=645): syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x280, 0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000100), &(0x7f0000000140), 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) write(r4, &(0x7f0000000180)="0101", 0x2) close(r4) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) 5.356234806s ago: executing program 0 (id=646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x12, r0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000003f80)=""/4101, 0x1005) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$kcm(0x10, 0x3, 0x10) getdents64(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0xc042, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_open_procfs(0x0, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='15', 0x2}, {0x0}], 0x2) syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) 5.308484338s ago: executing program 2 (id=647): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r1 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x402, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a469f268fe4230de84eea7a0000000000000000000000000000003a", [0x3, 0x7fd]}) socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 5.050271994s ago: executing program 2 (id=648): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000018000106e4ff0000000000001c140000fe000001"], 0x24}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000c40)={[0x9]}, 0x0, 0x0, 0x8) kcmp(r5, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 4.838403009s ago: executing program 4 (id=649): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c7809"], 0x3c}}, 0x0) 4.765365057s ago: executing program 0 (id=650): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500000001040101000000000000000400d900010001000000"], 0x1c}}, 0x0) shutdown(0xffffffffffffffff, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/address_bits', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 4.393402289s ago: executing program 1 (id=651): r0 = syz_io_uring_setup(0x3f, &(0x7f0000000040)={0x0, 0x0, 0x80, 0xffffff7f, 0x3c0}, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, 0x0, 0xfe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet(0x2, 0x80001, 0x84) syz_open_dev$sndctrl(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x6, 0x0, 0x0, 0x0) 2.459287049s ago: executing program 2 (id=652): socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x1d, 0x2, 0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000300)=0x8) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 2.270841411s ago: executing program 0 (id=653): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xffe, 0x5, 0xfffffff9}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000440)={0xde, 0x1ff, 0xf}) socketpair(0x18, 0x0, 0x2, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000004c0)={0x49, 0x7fff, 0x4}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df0000000000000109022400010000100009040008020300000009210000ff0122070009058103ff03000035"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x1, 'j'}, @main=@item_4={0x3, 0x0, 0x9, "5f72be78"}]}}, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x4, 0xd8, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 1.607072027s ago: executing program 3 (id=654): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x760, 0x103382) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6d, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@rateest={{0x68}, {'netpci0\x00', 'batadv_slave_0\x00', 0xa, 0x2, 0x0, 0x8, 0xf, 0x81, {0x9}, {0x6}}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) ioctl$LOOP_SET_STATUS(r2, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x0, "4b8b3ea40100dfed0bedb909000000dd5a96a9fc9549918ae7fd1f0ececfe0f4fcdf997dd52115354d4d017a3f000000000000080000000000000200", "0900000010000000af61ca2a4000000017bf9faaf6ef4cad6fd58d62d4a46cec", [0x800000000001, 0x9]}) connect$unix(r0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/dev\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x239, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0xa, 0x2400000001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.41508511s ago: executing program 4 (id=655): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.176775874s ago: executing program 4 (id=656): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x4b, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x15, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {0x0, 0xe22, 0x15, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x0, @val=0xe000000}, "0a790cc55a"}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x17) 613.635197ms ago: executing program 3 (id=657): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 389.158776ms ago: executing program 2 (id=658): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_clone3(&(0x7f0000000340)={0x8000000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 388.390313ms ago: executing program 1 (id=668): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x47, 0x0, 0x2, 0x0, 0x800, 0xfffffffffffffffe, 0x1}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b0000000904000002"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000001c0)=0x2) r3 = open(&(0x7f0000000280)='.\x00', 0x40000, 0x43) fcntl$notify(r3, 0x402, 0xd) getdents64(r3, 0x0, 0x0) getdents(r3, &(0x7f0000000140)=""/48, 0x30) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x800000, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lseek(r2, 0x2, 0x3) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=659): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000080)) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='-'], 0x27) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) kernel console output (not intermixed with test programs): : encryption failed: -22 [ 132.832896][ T5935] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.169982][ T6424] ipt_ECN: cannot use operation on non-tcp rule [ 133.226629][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 133.234021][ T5935] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 133.251696][ T5935] usb 3-1: config 0 has no interface number 0 [ 133.275793][ T5935] usb 3-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 133.306395][ T5935] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 133.329300][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.338451][ T5935] usb 3-1: Product: syz [ 133.344973][ T5935] usb 3-1: Manufacturer: syz [ 133.367442][ T5935] usb 3-1: SerialNumber: syz [ 133.397299][ T5935] usb 3-1: config 0 descriptor?? [ 133.668052][ T5935] msi2500 3-1:0.246: Registered as swradio24 [ 133.714880][ T5935] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 134.826611][ T5935] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 135.010353][ T5935] usb 1-1: config 0 has an invalid interface number: 222 but max is 0 [ 135.022120][ T5935] usb 1-1: config 0 has no interface number 0 [ 135.035631][ T5935] usb 1-1: config 0 interface 222 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 135.400159][ T5935] usb 1-1: config 0 interface 222 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 135.461978][ T5935] usb 1-1: config 0 interface 222 has no altsetting 0 [ 135.499399][ T5935] usb 1-1: New USB device found, idVendor=3823, idProduct=0002, bcdDevice=86.41 [ 135.512557][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.524187][ T5935] usb 1-1: Product: syz [ 135.588752][ T5935] usb 1-1: Manufacturer: syz [ 135.616756][ T5935] usb 1-1: SerialNumber: syz [ 135.653536][ T5935] usb 1-1: config 0 descriptor?? [ 135.689526][ T6439] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 135.705915][ T6439] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 135.929924][ T5935] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.222/input/input5 [ 137.399500][ T6469] pim6reg1: entered promiscuous mode [ 137.404815][ T6469] pim6reg1: entered allmulticast mode [ 137.721702][ T5938] usb 3-1: USB disconnect, device number 3 [ 137.934143][ T10] usb 1-1: USB disconnect, device number 2 [ 138.195144][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 144.658732][ T6530] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.98'. [ 144.697223][ T6530] netlink: zone id is out of range [ 144.714661][ T6530] netlink: zone id is out of range [ 144.730627][ T6530] netlink: zone id is out of range [ 144.762497][ T6530] netlink: zone id is out of range [ 144.803862][ T6530] netlink: zone id is out of range [ 144.828646][ T6530] netlink: zone id is out of range [ 144.926227][ T6530] netlink: zone id is out of range [ 144.931762][ T6530] netlink: zone id is out of range [ 144.939434][ T6530] netlink: zone id is out of range [ 144.945700][ T6530] netlink: zone id is out of range [ 145.573781][ T6534] nvme_fabrics: missing parameter 'transport=%s' [ 145.580405][ T6534] nvme_fabrics: missing parameter 'nqn=%s' [ 147.405166][ T6563] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 147.487130][ T6563] team0: Port device batadv1 added [ 147.492860][ T6568] netlink: 'syz.4.108': attribute type 13 has an invalid length. [ 147.609452][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.762074][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.770210][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.865967][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 147.885173][ T9] usb 4-1: config 0 has an invalid interface number: 225 but max is 0 [ 147.927005][ T9] usb 4-1: config 0 has no interface number 0 [ 147.961321][ T9] usb 4-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 148.000054][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.185810][ T9] usb 4-1: Product: syz [ 148.201954][ T9] usb 4-1: Manufacturer: syz [ 148.236088][ T9] usb 4-1: SerialNumber: syz [ 148.293091][ T9] usb 4-1: config 0 descriptor?? [ 149.984754][ T6568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.218456][ T6568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.833839][ T6568] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.857917][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'. [ 150.911582][ T6568] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.935642][ T6568] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.016789][ T6568] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.316792][ T9] mos7840 4-1:0.225: required endpoints missing [ 151.340085][ T9] usb 4-1: USB disconnect, device number 5 [ 151.427810][ T6588] bridge1: port 1(veth3) entered blocking state [ 151.438421][ T6588] bridge1: port 1(veth3) entered disabled state [ 151.455135][ T6588] veth3: entered allmulticast mode [ 151.475389][ T6588] veth3: entered promiscuous mode [ 152.087637][ T6590] bridge1: port 2(veth0_to_bond) entered blocking state [ 152.094662][ T6590] bridge1: port 2(veth0_to_bond) entered disabled state [ 152.113688][ T6596] create_pit_timer: 19 callbacks suppressed [ 152.113703][ T6596] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 152.140614][ T6596] kvm: pic: non byte read [ 152.145581][ T6596] kvm: pic: non byte read [ 152.284225][ T6596] kvm: pic: non byte read [ 152.289865][ T6596] kvm: pic: level sensitive irq not supported [ 152.289964][ T6596] kvm: pic: non byte read [ 152.301025][ T6596] kvm: pic: level sensitive irq not supported [ 152.301126][ T6596] kvm: pic: non byte read [ 152.332051][ T6590] veth0_to_bond: entered allmulticast mode [ 152.338565][ T6596] kvm: pic: non byte read [ 152.347531][ T6590] veth0_to_bond: entered promiscuous mode [ 152.353925][ T6596] kvm: pic: non byte read [ 152.360394][ T6596] kvm: pic: non byte read [ 152.414575][ T6591] vlan2: entered allmulticast mode [ 152.529298][ T6591] veth1: entered allmulticast mode [ 152.534738][ T6591] bridge1: port 3(vlan2) entered blocking state [ 152.541329][ T6591] bridge1: port 3(vlan2) entered disabled state [ 152.550594][ T6591] vlan2: entered promiscuous mode [ 152.555881][ T6591] veth1: entered promiscuous mode [ 154.429315][ T6629] CIFS: VFS: Malformed UNC in devname [ 154.618524][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 154.627969][ T6633] Zero length message leads to an empty skb [ 158.609972][ T6656] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.619231][ T6656] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.627991][ T6656] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.636365][ T6656] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.647948][ T6656] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.325861][ T5935] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 159.486165][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 159.494315][ T5935] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 159.502645][ T5935] usb 1-1: config 0 has no interface number 0 [ 159.513014][ T5935] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 159.522283][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.565794][ T5935] usb 1-1: Product: syz [ 159.575987][ T5935] usb 1-1: Manufacturer: syz [ 159.586368][ T5935] usb 1-1: SerialNumber: syz [ 159.642305][ T5935] usb 1-1: config 0 descriptor?? [ 160.184400][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.671208][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.671225][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.671266][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.743383][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 160.946514][ T5938] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 161.365910][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 161.469716][ T5938] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 161.609228][ T6678] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 161.625887][ T6678] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 161.714760][ T5938] usb 4-1: config 0 has no interface number 0 [ 161.742432][ T5938] usb 4-1: config 0 interface 184 has no altsetting 0 [ 161.764844][ T5938] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 161.796628][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.175621][ T5938] usb 4-1: Product: syz [ 162.185840][ T5938] usb 4-1: Manufacturer: syz [ 162.201400][ T5938] usb 4-1: SerialNumber: syz [ 162.283456][ T5938] usb 4-1: config 0 descriptor?? [ 162.356714][ T5938] smsc75xx v1.0.0 [ 162.361085][ T5935] mos7840 1-1:0.225: required endpoints missing [ 162.426284][ T5935] usb 1-1: USB disconnect, device number 3 [ 162.485987][ T30] audit: type=1326 audit(1752268903.853:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 162.574091][ T30] audit: type=1326 audit(1752268903.853:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 162.642596][ T30] audit: type=1326 audit(1752268903.853:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f685bf8d290 code=0x7ffc0000 [ 162.673496][ T30] audit: type=1326 audit(1752268903.853:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685bf8e52b code=0x7ffc0000 [ 162.725835][ T1713] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 162.802098][ T30] audit: type=1326 audit(1752268903.853:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685bf8e52b code=0x7ffc0000 [ 162.837721][ T30] audit: type=1326 audit(1752268903.863:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685bf8e52b code=0x7ffc0000 [ 162.942920][ T30] audit: type=1326 audit(1752268903.863:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685bf8e52b code=0x7ffc0000 [ 163.093758][ T30] audit: type=1326 