last executing test programs: 11m8.990376372s ago: executing program 2 (id=143): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) syz_open_dev$hiddev(&(0x7f0000000180), 0xfffffffffffffffc, 0x2800) (async) socket(0x10, 0x3, 0x0) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$can_raw(0x1d, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 32) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) fgetxattr(r1, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x9) (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c10000004060901000000000000000007000c0a05000100f5000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) (rerun: 32) sendto$inet6(r3, &(0x7f0000000080), 0x0, 0x8000, 0x0, 0x0) (async) close(r3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket(0xa, 0x2, 0x31) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, 0x0) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (rerun: 32) 11m7.549079112s ago: executing program 2 (id=146): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x300}, 0x18) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000080)={0x5, 0x0, [{0xffff, 0x3, 0x1, 0x0, @sint={0x6, 0xfffffff3}}, {0x77b1, 0x5, 0x0, 0x0, @sint={0x81, 0x5}}, {0x6, 0x1, 0x1, 0x0, @irqchip={0x9, 0x7}}, {0x8, 0x3, 0x0, 0x0, @adapter={0x9, 0x2, 0x3, 0xa, 0x3}}, {0xffff, 0x5, 0x0, 0x0, @sint={0x2, 0x10}}]}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000180)={0x3, 0xffffffff, 0x5, 0x93ba, 0x400, 0x2}) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) io_uring_enter(r1, 0xae9, 0x467b, 0x6b, &(0x7f0000000200)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000240)={0x5, 0x3ff, 0x0, 0x8894, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000280)={0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x8, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5, 0x9, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, r2, 0x0, 0x0, r3, r4, r5], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000640)={0x80000001, 0x8c, 0x401, 0x5, 0x0, 0x9ab}) (async) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000680)) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4040) (async, rerun: 64) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000000800)={0xdf, 0x0, 0x4000}) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)=@deltaction={0xd0, 0x31, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x8f2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040090}, 0x4000) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000a40)={0xa3b9, 0x1, 0xc, 0x7ff, 0x6, 0xffff}) (async) r7 = syz_clone(0x0, &(0x7f0000000a80)="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", 0x1000, &(0x7f0000001a80), &(0x7f0000001ac0), &(0x7f0000001b00)) prctl$PR_SCHED_CORE(0x3e, 0x0, r7, 0x3, &(0x7f0000001b40)) (async) sched_setscheduler(r7, 0x3, &(0x7f0000001b80)=0xb) (async, rerun: 32) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32) connect$unix(r0, &(0x7f0000001bc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000001c40)={0x0, 0xcb, "a691a5a06247239db240a523969f1e94974151596be0437d1476405dbb8e90a656b05d8885bc9a34bfbc0fb7eed7caa1c5b1cf8c999504d09d8409bc79795dd97f99b36d68971cd0698ca86f6abc1a43c426f390e6647f508a3ba3ca8d4d87ad5c1d929488a99f83d8111cae41f19e902e4a0a18b6db2fab488a390187852e39d9dfecaefd3272964eb17a9e269883f4ea2ae3eb4c65648f75809b1c21b69fa61273f84dcab76c63838c80d84eb2767941aef107347e9dfb57efa1861639e1af0e7db5c89a127f98597a21"}, &(0x7f0000001d40)=0xd3) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001d80)={0x7, 0x8001, 0xfffffff7, 0x5, r8}, 0x10) (async) r9 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x3, r9, 0x3, &(0x7f0000001dc0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001e40)={&(0x7f0000001e00)='mm_vmscan_kswapd_wake\x00', r0, 0x0, 0x88}, 0x18) (async, rerun: 64) write$cgroup_int(r1, &(0x7f0000001e80)=0x1, 0x12) (async, rerun: 64) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000022c0)={0x165, 0x1b, &(0x7f0000001ec0)}) 11m7.204181899s ago: executing program 2 (id=148): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x60000000}, 0x48) 11m6.520413941s ago: executing program 2 (id=150): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0x3fe8e7ea, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='xprtrdma_op_set_cto\x00', 0xffffffffffffffff, 0x0, 0x81}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000780), &(0x7f00000007c0)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="00080016c249811d7c5eb832e3afb70000000000000004000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r6, &(0x7f00000005c0)="e95015e07c5ecb4b1637c768a6b3ffd9e8b2a26c6be65e0f9ee49a09033331929544383e7822e5d6b4f00a97bb9bbb7d253286f29b66856583f5623f18b91aaabfce1fb8fe5d01e09848ff41a7e53cd4cca46881f287898d65ab4de3fd8102ba93427b8d6382febf6de3a5458c", &(0x7f00000006c0)=""/174}, 0x20) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000001580), 0x220022, &(0x7f0000000800)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d0bde048bf9d413540c536c102f5fee463f59a43192dbb65ffbc4722af93413df187aab2141076d97414e736cd4204cc6a9a2d37692f72f2b6a0f4253b61bdf05c422934fb18a", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',access=an']) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000120000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000e41f0800034000000120140000001000"], 0xd0}}, 0x20050800) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0xb, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x990}, 0x94) 11m2.177038484s ago: executing program 2 (id=157): pipe(&(0x7f00000001c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r0], 0x44}}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r3, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 11m1.969856363s ago: executing program 2 (id=159): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='xen_mc_callback\x00', r0, 0x0, 0x7f}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) faccessat(0xffffffffffffffff, 0x0, 0x1a0) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) close(0xffffffffffffffff) sched_getattr(0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 10m46.514813533s ago: executing program 32 (id=159): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='xen_mc_callback\x00', r0, 0x0, 0x7f}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) faccessat(0xffffffffffffffff, 0x0, 0x1a0) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) close(0xffffffffffffffff) sched_getattr(0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 8m48.232421161s ago: executing program 0 (id=449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_DOWN(r3, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) epoll_create1(0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000400)=0x4) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 8m45.396450405s ago: executing program 0 (id=455): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x2000}, 0x48) 8m45.03305859s ago: executing program 0 (id=456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000002114210000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 8m44.6890853s ago: executing program 0 (id=459): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xffe4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 8m44.432219287s ago: executing program 0 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x3c, r4, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x9) fchdir(r6) mknod$loop(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r7 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x30]}}}}]}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r7) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r8, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x240008d4) 8m42.451998141s ago: executing program 0 (id=464): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x83, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xaa, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0xeffd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x0, 0x0, 0x0, 0x400005, 0xc3, &(0x7f0000000480)=""/195, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x202}, 0x94) 8m27.051151028s ago: executing program 33 (id=464): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x83, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xaa, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0xeffd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x0, 0x0, 0x0, 0x400005, 0xc3, &(0x7f0000000480)=""/195, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x202}, 0x94) 7.477670097s ago: executing program 4 (id=1971): openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000009e40)=ANY=[], 0x4c}}, 0x0) 7.404218294s ago: executing program 3 (id=1973): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000), 0x0) 7.261160039s ago: executing program 3 (id=1975): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x4000000) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 6.808086613s ago: executing program 4 (id=1978): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = epoll_create1(0x0) unshare(0x20000400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 4.592893669s ago: executing program 1 (id=1980): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) 4.549199905s ago: executing program 3 (id=1981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) 4.165164398s ago: executing program 1 (id=1984): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4.133857682s ago: executing program 3 (id=1985): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x28, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000140)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@secondary) add_key$user(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00000d4000/0x3000)=nil, 0x3000, 0x1) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f020}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x44814) gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000002c0)="55df097447644e836b97fdc099a89ef756f052889204b8e69a1da874150d94f124e4efc064da551850867beaa9b065a53eb888989cd04642fe8b4845be2b73a8a8ed300a9889355037e5c72602020c36a99ebf9c2a6b385ed7b96614c2605736813c029c22bf67f3e7d53b36ad00b30d8ce909377bdd0143e3e7990eacae58321f012e", &(0x7f0000000380)="8f3d88d6fa21f6a4113dc50f35af1b297bb11a358350a3a026e04a7caa7020ef789ffffe8d708c8690020c41ec371e390449f4c7eaee32d58cc439170f7c30969f28685fc0d851a17b9304dd02c0b54e7dd848d579ff74d2dcee88557e0cb35359810d0608ed1a2c92ae3e00337bd7d0c668bb7a3f9b6ff491f760a8e50c8cdd51c100983892164fbbb52dc418556804017be4d046485a3408ffa37bec81a3aa01065e637d9f0bfc3e65766c45722fbf1652f094f37b9c735c12b967c13ab834fea3f11852a4a69527a358fc16d9a512365f04221c5005a265e71096e9df46bddde8cd05dff0d7baa4860b9fd7a2bf9d3bbc1a5b480193"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 3.558735508s ago: executing program 1 (id=1986): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000), 0x0) 3.075536387s ago: executing program 4 (id=1988): openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000009e40)=ANY=[], 0x4c}}, 0x0) 2.959843585s ago: executing program 1 (id=1989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 2.952441341s ago: executing program 5 (id=1990): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 2.493140864s ago: executing program 1 (id=1991): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40, 0x0, 0x0) 2.270573753s ago: executing program 1 (id=1992): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x2000, 0x40, 0x0, 0x8000021e}, &(0x7f00000001c0), &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.200525144s ago: executing program 4 (id=1993): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x4000000) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 2.189089714s ago: executing program 6 (id=1994): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="01000000000000409bb36bf2000008000300", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x80) 2.112792575s ago: executing program 3 (id=1995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) 2.065600101s ago: executing program 6 (id=1996): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006200)=ANY=[@ANYBLOB="b8000000150001000000000000030000e00000020000000000000000000000000000000000000000000000000000000001fe0000000000000a"], 0xb8}}, 0x0) 1.999534311s ago: executing program 5 (id=1997): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x80000003, 0x5) write$tun(r2, &(0x7f0000003840)=ANY=[], 0x7f5) 1.599726208s ago: executing program 6 (id=1998): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r1 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x4d54, 0x1000, 0xfffffffe, 0x364}, &(0x7f0000000980)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x2) 1.455416066s ago: executing program 3 (id=1999): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = epoll_create1(0x0) unshare(0x20000400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1.411551736s ago: executing program 5 (id=2000): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r0, &(0x7f0000000140), 0x0) 1.144938875s ago: executing program 6 (id=2001): socket(0x1e, 0x4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x1, 0x6}, 0x1d, [0x5, 0xc95a, 0xfffffff3, 0x80000006, 0x9, 0x2, 0x1, 0x7f, 0x3, 0xf, 0xfffffff2, 0x5f, 0x10000a, 0x7, 0xffff2d33, 0x8, 0x6, 0xa, 0x0, 0x80000001, 0x2, 0x7, 0x5, 0x3c5b, 0x6, 0x22, 0x2, 0xfffffffe, 0x1f461e2a, 0x2, 0x6, 0x4, 0x3, 0x100, 0x107fff, 0x1, 0x9, 0x0, 0xd, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x6, 0x39, 0x5, 0x6, 0x81, 0x3, 0x5, 0x0, 0x8, 0xe1, 0x7f, 0x9, 0xaa10, 0x5, 0xa, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x7ffe, 0x10, 0x10, 0x129432e6, 0xcb, 0x2, 0xd, 0x222d8, 0x1, 0x9, 0xfffffffc, 0x8, 0xfffffffe, 0x7, 0x5, 0x30, 0x8, 0x8, 0x78, 0xea4, 0x7ffffffc, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x3, 0xfffffffd, 0xff, 0x1005, 0x881, 0x7, 0x4, 0x3, 0x106, 0x5, 0x1ff, 0x27, 0x9, 0x8, 0x9, 0x8000, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x1, 0x74ec1f9b, 0x4, 0x2, 0x7, 0xd, 0x9, 0x48c93690, 0x802, 0xff], [0x7, 0x4, 0x0, 0x652, 0x9e0, 0xd, 0x8ce, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0x8000000c, 0x4, 0x5, 0x76, 0x7, 0x1ef, 0x5, 0xf, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x1, 0xb5, 0xd, 0xf, 0x8, 0x4, 0x78000000, 0x7, 0x9, 0x10003, 0x200, 0x80000000, 0x3, 0x4, 0x2, 0x10000, 0xa2, 0x7, 0x53cf6b7b, 0x4000005, 0x6, 0x54fe12d5, 0xbf, 0x200, 0x400, 0x400002, 0xfffffff9, 0x0, 0x5, 0x5, 0x5, 0x6, 0xffbffffb, 0x4, 0x3, 0x1, 0x9, 0x8, 0x3], [0x10009, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0x9, 0xce5, 0x1fd, 0x7669b26d, 0x5, 0x5, 0x40000003, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x4, 0x82ffff, 0x200003, 0xfffffff9, 0x7fffffff, 0x9602, 0xa, 0x8, 0x4, 0xffffffff, 0x1, 0x10002, 0x5, 0x8, 0x2b95, 0x7, 0x7, 0x9, 0x1, 0x6c1b, 0x20000003, 0x4, 0x5, 0xb1c, 0x3, 0x99f5, 0xffff7441, 0xfff]}, 0x45c) unshare(0x28000600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 993.289291ms ago: executing program 5 (id=2002): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40, 0x0, 0x0) 902.227198ms ago: executing program 5 (id=2003): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000800)=""/187, 0xbb}], 0x1, 0x4c, 0x3) 812.165138ms ago: executing program 6 (id=2004): openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000009e40)=ANY=[], 0x4c}}, 0x0) 725.265413ms ago: executing program 5 (id=2005): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0) sendmmsg$inet6(r1, &(0x7f00000001c0), 0x0, 0x40) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000780)=""/115, 0x73}], 0x1}, 0x2}], 0x1, 0x100, 0x0) 346.129313ms ago: executing program 4 (id=2006): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="01000000000000409bb36bf2000008000300", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x80) 118.639415ms ago: executing program 4 (id=2007): socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 0s ago: executing program 6 (id=2008): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0x0, 