last executing test programs: 1m55.289802162s ago: executing program 1 (id=1430): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0x7, 0xff}}) syz_usb_connect(0x0, 0x44, &(0x7f0000001fc0)={{0x12, 0x1, 0x40, 0xeb, 0x3d, 0x7d, 0x8, 0x4e2, 0x1420, 0x30ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x6, 0xfa, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x77, 0x0, 0x0, 0x51, 0xa5, 0x9}}, {{0x9, 0x4, 0x33, 0x7, 0x0, 0x2, 0xd, 0x0, 0x6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0xb7c8, 0x1, 0x7, 0x4}}]}}]}}]}}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x38481, 0x0) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, 0x0) r4 = syz_open_dev$rtc(0x0, 0x4, 0x252b03) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, 0x0) 1m52.877697137s ago: executing program 1 (id=1435): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4010, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0xb6f, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) tgkill(0x0, r1, 0x27) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 1m51.605095646s ago: executing program 1 (id=1439): syz_usb_connect(0x0, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002369d7b10210435032c56010203010902400001070870bc090430fc0002feff090524"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) 1m50.103558261s ago: executing program 1 (id=1442): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x400aee2, 0x400, 0x1, 0x317}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 1m49.905866039s ago: executing program 1 (id=1443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = inotify_init() r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)={{0x7f, 0x45, 0x4c, 0x46, 0xfd, 0x6, 0x0, 0xec, 0x80, 0x2, 0x6, 0xfffffff1, 0x65, 0x40, 0x3e3, 0xf, 0x0, 0x38, 0x2, 0x590, 0x5, 0x7}, [{0x60000000, 0x100, 0x3, 0x9, 0xffffffffffffff6e, 0xffff, 0xa8, 0x80}, {0x60000003, 0x80000001, 0x0, 0x9, 0x7bcc, 0x8000000000000000, 0x5, 0x4}], "", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5b0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x10000006, @remote}}}, 0x108) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x24, 0x3e, 0x107, 0x3, 0x0, {0x3, 0x7c}, [@nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r4, @ANYRES64=r5, @ANYRESHEX, @ANYRES8, @ANYRES8=r3, @ANYRES8=r7], 0x7c}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000c01) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000000c0)=@dstopts={0x6c, 0xf, '\x00', [@pad1, @pad1, @jumbo={0xc2, 0x4, 0x1ff}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x50, {0x1, 0x12, 0x3, 0x8, [0x9, 0x3, 0x1, 0xfff, 0x1, 0x8, 0xd, 0x1, 0x0]}}, @hao={0xc9, 0x10, @local}, @pad1]}, 0x88) 1m43.827499395s ago: executing program 1 (id=1455): socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x3e1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 1m28.660633253s ago: executing program 32 (id=1455): socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x3e1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 9.755422718s ago: executing program 4 (id=1662): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000002280)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_enter(r4, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) 9.079046967s ago: executing program 2 (id=1665): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/231}, {&(0x7f00000004c0)=""/184}, {&(0x7f0000000580)=""/85}, {&(0x7f0000000600)=""/183}, {&(0x7f00000006c0)=""/233}], 0x0, &(0x7f0000000840)=""/194}, 0x6}, {{&(0x7f0000000940)=@nl=@proc, 0x0, &(0x7f0000000140)=[{&(0x7f00000009c0)=""/126}, {&(0x7f0000000a40)=""/133}], 0x0, &(0x7f0000000240)=""/23}, 0x101}, {{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000b00)=""/121}, 0x4}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000340)=""/30, 0x51}, {&(0x7f0000000b80)=""/73}, {&(0x7f0000000c00)=""/92}, {&(0x7f0000000c80)=""/219}, {&(0x7f0000000d80)=""/4096}, {&(0x7f0000001d80)=""/96}, {&(0x7f0000001e00)=""/132}], 0x0, &(0x7f0000001f40)=""/195}, 0xff}], 0x946c, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x58}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlink(&(0x7f0000000180)='./bus\x00') 8.573028276s ago: executing program 5 (id=1670): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r3, 0x1000000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f917", 0x11}], 0x1}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r5 = socket(0x10, 0x803, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/4068, 0xfe4) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000040)={{@any, 0x4}, 0x1, 0x0, 0x3}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 7.140478481s ago: executing program 2 (id=1674): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x10, 0x4, 0x4, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}]}, 0x18}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) 6.758688916s ago: executing program 2 (id=1677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) move_mount(r3, 0x0, r3, &(0x7f0000000040)='./file0\x00', 0x210) 5.912059947s ago: executing program 0 (id=1680): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000001c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997", 0x27}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b4", 0x3a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385", 0x4b}, {&(0x7f0000000a00)="a7c652df85", 0x5}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.272737133s ago: executing program 5 (id=1682): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x3b0}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x4924924924924b4, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0xfcf7}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_io_uring_setup(0x10d4, &(0x7f0000000540)={0x0, 0x70f4, 0x100, 0xffffffff, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r6, 0x200047bc, 0x0, 0x0, 0x0, 0x5e) 5.195911128s ago: executing program 3 (id=1683): socket$inet(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f00000000c0)) 4.739418418s ago: executing program 3 (id=1684): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/231}, {&(0x7f00000004c0)=""/184}, {&(0x7f0000000580)=""/85}, {&(0x7f0000000600)=""/183}, {&(0x7f00000006c0)=""/233}], 0x0, &(0x7f0000000840)=""/194}, 0x6}, {{&(0x7f0000000940)=@nl=@proc, 0x0, &(0x7f0000000140)=[{&(0x7f00000009c0)=""/126}, {&(0x7f0000000a40)=""/133}], 0x0, &(0x7f0000000240)=""/23}, 0x101}, {{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000b00)=""/121}, 0x4}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000340)=""/30, 0x51}, {&(0x7f0000000b80)=""/73}, {&(0x7f0000000c00)=""/92}, {&(0x7f0000000c80)=""/219}, {&(0x7f0000000d80)=""/4096}, {&(0x7f0000001d80)=""/96}, {&(0x7f0000001e00)=""/132}], 0x0, &(0x7f0000001f40)=""/195}, 0xff}], 0x946c, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x58}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlink(&(0x7f0000000180)='./bus\x00') 4.445678612s ago: executing program 0 (id=1685): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f52", 0x50}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d8", 0x25}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c81f00", 0x2e}, {0x0}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.371198373s ago: executing program 4 (id=1686): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8045) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db7", 0x8a}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x8) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0xda5a, @loopback}}}, &(0x7f00000001c0)=0x84) write(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, @in={0x2, 0x4e23, @multicast1}], 0x2c) cachestat(0xffffffffffffffff, &(0x7f0000000040)={0xff, 0x1}, 0x0, 0x20) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 4.262709091s ago: executing program 0 (id=1687): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x10, 0x4, 0x4, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) 4.029564866s ago: executing program 0 (id=1688): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) get_robust_list(r2, &(0x7f0000000540)=&(0x7f0000000500), &(0x7f0000000580)=0x18) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e0000000000000003000000050000004c000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ebffffffffffff0700000001010000ff000000000000000000000000870321cf34cd87c3be97f45c"], 0x50) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) 3.967407352s ago: executing program 4 (id=1689): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, 0x0, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.773430073s ago: executing program 0 (id=1690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x80, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x80]}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000180)={0x2}, 0x2) 3.734967443s ago: executing program 4 (id=1691): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = dup(r1) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)}}], 0x1, 0x0) 1.979336303s ago: executing program 0 (id=1692): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r3, 0x1000000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f917", 0x11}], 0x1}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f00000001c0)=""/4068, 0xfe4) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000040)={{@any, 0x4}, 0x1, 0x0, 0x3}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 1.963646262s ago: executing program 4 (id=1693): write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.962327432s ago: executing program 5 (id=1694): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x63, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x3, 0x0, 0xfff9, {[@timestamp={0x8, 0xa, 0x1, 0x3}]}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.635164366s ago: executing program 5 (id=1695): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000001c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997", 0x27}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b4", 0x3a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385", 0x4b}, {&(0x7f0000000a00)="a7c652df85", 0x5}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.38776716s ago: executing program 4 (id=1696): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000002280)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_enter(r4, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) 1.079972057s ago: executing program 3 (id=1697): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f52", 0x50}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d8", 0x25}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c81f00", 0x2e}, {0x0}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 985.578423ms ago: executing program 2 (id=1698): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x10, 0x4, 0x4, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) 730.243882ms ago: executing program 2 (id=1699): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8045) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd", 0x94}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x8) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0xda5a, @loopback}}}, &(0x7f00000001c0)=0x84) write(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, @in={0x2, 0x4e23, @multicast1}], 0x2c) cachestat(0xffffffffffffffff, &(0x7f0000000040)={0xff, 0x1}, 0x0, 0x20) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 576.135425ms ago: executing program 3 (id=1700): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) get_robust_list(r2, &(0x7f0000000540)=&(0x7f0000000500), &(0x7f0000000580)=0x18) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e0000000000000003000000050000004c000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ebffffffffffff0700000001010000ff000000000000000000000000870321cf34cd87c3be97f45c"], 0x50) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) 439.133724ms ago: executing program 5 (id=1701): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, 0x0, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 195.253445ms ago: executing program 2 (id=1702): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 193.88951ms ago: executing program 3 (id=1703): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = dup(r1) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1}}], 0x1, 0x0) 72.734336ms ago: executing program 5 (id=1704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x80, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x80]}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000180)={0x2}, 0x2) 0s ago: executing program 3 (id=1705): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4010, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0xb6f, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tgkill(0x0, r1, 0x27) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) kernel console output (not intermixed with test programs): 2-1:1.0: skipping garbage [ 156.622879][ T917] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 156.860102][ T5884] usb 2-1: USB disconnect, device number 9 [ 157.394112][ T5877] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 157.557805][ T5877] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.557827][ T5877] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.557837][ T5877] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.557866][ T5877] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.560531][ T5877] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.560563][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.560645][ T5877] usb 2-1: Product: syz [ 157.560663][ T5877] usb 2-1: Manufacturer: syz [ 157.720100][ T5877] cdc_wdm 2-1:1.0: skipping garbage [ 157.720115][ T5877] cdc_wdm 2-1:1.0: skipping garbage [ 157.720122][ T5877] cdc_wdm 2-1:1.0: skipping garbage [ 157.720142][ T5877] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 157.832567][ T6869] syz.0.358 uses obsolete (PF_INET,SOCK_PACKET) [ 158.514801][ T917] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.675121][ T917] usb 3-1: Using ep0 maxpacket: 8 [ 158.683863][ T917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.683891][ T917] usb 3-1: config 0 has no interfaces? [ 158.686347][ T917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.686366][ T917] usb 3-1: config 0 has no interfaces? [ 158.688038][ T917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.688060][ T917] usb 3-1: config 0 has no interfaces? [ 158.689827][ T917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.689900][ T917] usb 3-1: config 0 has no interfaces? [ 158.689938][ T917] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 158.689951][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.751230][ T917] usb 3-1: config 0 descriptor?? [ 159.411454][ T6896] fuse: Invalid rootmode [ 159.569224][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 159.569244][ T36] audit: type=1326 audit(1771324338.419:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6897 comm="syz.3.370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdc5bf79 code=0x0 [ 159.620838][ T5884] usb 2-1: USB disconnect, device number 10 [ 160.384655][ T36] audit: type=1326 audit(1771324339.229:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 160.387306][ T36] audit: type=1326 audit(1771324339.239:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 160.387348][ T36] audit: type=1326 