audit(1752268903.993:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685bf8e52b code=0x7ffc0000 [ 163.119933][ T1713] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.151269][ T1713] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.266518][ T1713] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.283247][ T1713] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 163.308846][ T5938] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 163.333745][ T1713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.335439][ T30] audit: type=1326 audit(1752268904.063:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685bf8e52b code=0x7ffc0000 [ 163.407853][ T5938] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 163.422191][ T30] audit: type=1326 audit(1752268904.153:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685bf8e52b code=0x7ffc0000 [ 163.466439][ T1713] usb 2-1: config 0 descriptor?? [ 163.547679][ T5938] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 163.610387][ T5938] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 163.644064][ T5938] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 163.821364][ T5938] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 164.309201][ T5938] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 164.386227][ T5938] usb 4-1: USB disconnect, device number 6 [ 164.939142][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 166.177593][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 166.217429][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 166.249348][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 166.281889][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 166.352976][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 166.375793][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 166.403582][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 166.433949][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 166.478051][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 166.496117][ T1209] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 166.509191][ T1713] usbhid 2-1:0.0: can't add hid device: -71 [ 166.523952][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 166.524006][ T1713] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 166.562052][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 166.600182][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 166.698468][ T1713] usb 2-1: USB disconnect, device number 3 [ 166.803197][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 166.863524][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 167.027771][ T6725] binder: 6721:6725 ioctl c0306201 0 returned -14 [ 167.049959][ T5935] hid-generic 00A0:0005:0004.0001: unknown main item tag 0x0 [ 167.082008][ T5935] hid-generic 00A0:0005:0004.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 167.552504][ T6725] syz.1.140 (6725): drop_caches: 1 [ 167.775926][ T6725] syz.1.140 (6725): drop_caches: 1 [ 167.870171][ T1209] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 167.933662][ T1209] usb 4-1: can't read configurations, error -61 [ 168.426181][ T1209] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 171.130267][ T1209] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 171.273069][ T1209] usb 4-1: can't read configurations, error -71 [ 171.311233][ T1209] usb usb4-port1: attempt power cycle [ 171.812820][ T6771] ipt_ECN: cannot use operation on non-tcp rule [ 172.565782][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 172.566353][ T30] audit: type=1800 audit(1752268913.943:28): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.148" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 172.785814][ T5981] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 172.945928][ T5981] usb 5-1: Using ep0 maxpacket: 8 [ 172.962609][ T5981] usb 5-1: too many endpoints for config 0 interface 0 altsetting 4: 64, using maximum allowed: 30 [ 172.975110][ T5981] usb 5-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 173.029573][ T5981] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.066960][ T5981] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 173.079629][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 173.227621][ T5981] usb 5-1: Product: syz [ 173.231926][ T5981] usb 5-1: Manufacturer: syz [ 173.252181][ T5981] usb 5-1: SerialNumber: syz [ 173.266545][ T5981] usb 5-1: config 0 descriptor?? [ 173.918582][ T5981] usbtest 5-1:0.0: FX2 device [ 173.923309][ T5981] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 173.933013][ T5981] usb 5-1: USB disconnect, device number 3 [ 175.128752][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'. [ 175.176113][ T5981] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 175.496364][ T5981] usb 2-1: config 0 has no interfaces? [ 175.510812][ T5981] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 175.550992][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.674237][ T5981] usb 2-1: Product: syz [ 175.678708][ T5981] usb 2-1: Manufacturer: syz [ 175.684897][ T5981] usb 2-1: SerialNumber: syz [ 175.708527][ T5981] usb 2-1: config 0 descriptor?? [ 175.815851][ T5938] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 175.988548][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.998980][ T5938] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 176.014738][ T5938] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 176.037642][ T5935] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 176.130025][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.154771][ T5938] usb 3-1: config 0 descriptor?? [ 176.205059][ T5938] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 176.257534][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 176.273951][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.294724][ T5935] usb 4-1: config 0 has no interfaces? [ 176.301059][ T5938] dvb-usb: bulk message failed: -22 (3/0) [ 176.383489][ T5935] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 176.571068][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.572338][ T5938] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 176.612226][ T5935] usb 4-1: config 0 descriptor?? [ 176.650770][ T6803] dvb-usb: bulk message failed: -22 (2/0) [ 177.094607][ T5938] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 177.153830][ T5938] usb 3-1: media controller created [ 177.167378][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.192648][ T5938] dvb-usb: bulk message failed: -22 (6/0) [ 177.212601][ T5938] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 177.258607][ T5938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 177.330229][ T5938] dvb-usb: schedule remote query interval to 150 msecs. [ 177.344024][ T5938] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 177.497236][ T5981] dvb-usb: bulk message failed: -22 (1/0) [ 177.528472][ T5981] dvb-usb: error while querying for an remote control event. [ 177.697473][ T5981] dvb-usb: bulk message failed: -22 (1/0) [ 177.708294][ T5981] dvb-usb: error while querying for an remote control event. [ 177.934103][ T5981] dvb-usb: bulk message failed: -22 (1/0) [ 177.952477][ T5981] dvb-usb: error while querying for an remote control event. [ 178.146852][ T5981] dvb-usb: bulk message failed: -22 (1/0) [ 178.166097][ T5981] dvb-usb: error while querying for an remote control event. [ 178.469465][ T5981] dvb-usb: bulk message failed: -22 (1/0) [ 178.485096][ T5981] dvb-usb: error while querying for an remote control event. [ 178.527738][ T5981] usb 2-1: USB disconnect, device number 4 [ 178.644475][ T9] usb 3-1: USB disconnect, device number 4 [ 178.656018][ T1713] dvb-usb: bulk message failed: -22 (1/0) [ 178.662361][ T1713] dvb-usb: error while querying for an remote control event. [ 178.952614][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 179.190194][ T6830] PKCS7: Unknown OID: [5] (bad) [ 179.197309][ T6830] PKCS7: Only support pkcs7_signedData type [ 179.220303][ T6830] usb usb8: usbfs: process 6830 (syz.2.160) did not claim interface 0 before use [ 179.730814][ T9] usb 4-1: USB disconnect, device number 10 [ 181.467943][ T6843] tun0: tun_chr_ioctl cmd 1074025675 [ 181.473291][ T6843] tun0: persist enabled [ 181.526494][ T6844] tun0: tun_chr_ioctl cmd 1074025675 [ 181.533327][ T6844] tun0: persist disabled [ 181.554531][ T6843] netlink: 'syz.1.163': attribute type 10 has an invalid length. [ 181.578372][ T6843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.163'. [ 181.644055][ T6843] batman_adv: batadv0: Adding interface: vlan1 [ 181.650531][ T6843] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.752330][ T6843] batman_adv: batadv0: Interface activated: vlan1 [ 182.695800][ T1713] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 182.945917][ T1713] usb 3-1: Using ep0 maxpacket: 16 [ 184.675366][ T6867] kAFS: unable to lookup cell '.,' [ 185.821988][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 185.899694][ T1713] usb 3-1: unable to get BOS descriptor or descriptor too short [ 185.941779][ T1713] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 185.976833][ T1713] usb 3-1: can't read configurations, error -71 [ 185.998355][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 186.035353][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 186.256831][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 186.334994][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 186.416481][ T9] usb 1-1: Product: syz [ 186.422064][ T9] usb 1-1: Manufacturer: syz [ 186.438095][ T9] usb 1-1: SerialNumber: syz [ 186.494303][ T9] usb 1-1: config 0 descriptor?? [ 186.517537][ T6882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.665572][ T6882] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 186.766564][ T9] usb 1-1: selecting invalid altsetting 0 [ 187.076807][ T9] usb 1-1: USB disconnect, device number 4 [ 187.323835][ T6886] udevd[6886]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.529902][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 191.446540][ T6930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.155888][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 192.466570][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 192.973701][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.181'. [ 194.390288][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.411570][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.926831][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 194.971121][ T6941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.181'. [ 195.005843][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 195.150876][ T9] usb 2-1: can't read configurations, error -71 [ 200.969839][ T7002] netlink: 'syz.1.194': attribute type 27 has an invalid length. [ 201.104828][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.112917][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.271317][ T7002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.288834][ T7002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.321475][ T7002] batman_adv: batadv0: Interface deactivated: vlan1 [ 201.402771][ T7002] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.413919][ T7002] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.423183][ T7002] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.432358][ T7002] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.542857][ T7005] nvme_fabrics: missing parameter 'transport=%s' [ 201.549667][ T7005] nvme_fabrics: missing parameter 'nqn=%s' [ 201.670430][ T7004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.721827][ T7004] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.773099][ T7004] net_ratelimit: 678 callbacks suppressed [ 201.773112][ T7004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.716167][ T1713] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 204.991620][ T1713] usb 5-1: Using ep0 maxpacket: 16 [ 208.194210][ T1713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 208.318822][ T1713] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 208.652743][ T1713] usb 5-1: can't read configurations, error -71 [ 209.883670][ T7072] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.210'. [ 212.725810][ T5935] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 212.900774][ T5935] usb 5-1: config 0 has no interfaces? [ 212.923152][ T5935] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 212.976563][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.018408][ T5935] usb 5-1: Product: syz [ 213.065091][ T5935] usb 5-1: Manufacturer: syz [ 213.075465][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 213.244027][ T5935] usb 5-1: SerialNumber: syz [ 213.279477][ T7094] dummy0: entered promiscuous mode [ 213.286989][ T5935] usb 5-1: config 0 descriptor?? [ 213.318702][ T7094] macvtap1: entered promiscuous mode [ 213.405921][ T7094] macvtap1: entered allmulticast mode [ 213.411341][ T7094] dummy0: entered allmulticast mode [ 214.005806][ T5935] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 214.778620][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 214.839459][ T5935] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 214.848047][ T5935] usb 1-1: config 0 has no interface number 0 [ 214.895941][ T5935] usb 1-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 214.911376][ T5935] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 214.920827][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.984229][ T5935] usb 1-1: Product: syz [ 215.000367][ T5935] usb 1-1: Manufacturer: syz [ 215.005561][ T7116] random: crng reseeded on system resumption [ 215.022701][ T5935] usb 1-1: SerialNumber: syz [ 215.053857][ T5935] usb 1-1: config 0 descriptor?? [ 215.134849][ T9] usb 5-1: USB disconnect, device number 6 [ 215.496815][ T5935] msi2500 1-1:0.246: Registered as swradio24 [ 215.594061][ T5935] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 218.339290][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 218.414992][ T5935] usb 1-1: USB disconnect, device number 5 [ 218.552667][ T7152] usb usb8: usbfs: process 7152 (syz.4.225) did not claim interface 0 before use [ 220.067533][ T7161] syz.0.228 uses obsolete (PF_INET,SOCK_PACKET) [ 221.502929][ T7180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.554932][ T7180] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 222.425792][ T5957] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 222.565608][ T7186] bridge_slave_0: left allmulticast mode [ 222.594909][ T5957] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.610709][ T5957] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 222.624388][ T7186] bridge_slave_0: left promiscuous mode [ 222.685823][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.715874][ T5957] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.751483][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.784442][ T5957] usb 3-1: config 0 descriptor?? [ 222.840366][ T7186] bridge_slave_1: left allmulticast mode [ 222.846479][ T7186] bridge_slave_1: left promiscuous mode [ 222.855058][ T5957] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 222.862713][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.076739][ T7186] bond0: (slave bond_slave_0): Releasing backup interface [ 223.120914][ T7186] bond0: (slave bond_slave_1): Releasing backup interface [ 223.253483][ T7186] team0: Port