0x717e387b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x2) kernel console output (not intermixed with test programs): [ T92] metro_usb 4-1:0.0: Metrologic USB to Serial converter detected [ 468.844021][ T92] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 469.021971][ T5156] Bluetooth: hci0: command tx timeout [ 469.029381][ T10] usb 4-1: USB disconnect, device number 13 [ 469.075463][ T8073] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 469.098105][ T10] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 469.114178][ T8073] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 469.159045][ T10] metro_usb 4-1:0.0: device disconnected [ 469.943318][ T8139] netlink: 332 bytes leftover after parsing attributes in process `syz.4.504'. [ 469.953051][ T8139] netlink: 'syz.4.504': attribute type 9 has an invalid length. [ 469.960999][ T8139] netlink: 108 bytes leftover after parsing attributes in process `syz.4.504'. [ 469.970993][ T8139] netlink: 32 bytes leftover after parsing attributes in process `syz.4.504'. [ 469.992815][ T8073] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 470.042928][ T8073] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 471.096880][ T5156] Bluetooth: hci0: command tx timeout [ 471.161321][ T8154] vivid-009: kernel_thread() failed [ 472.993742][ T8073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.151093][ T8073] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.644736][ T4546] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.652001][ T4546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.685691][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.692963][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.507337][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.513'. [ 476.602118][ T8212] vivid-007: kernel_thread() failed [ 476.808275][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 477.672376][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 479.604341][ T8073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.097898][ T8235] netlink: 48 bytes leftover after parsing attributes in process `syz.3.522'. [ 482.908107][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 484.457438][ T8273] Cannot find add_set index 0 as target [ 485.085947][ T8268] 9pnet_fd: Insufficient options for proto=fd [ 485.551967][ T8073] veth0_vlan: entered promiscuous mode [ 486.503219][ T8073] veth1_vlan: entered promiscuous mode [ 486.899881][ T8073] veth0_macvtap: entered promiscuous mode [ 487.051284][ T8073] veth1_macvtap: entered promiscuous mode [ 487.496578][ T92] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 487.508472][ T8073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.555835][ T8073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.593122][ T8073] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.612665][ T8073] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.623342][ T8073] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.635659][ T8073] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.676769][ T92] usb 5-1: Using ep0 maxpacket: 8 [ 487.690653][ T92] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 487.725060][ T92] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 487.739231][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.747713][ T92] usb 5-1: Product: syz [ 487.747736][ T92] usb 5-1: Manufacturer: syz [ 487.747754][ T92] usb 5-1: SerialNumber: syz [ 487.751197][ T92] usb 5-1: config 0 descriptor?? [ 487.781010][ T92] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 487.791268][ T92] usb 5-1: setting power ON [ 487.804427][ T92] dvb-usb: bulk message failed: -22 (2/0) [ 487.824794][ T92] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 487.945775][ T92] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 487.980563][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.989814][ T92] usb 5-1: media controller created [ 487.992734][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.008286][ T8285] dvb-usb: bulk message failed: -22 (3/0) [ 488.024350][ T8285] dvb-usb: bulk message failed: -22 (20/0) [ 488.075739][ T8169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.111841][ T8169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.122256][ T8285] netlink: 'syz.4.534': attribute type 10 has an invalid length. [ 488.131027][ T5938] IPVS: starting estimator thread 0... [ 488.155295][ T8285] bond_slave_0: left promiscuous mode [ 488.169268][ T8285] bond_slave_1: left promiscuous mode [ 488.180885][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.209005][ T8285] bond_slave_0: entered promiscuous mode [ 488.215025][ T8285] bond_slave_1: entered promiscuous mode [ 488.256576][ T8301] IPVS: using max 23 ests per chain, 55200 per kthread [ 488.279366][ T8285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.285163][ T92] usb 5-1: selecting invalid altsetting 6 [ 488.302487][ T92] usb 5-1: digital interface selection failed (-22) [ 488.323056][ T8285] team0: Device bond0 failed to register rx_handler [ 488.330538][ T92] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 488.365571][ T8285] bond_slave_0: left promiscuous mode [ 488.384895][ T92] usb 5-1: setting power OFF [ 488.401732][ T8285] bond_slave_1: left promiscuous mode [ 488.402953][ T92] dvb-usb: bulk message failed: -22 (2/0) [ 488.449483][ T92] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 488.470452][ T92] (NULL device *): no alternate interface [ 488.622288][ T92] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 488.683847][ T92] usb 5-1: USB disconnect, device number 12 [ 488.745942][ T8305] netlink: 'syz.5.540': attribute type 1 has an invalid length. [ 489.726276][ T5938] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 489.927382][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.6.541'. [ 491.326232][ T5938] usb 6-1: Using ep0 maxpacket: 32 [ 491.345619][ T5938] usb 6-1: config 0 has an invalid interface number: 57 but max is 0 [ 491.416258][ T5938] usb 6-1: config 0 has no interface number 0 [ 491.634628][ T5938] usb 6-1: config 0 interface 57 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 492.752638][ T5938] usb 6-1: string descriptor 0 read error: -71 [ 492.761609][ T5938] usb 6-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=55.7f [ 493.531026][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.556631][ T5938] usb 6-1: config 0 descriptor?? [ 494.106766][ T5938] usb 6-1: can't set config #0, error -71 [ 494.128175][ T5938] usb 6-1: USB disconnect, device number 6 [ 496.779105][ T8357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.553'. [ 499.331224][ T8364] FAULT_INJECTION: forcing a failure. [ 499.331224][ T8364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.595976][ T8364] CPU: 1 UID: 0 PID: 8364 Comm: syz.5.555 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 499.596009][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.596039][ T8364] Call Trace: [ 499.596052][ T8364] [ 499.596066][ T8364] dump_stack_lvl+0x189/0x250 [ 499.596096][ T8364] ? irqentry_exit+0x74/0x90 [ 499.596122][ T8364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.596166][ T8364] should_fail_ex+0x414/0x560 [ 499.596196][ T8364] _copy_from_user+0x2d/0xb0 [ 499.596229][ T8364] ___sys_sendmsg+0x158/0x2a0 [ 499.596267][ T8364] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.596343][ T8364] ? __fget_files+0x2a/0x420 [ 499.596368][ T8364] ? __fget_files+0x3a0/0x420 [ 499.596405][ T8364] __x64_sys_sendmsg+0x19b/0x260 [ 499.596443][ T8364] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.596488][ T8364] ? __pfx_ksys_write+0x10/0x10 [ 499.596507][ T8364] ? rcu_is_watching+0x15/0xb0 [ 499.596537][ T8364] ? do_syscall_64+0xbe/0x3b0 [ 499.596567][ T8364] do_syscall_64+0xfa/0x3b0 [ 499.596590][ T8364] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.596612][ T8364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.596634][ T8364] ? clear_bhb_loop+0x60/0xb0 [ 499.596667][ T8364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.596687][ T8364] RIP: 0033:0x7f83cbd8ebe9 [ 499.596706][ T8364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.596725][ T8364] RSP: 002b:00007f83cccb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.596748][ T8364] RAX: ffffffffffffffda RBX: 00007f83cbfb5fa0 RCX: 00007f83cbd8ebe9 [ 499.596765][ T8364] RDX: 000000000404c0c0 RSI: 0000200000000040 RDI: 0000000000000003 [ 499.596779][ T8364] RBP: 00007f83cccb4090 R08: 0000000000000000 R09: 0000000000000000 [ 499.596793][ T8364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.596806][ T8364] R13: 00007f83cbfb6038 R14: 00007f83cbfb5fa0 R15: 00007ffd43c4ecc8 [ 499.596841][ T8364] [ 500.455362][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 501.288445][ T8386] netlink: 292 bytes leftover after parsing attributes in process `syz.1.560'. [ 503.856934][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.565'. [ 504.199221][ T8414] macsec1: entered allmulticast mode [ 504.206012][ T8414] macvlan1: entered allmulticast mode [ 504.211747][ T8414] veth1_vlan: entered allmulticast mode [ 504.375413][ T92] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 505.639140][ T8414] macvlan1: left allmulticast mode [ 505.654545][ T92] usb 6-1: no configurations [ 505.658817][ T8414] veth1_vlan: left allmulticast mode [ 505.722279][ T8418] xt_CT: No such helper "netbios-ns" [ 505.736414][ T92] usb 6-1: can't read configurations, error -22 [ 505.919806][ T92] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 506.106899][ T92] usb 6-1: no configurations [ 506.111894][ T92] usb 6-1: can't read configurations, error -22 [ 506.123089][ T92] usb usb6-port1: attempt power cycle [ 506.474738][ T8422] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 506.496751][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 506.636334][ T8422] usb 4-1: Using ep0 maxpacket: 16 [ 506.656587][ T8422] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 506.656749][ T92] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 506.676389][ T8422] usb 4-1: config 0 has no interface number 0 [ 506.683364][ T8422] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 506.751680][ T8422] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 506.765293][ T8422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.777275][ T8422] usb 4-1: Product: syz [ 506.784498][ T8422] usb 4-1: Manufacturer: syz [ 506.784639][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.800635][ T8422] usb 4-1: SerialNumber: syz [ 506.874932][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.885116][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.033309][ T8422] usb 4-1: config 0 descriptor?? [ 507.057119][ T92] usb 6-1: no configurations [ 507.067634][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 507.081463][ T92] usb 6-1: can't read configurations, error -22 [ 507.106398][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 507.121216][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.156309][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 507.184778][ T10] usb 2-1: SerialNumber: syz [ 507.205975][ T8440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.578'. [ 507.226869][ T8432] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 507.237207][ T92] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 507.249412][ T10] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 507.270852][ T10] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 507.285338][ T8440] syz_tun: entered promiscuous mode [ 507.298128][ T8440] syz_tun: left promiscuous mode [ 507.468389][ T92] usb 6-1: device not accepting address 10, error -71 [ 507.475977][ T92] usb usb6-port1: unable to enumerate USB device [ 507.491612][ T978] usb 2-1: USB disconnect, device number 8 [ 510.279097][ T8422] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 510.866303][ T8422] usb 4-1: USB disconnect, device number 14 [ 511.357428][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 513.687111][ T8502] loop2: detected capacity change from 0 to 7 [ 513.790813][ T8502] Dev loop2: unable to read RDB block 7 [ 513.806854][ T8502] loop2: AHDI p2 p3 [ 513.810854][ T8502] loop2: partition table partially beyond EOD, truncated [ 513.895190][ T8502] loop2: p3 start 335544320 is beyond EOD, truncated [ 522.028922][ T8540] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 522.969407][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 524.227376][ T92] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 524.298290][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 524.444479][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 524.817923][ T92] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 524.904051][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.912843][ T92] usb 6-1: Product: syz [ 525.013626][ T92] usb 6-1: Manufacturer: syz [ 525.030088][ T92] usb 6-1: SerialNumber: syz [ 525.058053][ T92] usb 6-1: config 0 descriptor?? [ 525.505217][ T8581] delete_channel: no stack [ 525.824597][ T8589] netlink: 48 bytes leftover after parsing attributes in process `syz.1.621'. [ 526.621111][ T92] usb 6-1: USB disconnect, device number 11 [ 526.901028][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 529.172675][ T8615] netlink: 48 bytes leftover after parsing attributes in process `syz.6.627'. [ 530.494868][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.629'. [ 530.841443][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.629'. [ 531.904729][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.6.632'. [ 533.256468][ T978] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 534.351157][ T978] usb 6-1: New USB device found, idVendor=1fb9, idProduct=0401, bcdDevice=a0.60 [ 534.376134][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.398546][ T978] usb 6-1: Product: syz [ 534.402791][ T978] usb 6-1: Manufacturer: syz [ 534.416294][ T978] usb 6-1: SerialNumber: syz [ 534.432776][ T978] usb 6-1: config 0 descriptor?? [ 534.452156][ T978] cp210x 6-1:0.0: cp210x converter detected [ 534.718905][ T978] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 534.952866][ T5952] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 535.299661][ T8663] netlink: 48 bytes leftover after parsing attributes in process `syz.4.639'. [ 535.748011][ T5952] usb 7-1: config 2 has an invalid interface number: 163 but max is 0 [ 535.895611][ T978] cp210x 6-1:0.0: querying part number failed [ 535.896983][ T5952] usb 7-1: config 2 has no interface number 0 [ 535.905610][ T978] usb 6-1: cp210x converter now attached to ttyUSB0 [ 535.916846][ T978] usb 6-1: USB disconnect, device number 12 [ 535.928731][ T978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 535.937083][ T978] cp210x 6-1:0.0: device disconnected [ 535.956498][ T5952] usb 7-1: config 2 interface 163 has no altsetting 0 [ 536.000486][ T5952] usb 7-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=d8.dd [ 536.033470][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.066592][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'. [ 536.089875][ T5952] usb 7-1: Product: syz [ 536.094131][ T5952] usb 7-1: Manufacturer: syz [ 536.116338][ T5952] usb 7-1: SerialNumber: syz [ 536.392429][ T5952] usb 7-1: Found UVC 0.00 device syz (05ac:8514) [ 536.400516][ T5952] usb 7-1: No valid video chain found. [ 536.409124][ T5952] usb 7-1: USB disconnect, device number 2 [ 568.303670][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.310403][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.743077][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.749683][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.566912][ T8681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.645'. [ 636.625900][ T8685] netlink: 'syz.5.643': attribute type 39 has an invalid length. [ 637.451492][ T5952] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 639.203189][ T5952] usb 6-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 