audit(1771324339.239:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 160.387375][ T36] audit: type=1326 audit(1771324339.239:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 160.387399][ T36] audit: type=1326 audit(1771324339.239:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 160.387423][ T36] audit: type=1326 audit(1771324339.239:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 160.387448][ T36] audit: type=1326 audit(1771324339.239:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 160.387471][ T36] audit: type=1326 audit(1771324339.239:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42ddcac84e code=0x7ffc0000 [ 160.387494][ T36] audit: type=1326 audit(1771324339.239:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6911 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 161.878023][ T5877] usb 3-1: USB disconnect, device number 9 [ 162.714631][ T5877] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 162.886189][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 162.910195][ T5877] usb 1-1: config 6 has an invalid interface number: 51 but max is 1 [ 162.910216][ T5877] usb 1-1: config 6 has no interface number 1 [ 162.910654][ T5877] usb 1-1: config 6 interface 0 has no altsetting 0 [ 162.910665][ T5877] usb 1-1: config 6 interface 51 has no altsetting 0 [ 162.918032][ T5877] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 162.918061][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.918079][ T5877] usb 1-1: Product: syz [ 162.918092][ T5877] usb 1-1: Manufacturer: syz [ 162.918105][ T5877] usb 1-1: SerialNumber: syz [ 163.500027][ T5877] xr_serial 1-1:6.51: xr_serial converter detected [ 163.545663][ T5877] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 163.545733][ T5877] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 163.609289][ T5877] usb 1-1: USB disconnect, device number 12 [ 163.693431][ T5877] xr_serial 1-1:6.0: device disconnected [ 164.488242][ T7006] tipc: Enabled bearer , priority 0 [ 164.493930][ T7006] tipc: Resetting bearer [ 164.574958][ T5884] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 164.720255][ T7004] tipc: Disabling bearer [ 164.726844][ T5884] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 164.726872][ T5884] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 164.726890][ T5884] usb 4-1: config 0 has no interface number 0 [ 164.726920][ T5884] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 164.726956][ T5884] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 164.726980][ T5884] usb 4-1: config 0 interface 255 has no altsetting 0 [ 164.756354][ T5884] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 164.756383][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.756401][ T5884] usb 4-1: Product: syz [ 164.756413][ T5884] usb 4-1: Manufacturer: syz [ 164.756425][ T5884] usb 4-1: SerialNumber: syz [ 164.768276][ T5884] usb 4-1: config 0 descriptor?? [ 164.990609][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 165.006394][ T5884] powermate 4-1:0.255: probe with driver powermate failed with error -22 [ 165.086675][ T5884] usb 4-1: USB disconnect, device number 9 [ 167.438361][ T7069] fuse: Invalid rootmode [ 169.539109][ T7107] fuse: Bad value for 'rootmode' [ 170.013334][ T7118] syzkaller0: entered promiscuous mode [ 170.013638][ T7118] syzkaller0: entered allmulticast mode [ 170.794858][ T7126] misc userio: No port type given on /dev/userio [ 171.394701][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 171.579198][ T31] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.579230][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.579248][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.579299][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.583121][ T31] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.583145][ T31] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.583156][ T31] usb 3-1: Product: syz [ 171.583164][ T31] usb 3-1: Manufacturer: syz [ 171.636193][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 171.636213][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 171.719053][ T31] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 171.719070][ T31] cdc_wdm 3-1:1.0: Unknown control protocol [ 171.845418][ T5877] usb 3-1: USB disconnect, device number 10 [ 172.524687][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 172.674678][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 172.676682][ T10] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 172.676700][ T10] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 172.676712][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 172.676724][ T10] usb 1-1: config 1 has no interface number 0 [ 172.676751][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.676766][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 1796, setting to 1024 [ 172.676780][ T10] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 172.676804][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 172.676817][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.681293][ T7155] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 172.810299][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 172.937663][ T7155] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 172.966446][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 173.033128][ T7165] fuse: Bad value for 'rootmode' [ 173.234598][ T31] usb 1-1: USB disconnect, device number 13 [ 173.238023][ T31] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 173.387592][ T7171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.472'. [ 174.244463][ T7193] fuse: Unknown parameter 'use00000000000000000000' [ 174.744826][ T36] kauditd_printk_skb: 201 callbacks suppressed [ 174.744847][ T36] audit: type=1326 audit(1771324353.579:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 174.744897][ T36] audit: type=1326 audit(1771324353.579:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 174.744941][ T36] audit: type=1326 audit(1771324353.579:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 174.744983][ T36] audit: type=1326 audit(1771324353.579:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 174.745027][ T36] audit: type=1326 audit(1771324353.579:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 174.745067][ T36] audit: type=1326 audit(1771324353.579:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 174.745111][ T36] audit: type=1326 audit(1771324353.579:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 174.745154][ T36] audit: type=1326 audit(1771324353.579:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 174.745198][ T36] audit: type=1326 audit(1771324353.579:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 174.745251][ T36] audit: type=1326 audit(1771324353.579:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.1.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 175.826621][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 176.034650][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 176.037940][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.037966][ T10] usb 1-1: config 0 has no interfaces? [ 176.039730][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.039752][ T10] usb 1-1: config 0 has no interfaces? [ 176.041528][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.041550][ T10] usb 1-1: config 0 has no interfaces? [ 176.102955][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.102983][ T10] usb 1-1: config 0 has no interfaces? [ 176.103015][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 176.103039][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.154254][ T10] usb 1-1: config 0 descriptor?? [ 176.234920][ T5884] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 176.427553][ T5884] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.427586][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.427605][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.427659][ T5884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.429980][ T5884] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.430007][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.430028][ T5884] usb 2-1: Product: syz [ 176.430042][ T5884] usb 2-1: Manufacturer: syz [ 176.561435][ T5884] cdc_wdm 2-1:1.0: skipping garbage [ 176.561459][ T5884] cdc_wdm 2-1:1.0: skipping garbage [ 176.586044][ T5884] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 176.586069][ T5884] cdc_wdm 2-1:1.0: Unknown control protocol [ 176.676760][ T31] usb 2-1: USB disconnect, device number 11 [ 177.147340][ T7243] Invalid logical block size (8192) [ 177.454833][ T917] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 177.759110][ T917] usb 4-1: Using ep0 maxpacket: 16 [ 177.771564][ T917] usb 4-1: config 3 has an invalid interface number: 155 but max is 0 [ 177.771591][ T917] usb 4-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 177.771607][ T917] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 177.771624][ T917] usb 4-1: config 3 has no interface number 0 [ 177.771653][ T917] usb 4-1: config 3 interface 155 has no altsetting 0 [ 177.774236][ T917] usb 4-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 177.774260][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.774277][ T917] usb 4-1: Product: syz [ 177.774290][ T917] usb 4-1: Manufacturer: syz [ 177.774303][ T917] usb 4-1: SerialNumber: syz [ 178.050835][ T917] uvcvideo 4-1:3.155: probe with driver uvcvideo failed with error -22 [ 178.070210][ T917] usb 4-1: USB disconnect, device number 10 [ 178.310007][ T917] usb 1-1: USB disconnect, device number 14 [ 179.003918][ T7290] fuse: Bad value for 'user_id' [ 179.003940][ T7290] fuse: Bad value for 'user_id' [ 179.077898][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 180.067462][ T7316] trusted_key: syz.3.531 sent an empty control message without MSG_MORE. [ 180.490245][ T7327] netlink: 32 bytes leftover after parsing attributes in process `syz.3.533'. [ 180.956759][ T36] kauditd_printk_skb: 149 callbacks suppressed [ 180.956778][ T36] audit: type=1326 audit(1771324359.799:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7326 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 180.956827][ T36] audit: type=1326 audit(1771324359.799:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7326 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 180.956865][ T36] audit: type=1326 audit(1771324359.799:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7326 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 180.956910][ T36] audit: type=1326 audit(1771324359.799:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7326 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 180.956951][ T36] audit: type=1326 audit(1771324359.799:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7326 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 180.956992][ T36] audit: type=1326 audit(1771324359.799:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7326 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 180.957034][ T36] audit: type=1326 audit(1771324359.809:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7326 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 180.957075][ T36] audit: type=1326 audit(1771324359.809:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7326 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 180.957118][ T36] audit: type=1326 audit(1771324359.809:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7326 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 180.957162][ T36] audit: type=1326 audit(1771324359.809:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7326 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 186.344706][ T5884] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 186.441931][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 186.497069][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.497097][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.498645][ T5884] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.498673][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.498692][ T5884] usb 2-1: SerialNumber: syz [ 186.499870][ T7429] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20004 [ 186.870775][ T5884] usb 2-1: 0:2 : does not exist [ 187.243346][ T5884] usb 2-1: USB disconnect, device number 12 [ 187.407786][ T7450] netlink: 'syz.2.580': attribute type 7 has an invalid length. [ 187.713206][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.883070][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 188.989424][ T7487] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20004 [ 190.329099][ T7502] syzkaller0: entered promiscuous mode [ 190.329120][ T7502] syzkaller0: entered allmulticast mode [ 191.891995][ T7539] netlink: 'syz.3.611': attribute type 4 has an invalid length. [ 193.591924][ T7563] syzkaller0: entered promiscuous mode [ 193.591942][ T7563] syzkaller0: entered allmulticast mode [ 193.822662][ T7580] fuse: Unknown parameter 'user_id00000000000000000000' [ 194.346205][ T5801] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 194.505164][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.505244][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.506000][ T5801] usb 2-1: Using ep0 maxpacket: 8 [ 194.508957][ T5801] usb 2-1: config 6 has an invalid interface number: 51 but max is 1 [ 194.508985][ T5801] usb 2-1: config 6 has no interface number 1 [ 194.509031][ T5801] usb 2-1: config 6 interface 0 has no altsetting 0 [ 194.509049][ T5801] usb 2-1: config 6 interface 51 has no altsetting 0 [ 194.632296][ T5801] usb 2-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 194.632318][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.632329][ T5801] usb 2-1: Product: syz [ 194.632338][ T5801] usb 2-1: Manufacturer: syz [ 194.632346][ T5801] usb 2-1: SerialNumber: syz [ 195.093011][ T5801] xr_serial 2-1:6.51: xr_serial converter detected [ 195.109063][ T5801] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 195.109112][ T5801] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 195.131639][ T5801] usb 2-1: USB disconnect, device number 13 [ 195.148738][ T5801] xr_serial 2-1:6.0: device disconnected [ 196.225353][ T7617] syzkaller0: entered promiscuous mode [ 196.225372][ T7617] syzkaller0: entered allmulticast mode [ 197.753600][ T7654] fuse: Bad value for 'fd' [ 197.754629][ T5884] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 197.907501][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 198.184839][ T5884] usb 1-1: config 6 has an invalid interface number: 51 but max is 1 [ 198.184872][ T5884] usb 1-1: config 6 has no interface number 1 [ 198.184922][ T5884] usb 1-1: config 6 interface 0 has no altsetting 0 [ 198.184940][ T5884] usb 1-1: config 6 interface 51 has no altsetting 0 [ 198.246097][ T5884] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 198.246119][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.246130][ T5884] usb 1-1: Product: syz [ 198.246138][ T5884] usb 1-1: Manufacturer: syz [ 198.246146][ T5884] usb 1-1: SerialNumber: syz [ 198.284635][ T5801] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 198.454616][ T5801] usb 4-1: Using ep0 maxpacket: 8 [ 198.468565][ T5801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.468594][ T5801] usb 4-1: config 0 has no interfaces? [ 198.480524][ T5801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.480553][ T5801] usb 4-1: config 0 has no interfaces? [ 198.504014][ T5801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.504042][ T5801] usb 4-1: config 0 has no interfaces? [ 198.516805][ T5801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.516834][ T5801] usb 4-1: config 0 has no interfaces? [ 198.516865][ T5801] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 198.516889][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.606992][ T5801] usb 4-1: config 0 descriptor?? [ 198.692465][ T5884] xr_serial 1-1:6.51: xr_serial converter detected [ 198.738132][ T5884] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 198.738172][ T5884] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 198.789960][ T5884] usb 1-1: USB disconnect, device number 15 [ 198.791928][ T5884] xr_serial 1-1:6.0: device disconnected [ 200.367986][ T7695] syzkaller0: entered promiscuous mode [ 200.368007][ T7695] syzkaller0: entered allmulticast mode [ 201.206967][ T5884] usb 4-1: USB disconnect, device number 11 [ 201.664723][ T5884] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 201.822357][ T5884] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 201.822378][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.822389][ T5884] usb 4-1: Product: syz [ 201.822397][ T5884] usb 4-1: Manufacturer: syz [ 201.822405][ T5884] usb 4-1: SerialNumber: syz [ 201.847299][ T5884] usb 4-1: config 0 descriptor?? [ 202.171081][ T5884] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 204.005018][ T5884] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 204.010621][ T5884] usb 4-1: USB disconnect, device number 12 [ 204.424770][ T917] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 204.836830][ T917] usb 1-1: Using ep0 maxpacket: 8 [ 204.843691][ T917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.843720][ T917] usb 1-1: config 0 has no interfaces? [ 204.845579][ T917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.845605][ T917] usb 1-1: config 0 has no interfaces? [ 204.846702][ T917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.846724][ T917] usb 1-1: config 0 has no interfaces? [ 204.948881][ T917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.948910][ T917] usb 1-1: config 0 has no interfaces? [ 204.948943][ T917] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 204.948965][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.003672][ T917] usb 1-1: config 0 descriptor?? [ 206.420273][ T5801] usb 1-1: USB disconnect, device number 16 [ 206.758243][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 206.904637][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 206.910112][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.910147][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.910190][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 206.910214][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.986575][ T10] usb 4-1: config 0 descriptor?? [ 207.031725][ T10] hub 4-1:0.0: USB hub found [ 207.204925][ T10] hub 4-1:0.0: 1 port detected [ 207.415783][ T10] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 207.415812][ T10] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 207.435801][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 207.435929][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 207.503560][ T10] usb 4-1: USB disconnect, device number 13 [ 209.158036][ T7855] netlink: 76 bytes leftover after parsing attributes in process `syz.1.726'. [ 209.466065][ T7862] syzkaller1: entered promiscuous mode [ 209.466093][ T7862] syzkaller1: entered allmulticast mode [ 210.453629][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'. [ 210.766190][ T7890] netlink: 'syz.3.742': attribute type 4 has an invalid length. [ 211.644700][ T5869] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 211.824627][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 211.829582][ T5869] usb 1-1: config 6 has an invalid interface number: 51 but max is 1 [ 211.829610][ T5869] usb 1-1: config 6 has no interface number 1 [ 211.829658][ T5869] usb 1-1: config 6 interface 0 has no altsetting 0 [ 211.829675][ T5869] usb 1-1: config 6 interface 51 has no altsetting 0 [ 211.838029][ T5869] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 211.838059][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.838076][ T5869] usb 1-1: Product: syz [ 211.838089][ T5869] usb 1-1: Manufacturer: syz [ 211.838102][ T5869] usb 1-1: SerialNumber: syz [ 211.946880][ T5116] Bluetooth: hci4: command 0x0406 tx timeout [ 211.946927][ T5116] Bluetooth: hci2: command 0x0406 tx timeout [ 211.946995][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 211.947022][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 211.947042][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 212.241231][ T5869] xr_serial 1-1:6.51: xr_serial converter detected [ 212.254711][ T5869] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 212.254780][ T5869] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 212.298535][ T5869] usb 1-1: USB disconnect, device number 17 [ 212.300405][ T5869] xr_serial 1-1:6.0: device disconnected [ 216.886793][ T7999] fuse: Unknown parameter '0x0000000000000003' [ 217.103001][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.785'. [ 218.511147][ T917] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 218.744606][ T917] usb 4-1: Using ep0 maxpacket: 8 [ 218.756323][ T917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.756341][ T917] usb 4-1: config 0 has no interfaces? [ 218.765779][ T917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.765796][ T917] usb 4-1: config 0 has no interfaces? [ 218.796848][ T917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.796866][ T917] usb 4-1: config 0 has no interfaces? [ 218.798573][ T917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.798587][ T917] usb 4-1: config 0 has no interfaces? [ 218.798606][ T917] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 218.798619][ T917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.802124][ T917] usb 4-1: config 0 descriptor?? [ 219.494267][ T8031] fuse: Unknown parameter 'fd0x0000000000000003' [ 219.698811][ T8035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.800'. [ 220.426368][ T8060] fuse: Unknown parameter 'fd0x0000000000000003' [ 220.468709][ T5884] usb 4-1: USB disconnect, device number 14 [ 220.671930][ T8064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.813'. [ 220.729326][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 221.594607][ T5884] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 221.619440][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 221.619460][ T36] audit: type=1800 audit(1771324400.459:581): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.822" name="bus" dev="tmpfs" ino=472 res=0 errno=0 [ 221.698819][ T8088] fuse: Unknown parameter 'fd0x0000000000000003' [ 221.791505][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.791542][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 221.794695][ T5884] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 221.794722][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.794739][ T5884] usb 1-1: Product: syz [ 221.794752][ T5884] usb 1-1: Manufacturer: syz [ 221.794764][ T5884] usb 1-1: SerialNumber: syz [ 221.944733][ T5884] usb 1-1: config 0 descriptor?? [ 221.945421][ T8078] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 222.163978][ T5884] powermate: unknown product id 0240 [ 222.163997][ T5884] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 222.231711][ T5884] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 222.586164][ C1] powermate: config urb returned -71 [ 222.586402][ C1] powermate: config urb returned -71 [ 222.586618][ C1] powermate: config urb returned -71 [ 222.615956][ T917] usb 1-1: USB disconnect, device number 18 [ 222.616077][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 223.369405][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 230.525331][ T5801] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 230.845755][ T5801] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 230.845821][ T5801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.845842][ T5801] usb 1-1: config 0 has no interface number 0 [ 230.845895][ T5801] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 230.845956][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.360938][ T5801] usb 1-1: config 0 descriptor?? [ 231.693238][ T5801] rndis_host 1-1:0.9: More than one union descriptor, skipping ... [ 231.693301][ T5801] usb 1-1: bad CDC descriptors [ 231.800018][ T5801] cdc_acm 1-1:0.9: More than one union descriptor, skipping ... [ 233.786948][ T917] usb 1-1: USB disconnect, device number 19 [ 234.254786][ T5801] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 234.450855][ T5801] usb 2-1: Using ep0 maxpacket: 8 [ 234.460272][ T5801] usb 2-1: config 6 has an invalid interface number: 51 but max is 1 [ 234.460301][ T5801] usb 2-1: config 6 has no interface number 1 [ 234.460350][ T5801] usb 2-1: config 6 interface 0 has no altsetting 0 [ 234.460368][ T5801] usb 2-1: config 6 interface 51 has no altsetting 0 [ 234.463716][ T5801] usb 2-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 234.463746][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.463766][ T5801] usb 2-1: Product: syz [ 234.463780][ T5801] usb 2-1: Manufacturer: syz [ 234.463794][ T5801] usb 2-1: SerialNumber: syz [ 234.927139][ T5801] xr_serial 2-1:6.51: xr_serial converter detected [ 234.943742][ T5801] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 234.943789][ T5801] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 234.980990][ T5801] usb 2-1: USB disconnect, device number 14 [ 235.018187][ T5801] xr_serial 2-1:6.0: device disconnected [ 236.514596][ T31] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 236.743721][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.743758][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 236.747259][ T31] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 236.747286][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.747305][ T31] usb 2-1: Product: syz [ 236.747317][ T31] usb 2-1: Manufacturer: syz [ 236.747330][ T31] usb 2-1: SerialNumber: syz [ 236.805286][ T31] usb 2-1: config 0 descriptor?? [ 236.806399][ T8258] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 237.179147][ T31] powermate: unknown product id 0240 [ 237.179166][ T31] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 238.195426][ T31] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 238.592610][ C1] powermate: config urb returned -71 [ 238.592879][ C1] powermate: config urb returned -71 [ 238.593071][ C1] powermate: config urb returned -71 [ 238.601563][ T31] usb 2-1: USB disconnect, device number 15 [ 238.601724][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 239.307279][ T8289] KVM: debugfs: duplicate directory 8289-5 [ 240.352883][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 240.514915][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 240.520180][ T31] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.520209][ T31] usb 3-1: config 0 has no interface number 0 [ 240.520241][ T31] usb 3-1: config 0 interface 1 has no altsetting 0 [ 240.538809][ T31] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 240.538838][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.538857][ T31] usb 3-1: Product: syz [ 240.538871][ T31] usb 3-1: Manufacturer: syz [ 240.538885][ T31] usb 3-1: SerialNumber: syz [ 240.557100][ T31] usb 3-1: config 0 descriptor?? [ 240.814905][ T31] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 240.826332][ T31] usb 3-1: USB disconnect, device number 11 [ 241.002419][ T8298] netdevsim netdevsim1: Direct firmware load for / [ 241.002419][ T8298] failed with error -2 [ 241.002450][ T8298] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 241.002450][ T8298] [ 242.154598][ T5801] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 242.304691][ T5801] usb 3-1: Using ep0 maxpacket: 16 [ 242.325103][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.325139][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.325181][ T5801] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 242.325204][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.457550][ T5801] usb 3-1: config 0 descriptor?? [ 242.941965][ T5801] usbhid 3-1:0.0: can't add hid device: -71 [ 242.942058][ T5801] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 243.070142][ T5801] usb 3-1: USB disconnect, device number 12 [ 244.050767][ T8364] tipc: Enabling of bearer rejected, failed to enable media [ 244.051636][ T8364] syzkaller0: entered promiscuous mode [ 244.051661][ T8364] syzkaller0: entered allmulticast mode [ 244.292712][ T8369] KVM: debugfs: duplicate directory 8369-5 [ 244.514681][ T5801] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 244.664553][ T5801] usb 1-1: Using ep0 maxpacket: 8 [ 244.667601][ T5801] usb 1-1: config 6 has an invalid interface number: 51 but max is 1 [ 244.667630][ T5801] usb 1-1: config 6 has no interface number 1 [ 244.667676][ T5801] usb 1-1: config 6 interface 0 has no altsetting 0 [ 244.667703][ T5801] usb 1-1: config 6 interface 51 has no altsetting 0 [ 244.670979][ T5801] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 244.671009][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.671029][ T5801] usb 1-1: Product: syz [ 244.671043][ T5801] usb 1-1: Manufacturer: syz [ 244.671057][ T5801] usb 1-1: SerialNumber: syz [ 245.031327][ T5801] xr_serial 1-1:6.51: xr_serial converter detected [ 245.043248][ T5801] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 245.043314][ T5801] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 245.087395][ T5801] usb 1-1: USB disconnect, device number 20 [ 245.104100][ T5801] xr_serial 1-1:6.0: device disconnected [ 246.783755][ T8412] tipc: Enabling of bearer rejected, failed to enable media [ 246.794300][ T8412] syzkaller0: entered promiscuous mode [ 246.794328][ T8412] syzkaller0: entered allmulticast mode [ 247.997809][ T8428] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 248.217466][ T8431] KVM: debugfs: duplicate directory 8431-5 [ 249.391436][ T5801] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 249.556272][ T5801] usb 2-1: Using ep0 maxpacket: 32 [ 249.578173][ T5801] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 249.578203][ T5801] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 249.578224][ T5801] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 249.578246][ T5801] usb 2-1: config 1 has no interface number 0 [ 249.578295][ T5801] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.578323][ T5801] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 2045, setting to 1024 [ 249.578350][ T5801] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 249.578394][ T5801] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 249.578418][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.695057][ T8436] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 249.737265][ T5801] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 249.903761][ T8436] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 249.921156][ T5801] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 250.114013][ T31] usb 2-1: USB disconnect, device