device team_slave_0 removed [ 223.302459][ T5913] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 223.310934][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 223.401259][ T7186] team0: Port device team_slave_1 removed [ 223.410288][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.419498][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.431763][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.444582][ T7186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.451887][ T5913] usb 1-1: device descriptor read/64, error -32 [ 223.696088][ T5913] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 223.763851][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.772707][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.789288][ T7195] netlink: 44 bytes leftover after parsing attributes in process `syz.2.233'. [ 223.800983][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.809275][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.868880][ T5913] usb 1-1: config 0 has no interfaces? [ 223.881651][ T5913] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 223.891908][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.902213][ T5913] usb 1-1: Product: syz [ 223.909624][ T5913] usb 1-1: Manufacturer: syz [ 223.929025][ T5913] usb 1-1: SerialNumber: syz [ 223.958267][ T5913] usb 1-1: config 0 descriptor?? [ 225.205887][ T9] usb 3-1: USB disconnect, device number 7 [ 225.812179][ T5913] usb 1-1: USB disconnect, device number 7 [ 225.866133][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 225.999309][ T7212] batadv0: entered promiscuous mode [ 226.004866][ T7212] vlan3: entered promiscuous mode [ 226.045804][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 226.052783][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.085312][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 226.107402][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.182734][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 226.253412][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.286308][ T9] usb 3-1: config 0 descriptor?? [ 226.316447][ T7208] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 226.388314][ T9] hub 3-1:0.0: USB hub found [ 226.605047][ T9] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 227.877556][ T5935] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 228.057998][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 228.089517][ T5935] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.122615][ T5935] usb 4-1: config 0 has no interface number 0 [ 228.130069][ T5935] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.141516][ T5935] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 228.151677][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.175440][ T5935] usb 4-1: config 0 descriptor?? [ 228.197216][ T5935] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 228.682617][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 228.760217][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 228.827420][ T9] usb 3-1: USB disconnect, device number 8 [ 229.298790][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 230.404312][ T5913] usb 4-1: USB disconnect, device number 11 [ 232.899947][ T7274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.253'. [ 233.117655][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.253'. [ 237.713276][ T7300] ALSA: mixer_oss: invalid OSS volume 'LI' [ 238.833325][ T7327] netlink: 252 bytes leftover after parsing attributes in process `syz.2.262'. [ 239.375783][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 239.383889][ T7313] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 239.575992][ T7313] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 239.582251][ T7313] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 239.588850][ T7313] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.595104][ T7313] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 239.989928][ T7332] delete_channel: no stack [ 239.996301][ T5981] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 240.181205][ T5981] usb 5-1: Using ep0 maxpacket: 16 [ 241.455999][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 241.618612][ T5855] Bluetooth: hci2: command 0x0c1a tx timeout [ 241.618636][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout [ 241.624757][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 242.763641][ T5981] usb 5-1: unable to get BOS descriptor or descriptor too short [ 242.860784][ T5981] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 242.912457][ T5981] usb 5-1: can't read configurations, error -71 [ 243.443875][ T7370] ipt_ECN: cannot use operation on non-tcp rule [ 244.955911][ T5935] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 245.126074][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 246.278155][ T5981] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 247.090981][ T5981] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.110431][ T5981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 247.141433][ T5981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 247.196081][ T5981] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 247.238329][ T5981] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 247.247658][ T5981] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 247.279054][ T5981] usb 4-1: Manufacturer: syz [ 247.308290][ T5981] usb 4-1: config 0 descriptor?? [ 247.883758][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.955214][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.995774][ T5981] rc_core: IR keymap rc-hauppauge not found [ 248.001713][ T5981] Registered IR keymap rc-empty [ 248.396700][ T5981] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.466442][ T5981] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.637577][ T5981] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 248.811107][ T5935] usb 2-1: unable to get BOS descriptor or descriptor too short [ 248.820683][ T5935] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 248.895948][ T5981] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 248.940242][ T5935] usb 2-1: can't read configurations, error -71 [ 248.955984][ T5981] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.975901][ T5981] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.005900][ T5981] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.035857][ T5981] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.073282][ T5981] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.157684][ T5981] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.206036][ T5981] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.235976][ T5981] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.266167][ T5981] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.295826][ T5981] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.319890][ T5981] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 249.359476][ T5981] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 249.435883][ T5935] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 249.437267][ T5981] usb 4-1: USB disconnect, device number 12 [ 249.815817][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 249.858385][ T5935] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 249.875753][ T5935] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 249.973256][ T5935] usb 2-1: string descriptor 0 read error: -22 [ 249.987079][ T5935] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 250.081854][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.605857][ T5913] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 251.782972][ T5913] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 251.822651][ T5913] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 251.861874][ T5913] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 251.928746][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.036432][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 252.054823][ T7434] vlan2: entered allmulticast mode [ 252.061502][ T7434] macvtap0: entered allmulticast mode [ 252.795826][ T5913] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 253.146551][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 253.169284][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short [ 253.206174][ T5913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.248565][ T5938] usb 2-1: USB disconnect, device number 8 [ 253.333689][ T5913] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 253.407668][ T5913] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 253.429264][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.462074][ T5913] usb 3-1: Product: syz [ 253.474495][ T5913] usb 3-1: Manufacturer: syz [ 253.491689][ T5913] usb 3-1: SerialNumber: syz [ 253.767457][ T7448] netlink: 'syz.1.289': attribute type 20 has an invalid length. [ 253.899889][ T5938] IPVS: starting estimator thread 0... [ 253.997009][ T7450] IPVS: using max 43 ests per chain, 103200 per kthread [ 254.265941][ T5938] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 254.485946][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 254.495233][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.509943][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.539900][ T5938] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.577151][ T5938] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 254.592022][ T5938] usb 1-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0 [ 254.617546][ T5938] usb 1-1: Manufacturer: syz [ 254.659224][ T5938] usb 1-1: config 0 descriptor?? [ 254.784378][ T1713] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.802370][ T1713] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 255.086199][ T5938] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 255.146053][ T5938] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 255.152943][ T5938] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 255.250117][ T5935] usb 4-1: USB disconnect, device number 13 [ 255.462134][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.471502][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.487676][ T5938] ryos 0003:1E7D:3138.0003: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 255.936091][ T5935] usb 1-1: USB disconnect, device number 8 [ 256.016188][ T5913] usb 3-1: USB disconnect, device number 9 [ 256.778392][ T7469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.934325][ T7471] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 257.519717][ T7476] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 257.539347][ T3520] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 257.554490][ T7478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.642902][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 257.682660][ T7482] veth5: entered promiscuous mode [ 257.706706][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 257.765841][ T7481] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 257.776044][ T7481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.524184][ T7495] input: syz0 as /devices/virtual/input/input8 [ 259.089263][ T7493] xt_CT: No such helper "snmp" [ 259.994078][ T7510] use of bytesused == 0 is deprecated and will be removed in the future, [ 260.003098][ T7510] use the actual size instead. [ 260.235797][ T5913] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 260.247575][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 260.464246][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 260.628101][ T5913] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 260.645207][ T5913] usb 5-1: config 0 has no interface number 0 [ 260.651399][ T5913] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.665879][ T5913] usb 5-1: config 0 interface 85 has no altsetting 0 [ 260.697510][ T5913] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 260.708737][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.717157][ T5913] usb 5-1: Product: syz [ 260.721418][ T5913] usb 5-1: Manufacturer: syz [ 260.726592][ T5913] usb 5-1: SerialNumber: syz [ 260.752318][ T7514] vlan3: entered allmulticast mode [ 260.764625][ T5913] usb 5-1: config 0 descriptor?? [ 260.790099][ T7514] macvtap0: entered allmulticast mode [ 260.796105][ T7514] veth0_macvtap: entered allmulticast mode [ 261.398915][ T5913] appletouch 5-1:0.85: Geyser mode initialized. [ 261.408280][ T5913] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input9 [ 261.853286][ T5957] usb 5-1: USB disconnect, device number 9 [ 261.859561][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 262.001298][ T5957] appletouch 5-1:0.85: input: appletouch disconnected [ 262.646679][ T5957] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 262.891965][ T30] audit: type=1326 audit(1752269004.283:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a698e929 code=0x7ffc0000 [ 263.251565][ T5957] usb 3-1: config 0 has no interfaces? [ 263.281427][ T30] audit: type=1326 audit(1752269004.313:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd6a698e929 code=0x7ffc0000 [ 263.303416][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.317692][ T5957] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 263.328065][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.364317][ T5957] usb 3-1: Product: syz [ 263.372181][ T5957] usb 3-1: Manufacturer: syz [ 263.377073][ T30] audit: type=1326 audit(1752269004.313:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a698e929 code=0x7ffc0000 [ 263.403989][ T5957] usb 3-1: SerialNumber: syz [ 263.424355][ T5957] usb 3-1: config 0 descriptor?? [ 263.498892][ T30] audit: type=1326 audit(1752269004.313:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a698e929 code=0x7ffc0000 [ 263.520990][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.945813][ T30] audit: type=1326 audit(1752269004.323:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd6a698e929 code=0x7ffc0000 [ 263.967907][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.756474][ T5957] usb 3-1: USB disconnect, device number 10 [ 266.129553][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 266.165968][ T7562] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 266.173641][ T7562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.429433][ T7584] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.438347][ T7584] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.447158][ T7584] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.455928][ T7584] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.906306][ T30] audit: type=1326 audit(1752269010.293:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 269.054844][ T30] audit: type=1326 audit(1752269010.293:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 269.223019][ T30] audit: type=1326 audit(1752269010.293:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 269.524814][ T30] audit: type=1326 audit(1752269010.303:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 269.575747][ T5913] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 269.629692][ T30] audit: type=1326 audit(1752269010.333:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f499f58d290 code=0x7ffc0000 [ 269.736790][ T30] audit: type=1326 audit(1752269010.333:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f499f58d290 code=0x7ffc0000 [ 269.852166][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 