639.314061][ T5952] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 639.386216][ T5952] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.416249][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.438719][ T5952] usb 6-1: Product: syz [ 639.442976][ T5952] usb 6-1: Manufacturer: syz [ 640.133417][ T5952] usb 6-1: SerialNumber: syz [ 640.168020][ T5952] cdc_ether 6-1:1.0: skipping garbage [ 640.177933][ T5952] usb 6-1: bad CDC descriptors [ 640.555840][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 641.322995][ T5938] usb 6-1: USB disconnect, device number 13 [ 642.948910][ T8723] bio_check_eod: 2 callbacks suppressed [ 642.948932][ T8723] syz.1.654: attempt to access beyond end of device [ 642.948932][ T8723] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 642.969662][ T8723] hfsplus: unable to find HFS+ superblock [ 643.226430][ T8727] netlink: 48 bytes leftover after parsing attributes in process `syz.3.653'. [ 648.039713][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'. [ 648.084993][ T8758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.665'. [ 648.103133][ T8758] syz_tun: entered promiscuous mode [ 648.132884][ T8758] syz_tun: left promiscuous mode [ 648.541333][ T8768] netlink: 48 bytes leftover after parsing attributes in process `syz.1.666'. [ 649.338885][ T8770] can0: slcan on ttyS3. [ 649.568828][ T8772] can0 (unregistered): slcan off ttyS3. [ 649.734301][ T8780] netlink: 24 bytes leftover after parsing attributes in process `syz.5.672'. [ 650.476396][ T44] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 650.885297][ T5952] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 650.899349][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.920546][ T5156] Bluetooth: Unexpected continuation frame (len 4) [ 650.928712][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.985186][ T44] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 650.997802][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.162695][ T44] usb 7-1: config 0 descriptor?? [ 651.168223][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.186205][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.230549][ T5952] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 651.261966][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.304084][ T5952] usb 2-1: config 0 descriptor?? [ 651.835569][ T5952] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 651.853714][ T44] usbhid 7-1:0.0: can't add hid device: -71 [ 651.859869][ T44] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 651.871092][ T44] usb 7-1: USB disconnect, device number 3 [ 651.985662][ T8809] netlink: 48 bytes leftover after parsing attributes in process `syz.4.681'. [ 652.590231][ T5952] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 652.600614][ T5952] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -71 [ 652.614054][ T5952] usb 2-1: USB disconnect, device number 9 [ 652.928258][ T8816] netlink: 'syz.1.684': attribute type 3 has an invalid length. [ 656.882101][ T8834] xt_CT: No such helper "netbios-ns" [ 658.744349][ T8851] netlink: 48 bytes leftover after parsing attributes in process `syz.5.693'. [ 659.353375][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 659.740301][ T8861] netlink: 24 bytes leftover after parsing attributes in process `syz.5.698'. [ 665.991522][ T8903] netlink: 48 bytes leftover after parsing attributes in process `syz.1.708'. [ 666.465755][ T8911] tipc: Started in network mode [ 666.476700][ T8911] tipc: Node identity 7, cluster identity 4711 [ 666.492907][ T8911] tipc: Node number set to 7 [ 667.979361][ T8924] netlink: 20 bytes leftover after parsing attributes in process `syz.6.717'. [ 668.796215][ T5924] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 668.953217][ T5924] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 669.005040][ T5924] usb 7-1: config 0 has no interface number 0 [ 669.022183][ T5924] usb 7-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 669.042343][ T5924] usb 7-1: config 0 interface 200 has no altsetting 0 [ 669.068741][ T5924] usb 7-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 669.111733][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.123196][ T5924] usb 7-1: Product: syz [ 669.129960][ T5924] usb 7-1: Manufacturer: syz [ 669.138873][ T5924] usb 7-1: SerialNumber: syz [ 669.171514][ T5924] usb 7-1: config 0 descriptor?? [ 670.494968][ T5924] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.200/input/input27 [ 670.539017][ T5924] usb 7-1: USB disconnect, device number 4 [ 672.962619][ T8965] netlink: 48 bytes leftover after parsing attributes in process `syz.1.725'. [ 673.742367][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 674.903966][ T8979] netlink: 32 bytes leftover after parsing attributes in process `syz.6.733'. [ 674.915101][ T8979] netlink: 32 bytes leftover after parsing attributes in process `syz.6.733'. [ 674.929806][ T8976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.732'. [ 675.535322][ T5924] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 675.907416][ T5924] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.965526][ T5924] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 676.676357][ T5924] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 676.691758][ T5924] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 676.701307][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.709427][ T5924] usb 5-1: Product: syz [ 676.716116][ T5924] usb 5-1: Manufacturer: syz [ 676.722078][ T5924] usb 5-1: SerialNumber: syz [ 677.446678][ T92] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 678.487898][ T92] usb 7-1: device descriptor read/64, error -71 [ 678.491308][ T9011] lo speed is unknown, defaulting to 1000 [ 679.916298][ T5924] cdc_ncm 5-1:1.0: bind() failure [ 679.926166][ T92] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 679.985612][ T5924] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 680.002055][ T5924] cdc_ncm 5-1:1.1: bind() failure [ 680.047845][ T5924] usb 5-1: USB disconnect, device number 13 [ 680.086324][ T92] usb 7-1: device descriptor read/64, error -71 [ 680.220750][ T92] usb usb7-port1: attempt power cycle [ 680.482757][ T9020] netlink: 48 bytes leftover after parsing attributes in process `syz.4.742'. [ 681.211905][ T9026] overlayfs: failed to clone upperpath [ 681.399655][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 681.399675][ T30] audit: type=1326 audit(1755333025.525:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9028 comm="syz.4.745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f8f4dd8ebe9 code=0x0 [ 684.485501][ T9056] netlink: 292 bytes leftover after parsing attributes in process `syz.3.752'. [ 685.795074][ T9068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.756'. [ 685.945351][ T9074] netlink: 48 bytes leftover after parsing attributes in process `syz.3.755'. [ 687.160904][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 687.782263][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 688.405142][ T9099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.764'. [ 688.627925][ T5938] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 689.017863][ T5938] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 689.105157][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.208276][ T5938] usb 2-1: config 0 has no interface number 0 [ 689.284111][ T5938] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 689.410151][ T5938] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 689.915396][ T5938] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 689.957311][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.986252][ T5938] usb 2-1: Product: syz [ 690.002778][ T5938] usb 2-1: Manufacturer: syz [ 690.028558][ T5938] usb 2-1: SerialNumber: syz [ 690.063055][ T5938] usb 2-1: config 0 descriptor?? [ 690.210583][ T5938] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 690.612530][ T5938] usb 2-1: USB disconnect, device number 10 [ 691.661272][ T9127] netlink: 48 bytes leftover after parsing attributes in process `syz.3.770'. [ 692.060845][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.067301][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.728058][ T9131] netlink: 32 bytes leftover after parsing attributes in process `syz.6.773'. [ 692.737298][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.6.773'. [ 693.124837][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.772'. [ 693.143643][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 693.166099][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.772'. [ 693.195168][ T9133] bond0: entered promiscuous mode [ 693.200370][ T9133] bond_slave_0: entered promiscuous mode [ 693.209453][ T9133] bond_slave_1: entered promiscuous mode [ 693.217177][ T9133] bond0: left promiscuous mode [ 693.277223][ T9133] bond_slave_0: left promiscuous mode [ 693.356521][ T9133] bond_slave_1: left promiscuous mode [ 694.273533][ T9147] netlink: 292 bytes leftover after parsing attributes in process `syz.1.779'. [ 695.626364][ T92] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 696.246126][ T92] usb 7-1: device descriptor read/64, error -71 [ 696.516426][ T92] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 696.826484][ T92] usb 7-1: device descriptor read/64, error -71 [ 697.776099][ T92] usb usb7-port1: attempt power cycle [ 698.167301][ T9177] netlink: 48 bytes leftover after parsing attributes in process `syz.1.785'. [ 698.835536][ T92] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 699.052852][ T92] usb 7-1: device not accepting address 10, error -71 [ 699.203712][ T9184] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 699.210672][ T9184] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 699.251252][ T9184] vhci_hcd vhci_hcd.0: Device attached [ 699.302003][ T9192] loop2: detected capacity change from 0 to 7 [ 699.340073][ T9192] Dev loop2: unable to read RDB block 7 [ 699.345792][ T9192] loop2: AHDI p2 p3 [ 699.363879][ T9192] loop2: partition table partially beyond EOD, truncated [ 699.371535][ T9181] vhci_hcd vhci_hcd.0: port 0 already used [ 699.382885][ T9192] loop2: p3 start 335544320 is beyond EOD, truncated [ 699.390213][ T9188] vhci_hcd: connection closed [ 699.396428][ T6972] vhci_hcd: stop threads [ 700.251936][ T6972] vhci_hcd: release socket [ 700.257900][ T6972] vhci_hcd: disconnect device [ 702.350527][ T5952] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 703.018744][ T9232] netlink: 48 bytes leftover after parsing attributes in process `syz.3.800'. [ 703.284896][ T9229] netlink: 20 bytes leftover after parsing attributes in process `syz.5.798'. [ 703.375402][ T9229] syz_tun: entered promiscuous mode [ 703.432641][ T9229] syz_tun: left promiscuous mode [ 703.606117][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 703.615362][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.631605][ T5952] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 704.140653][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.178849][ T5952] usb 2-1: config 0 descriptor?? [ 704.288992][ T5952] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input28 [ 704.527229][ T5191] bcm5974 2-1:0.0: could not read from device [ 704.963001][ T9217] bcm5974 2-1:0.0: could not read from device [ 705.023040][ T5191] bcm5974 2-1:0.0: could not read from device [ 705.028960][ T5952] usb 2-1: USB disconnect, device number 11 [ 705.301225][ T9249] xt_CT: No such helper "netbios-ns" [ 708.305576][ T9272] netlink: 20 bytes leftover after parsing attributes in process `syz.6.809'. [ 709.845663][ T8422] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 710.478420][ T8422] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 710.496735][ T8422] usb 7-1: config 0 has no interface number 0 [ 710.503778][ T8422] usb 7-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 710.546292][ T8422] usb 7-1: config 0 interface 200 has no altsetting 0 [ 710.573094][ T8422] usb 7-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 710.591751][ T8422] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.665351][ T8422] usb 7-1: Product: syz [ 710.691682][ T8422] usb 7-1: Manufacturer: syz [ 710.720814][ T8422] usb 7-1: SerialNumber: syz [ 710.741985][ T8422] usb 7-1: config 0 descriptor?? [ 711.050923][ T8422] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.200/input/input29 [ 711.192101][ T9289] netlink: 48 bytes leftover after parsing attributes in process `syz.1.813'. [ 712.026106][ T8422] usb 7-1: USB disconnect, device number 12 [ 712.264728][ T9294] NILFS (nullb0): couldn't find nilfs on the device [ 713.020931][ T9293] lo speed is unknown, defaulting to 1000 [ 713.342309][ T9304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.819'. [ 713.361896][ T9304] syz_tun: entered promiscuous mode [ 713.370445][ T9304] syz_tun: left promiscuous mode [ 714.265610][ T5952] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 714.406109][ T8422] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 714.559538][ T8422] usb 7-1: config 0 has no interfaces? [ 714.636391][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 714.646711][ T5952] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.703603][ T5952] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 714.744767][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.775174][ T5952] usb 6-1: config 0 descriptor?? [ 714.825532][ T5952] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input30 [ 714.827637][ T8422] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 714.866054][ T8422] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.874148][ T8422] usb 7-1: Product: syz [ 714.907460][ T8422] usb 7-1: Manufacturer: syz [ 714.912165][ T8422] usb 7-1: SerialNumber: syz [ 714.940495][ T8422] usb 7-1: config 0 descriptor?? [ 715.055201][ T5191] bcm5974 6-1:0.0: could not read from device [ 715.106948][ T9301] bcm5974 6-1:0.0: could not read from device [ 715.137736][ T5191] bcm5974 6-1:0.0: could not read from device [ 715.142044][ T8422] usb 7-1: USB disconnect, device number 13 [ 715.190543][ T5191] bcm5974 6-1:0.0: could not read from device [ 715.233878][ T5191] bcm5974 6-1:0.0: could not read from device [ 715.251770][ T5952] usb 6-1: USB disconnect, device number 14 [ 715.586786][ T9337] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 716.786227][ T9341] lo speed is unknown, defaulting to 1000 [ 717.838443][ T9354] netlink: 48 bytes leftover after parsing attributes in process `syz.1.828'. [ 719.267432][ T9366] netlink: 32 bytes leftover after parsing attributes in process `syz.5.835'. [ 719.278153][ T9366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.835'. [ 719.847623][ T9368] netlink: 32 bytes leftover after parsing attributes in process `syz.4.833'. [ 721.606088][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 722.896588][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 722.921984][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.567628][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 723.671964][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.027704][ T10] usb 2-1: config 0 descriptor?? [ 724.122957][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input31 [ 724.156206][ T30] audit: type=1326 audit(1755333068.165:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 724.209623][ T30] audit: type=1326 audit(1755333068.175:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 724.243483][ T6030] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.265147][ T30] audit: type=1326 audit(1755333068.175:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 724.295024][ T30] audit: type=1326 audit(1755333068.175:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 724.321007][ T30] audit: type=1326 audit(1755333068.185:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 724.349631][ T30] audit: type=1326 audit(1755333068.185:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 724.401776][ T5191] bcm5974 2-1:0.0: could not read from device [ 724.408569][ T10] usb 2-1: USB disconnect, device number 12 [ 724.437258][ T30] audit: type=1326 audit(1755333068.185:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 724.461898][ T9388] bcm5974 2-1:0.0: could not read from device [ 724.472086][ T30] audit: type=1326 audit(1755333068.195:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 724.533327][ T30] audit: type=1326 audit(1755333068.195:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 724.590935][ T30] audit: type=1326 audit(1755333068.195:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 724.708121][ T6030] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.786440][ T9421] erspan0: entered promiscuous mode [ 724.802678][ T9421] vlan2: entered promiscuous mode [ 727.319622][ T6030] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.672120][ T6030] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.984532][ T9454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.859'. [ 728.014407][ T9454] syz_tun: entered promiscuous mode [ 728.047479][ T9454] syz_tun: left promiscuous mode [ 728.120686][ T6030] bridge_slave_1: left allmulticast mode [ 728.132435][ T6030] bridge_slave_1: left promiscuous mode [ 728.152917][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.185607][ T6030] bridge_slave_0: left allmulticast mode [ 728.202766][ T6030] bridge_slave_0: left promiscuous mode [ 728.212549][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.279771][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 729.279792][ T30] audit: type=1326 audit(1755333073.405:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9467 comm="syz.3.