number 16 [ 250.117127][ T31] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 251.669839][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 251.836004][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 251.886813][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.886832][ T10] usb 4-1: config 0 has no interfaces? [ 251.978458][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.978488][ T10] usb 4-1: config 0 has no interfaces? [ 252.001407][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.001428][ T10] usb 4-1: config 0 has no interfaces? [ 252.032406][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.062772][ T10] usb 4-1: config 0 has no interfaces? [ 252.062821][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 252.062842][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.166040][ T10] usb 4-1: config 0 descriptor?? [ 252.984605][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 253.967240][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 253.986309][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.986338][ T10] usb 1-1: config 0 has no interface number 0 [ 253.986371][ T10] usb 1-1: config 0 interface 1 has no altsetting 0 [ 254.113528][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 254.113550][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.113562][ T10] usb 1-1: Product: syz [ 254.113571][ T10] usb 1-1: Manufacturer: syz [ 254.113579][ T10] usb 1-1: SerialNumber: syz [ 254.145220][ T807] usb 4-1: USB disconnect, device number 15 [ 254.186940][ T10] usb 1-1: config 0 descriptor?? [ 254.399247][ T10] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 254.602333][ T807] usb 1-1: USB disconnect, device number 21 [ 256.082229][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.083578][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.754694][ T807] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 256.914614][ T807] usb 1-1: Using ep0 maxpacket: 8 [ 256.916463][ T807] usb 1-1: config 6 has an invalid interface number: 51 but max is 1 [ 256.916490][ T807] usb 1-1: config 6 has no interface number 1 [ 256.916536][ T807] usb 1-1: config 6 interface 0 has no altsetting 0 [ 256.916547][ T807] usb 1-1: config 6 interface 51 has no altsetting 0 [ 256.919970][ T807] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 256.919987][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.919998][ T807] usb 1-1: Product: syz [ 256.920006][ T807] usb 1-1: Manufacturer: syz [ 256.920014][ T807] usb 1-1: SerialNumber: syz [ 257.272921][ T807] xr_serial 1-1:6.51: xr_serial converter detected [ 257.295869][ T807] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 257.295938][ T807] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 257.327662][ T807] usb 1-1: USB disconnect, device number 22 [ 257.345261][ T807] xr_serial 1-1:6.0: device disconnected [ 259.184669][ T5869] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 259.334605][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 259.336601][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.336617][ T5869] usb 4-1: config 0 has no interfaces? [ 259.337638][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.337727][ T5869] usb 4-1: config 0 has no interfaces? [ 259.338936][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.338949][ T5869] usb 4-1: config 0 has no interfaces? [ 259.339909][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.339922][ T5869] usb 4-1: config 0 has no interfaces? [ 259.339940][ T5869] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 259.339953][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.442076][ T5869] usb 4-1: config 0 descriptor?? [ 259.864621][ T5869] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 260.014577][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 260.031753][ T5869] usb 3-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 260.031778][ T5869] usb 3-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 260.031803][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 260.031825][ T5869] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 260.031838][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.092246][ T5869] usb 3-1: config 0 descriptor?? [ 260.532758][ T5869] usbhid 3-1:0.0: can't add hid device: -71 [ 260.532839][ T5869] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 260.595901][ T5869] usb 3-1: USB disconnect, device number 13 [ 261.248265][ T807] usb 4-1: USB disconnect, device number 16 [ 261.554710][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 261.707096][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 261.712729][ T10] usb 3-1: config 6 has an invalid interface number: 51 but max is 1 [ 261.712758][ T10] usb 3-1: config 6 has no interface number 1 [ 261.712821][ T10] usb 3-1: config 6 interface 0 has no altsetting 0 [ 261.712839][ T10] usb 3-1: config 6 interface 51 has no altsetting 0 [ 261.728308][ T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 261.728339][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.728356][ T10] usb 3-1: Product: syz [ 261.728369][ T10] usb 3-1: Manufacturer: syz [ 261.728382][ T10] usb 3-1: SerialNumber: syz [ 262.082745][ T10] xr_serial 3-1:6.51: xr_serial converter detected [ 262.087223][ T10] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 262.087282][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 262.097703][ T10] usb 3-1: USB disconnect, device number 14 [ 262.127627][ T10] xr_serial 3-1:6.0: device disconnected [ 262.190561][ T8629] kAFS: unable to lookup cell 'ÿ' [ 262.190768][ T8632] kAFS: unable to lookup cell '(,c¾Ì' [ 263.424624][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 263.580108][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 263.588025][ T10] usb 3-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 263.588057][ T10] usb 3-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 263.588081][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.588112][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 263.588133][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.593821][ T10] usb 3-1: config 0 descriptor?? [ 264.681319][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 264.681447][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 264.724976][ T10] usb 3-1: USB disconnect, device number 15 [ 265.401541][ T8665] netlink: 'syz.0.1043': attribute type 6 has an invalid length. [ 265.619162][ T8682] kAFS: unable to lookup cell 'ÿ' [ 265.619517][ T8682] kAFS: unable to lookup cell '(,c¾Ì' [ 266.322717][ T8681] kthread_run failed with err -4 [ 268.024645][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 268.187442][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 268.190117][ T10] usb 2-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 268.190150][ T10] usb 2-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 268.190177][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 268.190211][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 268.190234][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.286915][ T10] usb 2-1: config 0 descriptor?? [ 270.248536][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 270.248621][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 270.273849][ T10] usb 2-1: USB disconnect, device number 17 [ 274.096389][ T8783] mmap: syz.1.1086 (8783) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 274.414841][ T31] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 274.564603][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 274.567498][ T31] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 274.567523][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 274.570778][ T31] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 274.570807][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.570827][ T31] usb 4-1: Product: syz [ 274.570840][ T31] usb 4-1: Manufacturer: syz [ 274.570854][ T31] usb 4-1: SerialNumber: syz [ 274.642898][ T31] r8152-cfgselector 4-1: Unknown version 0x0000 [ 274.642927][ T31] r8152-cfgselector 4-1: config 0 descriptor?? [ 274.851419][ T31] r8152-cfgselector 4-1: Unknown version 0x0000 [ 274.851890][ T31] r8152-cfgselector 4-1: bad CDC descriptors [ 275.052070][ T10] r8152-cfgselector 4-1: USB disconnect, device number 17 [ 276.326258][ T8814] netdevsim netdevsim3: Direct firmware load for / [ 276.326258][ T8814] failed with error -2 [ 276.326289][ T8814] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 276.326289][ T8814] [ 280.361609][ T5799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.466225][ T5799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.469605][ T5799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.474700][ T5799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.480083][ T5799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.765795][ T5799] Bluetooth: hci5: command tx timeout [ 285.256113][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.777065][ T5804] Bluetooth: hci5: command tx timeout [ 286.751974][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.854620][ T5804] Bluetooth: hci5: command tx timeout [ 288.156561][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.514639][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 288.734747][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 288.742011][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.742042][ T10] usb 1-1: config 0 has no interface number 0 [ 288.742076][ T10] usb 1-1: config 0 interface 1 has no altsetting 0 [ 288.745934][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 288.745953][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.745965][ T10] usb 1-1: Product: syz [ 288.745973][ T10] usb 1-1: Manufacturer: syz [ 288.745981][ T10] usb 1-1: SerialNumber: syz [ 288.752344][ T10] usb 1-1: config 0 descriptor?? [ 288.918078][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.057074][ T8915] syzkaller1: entered promiscuous mode [ 289.057104][ T8915] syzkaller1: entered allmulticast mode [ 289.097599][ T10] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 289.307088][ T917] usb 1-1: USB disconnect, device number 23 [ 289.867643][ T8862] chnl_net:caif_netlink_parms(): no params data found [ 289.946645][ T5804] Bluetooth: hci5: command tx timeout [ 294.349012][ T8862] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.349193][ T8862] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.349365][ T8862] bridge_slave_0: entered allmulticast mode [ 294.358145][ T8862] bridge_slave_0: entered promiscuous mode [ 294.513920][ T12] bridge_slave_1: left allmulticast mode [ 294.514119][ T12] bridge_slave_1: left promiscuous mode [ 294.517928][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.681809][ T12] bridge_slave_0: left allmulticast mode [ 294.681831][ T12] bridge_slave_0: left promiscuous mode [ 294.681999][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.644792][ T8970] netlink: 'syz.1.1144': attribute type 21 has an invalid length. [ 296.775268][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.855191][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.898866][ T12] bond0 (unregistering): Released all slaves [ 296.935060][ T8862] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.935178][ T8862] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.935374][ T8862] bridge_slave_1: entered allmulticast mode [ 296.937224][ T8862] bridge_slave_1: entered promiscuous mode [ 296.994845][ T8977] syzkaller1: entered promiscuous mode [ 296.994876][ T8977] syzkaller1: entered allmulticast mode [ 300.651623][ T8862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.818741][ T8862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.004619][ T917] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 301.135247][ T917] usb 4-1: device descriptor read/64, error -71 [ 301.434752][ T917] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 301.718979][ T8862] team0: Port device team_slave_0 added [ 301.763639][ T8862] team0: Port device team_slave_1 added [ 301.834622][ T917] usb 4-1: device descriptor read/64, error -71 [ 301.944958][ T917] usb usb4-port1: attempt power cycle [ 302.295012][ T917] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 302.327834][ T917] usb 4-1: device descriptor read/8, error -71 [ 302.425205][ T12] hsr_slave_0: left promiscuous mode [ 302.464672][ T12] hsr_slave_1: left promiscuous mode [ 302.466142][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.466260][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.529838][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.529859][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.574573][ T917] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 302.595640][ T917] usb 4-1: device descriptor read/8, error -71 [ 302.707391][ T917] usb usb4-port1: unable to enumerate USB device [ 302.952103][ T12] veth1_macvtap: left promiscuous mode [ 302.952393][ T12] veth0_macvtap: left promiscuous mode [ 302.952735][ T12] veth1_vlan: left promiscuous mode [ 302.953113][ T12] veth0_vlan: left promiscuous mode [ 307.205851][ T917] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 307.344614][ T917] usb 2-1: device descriptor read/64, error -71 [ 307.600031][ T917] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 307.724564][ T917] usb 2-1: device descriptor read/64, error -71 [ 307.796401][ T12] team0 (unregistering): Port device team_slave_1 removed [ 307.834905][ T917] usb usb2-port1: attempt power cycle [ 307.955839][ T12] team0 (unregistering): Port device team_slave_0 removed [ 308.184614][ T917] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 308.227283][ T917] usb 2-1: device descriptor read/8, error -71 [ 308.464694][ T917] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 308.486133][ T917] usb 2-1: device descriptor read/8, error -71 [ 308.595631][ T917] usb usb2-port1: unable to enumerate USB device [ 309.596365][ T8862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.596385][ T8862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.596416][ T8862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.709987][ T8862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.710007][ T8862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.710036][ T8862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.014613][ T8862] hsr_slave_0: entered promiscuous mode [ 310.016257][ T8862] hsr_slave_1: entered promiscuous mode [ 311.218492][ T9110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.534594][ T807] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 312.664630][ T807] usb 1-1: device descriptor read/64, error -71 [ 312.736328][ T49] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 312.904621][ T807] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 312.904820][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 312.912206][ T49] usb 2-1: config 6 has an invalid interface number: 51 but max is 1 [ 312.912237][ T49] usb 2-1: config 6 has no interface number 1 [ 312.912286][ T49] usb 2-1: config 6 interface 0 has no altsetting 0 [ 312.912305][ T49] usb 2-1: config 6 interface 51 has no altsetting 0 [ 312.916949][ T49] usb 2-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 312.916981][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.917000][ T49] usb 2-1: Product: syz [ 312.917014][ T49] usb 2-1: Manufacturer: syz [ 312.917028][ T49] usb 2-1: SerialNumber: syz [ 313.034606][ T807] usb 1-1: device descriptor read/64, error -71 [ 313.146847][ T807] usb usb1-port1: attempt power cycle [ 313.263491][ T49] usb 2-1: USB disconnect, device number 22 [ 313.484624][ T807] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 313.517110][ T807] usb 1-1: device descriptor read/8, error -71 [ 313.765697][ T807] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 313.796616][ T807] usb 1-1: device descriptor read/8, error -71 [ 313.905148][ T807] usb usb1-port1: unable to enumerate USB device [ 314.225233][ T8862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 314.359638][ T8862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 314.546829][ T8862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 315.028431][ T8862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 316.822871][ T8862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.881772][ T8862] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.973067][ T8904] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.973160][ T8904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.039288][ T8904] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.040103][ T8904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.388599][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.388649][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.369700][ T36] audit: type=1326 audit(1771324497.219:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 318.369744][ T36] audit: type=1326 audit(1771324497.219:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 318.369769][ T36] audit: type=1326 audit(1771324497.219:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 318.369794][ T36] audit: type=1326 audit(1771324497.219:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 318.369819][ T36] audit: type=1326 audit(1771324497.219:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 318.369843][ T36] audit: type=1326 audit(1771324497.219:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 318.369866][ T36] audit: type=1326 audit(1771324497.219:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 318.370210][ T36] audit: type=1326 audit(1771324497.219:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 318.370237][ T36] audit: type=1326 audit(1771324497.219:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 318.370955][ T36] audit: type=1326 audit(1771324497.219:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 318.589476][ T8862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.234605][ T807] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 321.399086][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 321.436216][ T807] usb 4-1: config 6 has an invalid interface number: 51 but max is 1 [ 321.436249][ T807] usb 4-1: config 6 has no interface number 1 [ 321.436299][ T807] usb 4-1: config 6 interface 0 has no altsetting 0 [ 321.436336][ T807] usb 4-1: config 6 interface 51 has no altsetting 0 [ 321.495101][ T807] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 321.495135][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.495156][ T807] usb 4-1: Product: syz [ 321.495171][ T807] usb 4-1: Manufacturer: syz [ 321.495186][ T807] usb 4-1: SerialNumber: syz [ 321.764637][ T807] usb 4-1: USB disconnect, device number 22 [ 321.990071][ T8862] veth0_vlan: entered promiscuous mode [ 322.078444][ T8862] veth1_vlan: entered promiscuous mode [ 322.283025][ T8862] veth0_macvtap: entered promiscuous mode [ 322.332668][ T8862] veth1_macvtap: entered promiscuous mode [ 322.459873][ T8862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.530583][ T8862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.670157][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 322.694541][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.695138][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.722614][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.749532][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.380611][ T36] kauditd_printk_skb: 102 callbacks suppressed [ 323.380631][ T36] audit: type=1326 audit(1771324502.229:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42ddcac84e code=0x7ffc0000 [ 323.433762][ T36] audit: type=1326 audit(1771324502.279:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42ddcac84e code=0x7ffc0000 [ 323.444933][ T36] audit: type=1326 audit(1771324502.299:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42ddcac84e code=0x7ffc0000 [ 323.453339][ T36] audit: type=1326 audit(1771324502.299:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42ddcac84e code=0x7ffc0000 [ 323.502882][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.502898][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.524099][ T36] audit: type=1326 audit(1771324502.369:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42ddcac84e code=0x7ffc0000 [ 323.550100][ T36] audit: type=1326 audit(1771324502.399:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42ddcac84e code=0x7ffc0000 [ 323.555068][ T36] audit: type=1326 audit(1771324502.409:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42ddcac84e code=0x7ffc0000 [ 323.556327][ T36] audit: type=1326 audit(1771324502.409:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42ddcac84e code=0x7ffc0000 [ 323.559309][ T36] audit: type=1326 audit(1771324502.409:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42ddcac84e code=0x7ffc0000 [ 323.579419][ T36] audit: type=1326 audit(1771324502.429:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f42ddcac84e code=0x7ffc0000 [ 324.345311][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.345345][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.624798][ T49] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 324.815150][ T49] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 324.815173][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.815184][ T49] usb 3-1: Product: syz [ 324.815192][ T49] usb 3-1: Manufacturer: syz [ 324.815200][ T49] usb 3-1: SerialNumber: syz [ 324.819449][ T49] usb 3-1: config 0 descriptor?? [ 324.995965][ T807] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 325.064801][ T9295] netdevsim netdevsim1: Direct firmware load for / [ 325.064801][ T9295] failed with error -2 [ 325.064917][ T9295] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 325.064917][ T9295] [ 325.154649][ T49] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 325.194675][ T807] usb 1-1: Using ep0 maxpacket: 32 [ 325.197378][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.197404][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.197472][ T807] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 325.197487][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.289739][ T807] usb 1-1: config 0 descriptor?? [ 325.344045][ T807] hub 1-1:0.0: USB hub found [ 326.594194][ T49] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 326.620347][ T807] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 326.888419][ T807] usbhid 1-1:0.0: can't add hid device: -71 [ 326.888561][ T807] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 326.969790][ T807] usb 1-1: USB disconnect, device number 28 [ 328.911690][ T917] usb 3-1: USB disconnect, device number 16 [ 330.660378][ T9325] overlayfs: overlapping lowerdir path [ 331.435006][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 331.664579][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 331.707986][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.708005][ T31] usb 1-1: config 0 has no interfaces? [ 331.710302][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.710318][ T31] usb 1-1: config 0 has no interfaces? [ 331.712648][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.712664][ T31] usb 1-1: config 0 has no interfaces? [ 331.774597][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.774616][ T31] usb 1-1: config 0 has no interfaces? [ 331.774636][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 331.774650][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.807527][ T31] usb 1-1: config 0 descriptor?? [ 331.955168][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 331.955190][ T36] audit: type=1326 audit(1771324510.799:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9327 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 331.955503][ T36] audit: type=1326 audit(1771324510.809:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9327 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 332.085127][ T36] audit: type=1326 audit(1771324510.939:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9327 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 332.085376][ T36] audit: type=1326 audit(1771324510.939:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9327 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 332.085569][ T36] audit: type=1326 audit(1771324510.939:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9327 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 332.085855][ T36] audit: type=1326 audit(1771324510.939:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9327 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 332.086030][ T36] audit: type=1326 audit(1771324510.939:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9327 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 332.088652][ T36] audit: type=1326 audit(1771324510.939:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9327 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 332.090793][ T36] audit: type=1326 audit(1771324510.939:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9327 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 332.101807][ T36] audit: type=1326 audit(1771324510.939:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9327 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 332.870557][ T9359] syzkaller1: entered promiscuous mode [ 332.870586][ T9359] syzkaller1: entered allmulticast mode [ 332.954638][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 333.104571][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 333.107120][ T31] usb 5-1: config index 0 descriptor too short (expected 54066, got 72) [ 333.107149][ T31] usb 5-1: config 216 has too many interfaces: 60, using maximum allowed: 32 [ 333.107168][ T31] usb 5-1: config 216 has an invalid descriptor of length 1, skipping remainder of the config [ 333.107187][ T31] usb 5-1: config 216 has 0 interfaces, different from the descriptor's value: 60 [ 333.111821][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 333.111842][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.111854][ T31] usb 5-1: Product: syz [ 333.111861][ T31] usb 5-1: Manufacturer: syz [ 333.111870][ T31] usb 5-1: SerialNumber: syz [ 333.408967][ T31] usb 5-1: USB disconnect, device number 7 [ 333.603797][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1230'. [ 333.684582][ T5915] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 333.840956][ T5915] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 333.840993][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.841013][ T5915] usb 4-1: Product: syz [ 333.841028][ T5915] usb 4-1: Manufacturer: syz [ 333.841043][ T5915] usb 4-1: SerialNumber: syz [ 333.885116][ T5915] usb 4-1: config 0 descriptor?? [ 334.143219][ T9372] netdevsim netdevsim2: Direct firmware load for / [ 334.143219][ T9372] failed with error -2 [ 334.143267][ T9372] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 334.143267][ T9372] [ 334.266607][ T5915] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 334.331497][ T917] usb 1-1: USB disconnect, device number 29 [ 334.793072][ T9385] 9p: Bad value for 'rfdno' [ 334.855394][ T5915] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 335.442237][ T5915] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 335.594540][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 335.596533][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.596564][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.596603][ T5915] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 335.596618][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.600389][ T5915] usb 2-1: config 0 descriptor?? [ 335.603187][ T5915] hub 2-1:0.0: USB hub found [ 335.851296][ T5915] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 336.096936][ T5915] usbhid 2-1:0.0: can't add hid device: -71 [ 336.097138][ T5915] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 336.163526][ T5915] usb 2-1: USB disconnect, device number 23 [ 336.489086][ T5915] usb 4-1: USB disconnect, device number 23 [ 336.687831][ T9405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1242'. [ 337.283801][ T36] kauditd_printk_skb: 119 callbacks suppressed [ 337.283988][ T36] audit: type=1326 audit(1771324516.129:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9412 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 337.359332][ T36] audit: type=1326 audit(1771324516.189:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9412 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f96bae48d7b code=0x7ffc0000 [ 337.359924][ T36] audit: type=1326 audit(1771324516.189:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9412 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f96bae4846c code=0x7ffc0000 [ 337.360771][ T36] audit: type=1326 audit(1771324516.209:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9412 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 337.361865][ T36] audit: type=1326 audit(1771324516.209:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9412 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f96bae484ce code=0x7ffc0000 [ 337.468208][ T36] audit: type=1326 audit(1771324516.209:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9412 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 337.469389][ T36] audit: type=1326 audit(1771324516.319:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9412 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96bae8bc0b code=0x7ffc0000 [ 337.469925][ T36] audit: type=1326 audit(1771324516.319:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9412 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 337.566542][ T36] audit: type=1326 audit(1771324516.419:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9412 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 337.684729][ T36] audit: type=1326 audit(1771324516.529:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9412 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96bae8bf79 code=0x7ffc0000 [ 338.914533][ T807] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 339.065603][ T807] usb 5-1: Using ep0 maxpacket: 8 [ 339.068805][ T807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.068831][ T807] usb 5-1: config 0 has no interfaces? [ 339.070253][ T807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.070278][ T807] usb 5-1: config 0 has no interfaces? [ 339.071762][ T807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.071786][ T807] usb 5-1: config 0 has no interfaces? [ 339.087577][ T807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.087606][ T807] usb 5-1: config 0 has no interfaces? [ 339.087640][ T807] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 339.087655][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.090969][ T807] usb 5-1: config 0 descriptor?? [ 340.094616][ T807] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 340.365613][ T807] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 340.365647][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.365666][ T807] usb 1-1: Product: syz [ 340.365680][ T807] usb 1-1: Manufacturer: syz [ 340.365694][ T807] usb 1-1: SerialNumber: syz [ 341.247483][ T807] usb 1-1: config 0 descriptor?? [ 341.488612][ T807] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 341.601550][ T9448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1254'. [ 341.601582][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'. [ 341.644179][ T917] usb 5-1: USB disconnect, device number 8 [ 342.041322][ T9455] netdevsim netdevsim2: Direct firmware load for / [ 342.041322][ T9455] failed with error -2 [ 342.041355][ T9455] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 342.041355][ T9455] [ 342.166487][ T9458] tipc: Started in network mode [ 342.166569][ T9458] tipc: Node identity 926a0f1c20e2, cluster identity 4711 [ 342.175793][ T9458] tipc: Enabled bearer , priority 10 [ 342.529001][ T807] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 342.683320][ T9463] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1259'. [ 343.297923][ T807] tipc: Node number set to 2995261212 [ 343.451419][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 343.451441][ T36] audit: type=1326 audit(1771324522.299:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9470 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdc5bf79 code=0x7ffc0000 [ 343.451493][ T36] audit: type=1326 audit(1771324522.299:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9470 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdc5bf79 code=0x7ffc0000 [ 343.452091][ T36] audit: type=1326 audit(1771324522.299:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9470 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdc5bf79 code=0x7ffc0000 [ 343.452141][ T36] audit: type=1326 audit(1771324522.299:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9470 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdc5bf79 code=0x7ffc0000 [ 343.452197][ T36] audit: type=1326 audit(1771324522.299:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9470 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdc5bf79 code=0x7ffc0000 [ 343.452242][ T36] audit: type=1326 audit(1771324522.299:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9470 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f2bbdc5bf79 code=0x7ffc0000 [ 343.452288][ T36] audit: type=1326 audit(1771324522.299:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9470 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdc5bf79 code=0x7ffc0000 [ 343.453151][ T36] audit: type=1326 audit(1771324522.299:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9470 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdc5bf79 code=0x7ffc0000 [ 343.453213][ T36] audit: type=1326 audit(1771324522.299:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9470 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bbdc5bf79 code=0x7ffc0000 [ 343.453260][ T36] audit: type=1326 audit(1771324522.299:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9470 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f2bbdc5bf79 code=0x7ffc0000 [ 343.763125][ T5869] usb 1-1: USB disconnect, device number 30 [ 346.928451][ T5915] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 347.024636][ T5869] IPVS: starting estimator thread 0... [ 347.054313][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1270'. [ 347.094557][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 347.097016][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.097042][ T5915] usb 1-1: config 0 has no interfaces? [ 347.100788][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.100811][ T5915] usb 1-1: config 0 has no interfaces? [ 347.102699][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.102720][ T5915] usb 1-1: config 0 has no interfaces? [ 347.104368][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.104390][ T5915] usb 1-1: config 0 has no interfaces? [ 347.149275][ T9503] IPVS: using max 13 ests per chain, 31200 per kthread [ 347.182157][ T5915] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 347.182191][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.217580][ T5915] usb 1-1: config 0 descriptor?? [ 347.874594][ T5869] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 348.014683][ T5915] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 348.024938][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 348.040469][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.040496][ T5869] usb 5-1: config 0 has no interfaces? [ 348.042483][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.042503][ T5869] usb 5-1: config 0 has no interfaces? [ 348.046051][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.046077][ T5869] usb 5-1: config 0 has no interfaces? [ 348.048055][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.048077][ T5869] usb 5-1: config 0 has no interfaces? [ 348.048107][ T5869] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 348.048130][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.052328][ T5869] usb 5-1: config 0 descriptor?? [ 348.189156][ T5915] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 348.189191][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.189211][ T5915] usb 3-1: Product: syz [ 348.189226][ T5915] usb 3-1: Manufacturer: syz [ 348.189241][ T5915] usb 3-1: SerialNumber: syz [ 348.243048][ T5915] usb 3-1: config 0 descriptor?? [ 348.467718][ T5915] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 348.762631][ T10] usb 1-1: USB disconnect, device number 31 [ 349.105932][ T9514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.491883][ T5915] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 350.956230][ T807] usb 3-1: USB disconnect, device number 17 [ 354.724975][ T807] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 354.804556][ T5915] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 354.926073][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 354.930931][ T807] usb 4-1: device descriptor read/all, error -71 [ 354.979160][ T917] usb 5-1: USB disconnect, device number 9 [ 354.984833][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 355.178022][ T5915] usb 1-1: device descriptor read/all, error -71 [ 355.234610][ T31] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 355.407870][ T31] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 355.407905][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.407926][ T31] usb 2-1: Product: syz [ 355.407941][ T31] usb 2-1: Manufacturer: syz [ 355.407957][ T31] usb 2-1: SerialNumber: syz [ 355.452523][ T31] usb 2-1: config 0 descriptor?? [ 355.529525][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 355.529623][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 355.671208][ T31] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 357.706596][ T31] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 358.926865][ T5915] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 359.314793][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 359.317030][ T5915] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 359.326693][ T5915] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 359.326722][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.326741][ T5915] usb 1-1: Product: syz [ 359.326753][ T5915] usb 1-1: Manufacturer: syz [ 359.326767][ T5915] usb 1-1: SerialNumber: syz [ 359.347193][ T5915] usb 1-1: config 0 descriptor?? [ 359.378105][ T5915] usb 1-1: bad CDC descriptors [ 359.379291][ T5915] usb 1-1: unsupported MDLM descriptors [ 359.444657][ T10] usb 2-1: USB disconnect, device number 24 [ 359.584836][ T5801] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 359.688647][ T9597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1298'. [ 359.734619][ T5801] usb 3-1: Using ep0 maxpacket: 16 [ 359.750256][ T5801] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 359.750287][ T5801] usb 3-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 359.750307][ T5801] usb 3-1: config 0 has no interface number 0 [ 359.752935][ T5801] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 359.752956][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.752975][ T5801] usb 3-1: Product: syz [ 359.752984][ T5801] usb 3-1: Manufacturer: syz [ 359.752997][ T5801] usb 3-1: SerialNumber: syz [ 359.775488][ T5801] usb 3-1: config 0 descriptor?? [ 360.042296][ T5801] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 360.042335][ T5801] uvcvideo 3-1:0.105: No valid video chain found. [ 360.064007][ T5801] usb 3-1: USB disconnect, device number 18 [ 360.494614][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 360.594743][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 360.665110][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 360.667254][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.667270][ T10] usb 2-1: config 0 has no interfaces? [ 360.668510][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.668525][ T10] usb 2-1: config 0 has no interfaces? [ 360.669523][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.669537][ T10] usb 2-1: config 0 has no interfaces? [ 360.670527][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.670541][ T10] usb 2-1: config 0 has no interfaces? [ 360.670559][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 360.670573][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.673890][ T10] usb 2-1: config 0 descriptor?? [ 360.784863][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 360.789257][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.789276][ T31] usb 5-1: config 0 has no interfaces? [ 360.792476][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.792502][ T31] usb 5-1: config 0 has no interfaces? [ 360.850459][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.850480][ T31] usb 5-1: config 0 has no interfaces? [ 360.930159][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.930179][ T31] usb 5-1: config 0 has no interfaces? [ 360.930199][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 360.930213][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.933873][ T31] usb 5-1: config 0 descriptor?? [ 361.001908][ T5869] usb 1-1: USB disconnect, device number 34 [ 363.144694][ T5915] usb 2-1: USB disconnect, device number 25 [ 363.636430][ T5915] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 363.824526][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 363.844868][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.844905][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.844948][ T5915] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 363.844973][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.887297][ T10] usb 5-1: USB disconnect, device number 10 [ 363.968770][ T5915] usb 2-1: config 0 descriptor?? [ 363.976650][ T5915] hub 2-1:0.0: USB hub found [ 364.212892][ T5915] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 364.374574][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 364.431036][ T5915] usbhid 2-1:0.0: can't add hid device: -71 [ 364.431175][ T5915] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 364.526717][ T5915] usb 2-1: USB disconnect, device number 26 [ 364.554566][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 364.573213][ T10] usb 5-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 364.573238][ T10] usb 5-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 364.573254][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 364.573276][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 364.573289][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.669288][ T10] usb 5-1: config 0 descriptor?? [ 365.114589][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 365.114680][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 365.152078][ T10] usb 5-1: USB disconnect, device number 11 [ 365.584542][ T5869] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 366.494541][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 366.628531][ T5869] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 366.628562][ T5869] usb 2-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 366.628583][ T5869] usb 2-1: config 0 has no interface number 0 [ 366.682194][ T5869] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 366.682230][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.682251][ T5869] usb 2-1: Product: syz [ 366.682266][ T5869] usb 2-1: Manufacturer: syz [ 366.682281][ T5869] usb 2-1: SerialNumber: syz [ 366.800707][ T5869] usb 2-1: config 0 descriptor?? [ 367.026706][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'. [ 367.067752][ T5869] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 367.067790][ T5869] uvcvideo 2-1:0.105: No valid video chain found. [ 367.081238][ T5869] usb 2-1: USB disconnect, device number 27 [ 367.524037][ T5869] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 367.705453][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 367.708657][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.708686][ T5869] usb 5-1: config 0 has no interfaces? [ 367.712478][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.712504][ T5869] usb 5-1: config 0 has no interfaces? [ 367.714608][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.714633][ T5869] usb 5-1: config 0 has no interfaces? [ 367.716375][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.716397][ T5869] usb 5-1: config 0 has no interfaces? [ 367.716425][ T5869] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 367.716447][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.723553][ T5869] usb 5-1: config 0 descriptor?? [ 370.260499][ T10] usb 5-1: USB disconnect, device number 12 [ 371.880769][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 372.374254][ T5915] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 372.554525][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 372.558402][ T5915] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 372.558431][ T5915] usb 3-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 372.558452][ T5915] usb 3-1: config 0 has no interface number 0 [ 372.562933][ T5915] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 372.562961][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.562991][ T5915] usb 3-1: Product: syz [ 372.563005][ T5915] usb 3-1: Manufacturer: syz [ 372.563020][ T5915] usb 3-1: SerialNumber: syz [ 372.654738][ T5915] usb 3-1: config 0 descriptor?? [ 373.007546][ T5915] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 373.007586][ T5915] uvcvideo 3-1:0.105: No valid video chain found. [ 373.059820][ T5915] usb 3-1: USB disconnect, device number 19 [ 373.239537][ T9712] evm: overlay not supported [ 376.984876][ T5915] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 377.137426][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 377.170320][ T5915] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 377.170354][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.170376][ T5915] usb 4-1: config 0 has no interface number 0 [ 377.173809][ T5915] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 377.173841][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.173862][ T5915] usb 4-1: Product: syz [ 377.173877][ T5915] usb 4-1: Manufacturer: syz [ 377.173893][ T5915] usb 4-1: SerialNumber: syz [ 377.259829][ T5915] usb 4-1: config 0 descriptor?? [ 377.276790][ T5915] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 377.276828][ T5915] uvcvideo 4-1:0.105: No valid video chain found. [ 378.906330][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.906380][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.958974][ T5869] usb 4-1: USB disconnect, device number 26 [ 388.852747][ T9863] tipc: Started in network mode [ 388.852778][ T9863] tipc: Node identity f29e1f1fd099, cluster identity 4711 [ 388.853039][ T9863] tipc: Enabled bearer , priority 0 [ 388.853775][ T9863] syzkaller0: entered promiscuous mode [ 388.853928][ T9863] syzkaller0: entered allmulticast mode [ 389.046829][ T9863] tipc: Resetting bearer [ 389.237790][ T9862] tipc: Resetting bearer [ 389.338165][ T9862] tipc: Disabling bearer [ 391.344529][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 392.054552][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 392.074375][ T31] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 392.074573][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.074597][ T31] usb 5-1: config 0 has no interface number 0 [ 392.081323][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 392.081355][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.081376][ T31] usb 5-1: Product: syz [ 392.081390][ T31] usb 5-1: Manufacturer: syz [ 392.081405][ T31] usb 5-1: SerialNumber: syz [ 392.097817][ T31] usb 5-1: config 0 descriptor?? [ 392.298955][ T31] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 392.298981][ T31] uvcvideo 5-1:0.105: No valid video chain found. [ 392.502041][ T5884] usb 5-1: USB disconnect, device number 13 [ 407.729042][ T36] kauditd_printk_skb: 97 callbacks suppressed [ 407.729062][ T36] audit: type=1326 audit(1771324586.289:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10005 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 407.729117][ T36] audit: type=1326 audit(1771324586.289:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10005 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 407.729166][ T36] audit: type=1326 audit(1771324586.289:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10005 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 407.729213][ T36] audit: type=1326 audit(1771324586.289:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10005 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 407.729260][ T36] audit: type=1326 audit(1771324586.289:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10005 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 407.729306][ T36] audit: type=1326 audit(1771324586.289:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10005 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 407.729365][ T36] audit: type=1326 audit(1771324586.289:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10005 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 407.729413][ T36] audit: type=1326 audit(1771324586.289:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10005 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 407.729459][ T36] audit: type=1326 audit(1771324586.289:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10005 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 407.729505][ T36] audit: type=1326 audit(1771324586.289:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10005 comm="syz.1.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ddcebf79 code=0x7ffc0000 [ 408.679489][ T5915] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 408.831706][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 408.833665][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 408.833691][ T5915] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 408.833705][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.852640][ T5915] usb 1-1: config 0 descriptor?? [ 409.513745][ T5915] hid-alps 0003:044E:120B.0002: hidraw0: USB HID v4.0a Device [HID 044e:120b] on usb-dummy_hcd.0-1/input0 [ 409.609738][ T5915] usb 1-1: USB disconnect, device number 35 [ 409.811313][T10030] fido_id[10030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 413.209074][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 413.209096][ T36] audit: type=1326 audit(1771324592.059:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10061 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c1e1bf79 code=0x7ffc0000 [ 413.209144][ T36] audit: type=1326 audit(1771324592.059:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10061 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c1e1bf79 code=0x7ffc0000 [ 413.209178][ T36] audit: type=1326 audit(1771324592.059:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10061 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c1e1bf79 code=0x7ffc0000 [ 413.209202][ T36] audit: type=1326 audit(1771324592.059:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10061 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f48c1e1bf79 code=0x7ffc0000 [ 413.209228][ T36] audit: type=1326 audit(1771324592.059:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10061 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c1e1bf79 code=0x7ffc0000 [ 413.209252][ T36] audit: type=1326 audit(1771324592.059:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10061 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c1e1bf79 code=0x7ffc0000 [ 413.209276][ T36] audit: type=1326 audit(1771324592.059:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10061 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c1e1bf79 code=0x7ffc0000 [ 413.209402][ T36] audit: type=1326 audit(1771324592.059:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10061 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f48c1e1bf79 code=0x7ffc0000 [ 413.209433][ T36] audit: type=1326 audit(1771324592.059:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10061 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c1e1bf79 code=0x7ffc0000 [ 413.209457][ T36] audit: type=1326 audit(1771324592.059:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10061 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c1e1bf79 code=0x7ffc0000 [ 413.814517][ T5915] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 414.004118][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 414.008315][ T5915] usb 2-1: config 6 has an invalid interface number: 51 but max is 1 [ 414.008344][ T5915] usb 2-1: config 6 has no interface number 1 [ 414.008387][ T5915] usb 2-1: config 6 interface 0 has no altsetting 0 [ 414.008403][ T5915] usb 2-1: config 6 interface 51 has no altsetting 0 [ 414.046090][ T5915] usb 2-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 414.046112][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.046124][ T5915] usb 2-1: Product: syz [ 414.046132][ T5915] usb 2-1: Manufacturer: syz [ 414.046140][ T5915] usb 2-1: SerialNumber: syz [ 414.345408][ T5915] xr_serial 2-1:6.51: xr_serial converter detected [ 414.407691][ T5915] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 414.407747][ T5915] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 414.431742][ T5915] usb 2-1: USB disconnect, device number 28 [ 414.448129][ T5915] xr_serial 2-1:6.0: device disconnected [ 416.983261][ T5915] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 417.224529][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 417.229072][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 417.234291][ T5915] usb 2-1: config 7 has an invalid interface number: 48 but max is 0 [ 417.234320][ T5915] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 417.234643][ T5915] usb 2-1: config 7 has no interface number 0 [ 417.234679][ T5915] usb 2-1: config 7 interface 48 has no altsetting 0 [ 417.238181][ T5915] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 417.238208][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.238227][ T5915] usb 2-1: Product: syz [ 417.238239][ T5915] usb 2-1: Manufacturer: syz [ 417.238253][ T5915] usb 2-1: SerialNumber: syz [ 417.525652][ T5915] cdc_phonet 2-1:7.48: probe with driver cdc_phonet failed with error -22 [ 417.555065][ T5915] usb 2-1: USB disconnect, device number 29 [ 418.288608][ T36] kauditd_printk_skb: 143 callbacks suppressed [ 418.288624][ T36] audit: type=1326 audit(1771324597.129:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10103 comm="syz.0.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd50e53bf79 code=0x7ffc0000 [ 419.782938][T10128] netdevsim netdevsim3: Direct firmware load for / [ 419.782938][T10128] failed with error -2 [ 419.782969][T10128] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 419.782969][T10128] [ 424.075842][T10154] tipc: Started in network mode [ 424.075877][T10154] tipc: Node identity 2a5b9b60b07d, cluster identity 4711 [ 424.076089][T10154] tipc: Enabled bearer , priority 0 [ 424.077314][T10154] syzkaller0: entered promiscuous mode [ 424.077338][T10154] syzkaller0: entered allmulticast mode [ 424.148558][T10154] tipc: Resetting bearer [ 424.234767][T10153] tipc: Resetting bearer [ 424.519321][T10153] tipc: Disabling bearer [ 424.634966][T10165] ieee802154 phy0 wpan0: encryption failed: -22 [ 426.504599][ T5884] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 426.654836][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 426.674279][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.674302][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.674326][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 426.674340][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.738021][ T5884] usb 4-1: config 0 descriptor?? [ 426.828791][ T5884] hub 4-1:0.0: USB hub found [ 427.163538][ T5884] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 427.509563][ T5884] usbhid 4-1:0.0: can't add hid device: -71 [ 427.509650][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 427.527212][ T5884] usb 4-1: USB disconnect, device number 27 [ 428.823150][T10198] netdevsim netdevsim2: Direct firmware load for / [ 428.823150][T10198] failed with error -2 [ 428.823189][T10198] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 428.823189][T10198] [ 431.621801][T10214] tipc: Enabled bearer , priority 0 [ 431.625036][T10214] syzkaller0: entered promiscuous mode [ 431.625060][T10214] syzkaller0: entered allmulticast mode [ 431.858736][T10215] tipc: Resetting bearer [ 431.958061][T10213] tipc: Resetting bearer [ 432.125674][T10213] tipc: Disabling bearer [ 436.492876][T10253] tipc: Enabled bearer , priority 0 [ 436.493538][T10253] syzkaller0: entered promiscuous mode [ 436.493555][T10253] syzkaller0: entered allmulticast mode [ 436.655887][T10257] tipc: Resetting bearer [ 436.690553][T10250] tipc: Resetting bearer [ 436.808495][T10250] tipc: Disabling bearer [ 437.416022][T10261] netdevsim netdevsim0: Direct firmware load for / [ 437.416022][T10261] failed with error -2 [ 437.416052][T10261] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 437.416052][T10261] [ 439.724563][ T5884] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 439.726955][T10281] netlink: 16203 bytes leftover after parsing attributes in process `syz.2.1494'. [ 439.874510][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 439.905581][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.905619][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.905661][ T5884] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 439.905685][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.966808][ T5884] usb 5-1: config 0 descriptor?? [ 439.982943][ T5884] hub 5-1:0.0: USB hub found [ 440.481905][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.487792][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.700082][ T5884] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 440.942764][ T5884] usbhid 5-1:0.0: can't add hid device: -71 [ 440.942865][ T5884] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 440.998241][ T5884] usb 5-1: USB disconnect, device number 14 [ 441.126939][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 441.154016][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 441.162868][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 441.164355][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 441.179428][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 442.614936][T10316] netlink: 16203 bytes leftover after parsing attributes in process `syz.4.1504'. [ 443.449857][ T5799] Bluetooth: hci1: command tx timeout [ 443.912731][ T3601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.138744][ T3601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.291120][ T5799] Bluetooth: hci1: command tx timeout [ 447.724630][ T917] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 447.766891][T10355] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1514'. [ 447.903799][ T3601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.995074][ T917] usb 3-1: Using ep0 maxpacket: 32 [ 448.001663][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.001699][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.001741][ T917] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 448.001763][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.007446][ T917] usb 3-1: config 0 descriptor?? [ 448.013007][ T917] hub 3-1:0.0: USB hub found [ 448.514269][ T917] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 448.645759][ T3601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.917047][ T917] usbhid 3-1:0.0: can't add hid device: -71 [ 448.917183][ T917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 448.951852][ T917] usb 3-1: USB disconnect, device number 20 [ 449.369216][ T5799] Bluetooth: hci1: command tx timeout [ 449.389628][T10289] chnl_net:caif_netlink_parms(): no params data found [ 450.524545][ T5915] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 450.694701][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 450.697287][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 450.697329][ T5915] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 450.697352][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.715342][ T5915] usb 1-1: config 0 descriptor?? [ 451.171184][ T5915] usbhid 1-1:0.0: can't add hid device: -71 [ 451.171315][ T5915] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 451.255992][ T5915] usb 1-1: USB disconnect, device number 36 [ 451.455559][ T5799] Bluetooth: hci1: command tx timeout [ 451.756835][T10289] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.756913][T10289] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.757071][T10289] bridge_slave_0: entered allmulticast mode [ 451.770113][T10289] bridge_slave_0: entered promiscuous mode [ 451.813289][T10289] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.813445][T10289] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.813885][T10289] bridge_slave_1: entered allmulticast mode [ 451.853348][T10289] bridge_slave_1: entered promiscuous mode [ 451.921104][ T3601] bridge_slave_1: left allmulticast mode [ 451.921128][ T3601] bridge_slave_1: left promiscuous mode [ 451.921297][ T3601] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.016111][ T3601] bridge_slave_0: left allmulticast mode [ 452.016141][ T3601] bridge_slave_0: left promiscuous mode [ 452.016403][ T3601] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.109332][T10396] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1524'. [ 454.234720][ T5884] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 454.404637][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 454.420201][ T5884] usb 3-1: config 6 has an invalid interface number: 51 but max is 1 [ 454.420231][ T5884] usb 3-1: config 6 has no interface number 1 [ 454.420283][ T5884] usb 3-1: config 6 interface 0 has no altsetting 0 [ 454.420301][ T5884] usb 3-1: config 6 interface 51 has no altsetting 0 [ 454.432472][ T5884] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 454.432494][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.432506][ T5884] usb 3-1: Product: syz [ 454.432515][ T5884] usb 3-1: Manufacturer: syz [ 454.432523][ T5884] usb 3-1: SerialNumber: syz [ 454.505805][ T3601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.565424][ T3601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.589689][ T3601] bond0 (unregistering): Released all slaves [ 454.981985][T10289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.993257][T10431] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1534'. [ 455.058350][T10289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.332391][ T3601] tipc: Left network mode [ 456.188787][T10289] team0: Port device team_slave_0 added [ 456.226270][T10289] team0: Port device team_slave_1 added [ 457.944185][T10289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.944246][T10289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.944263][T10289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.366953][T10289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.366968][T10289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.366985][T10289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.904890][ T3601] hsr_slave_0: left promiscuous mode [ 458.935011][ T3601] hsr_slave_1: left promiscuous mode [ 458.971129][ T3601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.972722][ T3601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.015490][ T3601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.016247][ T3601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.640309][ T5884] xr_serial 3-1:6.51: xr_serial converter detected [ 459.662005][ T5884] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 459.662077][ T5884] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 459.689314][ T3601] veth1_macvtap: left promiscuous mode [ 459.689424][ T3601] veth0_macvtap: left promiscuous mode [ 459.689691][ T3601] veth1_vlan: left promiscuous mode [ 459.689862][ T3601] veth0_vlan: left promiscuous mode [ 459.710418][ T5884] usb 3-1: USB disconnect, device number 21 [ 459.762551][ T5884] xr_serial 3-1:6.0: device disconnected [ 465.088161][ T3601] team0 (unregistering): Port device team_slave_1 removed [ 465.284981][ T3601] team0 (unregistering): Port device team_slave_0 removed [ 467.460811][T10289] hsr_slave_0: entered promiscuous mode [ 467.462412][T10289] hsr_slave_1: entered promiscuous mode [ 467.463492][T10289] debugfs: 'hsr0' already exists in 'hsr' [ 467.463518][T10289] Cannot create hsr debugfs directory [ 468.778038][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1557'. [ 471.669375][T10289] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 471.710683][T10289] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 471.770473][T10289] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 471.822963][T10289] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 473.982762][T10289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.102204][T10289] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.961429][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.973657][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.004204][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.010128][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.747362][T10289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.954606][ T5869] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 479.108505][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 479.111720][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 479.111758][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 479.111785][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 479.111830][ T5869] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 479.111892][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.158669][ T5869] usb 5-1: config 0 descriptor?? [ 479.159710][T10614] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 479.177368][ T5869] hub 5-1:0.0: USB hub found [ 479.436568][ T5869] hub 5-1:0.0: 2 ports detected [ 479.848979][ T5869] hub 5-1:0.0: set hub depth failed [ 479.872236][ T5869] usb 5-1: USB disconnect, device number 15 [ 480.068095][T10289] veth0_vlan: entered promiscuous mode [ 480.080272][T10289] veth1_vlan: entered promiscuous mode [ 480.205192][T10289] veth0_macvtap: entered promiscuous mode [ 480.216854][T10289] veth1_macvtap: entered promiscuous mode [ 480.279602][T10289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.307720][T10289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.352550][ T8904] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.357067][ T8904] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.359368][ T1376] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.359424][ T1376] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.011937][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.011962][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.745647][ T1410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.745673][ T1410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.911754][T10670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.216985][ T5804] Bluetooth: hci5: command 0x0406 tx timeout [ 493.663220][T10730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.728472][T10751] overlayfs: failed to resolve './file1': -2 [ 498.955554][T10777] tipc: Enabled bearer , priority 0 [ 498.956499][T10777] syzkaller0: entered promiscuous mode [ 498.956526][T10777] syzkaller0: entered allmulticast mode [ 500.238221][T10775] tipc: Resetting bearer [ 500.563805][T10775] tipc: Disabling bearer [ 501.717387][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.717434][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.546516][T10822] overlayfs: failed to resolve './file0': -2 [ 503.182827][T10835] tipc: Started in network mode [ 503.182850][T10835] tipc: Node identity 3e219a97b777, cluster identity 4711 [ 503.182975][T10835] tipc: Enabled bearer , priority 0 [ 503.196407][T10835] syzkaller0: entered promiscuous mode [ 503.196440][T10835] syzkaller0: entered allmulticast mode [ 503.935138][T10834] tipc: Resetting bearer [ 504.130695][T10834] tipc: Disabling bearer [ 504.496751][ T807] tipc: Node number set to 2304154263 [ 512.385187][ T5799] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 512.385233][ T5799] Bluetooth: hci1: Malformed LE Event: 0x02 [ 514.580055][ T5884] IPVS: starting estimator thread 0... [ 514.670743][T10976] IPVS: using max 7 ests per chain, 16800 per kthread [ 517.404695][ T49] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 517.564535][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 517.568178][ T49] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 517.568213][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 517.568241][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 517.568286][ T49] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 517.568308][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.586655][ T49] usb 3-1: config 0 descriptor?? [ 517.587699][T11009] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 517.607270][ T49] hub 3-1:0.0: USB hub found [ 517.828286][ T49] hub 3-1:0.0: 2 ports detected [ 518.007885][ T49] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 518.007917][ T49] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 518.036305][ T49] usbhid 3-1:0.0: can't add hid device: -71 [ 518.036444][ T49] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 518.104532][ T49] usb 3-1: USB disconnect, device number 22 [ 518.729592][T11037] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1663'. [ 519.954165][ T807] IPVS: starting estimator thread 0... [ 520.034614][T11069] IPVS: using max 7 ests per chain, 16800 per kthread [ 521.001522][T11082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.339807][T11091] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1674'. [ 524.081293][T11140] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1687'. [ 525.037778][ T5799] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 525.038296][ T5799] Bluetooth: hci3: Malformed LE Event: 0x02 [ 526.317274][T11159] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 526.537573][ T807] IPVS: starting estimator thread 0... [ 526.624584][T11166] IPVS: using max 6 ests per chain, 14400 per kthread [ 527.324083][T11173] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1698'. [ 528.446301][ T807] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 528.784258][ T5799] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 528.784299][ T5799] Bluetooth: hci1: Malformed LE Event: 0x02 [ 529.619594][ T917] ------------[ cut here ]------------ [ 529.619612][ T917] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 529.619629][ T917] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#0: kworker/0:2/917 [ 529.619670][ T917] Modules linked in: [ 529.619691][ T917] CPU: 0 UID: 0 PID: 917 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 529.619714][ T917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 529.619728][ T917] Workqueue: events drm_fb_helper_damage_work [ 529.619751][ T917] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 529.619773][ T917] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 529.619791][ T917] RSP: 0018:ffffc900047a78e0 EFLAGS: 00010246 [ 529.619809][ T917] RAX: 1ffff1100494f200 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 529.619826][ T917] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 529.619842][ T917] RBP: ffffc900047a79c8 R08: 0000000000000000 R09: 0000000000000000 [ 529.619856][ T917] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 529.619871][ T917] R13: ffff888024a79000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 529.619886][ T917] FS: 0000000000000000(0000) GS:ffff888126595000(0000) knlGS:0000000000000000 [ 529.619904][ T917] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 529.619919][ T917] CR2: 00007f48c1e696c0 CR3: 0000000069122000 CR4: 00000000003526f0 [ 529.619939][ T917] Call Trace: [ 529.619970][ T917] [ 529.619986][ T917] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 529.620008][ T917] ? rt_spin_unlock+0x14f/0x200 [ 529.620032][ T917] ? __pfx_autoremove_wake_function+0x10/0x10 [ 529.620062][ T917] ? rt_spin_unlock+0x160/0x200 [ 529.620087][ T917] ? drm_vblank_get+0x147/0x260 [ 529.620122][ T917] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 529.620154][ T917] drm_fb_helper_damage_work+0x131/0x6f0 [ 529.620179][ T917] ? process_scheduled_works+0xa0f/0x17a0 [ 529.620210][ T917] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 529.620237][ T917] ? process_scheduled_works+0xa0f/0x17a0 [ 529.620260][ T917] ? process_scheduled_works+0xa0f/0x17a0 [ 529.620287][ T917] process_scheduled_works+0xaec/0x17a0 [ 529.620346][ T917] ? __pfx_process_scheduled_works+0x10/0x10 [ 529.620379][ T917] ? assign_work+0x3d5/0x5e0 [ 529.620410][ T917] worker_thread+0xa50/0xfc0 [ 529.620585][ T917] kthread+0x388/0x470 [ 529.620632][ T917] ? __pfx_worker_thread+0x10/0x10 [ 529.620674][ T917] ? __pfx_kthread+0x10/0x10 [ 529.620704][ T917] ret_from_fork+0x51e/0xb90 [ 529.620735][ T917] ? __pfx_ret_from_fork+0x10/0x10 [ 529.620760][ T917] ? __switch_to+0xc7d/0x1400 [ 529.620789][ T917] ? __pfx_kthread+0x10/0x10 [ 529.620820][ T917] ret_from_fork_asm+0x1a/0x30 [ 529.620874][ T917] [ 529.620885][ T917] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 529.620902][ T917] CPU: 0 UID: 0 PID: 917 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 529.620927][ T917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 529.620940][ T917] Workqueue: events drm_fb_helper_damage_work [ 529.620964][ T917] Call Trace: [ 529.620973][ T917] [ 529.620982][ T917] vpanic+0x1e0/0x670 [ 529.621016][ T917] panic+0xc5/0xd0 [ 529.621045][ T917] ? __pfx_panic+0x10/0x10 [ 529.621084][ T917] ? ret_from_fork_asm+0x1a/0x30 [ 529.621122][ T917] __warn+0x315/0x4a0 [ 529.621149][ T917] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 529.621172][ T917] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 529.621195][ T917] __report_bug+0x29a/0x540 [ 529.621222][ T917] ? __pfx___schedule+0x10/0x10 [ 529.621252][ T917] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 529.621287][ T917] ? __pfx___report_bug+0x10/0x10 [ 529.621310][ T917] ? lockdep_hardirqs_on+0x7a/0x110 [ 529.621349][ T917] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 529.621380][ T917] report_bug_entry+0x19a/0x290 [ 529.621403][ T917] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 529.621422][ T917] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 529.621443][ T917] handle_bug+0xca/0x200 [ 529.621474][ T917] exc_invalid_op+0x1a/0x50 [ 529.621504][ T917] asm_exc_invalid_op+0x1a/0x20 [ 529.621524][ T917] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 529.621546][ T917] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 529.621566][ T917] RSP: 0018:ffffc900047a78e0 EFLAGS: 00010246 [ 529.621584][ T917] RAX: 1ffff1100494f200 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 529.621600][ T917] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 529.621617][ T917] RBP: ffffc900047a79c8 R08: 0000000000000000 R09: 0000000000000000 [ 529.621631][ T917] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 529.621654][ T917] R13: ffff888024a79000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 529.621695][ T917] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 529.621716][ T917] ? rt_spin_unlock+0x14f/0x200 [ 529.621738][ T917] ? __pfx_autoremove_wake_function+0x10/0x10 [ 529.621767][ T917] ? rt_spin_unlock+0x160/0x200 [ 529.621792][ T917] ? drm_vblank_get+0x147/0x260 [ 529.621826][ T917] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 529.621859][ T917] drm_fb_helper_damage_work+0x131/0x6f0 [ 529.621885][ T917] ? process_scheduled_works+0xa0f/0x17a0 [ 529.621915][ T917] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 529.621943][ T917] ? process_scheduled_works+0xa0f/0x17a0 [ 529.621966][ T917] ? process_scheduled_works+0xa0f/0x17a0 [ 529.621993][ T917] process_scheduled_works+0xaec/0x17a0 [ 529.622051][ T917] ? __pfx_process_scheduled_works+0x10/0x10 [ 529.622085][ T917] ? assign_work+0x3d5/0x5e0 [ 529.622117][ T917] worker_thread+0xa50/0xfc0 [ 529.622175][ T917] kthread+0x388/0x470 [ 529.622205][ T917] ? __pfx_worker_thread+0x10/0x10 [ 529.622228][ T917] ? __pfx_kthread+0x10/0x10 [ 529.622260][ T917] ret_from_fork+0x51e/0xb90 [ 529.622290][ T917] ? __pfx_ret_from_fork+0x10/0x10 [ 529.622314][ T917] ? __switch_to+0xc7d/0x1400 [ 529.622342][ T917] ? __pfx_kthread+0x10/0x10 [ 529.622374][ T917] ret_from_fork_asm+0x1a/0x30 [ 529.622422][ T917] [ 529.622581][ T917] Kernel Offset: disabled