269.852825][ T30] audit: type=1326 audit(1752269010.333:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 269.948117][ T5913] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 269.948851][ T30] audit: type=1326 audit(1752269010.343:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 269.974733][ T5913] usb 4-1: config 0 has no interface number 0 [ 270.105773][ T5913] usb 4-1: config 0 interface 184 has no altsetting 0 [ 270.129292][ T30] audit: type=1326 audit(1752269010.343:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 270.237780][ T5913] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 270.246896][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.292927][ T5913] usb 4-1: Product: syz [ 270.301029][ T5913] usb 4-1: Manufacturer: syz [ 270.315951][ T5913] usb 4-1: SerialNumber: syz [ 270.487449][ T5913] usb 4-1: config 0 descriptor?? [ 270.541125][ T30] audit: type=1326 audit(1752269010.343:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 270.548922][ T5913] smsc75xx v1.0.0 [ 270.568580][ T5913] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 270.580914][ T5913] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 271.637925][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 273.060121][ T7629] xt_hashlimit: size too large, truncated to 1048576 [ 274.648403][ T7640] macsec0: entered promiscuous mode [ 274.704016][ T5957] usb 4-1: USB disconnect, device number 14 [ 274.711777][ T7640] macsec0: entered allmulticast mode [ 274.775826][ T7640] veth1_macvtap: entered allmulticast mode [ 277.025796][ T5913] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 277.175923][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 277.197339][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short [ 277.215042][ T5913] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 277.254986][ T5913] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 277.304316][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.320186][ T5913] usb 3-1: Product: syz [ 277.342799][ T5913] usb 3-1: Manufacturer: syz [ 277.359920][ T5913] usb 3-1: SerialNumber: syz [ 277.526356][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 277.540744][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 277.595081][ T5913] usb 3-1: Limiting number of CPorts to U8_MAX [ 277.603556][ T5913] usb 3-1: Not enough endpoints found in device, aborting! [ 277.860702][ T5913] usb 3-1: USB disconnect, device number 11 [ 279.568080][ T7708] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 280.029362][ T7708] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 280.935789][ T5913] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 281.126636][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 281.154197][ T5913] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 281.183924][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.227789][ T5913] usb 1-1: Product: syz [ 281.231961][ T5913] usb 1-1: Manufacturer: syz [ 281.314258][ T5913] usb 1-1: SerialNumber: syz [ 281.369080][ T5913] usb 1-1: config 0 descriptor?? [ 284.414148][ T5913] usb 1-1: USB disconnect, device number 9 [ 284.562291][ T6888] udevd[6888]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.838492][ T5938] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 285.375852][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 288.019145][ T5938] usb 5-1: unable to get BOS descriptor or descriptor too short [ 288.125462][ T5938] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 288.139766][ T5938] usb 5-1: can't read configurations, error -71 [ 288.515803][ T5938] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 288.661807][ T7781] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 288.674332][ T7781] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 288.914369][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 289.003296][ T5938] usb 5-1: unable to get BOS descriptor or descriptor too short [ 289.102388][ T5938] usb 5-1: config 4 interface 0 has no altsetting 0 [ 289.137049][ T5938] usb 5-1: string descriptor 0 read error: -22 [ 289.336914][ T5938] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 289.353670][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.471587][ T5938] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 289.536832][ T5938] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 289.596122][ T5938] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 289.615756][ T5938] usb 5-1: media controller created [ 289.660666][ T7776] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 289.727529][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.781800][ T7784] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 289.788486][ T7784] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 289.797433][ T7776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.839411][ T7776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.912910][ T7784] vhci_hcd vhci_hcd.0: Device attached [ 290.034416][ T7788] netdevsim netdevsim0: Direct firmware load for nel/config failed with error -2 [ 290.044193][ T7788] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/config [ 290.225921][ T7786] vhci_hcd: connection closed [ 290.232886][ T3520] vhci_hcd: stop threads [ 290.272308][ T3520] vhci_hcd: release socket [ 290.295782][ T1713] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 290.311127][ T3520] vhci_hcd: disconnect device [ 290.345959][ T1713] usb 33-1: enqueue for inactive port 0 [ 290.444800][ T1713] vhci_hcd: vhci_device speed not set [ 291.056349][ T5938] zl10353_read_register: readreg error (reg=127, ret==0) [ 293.490057][ T7829] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 7829 comm: syz.2.367) [ 293.509071][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 293.509235][ T30] audit: type=1800 audit(1752269034.893:67): pid=7829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.367" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=14738 res=0 errno=0 [ 295.479993][ T7847] vlan3: entered promiscuous mode [ 295.485093][ T7847] bond0: entered promiscuous mode [ 295.490244][ T7847] bond_slave_0: entered promiscuous mode [ 295.496441][ T7847] bond_slave_1: entered promiscuous mode [ 295.503193][ T7847] bond0: (slave vlan3): Opening slave failed [ 295.593388][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 295.648998][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 295.715056][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 295.842121][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 296.112627][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 296.223323][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 296.448407][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 296.541998][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 296.707906][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 296.758380][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 298.355750][ T1713] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 298.849608][ T1713] usb 4-1: Using ep0 maxpacket: 16 [ 299.915741][ T5913] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 300.288500][ T5913] usb 1-1: config 0 has no interfaces? [ 300.317045][ T5913] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 300.329652][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.354666][ T5913] usb 1-1: Product: syz [ 300.368443][ T5913] usb 1-1: Manufacturer: syz [ 300.382012][ T5913] usb 1-1: SerialNumber: syz [ 300.394946][ T5913] usb 1-1: config 0 descriptor?? [ 300.943561][ T1713] usb 4-1: unable to get BOS descriptor or descriptor too short [ 301.015838][ T1713] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 301.023439][ T1713] usb 4-1: can't read configurations, error -71 [ 303.077486][ T5935] usb 1-1: USB disconnect, device number 10 [ 303.835859][ T5935] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 304.185837][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 304.255046][ T5935] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 304.285929][ T5935] usb 1-1: config 0 has no interface number 0 [ 304.366089][ T5935] usb 1-1: config 0 interface 184 has no altsetting 0 [ 304.522213][ T5935] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 304.531946][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.565699][ T5935] usb 1-1: Product: syz [ 304.576419][ T5935] usb 1-1: Manufacturer: syz [ 304.590440][ T5935] usb 1-1: SerialNumber: syz [ 304.605775][ T5935] usb 1-1: config 0 descriptor?? [ 304.626854][ T5935] smsc75xx v1.0.0 [ 304.630495][ T5935] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 304.659696][ T5935] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 304.946303][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.957973][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.080959][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.088874][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.873043][ T7920] netlink: 'syz.3.384': attribute type 1 has an invalid length. [ 306.132825][ T7920] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 306.182344][ T7920] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 306.290604][ T7922] gretap1: entered promiscuous mode [ 306.327028][ T7922] bond1: (slave gretap1): making interface the new active one [ 306.363176][ T7922] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 306.404145][ T7925] macvlan2: entered promiscuous mode [ 306.460812][ T7925] macvlan2: entered allmulticast mode [ 306.478995][ T7925] bond1: entered promiscuous mode [ 306.507092][ T7925] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 306.607162][ T7925] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 306.636630][ T7925] bond1: left promiscuous mode [ 307.239130][ T7930] fuse: Bad value for 'fd' [ 307.324498][ T5957] usb 1-1: USB disconnect, device number 11 [ 307.745743][ T5913] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 307.812043][ T7947] __nla_validate_parse: 92 callbacks suppressed [ 307.812063][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 307.985450][ T7948] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 307.997288][ T7948] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 308.145743][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 310.504361][ T1713] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 310.724635][ T1713] usb 1-1: config 0 has no interfaces? [ 310.735422][ T1713] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 310.745103][ T1713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.766228][ T7968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.785191][ T1713] usb 1-1: Product: syz [ 310.802333][ T1713] usb 1-1: Manufacturer: syz [ 310.827354][ T1713] usb 1-1: SerialNumber: syz [ 310.887963][ T1713] usb 1-1: config 0 descriptor?? [ 310.946867][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 310.955305][ T5913] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 311.003707][ T5913] usb 2-1: can't read configurations, error -71 [ 311.956716][ T7978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 312.280073][ T7979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 312.562535][ T7987] loop9: detected capacity change from 0 to 8 [ 312.601251][ T6888] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 312.614326][ T6888] loop9: partition table partially beyond EOD, truncated [ 312.650204][ T6888] loop9: p1 size 81768186 extends beyond EOD, truncated [ 312.693890][ T7987] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 312.700840][ T7987] loop9: partition table partially beyond EOD, truncated [ 312.720983][ T7987] loop9: p1 size 81768186 extends beyond EOD, truncated [ 312.869132][ T6888] udevd[6888]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 312.960355][ T6888] udevd[6888]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 313.091528][ T7993] netlink: 'syz.2.397': attribute type 12 has an invalid length. [ 313.836338][ T8001] Cannot find add_set index 1 as target [ 314.448385][ T9] usb 1-1: USB disconnect, device number 12 [ 314.952086][ T8011] xt_connbytes: Forcing CT accounting to be enabled [ 314.959296][ T8011] Cannot find add_set index 0 as target [ 315.199750][ T8014] netlink: 44 bytes leftover after parsing attributes in process `syz.1.402'. [ 315.242861][ T8014] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.402'. [ 316.003800][ T8018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 316.011142][ T8018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.029700][ T8018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.050248][ T8018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 316.074352][ T8018] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 317.060130][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.066550][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.021432][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 318.095849][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 318.102046][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 318.108425][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 318.115008][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 318.627718][ T30] audit: type=1326 audit(1752269060.023:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 318.658679][ T30] audit: type=1326 audit(1752269060.023:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 318.684371][ T30] audit: type=1326 audit(1752269060.083:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 318.712660][ T30] audit: type=1326 audit(1752269060.083:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 318.806576][ T5935] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 318.833779][ T30] audit: type=1326 audit(1752269060.083:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 318.906018][ T30] audit: type=1326 audit(1752269060.103:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.1.