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 729.307930][ C0] vkms_vblank_simulate: vblank timer overrun [ 729.407782][ T44] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 729.826478][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 729.913479][ T30] audit: type=1326 audit(1755333073.405:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9467 comm="syz.3.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 729.954907][ T30] audit: type=1326 audit(1755333073.445:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9467 comm="syz.3.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 729.989495][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.042886][ T44] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 730.074148][ T30] audit: type=1326 audit(1755333073.475:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9467 comm="syz.3.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 730.114764][ T9476] loop2: detected capacity change from 0 to 7 [ 730.121400][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.136367][ T9476] Dev loop2: unable to read RDB block 7 [ 730.142036][ T9476] loop2: AHDI p2 p3 [ 730.157808][ T9476] loop2: partition table partially beyond EOD, truncated [ 730.165192][ T30] audit: type=1326 audit(1755333073.485:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9467 comm="syz.3.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 730.190963][ T44] usb 2-1: config 0 descriptor?? [ 730.196313][ T9476] loop2: p3 start 335544320 is beyond EOD, truncated [ 730.239587][ T44] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input32 [ 730.273860][ T30] audit: type=1326 audit(1755333073.665:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9467 comm="syz.3.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 730.298669][ T30] audit: type=1326 audit(1755333073.705:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9467 comm="syz.3.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 730.339003][ T30] audit: type=1326 audit(1755333073.715:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9467 comm="syz.3.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 730.555706][ T5191] bcm5974 2-1:0.0: could not read from device [ 730.573092][ T30] audit: type=1326 audit(1755333073.775:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9467 comm="syz.3.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 730.597172][ T30] audit: type=1326 audit(1755333074.185:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9467 comm="syz.3.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 730.639011][ T5191] bcm5974 2-1:0.0: could not read from device [ 730.696199][ T8422] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 730.710711][ T5191] bcm5974 2-1:0.0: could not read from device [ 730.767355][ T9466] bcm5974 2-1:0.0: could not read from device [ 732.287521][ T5191] bcm5974 2-1:0.0: could not read from device [ 732.321892][ T44] usb 2-1: USB disconnect, device number 13 [ 735.040377][ T6030] bond0 (unregistering): left promiscuous mode [ 735.066862][ T6030] bond_slave_0: left promiscuous mode [ 735.092982][ T6030] bond_slave_1: left promiscuous mode [ 735.103541][ T9498] xt_CT: No such helper "netbios-ns" [ 735.138817][ T6030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.157391][ T6030] bond_slave_0: left allmulticast mode [ 735.187019][ T6030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.216791][ T6030] bond_slave_1: left allmulticast mode [ 735.246743][ T6030] bond0 (unregistering): Released all slaves [ 735.300480][ T9486] tipc: Started in network mode [ 735.305431][ T9486] tipc: Node identity 7, cluster identity 4711 [ 735.340139][ T9486] tipc: Node number set to 7 [ 735.673961][ T6030] tipc: Left network mode [ 737.492863][ T9524] netlink: 292 bytes leftover after parsing attributes in process `syz.6.878'. [ 740.436067][ T6030] batadv0: left promiscuous mode [ 740.451093][ T6030] hsr_slave_0: left promiscuous mode [ 741.364968][ T6030] hsr_slave_1: left promiscuous mode [ 741.411254][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.667155][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.750347][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.787625][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.837453][ T6030] veth1_macvtap: left promiscuous mode [ 741.843151][ T6030] veth0_macvtap: left promiscuous mode [ 741.850522][ T6030] veth1_vlan: left promiscuous mode [ 741.855987][ T6030] veth0_vlan: left promiscuous mode [ 744.606238][ T44] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 744.681844][ T5924] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 744.733152][ T9584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.898'. [ 744.815396][ T44] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 744.834338][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.836867][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 744.853704][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.854585][ T44] usb 7-1: Product: syz [ 744.880190][ T44] usb 7-1: Manufacturer: syz [ 744.880881][ T5924] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 744.885381][ T44] usb 7-1: SerialNumber: syz [ 744.894686][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.931750][ T44] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 744.975687][ T5924] usb 2-1: config 0 descriptor?? [ 744.979015][ T8422] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 744.988068][ T5924] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input33 [ 745.099478][ T6030] team0 (unregistering): Port device team_slave_1 removed [ 745.209245][ T6030] team0 (unregistering): Port device team_slave_0 removed [ 745.279248][ T5924] usb 2-1: USB disconnect, device number 14 [ 745.286173][ T5191] bcm5974 2-1:0.0: could not read from device [ 745.295139][ T44] usb 7-1: USB disconnect, device number 15 [ 746.061434][ T8422] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 746.069127][ T8422] ath9k_htc: Failed to initialize the device [ 746.218772][ T44] usb 7-1: ath9k_htc: USB layer deinitialized [ 746.615636][ T9605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.903'. [ 746.995551][ T9608] lo speed is unknown, defaulting to 1000 [ 748.362250][ T9622] netlink: 'syz.1.905': attribute type 7 has an invalid length. [ 749.524143][ T9645] : entered promiscuous mode [ 751.908005][ T9670] loop6: detected capacity change from 0 to 7 [ 751.947988][ T9670] Dev loop6: unable to read RDB block 7 [ 751.977443][ T9670] loop6: unable to read partition table [ 752.016942][ T9670] loop6: partition table beyond EOD, truncated [ 752.023285][ T9670] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 753.117954][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.124629][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.566691][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.927'. [ 754.598532][ T9693] bond0: entered promiscuous mode [ 754.603740][ T9693] bond_slave_0: entered promiscuous mode [ 755.104667][ T9693] bond_slave_1: entered promiscuous mode [ 755.320432][ T9693] batadv0: entered promiscuous mode [ 755.348107][ T9693] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 755.379256][ T9693] Cannot create hsr debugfs directory [ 755.384992][ T9693] hsr1: entered allmulticast mode [ 755.396312][ T9693] bond0: entered allmulticast mode [ 755.485608][ T9693] bond_slave_0: entered allmulticast mode [ 755.492603][ T9693] bond_slave_1: entered allmulticast mode [ 755.498780][ T9693] batadv0: entered allmulticast mode [ 755.507807][ T9693] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 756.854010][ T9716] Cannot find add_set index 0 as target [ 762.328285][ T9736] geneve2: entered allmulticast mode [ 762.996552][ T9749] netlink: 'syz.5.943': attribute type 10 has an invalid length. [ 763.004455][ T9749] netlink: 40 bytes leftover after parsing attributes in process `syz.5.943'. [ 763.021947][ T9749] batman_adv: batadv0: Adding interface: vlan1 [ 763.028309][ T9749] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.053461][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.061741][ T9749] batman_adv: batadv0: Interface activated: vlan1 [ 763.869551][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 764.666199][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 764.675435][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.208007][ T10] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 765.227722][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.245223][ T10] usb 2-1: Product: syz [ 765.294527][ T10] usb 2-1: Manufacturer: syz [ 765.318928][ T10] usb 2-1: SerialNumber: syz [ 765.361904][ T10] usb 2-1: config 0 descriptor?? [ 765.388820][ T10] cdc_phonet 2-1:0.0: probe with driver cdc_phonet failed with error -22 [ 767.039856][ T9775] netlink: 20 bytes leftover after parsing attributes in process `syz.5.953'. [ 767.522051][ T5834] usb 2-1: USB disconnect, device number 15 [ 767.558357][ T9778] loop2: detected capacity change from 0 to 7 [ 767.567207][ T9778] Dev loop2: unable to read RDB block 7 [ 767.573311][ T9778] loop2: AHDI p2 p3 [ 767.577568][ T9778] loop2: partition table partially beyond EOD, truncated [ 767.584753][ T9778] loop2: p3 start 335544320 is beyond EOD, truncated [ 767.622985][ T9780] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 767.726344][ T44] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 768.869551][ T5834] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 768.985569][ T44] usb 6-1: device not accepting address 16, error -71 [ 769.149330][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 769.190517][ T5834] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 769.224145][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.250770][ T5834] usb 2-1: Product: syz [ 769.264214][ T5834] usb 2-1: Manufacturer: syz [ 769.281276][ T5834] usb 2-1: SerialNumber: syz [ 769.345531][ T44] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 769.604982][ T5834] usb 2-1: config 0 descriptor?? [ 769.632459][ T44] usb 6-1: device descriptor read/64, error -71 [ 769.796111][ T44] usb usb6-port1: attempt power cycle [ 769.992129][ T5834] usb 2-1: USB disconnect, device number 16 [ 770.238741][ T44] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 770.312703][ T44] usb 6-1: device descriptor read/8, error -71 [ 771.386574][ T44] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 771.464119][ T44] usb 6-1: device descriptor read/8, error -71 [ 771.601025][ T44] usb usb6-port1: unable to enumerate USB device [ 772.516576][ T9822] xt_CT: No such helper "netbios-ns" [ 776.235714][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 776.276969][ T9862] bond0: entered promiscuous mode [ 776.286615][ T9862] bond_slave_0: entered promiscuous mode [ 776.303002][ T9866] kAFS: No cell specified [ 776.308318][ T9862] bond_slave_1: entered promiscuous mode [ 776.330207][ T9862] bond0: left promiscuous mode [ 776.356934][ T9862] bond_slave_0: left promiscuous mode [ 776.375304][ T9862] bond_slave_1: left promiscuous mode [ 776.820624][ T9883] Cannot find add_set index 0 as target [ 777.376222][ T44] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 777.586239][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 777.596300][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 777.608618][ C1] Unknown status report in ack skb [ 777.621187][ T44] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 777.643482][ T44] usb 5-1: config 8 has no interface number 0 [ 777.660666][ T44] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 777.709067][ T44] usb 5-1: config 8 interface 24 has no altsetting 0 [ 777.745392][ T44] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 777.811103][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.846016][ T44] usb 5-1: Product: syz [ 777.850272][ T44] usb 5-1: Manufacturer: syz [ 777.911156][ T9891] siw: device registration error -23 [ 778.634613][ T44] usb 5-1: SerialNumber: syz [ 778.943099][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'. [ 780.002670][ T44] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 780.110715][ T44] usb 5-1: USB disconnect, device number 14 [ 780.991909][ T9913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.995'. [ 781.775903][ T9924] Bluetooth: MGMT ver 1.23 [ 784.209788][ T9949] Cannot find add_set index 0 as target [ 786.347932][ T9961] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1010'. [ 787.446728][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 790.890874][T10009] netlink: 'syz.5.1023': attribute type 1 has an invalid length. [ 791.055930][T10009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 796.124278][T10067] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1037'. [ 796.134093][T10067] netlink: 'syz.1.1037': attribute type 9 has an invalid length. [ 796.142458][T10067] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1037'. [ 796.152060][T10067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1037'. [ 800.969671][T10118] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1056'. [ 800.985354][T10116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1054'. [ 801.306214][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 801.598818][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 801.620885][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 801.637831][ T10] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 801.656065][ T10] usb 5-1: config 13 has no interface number 0 [ 801.662355][ T10] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 801.676050][ T10] usb 5-1: config 13 interface 50 has no altsetting 0 [ 801.914836][ T10] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 801.924964][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.933076][ T10] usb 5-1: Product: syz [ 801.937500][ T10] usb 5-1: Manufacturer: syz [ 801.942756][ T10] usb 5-1: SerialNumber: syz [ 801.957821][T10121] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 802.358757][T10138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.387352][T10138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.030425][T10146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1065'. [ 803.042388][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1065'. [ 