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 318.981516][ T5935] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.989908][ T5935] usb 1-1: config 0 has no interface number 0 [ 318.999877][ T5935] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.156544][ T5935] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.167631][ T5935] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 319.215995][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.294944][ T5935] usb 1-1: config 0 descriptor?? [ 319.823989][ T5935] prodikeys 0003:041E:2801.0004: unknown main item tag 0x4 [ 319.832811][ T5935] prodikeys 0003:041E:2801.0004: unknown main item tag 0x3 [ 320.190065][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 320.204373][ T5935] prodikeys 0003:041E:2801.0004: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 320.277270][ T5935] hid_prodikeys: hid-prodikeys: failed to find output report [ 320.277270][ T5935] [ 320.306387][ T5935] usb 1-1: USB disconnect, device number 13 [ 320.592184][ T8059] fido_id[8059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 321.756144][ T5957] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 321.945976][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 321.953895][ T5957] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 321.962810][ T5957] usb 2-1: config 0 has no interface number 0 [ 321.972730][ T5957] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 322.013092][ T5957] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 322.041348][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.073874][ T5957] usb 2-1: Product: syz [ 322.079346][ T5957] usb 2-1: Manufacturer: syz [ 322.094469][ T5957] usb 2-1: SerialNumber: syz [ 322.115380][ T5957] usb 2-1: config 0 descriptor?? [ 322.558413][ T5957] msi2500 2-1:0.246: Registered as swradio24 [ 322.576419][ T5957] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 323.487154][ T5913] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 323.726680][ T5913] usb 4-1: config 0 has no interfaces? [ 323.802147][ T5913] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 323.811369][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.833946][ T5913] usb 4-1: Product: syz [ 323.841388][ T5913] usb 4-1: Manufacturer: syz [ 324.009415][ T5913] usb 4-1: SerialNumber: syz [ 324.212217][ T5913] usb 4-1: config 0 descriptor?? [ 325.509310][ T1713] usb 2-1: USB disconnect, device number 11 [ 325.631293][ T8100] delete_channel: no stack [ 325.681138][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 325.694771][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 325.704651][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 325.751795][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 325.761134][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 325.770618][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 325.779943][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 325.789237][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 325.798511][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 325.808081][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 326.637056][ T1713] usb 4-1: USB disconnect, device number 17 [ 326.737962][ T8126] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 326.783245][ T8126] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 326.802689][ T8126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 326.811824][ T42] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 327.406363][ T8126] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 327.452086][ T8126] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 327.645220][ T8126] bond2 (unregistering): Released all slaves [ 329.688295][ T8156] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 329.790075][ T8154] bond1: entered promiscuous mode [ 329.817837][ T8154] ip6gretap1: entered promiscuous mode [ 329.888323][ T8154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.553781][ T8156] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 330.620730][ T8156] ip6gretap1: left promiscuous mode [ 330.635363][ T8156] bond1 (unregistering): Released all slaves [ 331.974151][ T8173] __nla_validate_parse: 5 callbacks suppressed [ 331.974164][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 332.108094][ T8173] vlan2: entered allmulticast mode [ 332.114497][ T8173] macvtap0: entered allmulticast mode [ 332.120304][ T8173] veth0_macvtap: entered allmulticast mode [ 333.015761][ T44] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 333.221963][ T44] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 333.235315][ T44] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 333.322780][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.368852][ T44] usb 2-1: Product: syz [ 333.383483][ T44] usb 2-1: Manufacturer: syz [ 333.390366][ T44] usb 2-1: SerialNumber: syz [ 333.425111][ T44] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 334.205791][ T5935] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 334.256945][ T44] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 334.356594][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 334.393982][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.521117][ T8191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.558230][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.570879][ T8191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.595736][ T5935] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 334.604963][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.705736][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 334.742086][ T5935] usb 3-1: config 0 descriptor?? [ 334.865839][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 334.940456][ T9] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 334.949805][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.961872][ T9] usb 1-1: config 0 has no interface number 0 [ 334.969075][ T9] usb 1-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 334.994228][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 335.005183][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.014820][ T9] usb 1-1: Product: syz [ 335.020156][ T9] usb 1-1: Manufacturer: syz [ 335.025112][ T9] usb 1-1: SerialNumber: syz [ 335.110651][ T9] usb 1-1: config 0 descriptor?? [ 335.236588][ T5935] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 335.659615][ T1713] usb 3-1: USB disconnect, device number 12 [ 335.714478][ T8212] fido_id[8212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 335.859520][ T5935] usb 2-1: USB disconnect, device number 12 [ 336.327588][ T8224] PKCS7: Unknown OID: [5] (bad) [ 336.332583][ T8224] PKCS7: Only support pkcs7_signedData type [ 336.346107][ T8224] usb usb8: usbfs: process 8224 (syz.1.446) did not claim interface 0 before use [ 337.897608][ T9] usb 1-1: USB disconnect, device number 14 [ 337.973226][ T6888] udevd[6888]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.025780][ T5935] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 338.208984][ T5935] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 338.222291][ T5935] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 338.232813][ T5935] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 338.373576][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.450041][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.463457][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.576900][ T8228] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 338.611924][ T5935] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 339.776688][ T9] usb 4-1: USB disconnect, device number 18 [ 340.345750][ T5935] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 340.881105][ T8254] dummy0: entered promiscuous mode [ 340.896684][ T8254] vlan2: entered promiscuous mode [ 341.144379][ T5935] usb 2-1: unable to get BOS descriptor or descriptor too short [ 341.173768][ T5935] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 341.202237][ T5935] usb 2-1: can't read configurations, error -71 [ 341.464561][ T8266] fuse: Unknown parameter 'fd00000000000000000000' [ 342.317883][ T8273] netlink: 'syz.4.456': attribute type 7 has an invalid length. [ 342.346085][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 342.380109][ T8273] netlink: 'syz.4.456': attribute type 10 has an invalid length. [ 342.446922][ T8273] syz_tun: entered promiscuous mode [ 342.536012][ T8273] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 342.887918][ T8276] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 342.905319][ T8276] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 342.917909][ T8276] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.924155][ T8276] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.930618][ T8276] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 343.645734][ T5935] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 343.825707][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 343.881473][ T8276] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 343.906445][ T8276] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 344.026579][ T8276] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 344.151914][ T8276] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.335373][ T8276] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 344.598640][ T30] audit: type=1326 audit(1752269085.993:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 344.654866][ T30] audit: type=1326 audit(1752269086.013:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 345.065763][ T30] audit: type=1326 audit(1752269086.013:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 345.119645][ T30] audit: type=1326 audit(1752269086.013:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 345.194524][ T30] audit: type=1326 audit(1752269086.013:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 345.266651][ T30] audit: type=1326 audit(1752269086.013:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 345.960319][ T5855] Bluetooth: hci1: command 0x0c1a tx timeout [ 345.966438][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout [ 346.096383][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout [ 346.175744][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 346.288577][ T8314] ipt_ECN: cannot use operation on non-tcp rule [ 346.439851][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 347.272833][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short [ 347.302715][ T5935] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 347.348560][ T5935] usb 3-1: can't read configurations, error -71 [ 347.726826][ T1209] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 348.145810][ T1209] usb 4-1: device descriptor read/64, error -71 [ 348.452733][ T1209] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 349.035969][ T1209] usb 4-1: device descriptor read/64, error -71 [ 349.246035][ T1209] usb usb4-port1: attempt power cycle [ 349.907511][ T1209] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 350.059888][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.114137][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.883104][ T1209] usb 4-1: device descriptor read/8, error -71 [ 351.299078][ T30] audit: type=1326 audit(1752269092.693:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dab18e929 code=0x7ffc0000 [ 351.622220][ T30] audit: type=1326 audit(1752269093.013:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dab18e929 code=0x7ffc0000 [ 351.668756][ T30] audit: type=1326 audit(1752269093.043:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f8dab18e929 code=0x7ffc0000 [ 351.803541][ T30] audit: type=1326 audit(1752269093.043:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dab18e929 code=0x7ffc0000 [ 352.208688][ T30] audit: type=1326 audit(1752269093.043:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dab18e929 code=0x7ffc0000 [ 352.231061][ T30] audit: type=1326 audit(1752269093.043:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8dab18e929 code=0x7ffc0000 [ 352.955964][ T44] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 353.265768][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 353.364938][ T44] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 353.375699][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.401798][ T44] usb 4-1: Product: syz [ 353.423152][ T44] usb 4-1: Manufacturer: syz [ 353.549619][ T44] usb 4-1: SerialNumber: syz [ 353.591158][ T44] usb 4-1: config 0 descriptor?? [ 354.037687][ T8378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.050554][ T8378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.162293][ T8372] netlink: 'syz.0.478': attribute type 12 has an invalid length. [ 354.995838][ T5913] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 355.157944][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 355.170812][ T5913] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 355.333884][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.353038][ T5913] usb 2-1: config 0 descriptor?? [ 355.699077][ T5913] usbhid 2-1:0.0: can't add hid device: -71 [ 355.705126][ T5913] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 355.774300][ T5913] usb 2-1: USB disconnect, device number 15 [ 355.867690][ T30] audit: type=1326 audit(1752269097.073:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 355.941679][ T30] audit: type=1326 audit(1752269097.073:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 356.095309][ T30] audit: type=1326 audit(1752269097.083:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 356.126103][ T5935] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 356.271700][ T30] audit: type=1326 audit(1752269097.083:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 356.335900][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 356.370585][ T5935] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 356.427251][ T5935] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 356.436756][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 356.464725][ T5935] usb 3-1: Product: syz [ 356.509343][ T5935] usb 3-1: Manufacturer: syz [ 356.524287][ T5935] usb 3-1: SerialNumber: syz [ 356.542004][ T30] audit: type=1326 audit(1752269097.083:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 356.571867][ T5935] usb 3-1: config 0 descriptor?? [ 356.625864][ T1209] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 356.647632][ T8395] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 356.785867][ T1209] usb 2-1: Using ep0 maxpacket: 16 [ 356.788937][ T30] audit: type=1326 audit(1752269097.083:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 356.830735][ T1209] usb 2-1: unable to get BOS descriptor or descriptor too short [ 356.920292][ T1209] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 357.019092][ T1209] usb 2-1: can't read configurations, error -71 [ 357.025723][ T30] audit: type=1326 audit(1752269097.083:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb517990847 code=0x7ffc0000 [ 357.097340][ T30] audit: type=1326 audit(1752269097.083:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb5179907bc code=0x7ffc0000 [ 357.214597][ T30] audit: type=1326 audit(1752269097.083:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb5179906f4 code=0x7ffc0000 [ 357.234024][ T44] usb 4-1: USB disconnect, device number 23 [ 357.508838][ T30] audit: type=1326 audit(1752269097.083:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb5179906f4 code=0x7ffc0000 [ 357.536184][ T30] audit: type=1326 audit(1752269097.083:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb51798d58a code=0x7ffc0000 [ 357.558195][ T30] audit: type=1326 audit(1752269097.083:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 357.626069][ T30] audit: type=1326 audit(1752269097.083:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 357.654921][ T30] audit: type=1326 audit(1752269097.093:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb51798e963 code=0x7ffc0000 [ 358.615120][ T44] usb 3-1: USB disconnect, device number 15 [ 359.056284][ T8423] xt_NFQUEUE: number of total queues is 0 [ 359.304929][ T8432] bond0: entered promiscuous mode [ 359.310346][ T8432] bond_slave_0: entered promiscuous mode [ 359.316523][ T8432] bond_slave_1: entered promiscuous mode [ 359.731420][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.808337][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.925288][ T1209] IPVS: starting estimator thread 0... [ 360.034743][ T8437] IPVS: using max 28 ests per chain, 67200 per kthread [ 361.370516][ T8447] io-wq is not configured for unbound workers [ 361.379286][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 363.035239][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 363.168561][ T5935] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 363.465755][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 363.659968][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 363.659986][ T30] audit: type=1326 audit(1752269105.053:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 363.694303][ T30] audit: type=1326 audit(1752269105.053:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 363.720874][ T30] audit: type=1326 audit(1752269105.113:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f499f58e929 code=0x7ffc0000 [ 364.322074][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 365.646196][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short [ 365.686819][ T5935] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 365.748326][ T5935] usb 3-1: can't read configurations, error -71 [ 365.896966][ T8491] tipc: Failed to remove unknown binding: 66,1,1/0:3251570840/3251570842 [ 365.905819][ T8491] tipc: Failed to remove unknown binding: 66,1,1/0:3251570840/3251570842 [ 366.308875][ T8491] xt_CT: No such helper "snmp" [ 366.354286][ T8498] netlink: 'syz.3.505': attribute type 13 has an invalid length. [ 366.471807][ T8491] input: syz0 as /devices/virtual/input/input10 [ 366.900386][ T8498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.973465][ T8505] binder: 8504:8505 ioctl c018620c 200000000380 returned -22 [ 367.795803][ T1209] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 368.078910][ T1209] usb 2-1: config 0 has no interfaces? [ 368.185318][ T1209] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 368.218402][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.314804][ T1209] usb 2-1: Product: syz [ 368.325799][ T1209] usb 2-1: Manufacturer: syz [ 368.349496][ T1209] usb 2-1: SerialNumber: syz [ 368.381980][ T1209] usb 2-1: config 0 descriptor?? [ 368.415958][ T8518] syzkaller0: entered promiscuous mode [ 368.421591][ T8518] syzkaller0: entered allmulticast mode [ 370.103714][ T30] audit: type=1326 audit(1752269111.493:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 370.154240][ T30] audit: type=1326 audit(1752269111.493:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 370.239113][ T30] audit: type=1326 audit(1752269111.523:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 370.347354][ T30] audit: type=1326 audit(1752269111.523:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 370.372907][ T30] audit: type=1326 audit(1752269111.523:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 370.401035][ T44] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 370.405591][ T30] audit: type=1326 audit(1752269111.523:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 370.710006][ T44] usb 4-1: config 0 has no interfaces? [ 370.721747][ T44] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 370.731798][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.741559][ T44] usb 4-1: Product: syz [ 370.745868][ T44] usb 4-1: Manufacturer: syz [ 370.753392][ T44] usb 4-1: SerialNumber: syz [ 370.805777][ T44] usb 4-1: config 0 descriptor?? [ 371.485980][ T44] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 371.665751][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 372.793719][ T8514] kthread_run failed with err -4 [ 373.072348][ T5935] usb 2-1: USB disconnect, device number 18 [ 373.966920][ T5969] usb 4-1: USB disconnect, device number 24 [ 374.226324][ T8548] netlink: 'syz.4.515': attribute type 12 has an invalid length. [ 374.814649][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 374.816822][ T44] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 374.816845][ T44] usb 3-1: can't read configurations, error -71 [ 375.042164][ T8565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.042615][ T8565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.195817][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 375.492650][ T9] usb 4-1: config 0 has no interfaces? [ 375.545697][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 376.093870][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 376.103221][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.121696][ T9] usb 4-1: Product: syz [ 376.131799][ T9] usb 4-1: Manufacturer: syz [ 376.149287][ T9] usb 4-1: SerialNumber: syz [ 376.203680][ T9] usb 4-1: config 0 descriptor?? [ 376.462545][ T8563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.473294][ T8563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.561486][ T8578] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 376.561979][ T8577] IPVS: stopping backup sync thread 8578 ... [ 376.593285][ T30] audit: type=1326 audit(1752269117.983:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 376.690697][ T30] audit: type=1326 audit(1752269117.983:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 376.742925][ T30] audit: type=1326 audit(1752269117.983:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 376.781042][ T30] audit: type=1326 audit(1752269117.983:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 376.806502][ T30] audit: type=1326 audit(1752269117.983:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 376.857676][ T30] audit: type=1326 audit(1752269117.983:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 378.008273][ T30] audit: type=1800 audit(1752269119.383:160): pid=8601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.527" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 378.114139][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 378.340299][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.348512][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.386280][ T5935] usb 4-1: USB disconnect, device number 25 [ 378.589696][ T8607] netlink: 'syz.3.530': attribute type 13 has an invalid length. [ 379.245991][ T5969] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 379.281052][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.533'. [ 379.407300][ T5969] usb 2-1: Using ep0 maxpacket: 16 [ 379.624943][ T8607] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.637816][ T8607] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.927378][ T8607] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.941645][ T8607] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.106670][ T8607] dummy0: left allmulticast mode [ 380.191924][ T8607] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.201244][ T8607] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.210228][ T8607] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.219179][ T8607] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.638147][ T8624] vlan4: entered allmulticast mode [ 380.643896][ T8624] bond2: entered allmulticast mode [ 382.031721][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 382.042695][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 383.009155][ T5969] usb 2-1: unable to get BOS descriptor or descriptor too short [ 383.042163][ T8633] syz.2.534 (8633): drop_caches: 2 [ 383.066637][ T5969] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 383.095304][ T5969] usb 2-1: can't read configurations, error -71 [ 383.495396][ T30] audit: type=1326 audit(1752269124.823:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a698e929 code=0x7ffc0000 [ 383.571518][ T8665] kAFS: unable to lookup cell '.,' [ 383.637626][ T30] audit: type=1326 audit(1752269124.823:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a698e929 code=0x7ffc0000 [ 383.925724][ T5969] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 383.992591][ T5935] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 384.220190][ T5969] usb 2-1: Using ep0 maxpacket: 8 [ 384.229806][ T5969] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 384.266091][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 384.289774][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.296752][ T5935] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.320131][ T5935] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.364532][ T5969] pvrusb2: Hardware description: Terratec Grabster AV400 [ 384.373931][ T5969] pvrusb2: ********** [ 384.387244][ T5969] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 384.407658][ T5935] usb 4-1: config 0 interface 0 has no altsetting 0 [ 384.426252][ T5969] pvrusb2: Important functionality might not be entirely working. [ 384.464994][ T5969] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 384.500981][ T5969] pvrusb2: ********** [ 384.515814][ T5935] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 384.612328][ T2344] pvrusb2: Invalid write control endpoint [ 384.680210][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.736862][ T5935] usb 4-1: config 0 descriptor?? [ 384.848130][ T2344] pvrusb2: Invalid write control endpoint [ 384.853984][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 385.043512][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 385.097400][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 385.111689][ T2344] pvrusb2: Device being rendered inoperable [ 385.139613][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 385.149949][ T5935] mcp2200 0003:04D8:00DF.0006: item 0 4 0 9 parsing failed [ 385.158897][ T5935] mcp2200 0003:04D8:00DF.0006: can't parse reports [ 385.179105][ T5935] mcp2200 0003:04D8:00DF.0006: probe with driver mcp2200 failed with error -22 [ 385.199644][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 385.222381][ T2344] pvrusb2: Attached sub-driver cx25840 [ 385.233585][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 385.260035][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 385.519965][ T5935] usb 4-1: USB disconnect, device number 26 [ 386.291111][ T5935] usb 2-1: USB disconnect, device number 20 [ 389.003159][ T8691] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 389.534124][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 389.558388][ T8700] QAT: Device 127 not found [ 390.358505][ T8700] netlink: 'syz.4.548': attribute type 1 has an invalid length. [ 390.546089][ T5969] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 390.705925][ T5969] usb 1-1: Using ep0 maxpacket: 16 [ 394.965334][ T5969] usb 1-1: unable to get BOS descriptor or descriptor too short [ 395.045725][ T44] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 395.068817][ T5969] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 395.093274][ T5969] usb 1-1: can't read configurations, error -71 [ 395.255689][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 395.292193][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 395.336928][ T44] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 395.361863][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.439060][ T44] usb 3-1: Product: syz [ 395.451418][ T44] usb 3-1: Manufacturer: syz [ 395.976145][ T44] usb 3-1: SerialNumber: syz [ 396.056984][ T44] usb 3-1: config 0 descriptor?? [ 396.146212][ T44] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 396.175688][ T44] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 396.748441][ T44] em28xx 3-1:0.0: chip ID is em2874 [ 397.074418][ T44] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 397.278246][ T44] em28xx 3-1:0.0: board has no eeprom [ 397.365840][ T44] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 397.417319][ T44] em28xx 3-1:0.0: dvb set to bulk mode. [ 397.423146][ T5913] em28xx 3-1:0.0: Binding DVB extension [ 397.536164][ T44] usb 3-1: USB disconnect, device number 20 [ 397.607478][ T44] em28xx 3-1:0.0: Disconnecting em28xx [ 397.690577][ T5913] em28xx 3-1:0.0: Registering input extension [ 397.910704][ T8775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.566'. [ 397.919825][ T5913] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 397.940086][ T5913] Registered IR keymap rc-empty [ 397.967391][ T5913] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 398.041914][ T5913] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 398.103736][ T8777] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 398.120333][ T5913] em28xx 3-1:0.0: Input extension successfully initialized [ 398.153461][ T44] em28xx 3-1:0.0: Closing input extension [ 398.356750][ T44] em28xx 3-1:0.0: Freeing device [ 398.865756][ T44] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 398.936257][ T5981] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 399.031111][ T44] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 399.043289][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.107887][ T44] usb 3-1: Product: syz [ 399.189896][ T44] usb 3-1: Manufacturer: syz [ 399.230555][ T5981] usb 2-1: Using ep0 maxpacket: 8 [ 399.297164][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.306106][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.362629][ T44] usb 3-1: SerialNumber: syz [ 399.413379][ T44] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 399.478211][ T5981] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.514379][ T5981] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.532443][ T1713] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 399.648339][ T5981] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 399.687825][ T5981] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.885946][ T5981] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 399.908582][ T5981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.284120][ T5981] usb 2-1: GET_CAPABILITIES returned 0 [ 400.289729][ T5981] usbtmc 2-1:16.0: can't read capabilities [ 400.290801][ T8770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.329739][ T8770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.610164][ T8770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.619165][ T8770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.933622][ T44] usb 3-1: USB disconnect, device number 21 [ 400.976095][ T1713] usb 3-1: Service connection timeout for: 256 [ 400.982485][ T1713] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 401.011906][ T1713] ath9k_htc: Failed to initialize the device [ 401.031344][ T44] usb 3-1: ath9k_htc: USB layer deinitialized [ 401.865005][ T8803] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 401.871938][ T8803] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 401.906537][ T8803] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.913469][ T8803] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 401.929275][ T8803] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 401.950077][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 402.069822][ T8807] dummy0: entered promiscuous mode [ 402.101523][ T8807] macvtap1: entered promiscuous mode [ 402.427130][ T8807] macvtap1: entered allmulticast mode [ 402.444250][ T8807] dummy0: entered allmulticast mode [ 402.536819][ T44] usb 2-1: USB disconnect, device number 21 [ 403.298972][ T8826] fuse: Unknown parameter 'fd00000000000000000000' [ 403.544867][ T44] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 404.023872][ T5855] Bluetooth: hci3: command 0x0c1a tx timeout [ 404.030131][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 404.035740][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 404.036942][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 404.042121][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 404.105171][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 405.081188][ T30] audit: type=1800 audit(1752269146.473:163): pid=8838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.580" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 405.210845][ T8843] lo: entered promiscuous mode [ 405.225058][ T8843] tunl0: entered promiscuous mode [ 405.240355][ T8843] gre0: entered promiscuous mode [ 405.253526][ T8843] gretap0: entered promiscuous mode [ 405.337236][ T8843] erspan0: entered promiscuous mode [ 405.420980][ T8843] ip_vti0: entered promiscuous mode [ 405.503833][ T8843] ip6_vti0: entered promiscuous mode [ 405.575552][ T8843] sit0: entered promiscuous mode [ 405.600151][ T8843] ip6tnl0: entered promiscuous mode [ 405.613336][ T8843] ip6gre0: entered promiscuous mode [ 405.660837][ T8843] syz_tun: entered promiscuous mode [ 405.679781][ T8843] ip6gretap0: entered promiscuous mode [ 405.693849][ T8843] bridge0: entered promiscuous mode [ 405.713131][ T8843] vcan0: entered promiscuous mode [ 405.731011][ T8843] bond0: entered promiscuous mode [ 405.739137][ T8851] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.582'. [ 405.758293][ T8843] bond_slave_0: entered promiscuous mode [ 405.771779][ T8851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.582'. [ 405.788993][ T8843] bond_slave_1: entered promiscuous mode [ 405.802852][ T8843] team0: entered promiscuous mode [ 405.815258][ T8843] team_slave_0: entered promiscuous mode [ 405.827981][ T8843] team_slave_1: entered promiscuous mode [ 405.844139][ T8843] nlmon0: entered promiscuous mode [ 405.945252][ T8843] caif0: entered promiscuous mode [ 406.096061][ T8843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 406.857979][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 406.867042][ T44] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 406.874729][ T44] usb 3-1: can't read configurations, error -71 [ 406.985856][ T30] audit: type=1326 audit(1752269148.353:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.2.