804.557172][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 804.590349][T10153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1067'. [ 804.604773][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 804.658251][T10153] syz_tun: entered promiscuous mode [ 804.816136][T10153] syz_tun: left promiscuous mode [ 804.868084][ T10] usb 5-1: USB disconnect, device number 15 [ 806.104817][T10170] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1071'. [ 806.803477][T10173] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1072'. [ 807.239312][ T10] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 807.782632][ T10] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 807.802250][ T10] usb 6-1: config 0 has no interface number 0 [ 807.820835][ T10] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 807.842189][ T10] usb 6-1: config 0 interface 200 has no altsetting 0 [ 807.879562][ T10] usb 6-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 807.923103][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.955014][ T10] usb 6-1: Product: syz [ 807.975635][ T10] usb 6-1: Manufacturer: syz [ 808.002030][ T10] usb 6-1: SerialNumber: syz [ 808.033371][ T10] usb 6-1: config 0 descriptor?? [ 809.491277][ T10] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input34 [ 809.556135][ T10] usb 6-1: USB disconnect, device number 20 [ 810.833499][T10220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1089'. [ 811.077524][ T5952] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 811.137897][T10224] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1091'. [ 811.376926][ T5952] usb 5-1: device descriptor read/64, error -71 [ 811.636117][ T5952] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 811.696833][T10220] syz_tun: entered promiscuous mode [ 811.705217][T10220] syz_tun: left promiscuous mode [ 811.759340][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1091'. [ 811.768719][ T5952] usb 5-1: device descriptor read/64, error -71 [ 811.877708][ T5952] usb usb5-port1: attempt power cycle [ 813.776617][ T5952] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 813.830895][ T5952] usb 5-1: device descriptor read/8, error -71 [ 814.096705][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.103438][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.110099][ T5952] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 814.882473][T10244] fuse: Bad value for 'fd' [ 814.946026][ T5952] usb 5-1: device descriptor read/8, error -71 [ 815.061565][ T5952] usb usb5-port1: unable to enumerate USB device [ 815.527799][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 815.791438][ T10] usb 2-1: device descriptor read/64, error -71 [ 816.076107][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 816.226509][ T10] usb 2-1: device descriptor read/64, error -71 [ 816.369535][ T10] usb usb2-port1: attempt power cycle [ 816.911516][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 816.989186][ T10] usb 2-1: device descriptor read/8, error -71 [ 817.506707][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 817.623073][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1111'. [ 817.783127][ T10] usb 2-1: device descriptor read/8, error -71 [ 817.947794][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1111'. [ 817.969973][ T10] usb usb2-port1: unable to enumerate USB device [ 818.169020][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 818.370620][T10297] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1113'. [ 821.424005][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 824.018180][T10362] macsec1: entered allmulticast mode [ 824.023532][T10362] macvlan1: entered allmulticast mode [ 824.029123][T10362] veth1_vlan: entered allmulticast mode [ 824.087096][T10362] macvlan1: left allmulticast mode [ 824.092315][T10362] veth1_vlan: left allmulticast mode [ 826.301686][T10387] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1138'. [ 826.411692][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1138'. [ 827.488916][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 830.426072][ T10] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 830.606459][ T10] usb 2-1: config 0 has an invalid interface number: 223 but max is 0 [ 830.615427][ T10] usb 2-1: config 0 has no interface number 0 [ 830.629347][ T10] usb 2-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice=63.f3 [ 830.643351][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.662211][ T10] usb 2-1: config 0 descriptor?? [ 830.698283][ T10] snd-usb-caiaq 2-1:0.223: can't set alt interface. [ 830.723225][ T10] usb 2-1: unable to init card! (ret=-5) [ 830.741063][ T10] snd-usb-caiaq 2-1:0.223: probe with driver snd-usb-caiaq failed with error -5 [ 830.772508][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 830.801427][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 831.000972][ T10] usb 2-1: USB disconnect, device number 22 [ 831.718981][ T5924] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 831.853473][T10426] macsec1: entered allmulticast mode [ 831.860241][T10426] macvlan1: entered allmulticast mode [ 831.865666][T10426] veth1_vlan: entered allmulticast mode [ 831.884394][T10426] macvlan1: left allmulticast mode [ 831.892556][T10426] veth1_vlan: left allmulticast mode [ 831.996365][ T5924] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 832.006270][ T5924] usb 5-1: can't read configurations, error -22 [ 832.302481][ T5924] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 832.509507][ T5924] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 832.669074][ T5924] usb 5-1: can't read configurations, error -22 [ 832.864012][ T5924] usb usb5-port1: attempt power cycle [ 833.399474][ T5924] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 833.429772][ T5924] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 833.442046][ T5924] usb 5-1: can't read configurations, error -22 [ 833.586623][ T5924] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 833.641786][ T5924] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 833.655029][ T5924] usb 5-1: can't read configurations, error -22 [ 833.665396][ T5924] usb usb5-port1: unable to enumerate USB device [ 834.321366][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 834.486049][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 834.527032][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 834.618918][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 834.637487][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 834.949596][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 835.002934][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.154511][ T24] usb 6-1: Product: syz [ 835.176237][ T24] usb 6-1: Manufacturer: syz [ 835.189707][ T24] usb 6-1: SerialNumber: syz [ 835.596640][T10482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.610587][T10482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.065858][T10504] bridge2: entered promiscuous mode [ 837.470064][ T24] usb 6-1: USB disconnect, device number 21 [ 839.022775][T10539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1189'. [ 839.032580][T10539] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 842.035474][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1208'. [ 842.436097][ T5834] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz1 [ 842.933442][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 842.933465][ T30] audit: type=1326 audit(1755333188.022:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10597 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd823f8ebe9 code=0x7ffc0000 [ 842.997447][ T30] audit: type=1326 audit(1755333188.022:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10597 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd823f8ebe9 code=0x7ffc0000 [ 843.051268][ T30] audit: type=1326 audit(1755333188.022:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10597 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fd823f8ebe9 code=0x7ffc0000 [ 843.110648][ T30] audit: type=1326 audit(1755333188.022:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10597 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd823f8ebe9 code=0x7ffc0000 [ 843.144371][ T30] audit: type=1326 audit(1755333188.022:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10597 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd823f8ebe9 code=0x7ffc0000 [ 843.371063][ T30] audit: type=1326 audit(1755333188.022:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10597 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd823f8ebe9 code=0x7ffc0000 [ 843.398433][ T30] audit: type=1326 audit(1755333188.022:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10597 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd823f8ebe9 code=0x7ffc0000 [ 843.424754][ T30] audit: type=1326 audit(1755333188.022:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10597 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd823f8ebe9 code=0x7ffc0000 [ 843.448164][ T30] audit: type=1326 audit(1755333188.022:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10597 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd823f8ebe9 code=0x7ffc0000 [ 843.470268][ T30] audit: type=1326 audit(1755333188.022:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10597 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd823f8ebe9 code=0x7ffc0000 [ 844.306165][ T5924] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 844.478915][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 844.526834][ T5924] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 844.546856][ T5924] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 844.560934][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.588864][ T5924] usb 2-1: Product: syz [ 844.610709][ T5924] usb 2-1: Manufacturer: syz [ 844.644717][ T5924] usb 2-1: SerialNumber: syz [ 844.657426][T10629] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1221'. [ 844.720029][ T5924] usb 2-1: config 0 descriptor?? [ 844.743728][ T5924] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 844.780385][ T5924] usb 2-1: Detected FT232R [ 844.955873][ T5924] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 845.009659][ T5924] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 845.049470][ T5924] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 845.106047][ T5924] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 845.136728][ T5924] usb 2-1: USB disconnect, device number 23 [ 845.203107][ T5924] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 845.225017][ T5924] ftdi_sio 2-1:0.0: device disconnected [ 846.313866][T10633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.916321][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 849.916341][ T30] audit: type=1326 audit(1755333195.032:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc52d2add9 code=0x7ffc0000 [ 850.001183][ T30] audit: type=1326 audit(1755333195.032:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc52d2add9 code=0x7ffc0000 [ 850.296341][ T30] audit: type=1326 audit(1755333195.032:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc52d8ebe9 code=0x7ffc0000 [ 850.440807][ T30] audit: type=1326 audit(1755333195.032:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc52d2add9 code=0x7ffc0000 [ 850.498533][ T30] audit: type=1326 audit(1755333195.032:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc52d2add9 code=0x7ffc0000 [ 850.574814][ T30] audit: type=1326 audit(1755333195.032:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc52d8ebe9 code=0x7ffc0000 [ 850.632618][ T30] audit: type=1326 audit(1755333195.032:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc52d2add9 code=0x7ffc0000 [ 850.692202][ T30] audit: type=1326 audit(1755333195.032:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc52d8ebe9 code=0x7ffc0000 [ 850.746168][ T30] audit: type=1326 audit(1755333195.032:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc52d8ebe9 code=0x7ffc0000 [ 850.819923][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 850.960356][ T30] audit: type=1326 audit(1755333195.032:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc52d2add9 code=0x7ffc0000 [ 853.286371][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 853.573093][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 853.587884][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 853.680125][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 853.803944][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 853.834154][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 853.929091][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.976629][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 854.223527][ T10] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 855.936004][T10763] lo speed is unknown, defaulting to 1000 [ 856.506592][ T24] usb 6-1: USB disconnect, device number 22 [ 858.232136][T10800] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 858.256304][T10800] cramfs: wrong magic [ 859.698524][T10826] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1287'. [ 861.257131][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1295'. [ 861.290663][T10843] netlink: 'syz.5.1295': attribute type 15 has an invalid length. [ 861.422681][T10843] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.432113][T10843] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.440947][T10843] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.449772][T10843] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.546157][T10843] vxlan0: entered promiscuous mode [ 861.784960][T10853] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1298'. [ 861.820059][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1298'. [ 861.864701][T10853] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1298'. [ 861.893078][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1298'. [ 861.927058][T10853] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1298'. [ 862.160645][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 862.160667][ T30] audit: type=1326 audit(1755333207.282:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 862.239879][ T30] audit: type=1326 audit(1755333207.282:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 862.312721][ T30] audit: type=1326 audit(1755333207.282:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 862.356046][ T30] audit: type=1326 audit(1755333207.282:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 862.417950][ T30] audit: type=1326 audit(1755333207.282:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 862.452860][ T30] audit: type=1326 audit(1755333207.312:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 862.479454][ T30] audit: type=1326 audit(1755333207.312:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 862.519506][ T30] audit: type=1326 audit(1755333207.312:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 862.576046][ T30] audit: type=1326 audit(1755333207.312:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 862.654085][ T30] audit: type=1326 audit(1755333207.312:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 863.050388][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1311'. [ 865.549204][T10940] bridge1: entered promiscuous mode [ 868.213087][T10962] tipc: Started in network mode [ 868.243528][T10962] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 868.333341][T10962] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 868.483034][T10962] tipc: Enabled bearer , priority 10 [ 869.864794][ T5952] tipc: Node number set to 1 [ 871.080194][T10992] misc userio: Invalid payload size [ 872.600952][ T30] kauditd_printk_skb: 268 callbacks suppressed [ 872.600977][ T30] audit: type=1326 audit(1755333217.582:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.3.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 872.746467][ T30] audit: type=1326 audit(1755333217.582:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.3.