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 407.117433][ T30] audit: type=1326 audit(1752269148.353:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.2.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 407.163657][ T30] audit: type=1326 audit(1752269148.403:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.2.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb51798e929 code=0x7ffc0000 [ 409.025912][ T44] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 409.166909][ T8880] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 409.251187][ T44] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 409.275695][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.306151][ T44] usb 1-1: Product: syz [ 409.310353][ T44] usb 1-1: Manufacturer: syz [ 409.314960][ T44] usb 1-1: SerialNumber: syz [ 409.355797][ T44] usb 1-1: config 0 descriptor?? [ 409.643959][ T8891] input: syz1 as /devices/virtual/input/input12 [ 409.668616][ T8891] program syz.4.593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.152472][ T44] usb 1-1: Firmware version (0.0) predates our first public release. [ 410.268123][ T44] usb 1-1: Please update to version 0.2 or newer [ 410.352864][ T44] usb 1-1: Firmware: build [ 411.085717][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 411.285886][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 411.292124][ T8906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.320862][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 411.332370][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.345398][ T9] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 411.374937][ T8906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.698684][ T44] usb 1-1: USB disconnect, device number 17 [ 411.708666][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 411.740675][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.785659][ T9] usb 4-1: Product: syz [ 411.789957][ T9] usb 4-1: Manufacturer: syz [ 411.829252][ T9] usb 4-1: SerialNumber: syz [ 412.114970][ T1209] IPVS: starting estimator thread 0... [ 412.265765][ T8913] IPVS: using max 28 ests per chain, 67200 per kthread [ 412.410400][ T1209] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 412.550084][ T8920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.700772][ T1209] usb 2-1: Using ep0 maxpacket: 16 [ 412.822973][ T8920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.266391][ T9] usb 4-1: USB disconnect, device number 27 [ 414.432954][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 414.598567][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 414.612863][ T8929] netlink: 'syz.3.602': attribute type 5 has an invalid length. [ 414.621731][ T8929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.602'. [ 414.641852][ T8929] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 414.650957][ T8929] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 414.659817][ T8929] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 414.672358][ T8929] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 414.681294][ T8929] geneve2: entered promiscuous mode [ 414.691243][ T8929] geneve2: entered allmulticast mode [ 415.271547][ T1209] usb 2-1: unable to get BOS descriptor or descriptor too short [ 415.296916][ T1209] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 415.314751][ T1209] usb 2-1: can't read configurations, error -71 [ 415.355747][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 415.538378][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 415.562905][ T8940] vlan2: entered allmulticast mode [ 415.582300][ T8940] macvtap0: entered allmulticast mode [ 415.644191][ T9] usb 3-1: config 0 has no interfaces? [ 415.670438][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 415.718520][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.824605][ T9] usb 3-1: Product: syz [ 415.841830][ T9] usb 3-1: Manufacturer: syz [ 415.864641][ T9] usb 3-1: SerialNumber: syz [ 415.903234][ T9] usb 3-1: config 0 descriptor?? [ 416.368371][ T8935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.462402][ T8935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.685780][ T5913] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 417.858040][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 417.870222][ T5913] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 417.888412][ T5913] usb 4-1: config 0 has no interface number 0 [ 417.925734][ T5913] usb 4-1: config 0 interface 184 has no altsetting 0 [ 418.420260][ T5913] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 418.455922][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.474409][ T5913] usb 4-1: Product: syz [ 418.495662][ T5913] usb 4-1: Manufacturer: syz [ 418.505863][ T5913] usb 4-1: SerialNumber: syz [ 418.532640][ T5913] usb 4-1: config 0 descriptor?? [ 418.561497][ T5913] smsc75xx v1.0.0 [ 418.565142][ T5913] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 418.619908][ T5913] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 418.790874][ T8952] syz_tun: entered allmulticast mode [ 419.105783][ T5913] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 419.420140][ T5913] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 419.615200][ T5913] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 419.762726][ T5913] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 419.773640][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.796003][ T1209] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 419.870687][ T5957] usb 3-1: USB disconnect, device number 24 [ 419.984313][ T8971] netlink: 'syz.4.611': attribute type 4 has an invalid length. [ 419.992521][ T1209] usb 2-1: Using ep0 maxpacket: 16 [ 420.007611][ T8971] netlink: 'syz.4.611': attribute type 4 has an invalid length. [ 420.042760][ T1209] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 420.044330][ T5913] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 420.068515][ T1209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.087290][ T1209] usb 2-1: config 0 has no interface number 0 [ 420.116166][ T1209] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 420.125346][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.207936][ T1209] usb 2-1: Product: syz [ 420.212141][ T1209] usb 2-1: Manufacturer: syz [ 420.216837][ T1209] usb 2-1: SerialNumber: syz [ 420.245393][ T1209] usb 2-1: config 0 descriptor?? [ 420.299705][ T1209] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 420.359737][ T8963] delete_channel: no stack [ 420.366681][ T8948] syz_tun: left allmulticast mode [ 420.473819][ T42] usb 2-1: Failed to submit usb control message: -71 [ 420.475111][ T44] usb 2-1: USB disconnect, device number 24 [ 420.482043][ T42] usb 2-1: unable to send the bmi data to the device: -71 [ 420.566343][ T1209] usb 4-1: USB disconnect, device number 28 [ 420.673573][ T8971] syz.4.611 (8971) used greatest stack depth: 20168 bytes left [ 420.727207][ T42] usb 2-1: unable to get target info from device [ 420.747046][ T42] usb 2-1: could not get target info (-71) [ 420.874067][ T42] usb 2-1: could not probe fw (-71) [ 421.188260][ T5913] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 421.199630][ T1713] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 421.268637][ T5913] usb 1-1: USB disconnect, device number 18 [ 421.532058][ T1713] usb 3-1: config 0 has no interfaces? [ 421.551883][ T1713] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 421.563302][ T1713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.581592][ T1713] usb 3-1: Product: syz [ 421.589031][ T1713] usb 3-1: Manufacturer: syz [ 421.595643][ T1713] usb 3-1: SerialNumber: syz [ 421.633672][ T1713] usb 3-1: config 0 descriptor?? [ 422.210698][ T8977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.234549][ T8977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.766395][ T5913] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 422.945775][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 422.957122][ T5913] usb 2-1: config 0 has no interfaces? [ 422.966297][ T5913] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 422.976205][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.989074][ T5913] usb 2-1: Product: syz [ 422.993418][ T5913] usb 2-1: Manufacturer: syz [ 423.035544][ T5913] usb 2-1: SerialNumber: syz [ 423.053315][ T5913] usb 2-1: config 0 descriptor?? [ 423.348169][ T8985] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 424.924339][ T9013] netlink: 'syz.0.630': attribute type 13 has an invalid length. [ 425.122719][ T44] usb 3-1: USB disconnect, device number 25 [ 425.207188][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.214468][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.392483][ T1209] usb 2-1: USB disconnect, device number 25 [ 426.824178][ T9013] veth0_macvtap: left allmulticast mode [ 427.552884][ T9013] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.562270][ T9013] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.581700][ T9013] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.620710][ T9013] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.723449][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 430.016022][ T1209] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 430.531438][ T1209] usb 3-1: Using ep0 maxpacket: 32 [ 430.596674][ T1209] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 430.606308][ T1209] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.629303][ T1209] usb 3-1: config 0 has no interface number 0 [ 430.642256][ T1209] usb 3-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.748877][ T1209] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 430.758376][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.782828][ T1209] usb 3-1: Product: syz [ 430.797297][ T1209] usb 3-1: Manufacturer: syz [ 430.804806][ T1209] usb 3-1: SerialNumber: syz [ 430.827093][ T1209] usb 3-1: config 0 descriptor?? [ 432.115858][ T1713] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 432.129958][ T9102] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20003 [ 432.158083][ T9102] IPv6: Can't replace route, no match found [ 432.486168][ T1713] usb 2-1: config 0 has no interfaces? [ 432.667647][ T1713] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 432.845886][ T1713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.854063][ T1713] usb 2-1: Product: syz [ 432.858049][ T5935] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 432.864106][ T1713] usb 2-1: Manufacturer: syz [ 432.870537][ T1713] usb 2-1: SerialNumber: syz [ 433.002445][ T1713] usb 2-1: config 0 descriptor?? [ 433.107287][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 433.262264][ T1209] usb 3-1: USB disconnect, device number 26 [ 433.284605][ T6888] udevd[6888]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.309334][ T5935] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 433.322141][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.344981][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'. [ 433.375361][ T5935] usb 4-1: config 0 has no interface number 0 [ 433.582867][ T5935] usb 4-1: config 0 interface 68 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.805006][ T5935] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 433.815811][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.877967][ T5935] usb 4-1: Product: syz [ 434.080841][ T5935] usb 4-1: Manufacturer: syz [ 434.097938][ T5935] usb 4-1: SerialNumber: syz [ 434.153805][ T9113] vlan3: entered allmulticast mode [ 434.160435][ T9113] bond1: entered allmulticast mode [ 434.180121][ T5935] usb 4-1: config 0 descriptor?? [ 434.342680][ T5935] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 434.696919][ T1713] usb 4-1: USB disconnect, device number 29 [ 434.698364][ T12] usb 4-1: Failed to submit usb control message: -71 [ 434.756211][ T12] usb 4-1: unable to send the bmi data to the device: -71 [ 434.774732][ T12] usb 4-1: unable to get target info from device [ 434.781454][ T12] usb 4-1: could not get target info (-71) [ 434.788771][ T12] usb 4-1: could not probe fw (-71) [ 434.941462][ T5957] usb 2-1: USB disconnect, device number 26 [ 435.046295][ T5935] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 435.109281][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.122397][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.227967][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 435.237372][ T5935] usb 1-1: config 0 has no interfaces? [ 435.246574][ T5935] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 435.257548][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.288531][ T5935] usb 1-1: config 0 descriptor?? [ 435.502858][ T9119] netlink: 32 bytes leftover after parsing attributes in process `syz.0.639'. [ 435.512431][ T9119] netlink: 32 bytes leftover after parsing attributes in process `syz.0.639'. [ 435.871161][ T5957] usb 1-1: USB disconnect, device number 19 [ 437.178234][ T9152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.197570][ T9152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.454247][ T30] audit: type=1326 audit(1752269178.833:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9149 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a698e929 code=0x7ffc0000 [ 437.630400][ T30] audit: type=1326 audit(1752269178.833:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9149 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a698e929 code=0x7ffc0000 [ 438.358247][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 439.779643][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.786265][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.895845][ T5957] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 440.073267][ T5957] usb 1-1: Using ep0 maxpacket: 16 [ 440.093958][ T5957] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.131624][ T5957] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.282936][ T5957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 440.300469][ T5957] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 440.322385][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.356279][ T5957] usb 1-1: config 0 descriptor?? [ 440.884988][ T5957] mcp2200 0003:04D8:00DF.0007: item 0 4 0 9 parsing failed [ 440.894364][ T5957] mcp2200 0003:04D8:00DF.0007: can't parse reports [ 440.908039][ T5957] mcp2200 0003:04D8:00DF.0007: probe with driver mcp2200 failed with error -22 [ 441.118850][ T5957] usb 1-1: USB disconnect, device number 20 [ 441.585785][ T1713] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 441.907775][ T1713] usb 4-1: Using ep0 maxpacket: 8 [ 441.985656][ T5957] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 441.990526][ T1713] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 442.002339][ T1713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.025670][ T1713] usb 4-1: Product: syz [ 442.044145][ T1713] usb 4-1: Manufacturer: syz [ 442.059858][ T1713] usb 4-1: SerialNumber: syz [ 442.575848][ T31] INFO: task kworker/1:5:5938 blocked for more than 143 seconds. [ 442.584719][ T1713] usb 4-1: config 0 descriptor?? [ 442.610224][ T31] Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 [ 442.628323][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.677685][ T31] task:kworker/1:5 state:D stack:21208 pid:5938 tgid:5938 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 442.717707][ T31] Workqueue: usb_hub_wq hub_event [ 442.723205][ T31] Call Trace: [ 442.726697][ T31] [ 442.729756][ T31] __schedule+0x16f5/0x4d00 [ 442.734326][ T31] ? schedule+0x165/0x360 [ 442.738859][ T31] ? __pfx___schedule+0x10/0x10 [ 442.744225][ T31] ? schedule+0x91/0x360 [ 442.748702][ T31] schedule+0x165/0x360 [ 442.753063][ T31] schedule_timeout+0x9a/0x270 [ 442.761581][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 442.772206][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.780675][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.789420][ T31] ? wait_for_completion+0x267/0x5d0 [ 442.799989][ T31] wait_for_completion+0x2bf/0x5d0 [ 442.810131][ T1713] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 442.828578][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 442.830750][ T5957] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 442.858996][ T31] i2c_del_adapter+0x581/0x6e0 [ 442.867335][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.873822][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 442.880459][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 442.881652][ T5957] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 442.929689][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 442.943678][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 442.943706][ T5957] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 442.943732][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.011622][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 443.048846][ T31] usb_probe_interface+0x641/0xbc0 [ 443.100356][ T5957] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 443.152731][ T5957] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 443.204726][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 443.214659][ T31] really_probe+0x26a/0x9a0 [ 443.224739][ T31] __driver_probe_device+0x18c/0x2f0 [ 443.233890][ T31] driver_probe_device+0x4f/0x430 [ 443.239339][ T31] __device_attach_driver+0x2ce/0x530 [ 443.248656][ T31] bus_for_each_drv+0x251/0x2e0 [ 443.253680][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 443.258139][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.260361][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 443.310663][ T31] __device_attach+0x2b8/0x400 [ 443.327351][ T31] ? __pfx___device_attach+0x10/0x10 [ 443.481632][ T9191] delete_channel: no stack [ 443.524072][ T5913] usb 2-1: USB disconnect, device number 27 [ 443.543877][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 443.549297][ T30] audit: type=1326 audit(1752269184.793:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 443.574142][ T31] bus_probe_device+0x185/0x260 [ 443.580266][ T31] device_add+0x7b6/0xb50 [ 443.591476][ T31] usb_set_configuration+0x1a87/0x20e0 [ 443.599399][ T31] usb_generic_driver_probe+0x8d/0x150 [ 443.605009][ T31] usb_probe_device+0x1c4/0x390 [ 443.613565][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 443.635477][ T31] really_probe+0x26a/0x9a0 [ 443.669586][ T30] audit: type=1326 audit(1752269184.793:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 443.682005][ T31] __driver_probe_device+0x18c/0x2f0 [ 443.697391][ T30] audit: type=1326 audit(1752269184.793:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 443.720158][ T31] driver_probe_device+0x4f/0x430 [ 443.724442][ T30] audit: type=1326 audit(1752269184.793:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 443.725242][ T31] __device_attach_driver+0x2ce/0x530 [ 443.747391][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.752697][ T30] audit: type=1326 audit(1752269184.793:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 443.755300][ T31] bus_for_each_drv+0x251/0x2e0 [ 443.789927][ T30] audit: type=1326 audit(1752269184.793:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 443.815016][ T30] audit: type=1326 audit(1752269184.793:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 443.840349][ T30] audit: type=1326 audit(1752269184.793:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 443.864230][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 443.865928][ T30] audit: type=1326 audit(1752269184.793:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 443.870558][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 443.898065][ T30] audit: type=1326 audit(1752269184.803:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f685bf8e929 code=0x7ffc0000 [ 443.924121][ T31] __device_attach+0x2b8/0x400 [ 443.929321][ T31] ? __pfx___device_attach+0x10/0x10 [ 443.944968][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 443.952945][ T31] bus_probe_device+0x185/0x260 [ 443.960933][ T31] device_add+0x7b6/0xb50 [ 443.965631][ T31] usb_new_device+0xa39/0x16c0 [ 443.971423][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 443.979947][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 443.986249][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.991613][ T31] hub_event+0x2941/0x4a00 [ 443.998900][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 444.004414][ T31] ? __pfx_hub_event+0x10/0x10 [ 444.009436][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 444.015488][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.031526][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 444.041348][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 444.047919][ T31] process_scheduled_works+0xae1/0x17b0 [ 444.053708][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 444.063015][ T31] worker_thread+0x8a0/0xda0 [ 444.082177][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 444.105979][ T31] ? __kthread_parkme+0x7b/0x200 [ 444.111125][ T31] kthread+0x70e/0x8a0 [ 444.124836][ T31] ? __pfx_worker_thread+0x10/0x10 [ 444.138124][ T31] ? __pfx_kthread+0x10/0x10 [ 444.144687][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.150896][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.160103][ T31] ? __pfx_kthread+0x10/0x10 [ 444.164915][ T31] ret_from_fork+0x3fc/0x770 [ 444.169807][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 444.175218][ T31] ? __switch_to_asm+0x39/0x70 [ 444.180733][ T31] ? __switch_to_asm+0x33/0x70 [ 444.185824][ T31] ? __pfx_kthread+0x10/0x10 [ 444.190474][ T31] ret_from_fork_asm+0x1a/0x30 [ 444.195401][ T31] [ 444.200852][ T31] [ 444.200852][ T31] Showing all locks held in the system: [ 444.211420][ T31] 1 lock held by khungtaskd/31: [ 444.221048][ T31] #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 444.231703][ T31] 6 locks held by kworker/1:2/1713: [ 444.237347][ T31] #0: ffff88801debbd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 444.248915][ T31] #1: ffffc90005077bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 444.261236][ T31] #2: ffff888144701198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 444.270453][ T31] #3: ffff88807655b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 444.280128][ T31] #4: ffff8880212be160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 444.289709][ T31] #5: ffff88806beb40d0 (&d->usb_mutex#2){+.+.}-{4:4}, at: rtl28xxu_ctrl_msg+0x56/0x640 [ 444.299875][ T31] 5 locks held by kworker/u8:10/3527: [ 444.305293][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 444.315441][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 444.327063][ T31] #2: ffff8880b8625958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 444.336159][ T31] #3: ffffffff99cf2680 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 444.346643][ T31] #4: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 444.356383][ T31] 2 locks held by getty/5613: [ 444.361088][ T31] #0: ffff88814c1e30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 444.370907][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 444.381198][ T31] 5 locks held by kworker/1:5/5938: [ 444.386480][ T31] #0: ffff88801debbd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 444.397900][ T31] #1: ffffc900053d7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 444.410193][ T31] #2: ffff888144709198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 444.419729][ T31] #3: ffff888029a01198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 444.429094][ T31] #4: ffff88806b327160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 444.438406][ T31] 4 locks held by udevd/6888: [ 444.443090][ T31] #0: ffff888028a102f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 444.451967][ T31] #1: ffff888028164488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 444.461486][ T31] #2: ffff888035764c38 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 444.471083][ T31] #3: ffff88807655b198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 444.480488][ T31] [ 444.482927][ T31] ============================================= [ 444.482927][ T31] [ 444.508712][ T31] NMI backtrace for cpu 1 [ 444.508731][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 444.508748][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 444.508756][ T31] Call Trace: [ 444.508761][ T31] [ 444.508767][ T31] dump_stack_lvl+0x189/0x250 [ 444.508785][ T31] ? __wake_up_klogd+0xd9/0x110 [ 444.508809][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.508826][ T31] ? __pfx__printk+0x10/0x10 [ 444.508853][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 444.508874][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 444.508890][ T31] ? _printk+0xcf/0x120 [ 444.508910][ T31] ? __pfx__printk+0x10/0x10 [ 444.508930][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 444.508944][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 444.508964][ T31] watchdog+0xfee/0x1030 [ 444.508978][ T31] ? watchdog+0x1de/0x1030 [ 444.508995][ T31] kthread+0x70e/0x8a0 [ 444.509022][ T31] ? __pfx_watchdog+0x10/0x10 [ 444.509034][ T31] ? __pfx_kthread+0x10/0x10 [ 444.509054][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.509074][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.509093][ T31] ? __pfx_kthread+0x10/0x10 [ 444.509112][ T31] ret_from_fork+0x3fc/0x770 [ 444.509128][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 444.509146][ T31] ? __switch_to_asm+0x39/0x70 [ 444.509163][ T31] ? __switch_to_asm+0x33/0x70 [ 444.509179][ T31] ? __pfx_kthread+0x10/0x10 [ 444.509198][ T31] ret_from_fork_asm+0x1a/0x30 [ 444.509225][ T31] [ 444.509244][ T31] Sending NMI from CPU 1 to CPUs 0: [ 444.667126][ C0] NMI backtrace for cpu 0 [ 444.667140][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 444.667158][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 444.667178][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 444.667207][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 0d 19 00 f3 0f 1e fa fb f4 c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 444.667222][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 444.667237][ C0] RAX: d1c16734b4cd8200 RBX: ffffffff81976c78 RCX: d1c16734b4cd8200 [ 444.667249][ C0] RDX: 0000000000000001 RSI: ffffffff8d998a4b RDI: ffffffff8be29dc0 [ 444.667260][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 444.667272][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa1f3f0 [ 444.667283][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 444.667293][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 444.667305][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.667316][ C0] CR2: 000000110c42a699 CR3: 000000007fb6c000 CR4: 00000000003526f0 [ 444.667329][ C0] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 444.667338][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 444.667347][ C0] Call Trace: [ 444.667354][ C0] [ 444.667360][ C0] default_idle+0x13/0x20 [ 444.667377][ C0] default_idle_call+0x74/0xb0 [ 444.667397][ C0] do_idle+0x1e8/0x510 [ 444.667419][ C0] ? __pfx_do_idle+0x10/0x10 [ 444.667444][ C0] cpu_startup_entry+0x44/0x60 [ 444.667479][ C0] rest_init+0x2de/0x300 [ 444.667497][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 444.667519][ C0] start_kernel+0x47d/0x500 [ 444.667543][ C0] x86_64_start_reservations+0x24/0x30 [ 444.667558][ C0] x86_64_start_kernel+0x143/0x1c0 [ 444.667585][ C0] common_startup_64+0x13e/0x147 [ 444.667614][ C0] [ 444.672533][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 444.877301][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 444.889109][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 444.899170][ T31] Call Trace: [ 444.902454][ T31] [ 444.905412][ T31] dump_stack_lvl+0x99/0x250 [ 444.910034][ T31] ? __asan_memcpy+0x40/0x70 [ 444.914629][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.919836][ T31] ? __pfx__printk+0x10/0x10 [ 444.924457][ T31] panic+0x2db/0x790 [ 444.928377][ T31] ? __pfx_panic+0x10/0x10 [ 444.932806][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 444.937577][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 444.943425][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 444.948800][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 444.954982][ T31] watchdog+0x102d/0x1030 [ 444.959324][ T31] ? watchdog+0x1de/0x1030 [ 444.963771][ T31] kthread+0x70e/0x8a0 [ 444.967878][ T31] ? __pfx_watchdog+0x10/0x10 [ 444.972557][ T31] ? __pfx_kthread+0x10/0x10 [ 444.977158][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.982368][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.987577][ T31] ? __pfx_kthread+0x10/0x10 [ 444.992175][ T31] ret_from_fork+0x3fc/0x770 [ 444.996769][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 445.001885][ T31] ? __switch_to_asm+0x39/0x70 [ 445.006654][ T31] ? __switch_to_asm+0x33/0x70 [ 445.011449][ T31] ? __pfx_kthread+0x10/0x10 [ 445.016058][ T31] ret_from_fork_asm+0x1a/0x30 [ 445.020851][ T31] [ 445.024181][ T31] Kernel Offset: disabled [ 445.028531][ T31] Rebooting in 86400 seconds..