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 872.958225][ T30] audit: type=1326 audit(1755333217.582:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.3.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 873.029277][ T30] audit: type=1326 audit(1755333217.582:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.3.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 873.114725][ T30] audit: type=1326 audit(1755333217.582:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.3.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 873.271340][ T30] audit: type=1326 audit(1755333217.582:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.3.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 873.380272][ T30] audit: type=1326 audit(1755333217.582:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.3.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b978ebe9 code=0x7ffc0000 [ 873.497078][ T30] audit: type=1326 audit(1755333217.862:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.3.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 873.628700][ T30] audit: type=1326 audit(1755333217.862:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.3.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 873.736966][ T30] audit: type=1326 audit(1755333217.862:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10993 comm="syz.3.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa0b972add9 code=0x7ffc0000 [ 874.016331][ T5952] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 874.289517][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 874.419153][T11028] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1347'. [ 874.428774][T11028] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1347'. [ 875.512004][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.536158][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.582249][T11062] netlink: 'syz.1.1358': attribute type 6 has an invalid length. [ 877.686714][ T5952] usb 6-1: unable to get BOS descriptor or descriptor too short [ 877.776272][ T5952] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 878.121865][ T5952] usb 6-1: can't read configurations, error -71 [ 879.536328][T11076] trusted_key: encrypted_key: key user:syz not found [ 879.998555][T11082] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1364'. [ 880.810088][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1367'. [ 881.980499][T11108] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 882.221401][T11116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.262805][T11116] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1372'. [ 883.821466][T11116] syz.5.1372 (11116): drop_caches: 2 [ 884.624094][T11160] vivid-000: ================= START STATUS ================= [ 884.671245][T11160] vivid-000: Test Pattern: 75% Colorbar [ 884.783166][T11160] vivid-000: Fill Percentage of Frame: 100 [ 884.793454][T11160] vivid-000: Horizontal Movement: No Movement [ 884.799809][T11160] vivid-000: Vertical Movement: No Movement [ 884.815179][T11160] vivid-000: OSD Text Mode: All [ 884.833894][T11160] vivid-000: Show Border: false [ 884.845620][T11160] vivid-000: Show Square: false [ 884.851472][T11160] vivid-000: Sensor Flipped Horizontally: false [ 884.899453][T11160] vivid-000: Sensor Flipped Vertically: false [ 884.908327][T11160] vivid-000: Insert SAV Code in Image: false [ 884.941027][T11160] vivid-000: Insert EAV Code in Image: false [ 884.971274][T11160] vivid-000: Insert Video Guard Band: false [ 884.982620][T11160] vivid-000: Reduced Framerate: false [ 884.993589][T11160] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 885.003011][T11160] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 885.113884][ T5938] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 885.178605][T11160] [ 885.205867][T11160] vivid-000: Enable Capture Cropping: true grabbed [ 885.213427][T11160] vivid-000: Enable Capture Composing: true grabbed [ 885.396113][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 885.450675][T11160] vivid-000: Enable Capture Scaler: true grabbed [ 885.560289][T11160] vivid-000: Timestamp Source: End of Frame [ 885.565328][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 885.578067][T11160] vivid-000: Colorspace: Rec. 709 [ 885.583251][T11160] vivid-000: Transfer Function: Default [ 885.589018][T11160] vivid-000: Y'CbCr Encoding: Default [ 885.594602][T11160] vivid-000: HSV Encoding: Hue 0-179 [ 885.600062][T11160] vivid-000: Quantization: Default [ 885.605408][T11160] vivid-000: Apply Alpha To Red Only: false [ 885.611557][T11160] vivid-000: Standard Aspect Ratio: 4x3 [ 885.617316][T11160] vivid-000: DV Timings Signal Mode: Current DV Timings [ 885.624431][T11160] vivid-000: DV Timings: 640x480p59 inactive [ 885.631010][T11160] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 885.639073][T11160] vivid-000: Maximum EDID Blocks: 2 [ 885.644547][T11160] vivid-000: Limited RGB Range (16-235): true [ 885.650892][T11160] vivid-000: Rx RGB Quantization Range: Automatic [ 885.657530][T11160] vivid-000: Power Present: 0x00000001 [ 885.663255][T11160] tpg source WxH: 1280x720 (Y'CbCr) [ 885.668895][T11160] tpg field: 1 [ 885.672453][T11160] tpg crop: (0,0)/1280x720 [ 885.677060][T11160] tpg compose: (0,0)/1280x720 [ 885.681830][T11160] tpg colorspace: 3 [ 885.685722][T11160] tpg transfer function: 0/0 [ 885.690828][T11160] tpg Y'CbCr encoding: 0/0 [ 885.695744][T11160] tpg quantization: 0/0 [ 885.700465][T11160] tpg RGB range: 0/1 [ 885.704963][T11160] vivid-000: ================== END STATUS ================== [ 885.751602][ T5938] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 885.770990][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 885.829656][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.848347][ T5938] usb 5-1: config 0 descriptor?? [ 885.862286][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.874817][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 885.899184][ T24] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 885.911747][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.922556][ T24] usb 2-1: Product: syz [ 885.927437][ T24] usb 2-1: Manufacturer: syz [ 885.932137][ T24] usb 2-1: SerialNumber: syz [ 885.946696][ T24] usb 2-1: config 0 descriptor?? [ 886.555357][T11169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.565115][T11169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.797990][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 886.798007][ T30] audit: type=1326 audit(1755333231.912:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4dd8ebe9 code=0x7ffc0000 [ 886.845362][ T30] audit: type=1326 audit(1755333231.912:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f8f4dd8ebe9 code=0x7ffc0000 [ 886.884551][ T30] audit: type=1326 audit(1755333231.912:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4dd8ebe9 code=0x7ffc0000 [ 886.911290][ T5938] aquacomputer_d5next 0003:0C70:F003.0008: unbalanced collection at end of report description [ 886.954377][ T30] audit: type=1326 audit(1755333231.912:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4dd8ebe9 code=0x7ffc0000 [ 886.990567][ T5938] aquacomputer_d5next 0003:0C70:F003.0008: probe with driver aquacomputer_d5next failed with error -22 [ 887.006402][ T5938] usb 5-1: USB disconnect, device number 24 [ 887.049874][T11186] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[11186] [ 887.112306][ T30] audit: type=1326 audit(1755333231.952:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11168 comm="syz.4.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4dd8ebe9 code=0x7ffc0000 [ 887.839586][ T10] usb 2-1: USB disconnect, device number 24 [ 888.174870][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 888.811557][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1415'. [ 889.450237][T11238] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1422'. [ 889.459535][T11238] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1422'. [ 889.700767][T11244] fuse: root generation should be zero [ 890.556069][ T5938] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 890.580335][T11273] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 890.759758][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.822864][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.838292][ T5938] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 890.852555][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.926802][ T5938] usb 2-1: config 0 descriptor?? [ 890.927287][T11288] netlink: 752 bytes leftover after parsing attributes in process `syz.3.1439'. [ 891.298272][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 891.348202][ T5938] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 891.386515][ T5938] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 891.393584][ T5938] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 891.426200][ T5938] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 891.458924][ T5938] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 891.480648][ T10] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 891.496339][ T5938] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 891.503404][ T5938] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 891.516122][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.553106][ T5938] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 891.570442][ T10] usb 5-1: config 0 descriptor?? [ 891.599228][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 891.659668][ T5938] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 891.797734][ T10] gp8psk: usb in 128 operation failed. [ 891.813691][ T10] gp8psk: usb in 137 operation failed. [ 891.829761][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 891.856875][ T10] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 891.874855][ T10] usb 5-1: media controller created [ 891.905845][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 891.969888][ T10] gp8psk_fe: Frontend attached [ 891.975359][ T10] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 892.029282][ T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 892.261890][ T5938] cp2112 0003:10C4:EA90.0009: error reading lock byte: -71 [ 892.276074][ T5938] usb 2-1: USB disconnect, device number 25 [ 892.357154][ T10] gp8psk: usb in 137 operation failed. [ 892.362885][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 892.373040][ T10] gp8psk: found Genpix USB device pID = 203 (hex) [ 892.384317][ T10] usb 5-1: USB disconnect, device number 25 [ 892.445704][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 893.216067][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 893.300406][T11353] bridge_slave_0: left allmulticast mode [ 893.322124][T11353] bridge_slave_0: left promiscuous mode [ 893.322523][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.370608][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 893.370649][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 893.370694][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 893.370720][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.372525][T11353] bridge_slave_1: left allmulticast mode [ 893.372550][T11353] bridge_slave_1: left promiscuous mode [ 893.372817][T11353] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.391810][T11353] bond0: (slave bond_slave_0): Releasing backup interface [ 893.394362][T11338] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 893.398434][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 893.415407][T11353] bond0: (slave bond_slave_1): Releasing backup interface [ 893.508424][T11353] team0: Port device team_slave_0 removed [ 893.520870][T11353] team0: Port device team_slave_1 removed [ 893.523223][T11353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 893.536281][T11353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.539930][T11353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.539977][T11353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.574051][T11353] bond1: (slave gretap1): Releasing active interface [ 893.614022][ T8422] usb 2-1: USB disconnect, device number 26 [ 894.000391][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1473'. [ 894.033069][T11363] bridge0: entered promiscuous mode [ 894.042622][T11363] macvtap1: entered promiscuous mode [ 894.049057][T11363] macvtap1: entered allmulticast mode [ 894.055027][T11363] bridge0: entered allmulticast mode [ 894.070731][T11368] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 894.076903][T11367] macvtap1: left promiscuous mode [ 894.084022][T11367] macvtap1: left allmulticast mode [ 894.093549][T11367] bridge0: left allmulticast mode [ 894.876311][ T8422] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 895.276103][ T8422] usb 6-1: Using ep0 maxpacket: 8 [ 895.286831][ T8422] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 895.305398][ T8422] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.313716][ T8422] usb 6-1: Product: syz [ 895.333215][ T8422] usb 6-1: Manufacturer: syz [ 895.346110][ T8422] usb 6-1: SerialNumber: syz [ 895.368217][ T8422] usb 6-1: config 0 descriptor?? [ 895.589593][ T8422] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 896.011728][ T8422] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 896.044940][ T8422] usb 6-1: USB disconnect, device number 25 [ 896.399375][T11411] netlink: 'syz.3.1492': attribute type 1 has an invalid length. [ 896.407303][T11411] netlink: 'syz.3.1492': attribute type 2 has an invalid length. [ 897.332086][ T30] audit: type=1326 audit(1755333242.442:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11432 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cbd8ebe9 code=0x7ffc0000 [ 897.456014][ T30] audit: type=1326 audit(1755333242.442:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11432 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cbd8ebe9 code=0x7ffc0000 [ 897.506335][ T5924] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 897.543502][ T30] audit: type=1326 audit(1755333242.482:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11432 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f83cbd8ebe9 code=0x7ffc0000 [ 897.579032][ T30] audit: type=1326 audit(1755333242.482:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11432 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cbd8ebe9 code=0x7ffc0000 [ 897.606985][ T30] audit: type=1326 audit(1755333242.482:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11432 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f83cbd8ebe9 code=0x7ffc0000 [ 897.630061][ T30] audit: type=1326 audit(1755333242.482:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11432 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cbd8ebe9 code=0x7ffc0000 [ 897.686050][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 897.694274][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 198, changing to 7 [ 897.718195][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9653, setting to 1024 [ 897.739566][T11440] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (247) [ 897.767700][ T5924] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 897.784974][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.793944][ T5924] usb 5-1: Product: syz [ 897.802794][ T5924] usb 5-1: Manufacturer: syz [ 897.807591][ T5924] usb 5-1: SerialNumber: syz [ 897.815423][ T5924] usb 5-1: config 0 descriptor?? [ 897.830946][ T5924] hub 5-1:0.0: bad descriptor, ignoring hub [ 897.839553][ T5924] hub 5-1:0.0: probe with driver hub failed with error -5 [ 897.862536][ T5924] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 898.529408][T11468] netlink: 'syz.5.1517': attribute type 10 has an invalid length. [ 899.158165][T11487] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 899.718708][T11505] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1533'. [ 900.056880][ T5952] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 900.209385][ T5952] usb 6-1: Using ep0 maxpacket: 32 [ 900.220707][ T5952] usb 6-1: unable to get BOS descriptor or descriptor too short [ 900.236612][ T5952] usb 6-1: config 0 has an invalid interface number: 233 but max is 0 [ 900.255576][ T5952] usb 6-1: config 0 has no interface number 0 [ 900.294586][ T5952] usb 6-1: config 0 interface 233 has no altsetting 0 [ 900.315798][ T5952] usb 6-1: New USB device found, idVendor=1546, idProduct=1010, bcdDevice=7d.b6 [ 900.334907][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.355853][ T5952] usb 6-1: Product: syz [ 900.363374][ T5952] usb 6-1: Manufacturer: syz [ 900.387155][ T5952] usb 6-1: SerialNumber: syz [ 900.399037][ T5952] usb 6-1: config 0 descriptor?? [ 900.452775][T11528] 9pnet_fd: Insufficient options for proto=fd [ 901.027031][ T5952] usb 6-1: USB disconnect, device number 26 [ 901.746548][ T5924] usb 5-1: USB disconnect, device number 26 [ 902.241047][ C1] sd 0:0:1:0: [sda] tag#1424 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 902.251683][ C1] sd 0:0:1:0: [sda] tag#1424 CDB: Write(6) 0a 00 04 00 00 00 bf 28 00 00 00 00 [ 902.510048][ T5924] IPVS: starting estimator thread 0... [ 902.616793][T11567] IPVS: using max 36 ests per chain, 86400 per kthread [ 902.661375][T11569] tipc: Enabled bearer , priority 0 [ 902.746095][ T5952] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 902.781373][T11569] syzkaller0: entered promiscuous mode [ 902.796742][T11569] syzkaller0: entered allmulticast mode [ 902.803325][T11569] tipc: Resetting bearer [ 902.834024][T11568] tipc: Resetting bearer [ 902.906236][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 902.925626][ T5952] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 902.949312][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.964588][ T5952] usb 2-1: Product: syz [ 902.974643][ T5952] usb 2-1: Manufacturer: syz [ 902.994959][ T5952] usb 2-1: SerialNumber: syz [ 903.013094][ T5952] usb 2-1: config 0 descriptor?? [ 903.166126][ T5938] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 903.246142][ T5952] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 903.346027][ T5938] usb 6-1: Using ep0 maxpacket: 16 [ 903.381076][ T5938] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 903.402595][ T5938] usb 6-1: config 8 has no interface number 0 [ 903.418425][ T5938] usb 6-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 903.430559][ T5938] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 903.465999][ T5938] usb 6-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 903.479415][ T5938] usb 6-1: config 8 interface 206 has no altsetting 0 [ 903.497678][ T5938] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 903.510294][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.523460][ T5938] usb 6-1: Product: syz [ 903.529044][ T5938] usb 6-1: Manufacturer: syz [ 903.533812][ T5938] usb 6-1: SerialNumber: syz [ 903.845814][T11573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.855141][T11573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.812115][ T5952] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 904.833977][ T5952] usb 2-1: USB disconnect, device number 27 [ 907.562166][T11568] tipc: Disabling bearer [ 907.702552][ T5938] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected [ 907.746770][ T5938] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 907.779973][ T5938] usb 6-1: USB disconnect, device number 27 [ 907.843430][ T5938] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 907.857819][ T5938] garmin_gps 6-1:8.206: device disconnected [ 907.912400][T11624] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1580'. [ 907.921948][T11624] netlink: 'syz.6.1580': attribute type 7 has an invalid length. [ 907.929932][T11624] netlink: 'syz.6.1580': attribute type 8 has an invalid length. [ 907.939277][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1580'. [ 907.992391][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 908.011670][T11626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1581'. [ 908.036047][ T5924] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 908.196089][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 908.214363][ T5924] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 908.246071][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.268141][ T5924] usb 2-1: config 0 descriptor?? [ 908.536623][ T5924] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 908.847123][T11653] netlink: 'syz.6.1593': attribute type 10 has an invalid length. [ 908.855101][T11653] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1593'. [ 908.871290][T11653] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.880371][T11653] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.889503][T11653] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.898490][T11653] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.912761][T11653] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.922111][T11653] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.930920][T11653] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.939834][T11653] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.955015][T11653] team0: Port device geneve0 added [ 909.431885][T11656] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.486195][T11656] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.658962][T11656] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.696045][T11656] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.892914][T11656] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.903345][T11665] overlayfs: failed to clone upperpath [ 909.916733][T11656] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.048650][T11656] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.081147][T11656] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.299295][T11656] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.326384][T11656] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.373230][T11656] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.396288][T11656] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.428270][ T5924] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 910.457322][T11656] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.465851][T11656] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.494387][T11656] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.502829][T11656] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.525060][ T5924] asix 2-1:0.0: probe with driver asix failed with error -71 [ 910.545370][ T5924] usb 2-1: USB disconnect, device number 28 [ 910.644100][T11679] lo speed is unknown, defaulting to 1000 [ 911.361938][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1614'. [ 911.400166][T11703] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1614'. [ 912.381920][T11733] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 912.751875][ T10] lo speed is unknown, defaulting to 1000 [ 914.009101][T11784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1641'. [ 915.276007][ T5924] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 915.399130][T11780] trusted_key: encrypted_key: insufficient parameters specified [ 915.540358][ T5924] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 915.559780][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.585360][ T5924] usb 5-1: Product: syz [ 915.600881][ T5924] usb 5-1: Manufacturer: syz [ 915.605559][ T5924] usb 5-1: SerialNumber: syz [ 915.657640][ T5924] usb 5-1: config 0 descriptor?? [ 915.883372][ T5924] usb 5-1: ignoring: probably an ADSL modem [ 916.285484][ T5924] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 916.576668][ T5924] usb 5-1: USB disconnect, device number 27 [ 917.073830][T11824] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 917.337513][T11829] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1656'. [ 918.946425][T11849] trusted_key: encrypted_key: insufficient parameters specified [ 919.131593][T11863] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1669'. [ 919.427801][T11871] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 919.434596][T11871] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 919.480379][T11875] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1676'. [ 920.531988][ T30] audit: type=1326 audit(1755333265.612:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11904 comm="syz.6.1687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd823f8ebe9 code=0x0 [ 920.707895][T11911] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1690'. [ 921.026266][ T5924] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 921.714662][ T5924] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 921.724020][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.757833][ T5924] usb 6-1: config 0 descriptor?? [ 921.791652][ T5924] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 921.991527][ T5924] gp8psk: usb in 128 operation failed. [ 921.997594][T11899] trusted_key: encrypted_key: insufficient parameters specified [ 922.020163][ T5924] gp8psk: usb in 137 operation failed. [ 922.025679][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 922.067079][ T5924] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 922.146683][ T5924] usb 6-1: media controller created [ 922.228728][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 922.336594][ T5924] gp8psk_fe: Frontend attached [ 922.341657][ T5924] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 922.350509][ T5924] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 922.357175][T11929] bond1: entered allmulticast mode [ 922.399438][T11929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 922.419957][ T5924] gp8psk: usb in 138 operation failed. [ 922.425647][ T5924] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 922.435486][ T5924] gp8psk: found Genpix USB device pID = 203 (hex) [ 922.445792][ T5924] usb 6-1: USB disconnect, device number 28 [ 922.457643][T11929] bridge0: port 3(bond1) entered blocking state [ 922.516368][T11929] bridge0: port 3(bond1) entered disabled state [ 922.570969][T11929] bond1: entered promiscuous mode [ 922.588030][ T5924] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 922.632141][T11929] bridge0: port 3(bond1) entered blocking state [ 922.640469][T11929] bridge0: port 3(bond1) entered forwarding state [ 922.718880][ T37] bridge0: port 3(bond1) entered disabled state [ 923.204420][T11956] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1703'. [ 923.262305][T11960] geneve2: entered promiscuous mode [ 923.889903][T11987] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 923.896525][T11987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 923.939593][T11987] vhci_hcd vhci_hcd.0: Device attached [ 923.974884][T11995] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 924.357994][ T5834] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 924.523517][T12006] netlink: 'syz.1.1722': attribute type 16 has an invalid length. [ 924.587977][T11988] vhci_hcd: connection reset by peer [ 924.595481][ T37] vhci_hcd: stop threads [ 924.606223][ T37] vhci_hcd: release socket [ 924.616983][ T37] vhci_hcd: disconnect device [ 925.195740][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 925.233247][T12016] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.241726][T12016] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.467561][T12028] trusted_key: syz.5.1732 sent an empty control message without MSG_MORE. [ 925.481759][T12016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.516894][T12016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.654102][T12016] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.670594][T12016] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.679992][T12016] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.681152][T12035] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1735'. [ 925.689196][T12016] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.057023][T12045] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 926.791657][T12063] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1746'. [ 926.890951][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1748'. [ 927.762271][T12094] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1761'. [ 927.775234][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1762'. [ 928.376972][T12125] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1776'. [ 928.456639][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1777'. [ 928.471262][T12130] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1777'. [ 928.756063][ T5952] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 928.925276][ T5952] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 928.935113][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.946765][ T5952] usb 5-1: Product: syz [ 928.951070][ T5952] usb 5-1: Manufacturer: syz [ 928.959115][ T5952] usb 5-1: SerialNumber: syz [ 928.974716][ T5952] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 929.007922][ T5924] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 929.666116][ T5834] vhci_hcd: vhci_device speed not set [ 929.819584][ T5952] usb 5-1: USB disconnect, device number 28 [ 930.076094][ T5924] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 930.103646][ T5924] ath9k_htc: Failed to initialize the device [ 930.163012][ T5952] usb 5-1: ath9k_htc: USB layer deinitialized [ 931.317454][T12160] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1787'. [ 931.382163][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 931.443110][T12164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1789'. [ 931.978682][T12187] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1797'. [ 932.008043][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1798'. [ 934.076309][T12209] trusted_key: encrypted_key: insufficient parameters specified [ 935.256410][ T5952] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 935.406055][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 935.426653][ T5952] usb 6-1: unable to get BOS descriptor or descriptor too short [ 935.439963][ T5952] usb 6-1: config 2 has an invalid interface number: 22 but max is 0 [ 935.448392][ T5924] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 935.460290][ T5952] usb 6-1: config 2 has no interface number 0 [ 935.471677][ T5952] usb 6-1: config 2 interface 22 has no altsetting 0 [ 935.488428][ T5952] usb 6-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 935.507894][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.527371][ T5952] usb 6-1: Product: syz [ 935.531873][ T5952] usb 6-1: Manufacturer: syz [ 935.542298][ T5952] usb 6-1: SerialNumber: syz [ 935.622405][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 935.623000][T12284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1836'. [ 935.644289][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 935.696744][ T5924] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 935.744128][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.776106][ T5924] usb 2-1: config 0 descriptor?? [ 935.781945][ T5952] usb-storage 6-1:2.22: USB Mass Storage device detected [ 935.854529][ T5952] usb-storage 6-1:2.22: Quirks match for vid 0451 pid 5416: 2 [ 935.928102][ T5952] usb 6-1: USB disconnect, device number 29 [ 936.018166][T12259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.031511][T12259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.044825][ T5924] usbhid 2-1:0.0: can't add hid device: -71 [ 936.051357][ T5924] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 936.067659][ T5924] usb 2-1: USB disconnect, device number 29 [ 936.696204][ T5924] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 936.885996][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 936.893420][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 936.927168][ T5924] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 936.947221][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.953788][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.016110][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.024192][ T5924] usb 6-1: Product: syz [ 937.056100][ T5924] usb 6-1: Manufacturer: syz [ 937.063360][ T5924] usb 6-1: SerialNumber: syz [ 937.100526][ T5924] usb 6-1: config 0 descriptor?? [ 937.511693][ T5924] gs_usb 6-1:0.0: Configuring for 2 interfaces [ 938.206886][ T5924] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 938.470063][ T5924] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 938.517125][ T5924] usb 6-1: USB disconnect, device number 30 [ 940.636070][ T5924] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 940.847659][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.908050][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.085576][ T5924] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 941.174507][T12405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1864'. [ 941.195678][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.273297][ T5924] usb 2-1: config 0 descriptor?? [ 941.721991][ T5924] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 941.936087][ T5924] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 942.065132][ T5924] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 942.702666][T12431] overlayfs: failed to clone upperpath [ 942.832441][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1877'. [ 943.636019][ T5834] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 943.772626][ T5938] usb 2-1: USB disconnect, device number 30 [ 943.805171][ T5938] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 943.837966][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 943.845696][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 943.991183][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 944.163656][ T5834] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 944.429188][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.452668][ T5834] usb 5-1: Product: syz [ 944.460010][ T5834] usb 5-1: Manufacturer: syz [ 944.464941][ T5834] usb 5-1: SerialNumber: syz [ 944.773176][ T5834] usb 5-1: config 0 descriptor?? [ 944.992343][ T5834] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 945.019461][ T5834] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 945.366100][T12459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1886'. [ 945.478863][ T5834] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 945.499432][ T5834] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 945.882652][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1890'. [ 945.920305][ T5834] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 945.927754][ T5834] em28xx 5-1:0.0: No AC97 audio processor [ 945.973191][ T5834] usb 5-1: USB disconnect, device number 29 [ 945.984337][ T5834] em28xx 5-1:0.0: Disconnecting em28xx [ 946.004974][ T5834] em28xx 5-1:0.0: Freeing device [ 946.046148][T10257] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 946.238251][T10257] usb 2-1: Using ep0 maxpacket: 16 [ 946.250389][T10257] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 946.273497][T10257] usb 2-1: config 8 has no interface number 0 [ 946.295244][T10257] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 946.307370][T10257] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 946.326677][T10257] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 946.347734][T10257] usb 2-1: config 8 interface 206 has no altsetting 0 [ 946.358444][T10257] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 946.367765][T10257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.377787][T10257] usb 2-1: Product: syz [ 946.382109][T10257] usb 2-1: Manufacturer: syz [ 946.388771][T10257] usb 2-1: SerialNumber: syz [ 948.832758][T10257] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 948.879894][T10257] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 948.927548][T10257] usb 2-1: USB disconnect, device number 31 [ 948.965194][T10257] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 949.026146][ T5924] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 949.045587][T10257] garmin_gps 2-1:8.206: device disconnected [ 949.196075][ T5924] usb 6-1: Using ep0 maxpacket: 8 [ 949.212359][ T5924] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 949.246229][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.274841][ T5924] usb 6-1: Product: syz [ 949.313959][ T5924] usb 6-1: Manufacturer: syz [ 949.399114][ T5924] usb 6-1: SerialNumber: syz [ 949.418988][ T5924] usb 6-1: config 0 descriptor?? [ 949.738130][ T5924] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 949.813128][T12539] loop2: detected capacity change from 0 to 7 [ 949.855020][T12539] Dev loop2: unable to read RDB block 7 [ 949.872884][T12539] loop2: unable to read partition table [ 949.908983][T12539] loop2: partition table beyond EOD, truncated [ 949.938099][T12539] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 950.452330][T12546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 950.746084][ T5938] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 950.901394][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.926157][ T5938] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 950.983379][ T5938] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 951.013143][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.064992][ T5938] usb 2-1: config 0 descriptor?? [ 951.343656][ T5938] usb 2-1: USB disconnect, device number 32 [ 951.984085][ T5924] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 952.116494][ T5924] usb 6-1: USB disconnect, device number 31 [ 952.297314][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.305995][ T5938] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 952.316610][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.476031][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 952.503546][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.546516][ T5938] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 952.610779][ T5938] usb 2-1: New USB device found, idVendor=0958, idProduct=3333, bcdDevice= 0.40 [ 952.672368][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.716893][ T5938] usb 2-1: config 0 descriptor?? [ 953.269439][T12581] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1932'. [ 953.598232][T12372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.624373][T12586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.928066][T12585] trusted_key: encrypted_key: insufficient parameters specified [ 954.744766][ T5952] usb 2-1: USB disconnect, device number 33 [ 956.416914][ T30] audit: type=1326 audit(1755333301.542:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12637 comm="syz.5.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cbd8ebe9 code=0x7ffc0000 [ 956.472860][ T30] audit: type=1326 audit(1755333301.542:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12637 comm="syz.5.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f83cbd8ebe9 code=0x7ffc0000 [ 956.550388][ T30] audit: type=1326 audit(1755333301.542:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12637 comm="syz.5.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cbd8ebe9 code=0x7ffc0000 [ 956.551964][T12644] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1953'. [ 956.586395][ T5924] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 956.656707][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1955'. [ 956.684876][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1955'. [ 956.756362][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 956.764145][ T5924] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 956.773303][ T5924] usb 5-1: config 8 has no interface number 0 [ 956.780174][ T5924] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 956.792557][ T5924] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 956.903568][ T5924] usb 5-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 956.925992][ T5924] usb 5-1: config 8 interface 206 has no altsetting 0 [ 956.946910][ T5924] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 956.993602][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.013182][ T5924] usb 5-1: Product: syz [ 957.021322][ T5924] usb 5-1: Manufacturer: syz [ 957.109488][ T5924] usb 5-1: SerialNumber: syz [ 957.420921][T12388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.067296][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.697367][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.336733][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.441862][ T5924] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 959.516507][ T5924] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 959.553565][ T5924] usb 5-1: USB disconnect, device number 30 [ 959.579042][ T5924] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 959.605419][ T5924] garmin_gps 5-1:8.206: device disconnected [ 959.674102][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 959.696827][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1969'. [ 959.822925][T12690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 959.875086][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1974'. [ 960.176996][T12708] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1976'. [ 961.116215][ T5924] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 961.286690][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 961.352019][ T5924] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 961.383284][ T5924] usb 6-1: config 8 has no interface number 0 [ 961.436174][ T5924] usb 6-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 961.462304][ T5924] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 961.534576][ T5924] usb 6-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 961.554928][ T5924] usb 6-1: config 8 interface 206 has no altsetting 0 [ 961.565791][ T5924] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 961.578827][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.592425][ T5924] usb 6-1: Product: syz [ 961.601009][ T5924] usb 6-1: Manufacturer: syz [ 961.605647][ T5924] usb 6-1: SerialNumber: syz [ 962.847773][T12727] netlink: 'syz.1.1980': attribute type 12 has an invalid length. [ 962.903715][T12727] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1980'. [ 963.153095][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1983'. [ 963.176883][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.210537][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1983'. [ 964.121886][T12382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.248920][ T5924] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected [ 964.289309][ T5924] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 964.362503][T12747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.395348][ T5924] usb 6-1: USB disconnect, device number 32 [ 964.480216][T12388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.489120][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.554932][T12754] trusted_key: encrypted_key: insufficient parameters specified [ 964.630999][ T5924] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 964.642516][ T5924] garmin_gps 6-1:8.206: device disconnected [ 965.476000][T12771] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1996'. [ 966.653695][T12794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.432327][T12803] syz_tun: entered allmulticast mode [ 967.450160][T12803] dvmrp1: entered allmulticast mode [ 967.458033][T12803] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 967.467314][T12803] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 12803, name: syz.4.2007 [ 967.491040][T12803] 3 locks held by syz.4.2007/12803: [ 967.512231][T12803] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x107/0xf60 [ 967.537189][T12803] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: ipmr_mfc_add+0x11b/0x2850 [ 967.595432][T12803] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 967.630127][T12803] CPU: 0 UID: 0 PID: 12803 Comm: syz.4.2007 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 967.630161][T12803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 967.630177][T12803] Call Trace: [ 967.630187][T12803] [ 967.630198][T12803] dump_stack_lvl+0x189/0x250 [ 967.630235][T12803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 967.630269][T12803] ? print_lock_name+0xde/0x100 [ 967.630305][T12803] __cant_migrate+0x238/0x2e0 [ 967.630336][T12803] ? __pfx___cant_migrate+0x10/0x10 [ 967.630379][T12803] nf_hook_run_bpf+0x8f/0x1f0 [ 967.630401][T12803] ? __pfx_ipt_do_table+0x10/0x10 [ 967.630433][T12803] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 967.630456][T12803] ? iptable_mangle_hook+0x189/0x4c0 [ 967.630489][T12803] ? nf_hook+0x9d/0x380 [ 967.630508][T12803] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 967.630535][T12803] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 967.630559][T12803] nf_hook_slow+0xc5/0x220 [ 967.630597][T12803] nf_hook+0x217/0x380 [ 967.630622][T12803] ? nf_hook+0x9d/0x380 [ 967.630642][T12803] ? __pfx_nf_hook+0x10/0x10 [ 967.630666][T12803] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 967.630697][T12803] ? skb_clone+0x246/0x3a0 [ 967.630723][T12803] ip_mc_output+0x22d/0x590 [ 967.630743][T12803] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 967.630771][T12803] ? ipmr_queue_xmit+0x1460/0x16f0 [ 967.630802][T12803] ipmr_queue_xmit+0xf12/0x16f0 [ 967.630846][T12803] ? __pfx_ipmr_queue_xmit+0x10/0x10 [ 967.630872][T12803] ? __pfx_ipmr_forward_finish+0x10/0x10 [ 967.630894][T12803] ? skb_clone+0x246/0x3a0 [ 967.630913][T12803] ? ip_mr_forward+0x63c/0xfe0 [ 967.630970][T12803] ipmr_mfc_add+0x1f63/0x2850 [ 967.631014][T12803] ? ipmr_mfc_add+0x11b/0x2850 [ 967.631056][T12803] ? __pfx_ipmr_mfc_add+0x10/0x10 [ 967.631090][T12803] ? __might_fault+0xb0/0x130 [ 967.631149][T12803] ip_mroute_setsockopt+0xcf1/0xf60 [ 967.631196][T12803] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 967.631230][T12803] ? wake_up_q+0xca/0x110 [ 967.631279][T12803] do_ip_setsockopt+0xf11/0x2d00 [ 967.631317][T12803] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 967.631366][T12803] ? __fget_files+0x2a/0x420 [ 967.631399][T12803] ip_setsockopt+0x66/0x110 [ 967.631424][T12803] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 967.631456][T12803] do_sock_setsockopt+0x179/0x1b0 [ 967.631495][T12803] __x64_sys_setsockopt+0x13f/0x1b0 [ 967.631537][T12803] do_syscall_64+0xfa/0x3b0 [ 967.631562][T12803] ? lockdep_hardirqs_on+0x9c/0x150 [ 967.631587][T12803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.631608][T12803] ? clear_bhb_loop+0x60/0xb0 [ 967.631635][T12803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.631656][T12803] RIP: 0033:0x7f8f4dd8ebe9 [ 967.631676][T12803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.631696][T12803] RSP: 002b:00007f8f4ec13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 967.631720][T12803] RAX: ffffffffffffffda RBX: 00007f8f4dfb5fa0 RCX: 00007f8f4dd8ebe9 [ 967.631738][T12803] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000008 [ 967.631752][T12803] RBP: 00007f8f4de11e19 R08: 000000000000003c R09: 0000000000000000 [ 967.631766][T12803] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 967.631780][T12803] R13: 00007f8f4dfb6038 R14: 00007f8f4dfb5fa0 R15: 00007ffc35e17788 [ 967.631829][T12803] [ 967.991424][T12800] syz_tun: left allmulticast mode [ 968.941275][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.576393][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.216708][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.225641][T12378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.697961][T12388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.336673][T12372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.986567][T12372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.994838][T12372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog