last executing test programs: 26m1.62124581s ago: executing program 32 (id=281): socket(0x15, 0x5, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 22m11.372857812s ago: executing program 33 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 21m30.816737977s ago: executing program 34 (id=1170): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e4f5256b1e4344d50a944ff67347cff6127e6ef12", 0x17}], 0x1}], 0x1, 0x40800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) 21m6.957699861s ago: executing program 35 (id=1207): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 19m6.624409949s ago: executing program 36 (id=1355): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x9}, 0x8) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_open_dev$sg(0x0, 0x0, 0x62040) syz_usb_connect$uac1(0x0, 0x8a, 0x0, 0x0) 14m2.590924463s ago: executing program 37 (id=1592): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0x8ed3, 0x1c, 0x1, 0x95d, 0x1a, "0300000001000000000000000000be00"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0xff, r5, 0x5}, 0xc) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x80000001, 0xe, 0x30314752, 0x7, 0xa, [{0x7, 0x8001}, {0x8}, {0x615, 0x59}, {0x8, 0x53}, {0x1ff}, {0x7fffffff, 0xcc6}, {0x81, 0x1}, {0x46, 0x4}], 0x9, 0x7, 0x4, 0x0, 0x2}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1d, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x80000000002, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 12m50.03640792s ago: executing program 6 (id=1643): syz_open_dev$I2C(0x0, 0x0, 0x149000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000), 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) syz_open_dev$vim2m(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f0000000040), 0x0) write$FUSE_NOTIFY_STORE(r4, 0x0, 0xe) sendfile(r4, r4, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 12m48.516999622s ago: executing program 6 (id=1647): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303017", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000480)="baa000ec9e65a40f51d30f00979734660f3a0a3552b8ad008ec066f00088000066b8f60000000f23d80f21f86635c00000d00f23f866b8008000000f23d00f21f86635000000020f23f8"}], 0x1, 0x0, 0x0, 0x4e) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$iommufd(0xffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x4) mq_open(0x0, 0x40, 0x80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000003c0)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x9, 0x4e93e32f7c580046, 0xdcf, 0x4005, 0xb, 0x32a, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m43.161292429s ago: executing program 6 (id=1652): unshare(0x2000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x1e0000}, 0x18) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x36, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x24000000) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000000140)=0x1) r8 = gettid() rt_sigqueueinfo(r8, 0x21, &(0x7f00000000c0)={0x10, 0x8, 0x200}) 12m41.334026335s ago: executing program 6 (id=1654): r0 = io_uring_setup(0x7554, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0xadc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x2, &(0x7f00000000c0)=[{0x7f, 0x4, 0x8, 0x2ed}, {0x55c, 0x6, 0x5, 0x7}]}) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0xffffffffffffff65}, 0x20) r4 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r4, 0x1, 0xf, 0x0) dup(0xffffffffffffffff) 12m36.500679513s ago: executing program 6 (id=1660): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000000a00)=0x2, 0x5, 0x2, 0x0, &(0x7f0000000ac0)=0x1, 0x616e9570) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0xe}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000ecdbdf250400"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8}, 0x8) 12m34.89122028s ago: executing program 6 (id=1661): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff, 0x4) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socket$inet6(0xa, 0x80002, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$sock(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2a}, 0x4004090) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x6, 0x3}, 'syz1\x00', 0x4b}) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r6, 0x5501) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 12m19.248701534s ago: executing program 38 (id=1661): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff, 0x4) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) socket$inet6(0xa, 0x80002, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$sock(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2a}, 0x4004090) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x6, 0x3}, 'syz1\x00', 0x4b}) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r6, 0x5501) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 12m3.734394846s ago: executing program 8 (id=1698): socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r5, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000080)=@FILEID_INO32_GEN={0x8, 0x1, {0xb, 0xfffffff9}}, 0x0, 0x600) close(r2) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r0, 0x0}]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x44040) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r8 = socket(0x2a, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_udplite(0x2, 0x2, 0x88) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e", 0x6, 0xfffffffffffffffb) 12m1.509343655s ago: executing program 8 (id=1701): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="fbb9", 0x2}], 0x1) close(0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, r7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) 12m0.173840741s ago: executing program 8 (id=1704): setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket(0x10, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=';', 0x1}], 0x1}}], 0x1, 0x4004851) setsockopt(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)="0100000000", 0x5) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000140)={0xc, r6}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) write$tun(r7, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@timestamp={0x44, 0x4, 0xa2, 0x0, 0x4}]}}, @timestamp={0xd, 0x0, 0x0, 0x11b, 0x1, 0xf, 0x3, 0x26f}}}, 0x3a) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) socket$qrtr(0x2a, 0x2, 0x0) 11m49.763659406s ago: executing program 8 (id=1716): r0 = accept(0xffffffffffffffff, &(0x7f0000000280)=@ethernet={0x0, @link_local}, &(0x7f0000000080)=0x80) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x5fd, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x110) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x800, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, &(0x7f0000000280)={'trans=unix,', {[{@directio}, {@access_client}, {@access_client}, {@loose}], [{@pcr={'pcr', 0x3d, 0x14}}, {@subj_role={'subj_role', 0x3d, './cgroup.cpu/syz1\x00'}}, {@flag='async'}, {@uid_eq}, {@appraise_type}, {@smackfsroot}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001002bbd7000fddbdf25dfd9bc5a796500000000000000000001000004d40207ff00"], 0x28}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) setfsgid(0xee00) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93337568b26948fc700870ec38edc9761fdc", 0xd8}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f00000001c0), &(0x7f0000000300)=0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) 11m48.537511895s ago: executing program 8 (id=1717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) shmctl$IPC_SET(r2, 0x1, &(0x7f00000000c0)={{0x2, r4, 0xee01, 0xee01, 0x0, 0x6a, 0x5}, 0x860, 0x5, 0x9, 0x3, 0x0, 0xffffffffffffffff, 0x8001}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r9, r8, 0x0, 0x3a) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) ioctl$int_in(r10, 0x5452, &(0x7f0000000040)=0x7fff) sendto$inet6(r10, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r10, 0x1) 11m47.31726235s ago: executing program 8 (id=1720): mknod$loop(&(0x7f0000000000)='./file0\x00', 0xfff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x2010, r3, 0x4493c000) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x23c}}, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=@getae={0x154, 0x1f, 0x2, 0x70bd26, 0x25dfdbfc, {{@in=@rand_addr=0x64010100, 0x4d5, 0x2, 0x6c}, @in=@private=0xa010100, 0x9, 0x3506}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @lastused={0xc, 0xf, 0x6}, @algo_auth={0xfe, 0x1, {{'rmd320-generic\x00'}, 0x5b0, "c5d4e4cb4bc772055350285c98d44f30e4100a500c29b222d691fe48263e74412d3534e0b5e1d6e1f685a3e0c2018cbe5375543ed62592ba26d2b37a14a490b27ace3863bfd5c1739d66cbfec65b28a985234a5c2bfd77ce24a5670d4891dc7e34b56fa606a67396e79cfc0868856531bfd3f254bce107e8c0e108e3e2cbab1ee7b9190afbeb5240d887f3642dd3ca6fb9ad69bb4cd403741c67098943fd2764a5b3a4ccba41cefca2ba6f3167564271c2abd69de5f1"}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 11m32.227036165s ago: executing program 39 (id=1720): mknod$loop(&(0x7f0000000000)='./file0\x00', 0xfff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x2010, r3, 0x4493c000) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x23c}}, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=@getae={0x154, 0x1f, 0x2, 0x70bd26, 0x25dfdbfc, {{@in=@rand_addr=0x64010100, 0x4d5, 0x2, 0x6c}, @in=@private=0xa010100, 0x9, 0x3506}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @lastused={0xc, 0xf, 0x6}, @algo_auth={0xfe, 0x1, {{'rmd320-generic\x00'}, 0x5b0, "c5d4e4cb4bc772055350285c98d44f30e4100a500c29b222d691fe48263e74412d3534e0b5e1d6e1f685a3e0c2018cbe5375543ed62592ba26d2b37a14a490b27ace3863bfd5c1739d66cbfec65b28a985234a5c2bfd77ce24a5670d4891dc7e34b56fa606a67396e79cfc0868856531bfd3f254bce107e8c0e108e3e2cbab1ee7b9190afbeb5240d887f3642dd3ca6fb9ad69bb4cd403741c67098943fd2764a5b3a4ccba41cefca2ba6f3167564271c2abd69de5f1"}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 2m52.330661134s ago: executing program 2 (id=4555): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66) 2m52.19075829s ago: executing program 2 (id=4558): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[{}, {}, {}, {}], r1, 0x0, '\x00', 0x25, 0x4}) 2m51.895137068s ago: executing program 2 (id=4563): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, r0, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, 0x0, &(0x7f0000003b00)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r6, &(0x7f0000000900)='B', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r6, 0x0) close(r6) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}, 0x1, 0x2, 0x0, 0x1bb581880d1753e}, 0xc890) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) 2m50.643269359s ago: executing program 2 (id=4572): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x95) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) 2m49.637220491s ago: executing program 2 (id=4586): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 2m49.585521778s ago: executing program 2 (id=4588): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) shutdown(r0, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0xffffffff}}, 0x10) 2m31.238203254s ago: executing program 40 (id=4588): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) shutdown(r0, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0xffffffff}}, 0x10) 1m13.706038025s ago: executing program 0 (id=5895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4) 1m13.684654401s ago: executing program 0 (id=5896): openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xc0100, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m13.607352148s ago: executing program 0 (id=5898): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) 1m13.365280952s ago: executing program 0 (id=5899): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x2, 0xff, 0x3}, 0xff}, 0x18) sendmsg$sock(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x811) 1m13.334085097s ago: executing program 0 (id=5900): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400000a0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 1m13.165966341s ago: executing program 0 (id=5902): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fd18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 1m1.381289088s ago: executing program 3 (id=6070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) 1m1.098349513s ago: executing program 3 (id=6074): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xe}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000180)=0x5, 0x4) 59.845518869s ago: executing program 3 (id=6079): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}], 0x20}}], 0x1, 0x0) 59.659975024s ago: executing program 3 (id=6081): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x206) 59.443345s ago: executing program 3 (id=6083): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000280)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xaa, 0x0, @void}}}}}}}, 0x0) 58.421346432s ago: executing program 3 (id=6091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r1, 0x1}, 0x20) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 57.827828872s ago: executing program 41 (id=6091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r1, 0x1}, 0x20) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 57.011481691s ago: executing program 42 (id=5902): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fd18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 3.089607526s ago: executing program 1 (id=6679): r0 = creat(&(0x7f0000000040)='./bus\x00', 0xa8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x0) io_setup(0x2, &(0x7f0000000a00)=0x0) io_submit(r2, 0x1, &(0x7f0000000a40)=[&(0x7f0000000000)={0x0, 0x0, 0x22, 0x7, 0x7, r1, 0x0, 0x0, 0x9}]) 2.996474807s ago: executing program 9 (id=6681): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3a746cbd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.854792062s ago: executing program 1 (id=6683): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000003c0)=0x8000, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000100, 0x0) 2.68997274s ago: executing program 9 (id=6684): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @private2, @mcast1, [@dstopts={0x2b}]}}}}}}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2100, 0x0, 0x0) 2.508451807s ago: executing program 9 (id=6686): openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x40000, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x5}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x80000001}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x26}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.221889121s ago: executing program 9 (id=6689): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100000ede84205a08090047a30102030109022d0001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f0000000700)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.009438994s ago: executing program 4 (id=6695): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_pidfd_open(r0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0) 1.842904143s ago: executing program 4 (id=6697): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000006c0)={0xaa, 0x204}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 1.811500751s ago: executing program 7 (id=6698): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'cpu'}, {0x2d, 'cpuset'}]}, 0xd) 1.749950314s ago: executing program 1 (id=6699): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 1.725688939s ago: executing program 4 (id=6700): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) 1.646738579s ago: executing program 7 (id=6701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) 1.632805312s ago: executing program 1 (id=6702): r0 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xfffffb27, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3aa}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=[@pktinfo={{0x20, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0xe}}}}], 0x20}}], 0x2, 0x1000) 1.595939359s ago: executing program 4 (id=6704): r0 = open(&(0x7f0000000380)='./bus\x00', 0xeb40, 0x14) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+'], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 1.473957216s ago: executing program 4 (id=6705): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0xfffffffd, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 1.471782562s ago: executing program 7 (id=6706): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @multicast1}}, [0x401, 0x7, 0x2bcd, 0x5, 0x2, 0x28e, 0x3, 0x3, 0x9476, 0xd99, 0xb, 0x8, 0x1, 0x7, 0x7]}, &(0x7f0000000180)=0x100) 1.421078817s ago: executing program 1 (id=6707): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000640)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "201b0c6283f6766baeac128263e2ffd571f8d560925d15f81bd483891ed28814", "4988452a98488eb864cd119522e2a5f556855079ed5011d4758f561ec710027f5aa0d8b2b36ecebe2edfab9510889112", "599d67780f61e104ac1768dd1bc84e35540ba92b3d70c275c2b392a2", {"d3c123815af8158061325b1f09ea4622", "2b68ebd5f1c7ba891cfa6f8ab7436896"}}}}}}}, 0x0) 1.34339337s ago: executing program 7 (id=6709): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 1.105495528s ago: executing program 7 (id=6710): ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x35) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {0x4, 0x3}, [], {0x10, 0x7}}, 0x24, 0x0) 1.105273284s ago: executing program 5 (id=6711): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8000, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 1.089827051s ago: executing program 4 (id=6712): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.021615499s ago: executing program 5 (id=6713): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x3ff}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 915.351488ms ago: executing program 5 (id=6714): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r0, r2, 0x25, 0x2, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x11, &(0x7f0000000a40)=ANY=[], 0x0) 727.520893ms ago: executing program 5 (id=6715): syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) 683.643809ms ago: executing program 5 (id=6716): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x3, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) 606.112154ms ago: executing program 5 (id=6717): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="000004000000f9"], 0x0, 0x0}) 446.240589ms ago: executing program 1 (id=6718): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x5) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)="de", 0x1}], 0x1}, 0x811) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 198.846995ms ago: executing program 9 (id=6719): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x1022, 0x0) 74.067886ms ago: executing program 7 (id=6720): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 0s ago: executing program 9 (id=6721): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000050) kernel console output (not intermixed with test programs): e number 17 [ 1465.114109][ T37] audit: type=1326 audit(1768983731.201:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18475 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1465.145169][ T37] audit: type=1326 audit(1768983731.230:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18475 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1465.145348][ T37] audit: type=1326 audit(1768983731.230:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18475 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1465.148362][ T37] audit: type=1326 audit(1768983731.230:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18475 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1465.150118][ T37] audit: type=1326 audit(1768983731.230:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18475 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1465.150425][ T37] audit: type=1326 audit(1768983731.230:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18475 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1465.150681][ T37] audit: type=1326 audit(1768983731.230:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18475 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1465.579885][T13227] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1465.599776][ T5815] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1466.385834][T13456] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1466.388715][T13456] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1466.412794][ T5815] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 1466.412819][ T5815] usb 3-1: config 8 has no interface number 0 [ 1466.412864][ T5815] usb 3-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1466.412888][ T5815] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 1466.412916][ T5815] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1466.412941][ T5815] usb 3-1: config 8 interface 177 has no altsetting 0 [ 1466.412973][ T5815] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1466.412997][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.495281][T18474] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1466.722322][ T5815] usb 3-1: string descriptor 0 read error: -71 [ 1466.887835][ T5815] ir_toy 3-1:8.177: required endpoints not found [ 1466.902209][ T5815] usb 3-1: USB disconnect, device number 27 [ 1468.507956][T18520] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1468.507956][T18520] The task syz.2.4151 (18520) triggered the difference, watch for misbehavior. [ 1468.673447][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1473.026117][T13249] Bluetooth: hci4: command 0x1003 tx timeout [ 1473.059819][T13227] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1473.961734][T18560] netlink: 'syz.7.4169': attribute type 3 has an invalid length. [ 1473.961755][T18560] netlink: 666 bytes leftover after parsing attributes in process `syz.7.4169'. [ 1474.168523][T13456] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1474.355818][T13456] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1474.355850][T13456] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1474.375222][T13456] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1474.375240][T13456] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1474.375251][T13456] usb 3-1: Product: syz [ 1474.375258][T13456] usb 3-1: Manufacturer: syz [ 1474.375266][T13456] usb 3-1: SerialNumber: syz [ 1474.414958][T13456] usb 3-1: config 0 descriptor?? [ 1474.430875][T13456] usb 3-1: selecting invalid altsetting 0 [ 1475.035362][T13456] usb 3-1: USB disconnect, device number 28 [ 1475.145982][T18599] usb usb1: usbfs: process 18599 (syz.0.4186) did not claim interface 1 before use [ 1478.955804][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1479.051285][T11816] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1479.791634][T18671] block nbd7: shutting down sockets [ 1479.811154][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1479.813528][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.813576][ T9] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1479.813598][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.818579][ T9] usb 1-1: config 0 descriptor?? [ 1479.953073][T11816] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1479.953106][T11816] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1479.953139][T11816] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1479.953207][T11816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.977417][T11816] usb 3-1: config 0 descriptor?? [ 1480.655976][ T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1480.755193][ T9] greenasia 0003:0E8F:0012.0011: item fetching failed at offset 4/5 [ 1480.755707][ T9] greenasia 0003:0E8F:0012.0011: parse failed [ 1480.755748][ T9] greenasia 0003:0E8F:0012.0011: probe with driver greenasia failed with error -22 [ 1480.780736][T11816] macally 0003:060B:0001.0012: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.2-1/input0 [ 1480.901659][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1480.903461][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.903490][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1480.903526][ T10] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1480.903551][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.910296][ T10] usb 8-1: config 0 descriptor?? [ 1480.974530][ T9619] usb 3-1: USB disconnect, device number 29 [ 1481.015036][T13456] usb 1-1: USB disconnect, device number 15 [ 1481.673671][ T10] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 1481.673705][ T10] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 1482.071268][ T10] ft260 0003:0403:6030.0013: failed to retrieve chip version [ 1482.071668][ T10] ft260 0003:0403:6030.0013: probe with driver ft260 failed with error -71 [ 1482.083818][ T10] usb 8-1: USB disconnect, device number 25 [ 1485.880793][T18745] gtp0: entered allmulticast mode [ 1485.998065][T18752] 9p: Bad value for 'rfdno' [ 1486.180434][ T9619] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1486.494006][ T9619] usb 1-1: Using ep0 maxpacket: 8 [ 1487.031435][ T9619] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1487.034066][ T9619] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1487.034082][ T9619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.034092][ T9619] usb 1-1: Product: syz [ 1487.034100][ T9619] usb 1-1: Manufacturer: syz [ 1487.034107][ T9619] usb 1-1: SerialNumber: syz [ 1487.077204][ T9619] usb 1-1: config 0 descriptor?? [ 1487.090276][ T9619] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1487.090321][ T9619] usb 1-1: setting power ON [ 1487.106542][ T9619] dvb-usb: bulk message failed: -22 (2/0) [ 1487.130380][ T9619] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1487.131253][ T9619] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1487.131309][ T9619] usb 1-1: media controller created [ 1487.191904][ T9619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1487.252856][ T9619] usb 1-1: selecting invalid altsetting 6 [ 1487.252879][ T9619] usb 1-1: digital interface selection failed (-22) [ 1487.252895][ T9619] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1487.254221][ T9619] usb 1-1: setting power OFF [ 1487.254450][ T9619] dvb-usb: bulk message failed: -22 (2/0) [ 1487.254467][ T9619] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1487.254479][ T9619] (NULL device *): no alternate interface [ 1487.323972][T18739] dvb-usb: bulk message failed: -22 (4/0) [ 1487.323994][T18739] cxusb: i2c read failed [ 1487.365783][ T9619] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1487.380821][ T9619] usb 1-1: USB disconnect, device number 16 [ 1488.653180][T13227] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1489.282728][T18788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4260'. [ 1489.542699][ T5815] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 1489.882759][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1489.882796][ T5815] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1489.882839][ T5815] usb 8-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1489.882853][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.889148][ T5815] usb 8-1: config 0 descriptor?? [ 1491.111786][ T5815] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1491.111826][ T5815] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1491.111917][ T5815] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1491.111947][ T5815] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1491.111975][ T5815] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1491.112004][ T5815] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1491.112033][ T5815] aureal 0003:0755:2626.0014: unknown main item tag 0x0 [ 1491.181010][ T5815] aureal 0003:0755:2626.0014: hidraw0: USB HID v1.ff Device [HID 0755:2626] on usb-dummy_hcd.7-1/input0 [ 1491.324179][ T5946] usb 8-1: USB disconnect, device number 26 [ 1491.507993][T18823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4274'. [ 1491.508111][T18823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4274'. [ 1491.698844][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4280'. [ 1491.703184][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4278'. [ 1492.142717][T18860] netlink: 'syz.7.4291': attribute type 3 has an invalid length. [ 1492.844404][T13249] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1492.990953][T18880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4301'. [ 1492.990974][T18880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4301'. [ 1495.063505][T18921] nbd: must specify a size in bytes for the device [ 1495.231438][T18926] bridge0: entered promiscuous mode [ 1495.231911][T18926] macsec1: entered promiscuous mode [ 1495.496894][ T5815] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1495.963565][ T5815] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.963648][ T5815] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1495.998859][ T5815] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1495.998889][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1495.998909][ T5815] usb 8-1: SerialNumber: syz [ 1496.275776][ T5815] usb 8-1: 0:2 : does not exist [ 1496.291474][ T5815] usb 8-1: unit 255 not found! [ 1496.571966][ T5815] usb 8-1: USB disconnect, device number 27 [ 1497.518607][T18967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4337'. [ 1497.519335][T18967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4337'. [ 1497.636911][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4340'. [ 1498.545906][T18990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4346'. [ 1499.003573][T13227] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1500.820653][ T9619] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1501.226200][ T9619] usb 8-1: too many endpoints for config 0 interface 0 altsetting 1: 65, using maximum allowed: 30 [ 1501.230689][ T9619] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.232363][ T9619] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1501.234542][ T9619] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1501.240181][ T9619] usb 8-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 1501.240290][ T9619] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.317819][ T9619] usb 8-1: config 0 descriptor?? [ 1501.904406][ T9619] chicony 0003:04F2:0418.0015: item fetching failed at offset 0/3 [ 1501.905176][ T9619] chicony 0003:04F2:0418.0015: Chicony hid parse failed: -22 [ 1501.905248][ T9619] chicony 0003:04F2:0418.0015: probe with driver chicony failed with error -22 [ 1502.628455][T11816] usb 8-1: USB disconnect, device number 28 [ 1502.819881][T19072] gretap0: entered promiscuous mode [ 1502.820415][T19072] vlan2: entered promiscuous mode [ 1503.298571][T19091] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1503.318726][T19091] tipc: Enabled bearer , priority 10 [ 1503.461263][ T9619] kernel read not supported for file /dsp (pid: 9619 comm: kworker/1:9) [ 1503.908255][T19103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4395'. [ 1504.360142][ T9685] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1504.491070][ T5815] tipc: Node number set to 2688073851 [ 1504.650593][ T9685] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1504.650623][ T9685] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.650643][ T9685] usb 4-1: config 220 has no interface number 2 [ 1504.650721][ T9685] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1504.650750][ T9685] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1504.650769][ T9685] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1504.650788][ T9685] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1504.656157][ T9685] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1504.656191][ T9685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.656212][ T9685] usb 4-1: Product: syz [ 1504.656226][ T9685] usb 4-1: Manufacturer: syz [ 1504.656241][ T9685] usb 4-1: SerialNumber: syz [ 1504.999076][ T9685] usb 4-1: selecting invalid altsetting 0 [ 1505.034952][ T9685] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1505.034988][ T9685] uvcvideo 4-1:220.0: No valid video chain found. [ 1505.077118][ T9685] usb 4-1: selecting invalid altsetting 0 [ 1505.077164][ T9685] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1505.100800][ T9685] usb 4-1: USB disconnect, device number 18 [ 1505.982773][T19155] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4416'. [ 1505.982862][T19155] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4416'. [ 1506.792599][T19200] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 10802, id = 0 [ 1506.803166][ T8078] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1506.968009][ T8078] usb 4-1: Using ep0 maxpacket: 32 [ 1506.978721][ T8078] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 1506.978744][ T8078] usb 4-1: config 0 has no interface number 0 [ 1506.978790][ T8078] usb 4-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 1506.986223][ T8078] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 1506.986249][ T8078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.986268][ T8078] usb 4-1: Product: syz [ 1506.986282][ T8078] usb 4-1: Manufacturer: syz [ 1506.986297][ T8078] usb 4-1: SerialNumber: syz [ 1507.003593][ T8078] usb 4-1: config 0 descriptor?? [ 1507.004706][T19185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1507.084622][T19212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1507.115303][T19216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4444'. [ 1507.231254][T19185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1507.342305][T11816] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1507.447076][ T8078] asix 4-1:0.191 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1507.521988][T11816] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1507.522265][T11816] usb 8-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1507.522291][T11816] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.537392][T11816] usb 8-1: config 0 descriptor?? [ 1507.664813][ T8078] asix 4-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1507.664845][ T8078] asix 4-1:0.191 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1507.667363][ T8078] asix 4-1:0.191: probe with driver asix failed with error -71 [ 1507.684537][ T8078] usb 4-1: USB disconnect, device number 19 [ 1507.951037][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4457'. [ 1508.023921][T11816] nintendo 0003:057E:2019.0016: item fetching failed at offset 3/5 [ 1508.024327][T11816] nintendo 0003:057E:2019.0016: HID parse failed [ 1508.044661][T11816] nintendo 0003:057E:2019.0016: probe - fail = -22 [ 1508.044772][T11816] nintendo 0003:057E:2019.0016: probe with driver nintendo failed with error -22 [ 1508.234693][ T5989] usb 8-1: USB disconnect, device number 29 [ 1509.346410][T19256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4462'. [ 1509.585166][T19264] bridge1: entered promiscuous mode [ 1509.585196][T19264] bridge1: entered allmulticast mode [ 1510.554247][T19283] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4473'. [ 1510.599529][T19288] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1510.815556][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1510.815625][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1512.761100][T19318] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4484'. [ 1512.761133][T19318] block nbd0: not configured, cannot reconfigure [ 1513.019535][T13456] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1513.351188][T13456] usb 1-1: Using ep0 maxpacket: 8 [ 1514.350993][T13456] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1514.351033][T13456] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1514.351058][T13456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.355980][T13456] usb 1-1: config 0 descriptor?? [ 1514.981237][T13456] mcp2221 0003:04D8:00DD.0017: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1515.758553][T13456] usb 1-1: USB disconnect, device number 17 [ 1515.904162][T19379] tipc: Started in network mode [ 1515.904191][T19379] tipc: Node identity ac1414aa, cluster identity 4711 [ 1515.905214][T19379] tipc: Enabled bearer , priority 10 [ 1516.052399][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1516.052437][T19385] netlink: 'syz.2.4512': attribute type 30 has an invalid length. [ 1516.052452][T19385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1517.552755][T18062] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1517.705171][ T5946] tipc: Node number set to 2886997162 [ 1517.731185][T18062] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1517.734310][T18062] usb 8-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1517.734370][T18062] usb 8-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1517.742118][T18062] usb 8-1: config 64 interface 0 has no altsetting 0 [ 1517.771765][T18062] usb 8-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1517.771819][T18062] usb 8-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1517.771847][T18062] usb 8-1: config 64 interface 0 has no altsetting 0 [ 1517.790638][T18062] usb 8-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1517.790693][T18062] usb 8-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1517.790713][T18062] usb 8-1: config 64 interface 0 has no altsetting 0 [ 1517.791749][T18062] usb 8-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1517.791786][T18062] usb 8-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1517.791801][T18062] usb 8-1: config 64 interface 0 has no altsetting 0 [ 1517.792780][T18062] usb 8-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1517.792831][T18062] usb 8-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1517.792860][T18062] usb 8-1: config 64 interface 0 has no altsetting 0 [ 1517.908878][T18062] usb 8-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1517.908939][T18062] usb 8-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1517.908968][T18062] usb 8-1: config 64 interface 0 has no altsetting 0 [ 1517.910082][T18062] usb 8-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1517.910135][T18062] usb 8-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1517.910163][T18062] usb 8-1: config 64 interface 0 has no altsetting 0 [ 1517.913245][T18062] usb 8-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1517.913301][T18062] usb 8-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1517.913331][T18062] usb 8-1: config 64 interface 0 has no altsetting 0 [ 1518.009291][T18062] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1518.009320][T18062] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1518.009342][T18062] usb 8-1: Product: syz [ 1518.009356][T18062] usb 8-1: Manufacturer: syz [ 1518.009371][T18062] usb 8-1: SerialNumber: syz [ 1518.459412][T18062] yurex 8-1:64.0: USB YUREX device now attached to Yurex #0 [ 1518.721747][T13456] usb 8-1: USB disconnect, device number 30 [ 1518.732777][T13456] yurex 8-1:64.0: USB YUREX #0 now disconnected [ 1519.328733][T19457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4546'. [ 1520.624785][T19480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4553'. [ 1520.783266][ T37] audit: type=1326 audit(1768983783.270:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.0.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494c5af749 code=0x7ffc0000 [ 1520.783558][ T37] audit: type=1326 audit(1768983783.270:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.0.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494c5af749 code=0x7ffc0000 [ 1520.785379][ T37] audit: type=1326 audit(1768983783.270:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.0.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f494c5af749 code=0x7ffc0000 [ 1520.785992][ T37] audit: type=1326 audit(1768983783.270:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.0.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494c5af749 code=0x7ffc0000 [ 1520.786265][ T37] audit: type=1326 audit(1768983783.270:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.0.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494c5af749 code=0x7ffc0000 [ 1520.786732][ T37] audit: type=1326 audit(1768983783.270:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.0.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f494c5af749 code=0x7ffc0000 [ 1520.787055][ T37] audit: type=1326 audit(1768983783.270:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.0.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494c5af749 code=0x7ffc0000 [ 1520.787327][ T37] audit: type=1326 audit(1768983783.270:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.0.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494c5af749 code=0x7ffc0000 [ 1522.284889][T19517] geneve2: entered promiscuous mode [ 1522.287122][T19517] team0: Device geneve2 is up. Set it down before adding it as a team port [ 1522.417548][T13456] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1522.567292][ T5989] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1522.577933][T13456] usb 4-1: Using ep0 maxpacket: 8 [ 1522.581019][T13456] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1522.600297][T13456] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1522.600325][T13456] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1522.600346][T13456] usb 4-1: Product: syz [ 1522.600361][T13456] usb 4-1: Manufacturer: syz [ 1522.600376][T13456] usb 4-1: SerialNumber: syz [ 1522.727560][ T5989] usb 1-1: Using ep0 maxpacket: 16 [ 1522.730708][ T5989] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1522.730793][ T5989] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1522.730829][ T5989] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1522.730854][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.743645][ T5989] usb 1-1: config 0 descriptor?? [ 1522.838770][T13456] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 1522.838794][T13456] usb 4-1: Handspring Visor / Palm OS: port 0, is for Console use [ 1522.838813][T13456] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1522.838832][T13456] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1522.925515][T19544] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4582'. [ 1523.063141][T13456] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 1523.063446][T13456] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1523.092390][T13456] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1523.099591][T13456] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1523.102652][T13456] usb 4-1: USB disconnect, device number 20 [ 1523.113469][T13456] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1523.121690][T13456] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1523.122388][T13456] visor 4-1:1.0: device disconnected [ 1523.373113][T19555] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1523.424109][ T9619] usb 1-1: USB disconnect, device number 18 [ 1523.741779][T19565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4594'. [ 1523.786057][ T9619] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1523.946388][ T9619] usb 8-1: Using ep0 maxpacket: 8 [ 1523.955338][ T9619] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1523.955370][ T9619] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1523.955391][ T9619] usb 8-1: Product: syz [ 1523.955407][ T9619] usb 8-1: Manufacturer: syz [ 1523.955420][ T9619] usb 8-1: SerialNumber: syz [ 1523.960506][ T9619] usb 8-1: config 0 descriptor?? [ 1524.013592][ T9619] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1524.156888][T19579] delete_channel: no stack [ 1524.157292][T19578] delete_channel: no stack [ 1524.397893][T19585] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4604'. [ 1524.501847][T19591] xt_l2tp: invalid flags combination: 0 [ 1524.652638][ T9619] gspca_zc3xx: reg_w_i err -71 [ 1524.652725][ T9619] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1524.657442][ T9619] usb 8-1: USB disconnect, device number 31 [ 1527.297774][T19629] overlayfs: workdir and upperdir must be separate subtrees [ 1527.503221][T19639] Invalid ELF header magic: != ELF [ 1528.041331][ T9619] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1528.202612][ T9619] usb 4-1: Using ep0 maxpacket: 32 [ 1528.208901][ T9619] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 1528.208928][ T9619] usb 4-1: config 0 has no interface number 0 [ 1528.213226][ T9619] usb 4-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=fe.bb [ 1528.213254][ T9619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.213273][ T9619] usb 4-1: Product: syz [ 1528.213288][ T9619] usb 4-1: Manufacturer: syz [ 1528.213302][ T9619] usb 4-1: SerialNumber: syz [ 1528.237481][ T9619] usb 4-1: config 0 descriptor?? [ 1528.252740][ T9619] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 1528.929605][T11816] usb 4-1: USB disconnect, device number 21 [ 1530.139769][T19711] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4660'. [ 1531.230847][T19744] netlink: 14601 bytes leftover after parsing attributes in process `syz.7.4677'. [ 1532.176043][T19749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4676'. [ 1532.550585][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4687'. [ 1532.564517][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4687'. [ 1533.149991][T19776] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4689'. [ 1533.560773][T18062] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1533.649979][T13227] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1533.878950][T18062] usb 8-1: Using ep0 maxpacket: 8 [ 1533.882004][T18062] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1533.882031][T18062] usb 8-1: config 0 has no interface number 0 [ 1533.882077][T18062] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1533.882102][T18062] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1533.882138][T18062] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1533.882165][T18062] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1533.882209][T18062] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1533.882234][T18062] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.887436][T18062] usb 8-1: config 0 descriptor?? [ 1533.897713][T18062] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1534.126248][T18062] usb 8-1: USB disconnect, device number 32 [ 1534.136427][T18062] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1535.814309][ T9685] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1535.953753][ T9685] usb 4-1: device descriptor read/64, error -71 [ 1536.209928][ T9685] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1536.349578][ T9685] usb 4-1: device descriptor read/64, error -71 [ 1536.468378][ T9685] usb usb4-port1: attempt power cycle [ 1541.581005][T13249] Bluetooth: hci3: command 0x0406 tx timeout [ 1541.878634][ T9685] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1542.108667][ T9685] usb 4-1: device not accepting address 24, error -71 [ 1542.463339][T13227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1542.489690][T13227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1542.500250][T13227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1542.504039][T13227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1542.506333][T13227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1544.605218][ T10] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1545.527599][T13249] Bluetooth: hci4: command tx timeout [ 1545.634369][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.634402][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.634530][ T10] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1545.634557][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.639521][ T10] usb 8-1: config 0 descriptor?? [ 1546.225168][ T9921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.290972][ T10] hid (null): report_id 0 is invalid [ 1546.310923][ T10] hid-steam 0003:28DE:1142.0019: report_id 0 is invalid [ 1546.310949][ T10] hid-steam 0003:28DE:1142.0019: item 0 1 1 8 parsing failed [ 1546.311688][ T10] hid-steam 0003:28DE:1142.0019: steam_probe:parse of hid interface failed [ 1546.311767][ T10] hid-steam 0003:28DE:1142.0019: probe with driver hid-steam failed with error -22 [ 1546.551464][ T10] usb 8-1: USB disconnect, device number 33 [ 1547.763799][T13249] Bluetooth: hci4: command tx timeout [ 1547.803450][ T9921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.297468][ T9921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.556462][T19984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4780'. [ 1548.690218][ T9921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.836944][ T5815] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1549.250012][ T5815] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1549.250048][ T5815] usb 1-1: config 0 has no interface number 0 [ 1549.250097][ T5815] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1549.250121][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.292257][ T5815] usb 1-1: config 0 descriptor?? [ 1549.319437][ T5815] usb 1-1: selecting invalid altsetting 1 [ 1549.320875][ T5815] dvb_ttusb_budget: ttusb_init_controller: error [ 1549.320891][ T5815] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1549.437156][T19868] chnl_net:caif_netlink_parms(): no params data found [ 1549.579281][ T5815] DVB: Unable to find symbol cx22700_attach() [ 1549.669727][ T5815] DVB: Unable to find symbol tda10046_attach() [ 1549.669738][ T5815] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1549.685812][ T5815] usb 1-1: USB disconnect, device number 19 [ 1549.948757][T10905] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1549.991469][T13249] Bluetooth: hci4: command tx timeout [ 1550.115971][T10905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1550.116007][T10905] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1550.116058][T10905] usb 8-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 1550.116082][T10905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.132234][T10905] usb 8-1: config 0 descriptor?? [ 1550.162564][T20032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4799'. [ 1550.170264][T19868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.170561][T19868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.171243][T19868] bridge_slave_0: entered allmulticast mode [ 1550.186192][T19868] bridge_slave_0: entered promiscuous mode [ 1550.210719][T19868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.211269][T19868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.212067][T19868] bridge_slave_1: entered allmulticast mode [ 1550.227244][T19868] bridge_slave_1: entered promiscuous mode [ 1550.421514][ T9921] bridge_slave_1: left allmulticast mode [ 1550.421540][ T9921] bridge_slave_1: left promiscuous mode [ 1550.421750][ T9921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.527455][ T9921] bridge_slave_0: left allmulticast mode [ 1550.527483][ T9921] bridge_slave_0: left promiscuous mode [ 1550.527801][ T9921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.606762][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4810'. [ 1550.806396][T10905] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 1550.806435][T10905] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 1550.806465][T10905] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 1550.806494][T10905] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 1550.806522][T10905] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 1550.806551][T10905] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 1550.806579][T10905] maltron 0003:058F:9410.001A: unknown main item tag 0x0 [ 1550.810036][T10905] maltron 0003:058F:9410.001A: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.7-1/input0 [ 1551.659998][T10852] usb 8-1: USB disconnect, device number 34 [ 1551.839246][T20062] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.4812'. [ 1551.914838][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4815'. [ 1552.076794][T20076] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4819'. [ 1552.204506][T13249] Bluetooth: hci4: command tx timeout [ 1554.063835][T20112] hub 9-0:1.0: USB hub found [ 1554.064366][T20112] hub 9-0:1.0: 1 port detected [ 1554.712551][T20146] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4850'. [ 1556.075378][ T9921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.139438][ T9921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.163379][ T9921] bond0 (unregistering): Released all slaves [ 1556.173406][ T9921] bond1 (unregistering): Released all slaves [ 1556.362848][T20156] vlan2: entered promiscuous mode [ 1556.362862][T20156] geneve1: entered promiscuous mode [ 1556.362970][T20156] vlan2: entered allmulticast mode [ 1556.362978][T20156] geneve1: entered allmulticast mode [ 1556.386179][ T9921] : left promiscuous mode [ 1556.506516][T19868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1556.542695][T19868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1556.745407][ T9921] tipc: Disabling bearer [ 1556.745680][ T9921] tipc: Left network mode [ 1556.903033][T19868] team0: Port device team_slave_0 added [ 1556.916872][T19868] team0: Port device team_slave_1 added [ 1557.700967][T19868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.700979][T19868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1557.700994][T19868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1558.248834][T19868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1558.248851][T19868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1558.248890][T19868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1558.354839][T20229] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1558.688528][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4892'. [ 1558.930586][T19868] hsr_slave_0: entered promiscuous mode [ 1558.939367][T19868] hsr_slave_1: entered promiscuous mode [ 1558.962434][T19868] debugfs: 'hsr0' already exists in 'hsr' [ 1558.962460][T19868] Cannot create hsr debugfs directory [ 1559.325532][ T9921] hsr_slave_0: left promiscuous mode [ 1559.854234][ T9921] hsr_slave_1: left promiscuous mode [ 1559.855281][ T9921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1559.855305][ T9921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1559.992154][ T9921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1559.992177][ T9921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1560.151731][ T9921] veth1_macvtap: left promiscuous mode [ 1560.154446][ T9921] veth1_vlan: left promiscuous mode [ 1560.154592][ T9921] veth0_vlan: left promiscuous mode [ 1560.409595][T20275] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1562.737916][ T9921] team0 (unregistering): Port device team_slave_1 removed [ 1563.003654][ T9921] team0 (unregistering): Port device team_slave_0 removed [ 1565.559570][T20258] tipc: Started in network mode [ 1565.559593][T20258] tipc: Node identity 8, cluster identity 4711 [ 1565.559608][T20258] tipc: Node number set to 8 [ 1565.560699][T20258] tipc: Cannot configure node identity twice [ 1565.640059][T10852] infiniband syz1: ib_query_port failed (-19) [ 1565.701779][T20284] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4915'. [ 1565.701867][T20284] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4915'. [ 1565.804833][T20284] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4915'. [ 1565.804936][T20284] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4915'. [ 1566.134869][T20284] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4915'. [ 1566.134968][T20284] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4915'. [ 1566.264325][ T5815] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1566.344612][ T9685] kernel write not supported for file /uhid (pid: 9685 comm: kworker/1:10) [ 1566.431618][ T5815] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 1566.431653][ T5815] usb 1-1: config 8 has no interface number 0 [ 1566.431703][ T5815] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1566.431731][ T5815] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1566.481767][ T5815] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1566.481796][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.481816][ T5815] usb 1-1: Product: syz [ 1566.481830][ T5815] usb 1-1: Manufacturer: syz [ 1566.481845][ T5815] usb 1-1: SerialNumber: syz [ 1566.493336][T20315] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 1566.767766][ T5815] usb 1-1: USB disconnect, device number 20 [ 1566.905601][T10905] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1567.072559][T10905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1567.072594][T10905] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1567.072606][T10905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.075414][T10905] usb 4-1: config 0 descriptor?? [ 1567.573000][T10905] hid-picolcd 0003:04D8:C002.001B: No report with id 0x11 found [ 1567.753762][T18062] usb 4-1: USB disconnect, device number 26 [ 1567.774500][T20353] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4947'. [ 1567.890199][T19868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1567.949647][T19868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1567.993750][T19868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1568.056482][T20364] bridge0: entered promiscuous mode [ 1568.056544][T20364] macsec1: entered promiscuous mode [ 1568.057643][T20364] bridge0: port 3(macsec1) entered blocking state [ 1568.057851][T20364] bridge0: port 3(macsec1) entered disabled state [ 1568.057960][T20364] macsec1: entered allmulticast mode [ 1568.057969][T20364] bridge0: entered allmulticast mode [ 1568.147604][T20364] macsec1: left allmulticast mode [ 1568.147623][T20364] bridge0: left allmulticast mode [ 1568.184320][T20364] bridge0: left promiscuous mode [ 1568.349333][T19868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1568.455845][T18062] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1568.601858][T19868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1568.617841][T18062] usb 8-1: Using ep0 maxpacket: 8 [ 1568.624007][T18062] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 1568.626449][T18062] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1568.626475][T18062] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.626488][T18062] usb 8-1: Product: syz [ 1568.626495][T18062] usb 8-1: Manufacturer: syz [ 1568.626503][T18062] usb 8-1: SerialNumber: syz [ 1568.632103][T18062] usb 8-1: config 0 descriptor?? [ 1568.663666][T18062] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1568.663721][T18062] usb 8-1: setting power ON [ 1568.663738][T18062] dvb-usb: bulk message failed: -22 (2/0) [ 1568.667315][T19868] 8021q: adding VLAN 0 to HW filter on device team0 [ 1568.681924][T18062] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1568.685698][T18062] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1568.685755][T18062] usb 8-1: media controller created [ 1568.688966][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.689096][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1568.715480][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.715620][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1568.751439][T18062] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1568.799377][T10905] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1568.831113][T18062] usb 8-1: selecting invalid altsetting 6 [ 1568.831134][T18062] usb 8-1: digital interface selection failed (-22) [ 1568.831149][T18062] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1568.831822][T18062] usb 8-1: setting power OFF [ 1568.831835][T18062] dvb-usb: bulk message failed: -22 (2/0) [ 1568.831843][T18062] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1568.831850][T18062] (NULL device *): no alternate interface [ 1568.926715][T20374] dvb-usb: bulk message failed: -22 (6/0) [ 1568.953710][T18062] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1568.958185][T18062] usb 8-1: USB disconnect, device number 35 [ 1568.960388][T10905] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1568.960415][T10905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.992271][T10905] usb 1-1: config 0 descriptor?? [ 1569.213662][T10905] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1569.214180][T10905] [drm:udl_init] *ERROR* Selecting channel failed [ 1569.328644][T10905] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1569.328668][T10905] [drm] Initialized udl on minor 2 [ 1569.386211][T10905] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1569.388763][T10905] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1569.436346][T10905] usb 1-1: USB disconnect, device number 21 [ 1569.446865][T18062] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1569.495207][T19868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1570.075987][T19868] veth0_vlan: entered promiscuous mode [ 1570.110084][T19868] veth1_vlan: entered promiscuous mode [ 1570.163069][T19868] veth0_macvtap: entered promiscuous mode [ 1570.179951][T19868] veth1_macvtap: entered promiscuous mode [ 1570.207414][T19868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1570.229891][T19868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1570.260427][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.265682][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.265725][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.265760][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.361342][T10852] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1570.567379][T10852] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1570.567408][T10852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.567428][T10852] usb 1-1: Product: syz [ 1570.567444][T10852] usb 1-1: Manufacturer: syz [ 1570.567457][T10852] usb 1-1: SerialNumber: syz [ 1570.584543][T10852] usb 1-1: config 0 descriptor?? [ 1570.644378][T10852] hub 1-1:0.0: bad descriptor, ignoring hub [ 1570.644418][T10852] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1570.655481][T10852] f81232 1-1:0.0: f81534a converter detected [ 1570.840226][T10852] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1570.840254][T10852] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1570.866423][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.866440][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.873012][T10852] usb 1-1: USB disconnect, device number 22 [ 1570.875073][T10852] f81232 1-1:0.0: device disconnected [ 1570.990272][T17724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.990292][T17724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.920963][T20507] bridge0: entered promiscuous mode [ 1572.412629][T20528] genirq: Flags mismatch irq 4. 00202000 (pcl818) vs. 00202080 (ttyS0) [ 1572.614447][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1573.458327][ T31] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1573.458358][ T31] usb 5-1: config 0 has no interface number 0 [ 1573.458401][ T31] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1573.458446][ T31] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1573.458476][ T31] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1573.458510][ T31] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1573.458533][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.551632][ T31] usb 5-1: config 0 descriptor?? [ 1573.555467][ T31] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 1573.587865][ T5815] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1573.775119][T10905] usb 5-1: USB disconnect, device number 7 [ 1573.780524][ T5815] usb 8-1: Using ep0 maxpacket: 32 [ 1573.793773][ T5815] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.793806][ T5815] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1573.793839][ T5815] usb 8-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00 [ 1573.793861][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.798913][ T5815] usb 8-1: config 0 descriptor?? [ 1573.799821][T20550] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5031'. [ 1573.799851][T20550] block nbd0: not configured, cannot reconfigure [ 1573.994109][T18062] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1574.111759][T10905] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1574.157458][T18062] usb 4-1: config 5 has an invalid interface number: 18 but max is 0 [ 1574.157485][T18062] usb 4-1: config 5 has no interface number 0 [ 1574.157516][T18062] usb 4-1: config 5 interface 18 has no altsetting 0 [ 1574.161709][T18062] usb 4-1: New USB device found, idVendor=0489, idProduct=3313, bcdDevice=51.20 [ 1574.161737][T18062] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.161758][T18062] usb 4-1: Product: syz [ 1574.161773][T18062] usb 4-1: Manufacturer: syz [ 1574.161787][T18062] usb 4-1: SerialNumber: syz [ 1574.272522][T10905] usb 1-1: Using ep0 maxpacket: 32 [ 1574.279623][T10905] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1574.279648][T10905] usb 1-1: config 0 has no interface number 0 [ 1574.284440][T10905] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1574.284468][T10905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.284537][T10905] usb 1-1: Product: syz [ 1574.284551][T10905] usb 1-1: Manufacturer: syz [ 1574.284566][T10905] usb 1-1: SerialNumber: syz [ 1574.292143][T10905] usb 1-1: config 0 descriptor?? [ 1574.303967][T10905] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1574.357042][ T5815] apple 0003:05AC:0320.001C: unknown main item tag 0x0 [ 1574.357080][ T5815] apple 0003:05AC:0320.001C: unknown main item tag 0x0 [ 1574.392762][ T5815] apple 0003:05AC:0320.001C: hidraw0: USB HID v0.00 Device [HID 05ac:0320] on usb-dummy_hcd.7-1/input0 [ 1574.532553][T10905] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1574.588800][T10905] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1574.621757][T10905] usb 8-1: USB disconnect, device number 36 [ 1574.774444][T18062] usb 4-1: USB disconnect, device number 27 [ 1574.952708][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1574.953567][ T9685] usb 1-1: USB disconnect, device number 23 [ 1574.982278][ T9685] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1575.006793][ T9685] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1575.007470][ T9685] quatech2 1-1:0.51: device disconnected [ 1576.502427][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.502503][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1576.913549][T20670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5089'. [ 1578.048063][ T37] audit: type=1326 audit(1768983836.826:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20745 comm="syz.0.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494c5af749 code=0x7ffc0000 [ 1578.048330][ T37] audit: type=1326 audit(1768983836.826:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20745 comm="syz.0.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494c5af749 code=0x7ffc0000 [ 1578.049140][ T37] audit: type=1326 audit(1768983836.826:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20745 comm="syz.0.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f494c5af749 code=0x7ffc0000 [ 1578.050007][ T37] audit: type=1326 audit(1768983836.826:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20745 comm="syz.0.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494c5af749 code=0x7ffc0000 [ 1578.169716][T20751] netlink: 'syz.4.5129': attribute type 10 has an invalid length. [ 1578.220828][T20751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1578.233566][T20751] bond0: (slave team0): Enslaving as an active interface with an up link [ 1578.236057][T20751] netlink: 'syz.4.5129': attribute type 10 has an invalid length. [ 1578.275899][T20751] bond0: (slave team0): Releasing backup interface [ 1578.329000][T20751] bridge0: port 3(team0) entered blocking state [ 1578.330854][T20751] bridge0: port 3(team0) entered disabled state [ 1578.330976][T20751] team0: entered allmulticast mode [ 1578.330987][T20751] team_slave_0: entered allmulticast mode [ 1578.330998][T20751] team_slave_1: entered allmulticast mode [ 1578.332882][T20751] team0: entered promiscuous mode [ 1578.332893][T20751] team_slave_0: entered promiscuous mode [ 1578.333011][T20751] team_slave_1: entered promiscuous mode [ 1579.303859][T20815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5159'. [ 1579.478977][T10905] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1579.639290][T10905] usb 4-1: Using ep0 maxpacket: 16 [ 1579.640984][T10905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1579.641011][T10905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1579.641024][T10905] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1579.641047][T10905] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1579.641060][T10905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.647720][T10905] usb 4-1: config 0 descriptor?? [ 1579.660731][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1579.822899][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1579.822919][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1579.855894][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1579.855912][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1579.855923][ T9] usb 5-1: Product: syz [ 1579.855931][ T9] usb 5-1: Manufacturer: syz [ 1579.855939][ T9] usb 5-1: SerialNumber: syz [ 1579.859867][ T9] usb 5-1: config 0 descriptor?? [ 1579.868810][ T9] usb 5-1: selecting invalid altsetting 0 [ 1580.112292][T20830] hsr0: entered promiscuous mode [ 1580.122779][T20830] macsec2: entered promiscuous mode [ 1580.148936][T10905] microsoft 0003:045E:07DA.001D: ignoring exceeding usage max [ 1580.151103][T10905] microsoft 0003:045E:07DA.001D: unsupported Resolution Multiplier 0 [ 1580.157270][ T9] usb 5-1: USB disconnect, device number 8 [ 1580.168477][T10905] microsoft 0003:045E:07DA.001D: implement() called with n (152) > 32! (kworker/0:9) [ 1580.366944][T10905] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1580.366966][T10905] microsoft 0003:045E:07DA.001D: no inputs found [ 1580.366974][T10905] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway [ 1580.371350][T10905] usb 4-1: USB disconnect, device number 28 [ 1580.572687][T20844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5173'. [ 1580.572712][T20844] tipc: Started in network mode [ 1580.572736][T20844] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 1580.572783][T20844] tipc: Enabling of bearer rejected, failed to enable media [ 1580.680252][T20849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1580.870981][ T37] audit: type=1326 audit(1768983839.463:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20858 comm="syz.1.5181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f845fddf749 code=0x0 [ 1581.979655][T20915] Bluetooth: MGMT ver 1.23 [ 1582.150004][T20924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5211'. [ 1582.614421][T20947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5222'. [ 1582.788510][T20958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1582.987167][T20971] netlink: 'syz.1.5232': attribute type 1 has an invalid length. [ 1583.149502][T20976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1583.775266][T21005] usb usb1: check_ctrlrecip: process 21005 (syz.4.5249) requesting ep 01 but needs 81 [ 1583.775298][T21005] usb usb1: usbfs: process 21005 (syz.4.5249) did not claim interface 0 before use [ 1584.467703][T13249] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1585.181884][T21043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5266'. [ 1585.266739][T21049] xt_HMARK: proto mask must be zero with L3 mode [ 1585.618306][ T37] audit: type=1326 audit(1768983843.906:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21064 comm="syz.1.5277" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f845fddf749 code=0x0 [ 1585.695751][T21070] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1585.797739][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1585.966255][ T10] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1585.966291][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1585.966324][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 1585.966347][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.974346][ T10] usb 4-1: config 0 descriptor?? [ 1587.247382][ T10] wacom 0003:056A:00ED.001E: unbalanced collection at end of report description [ 1587.247827][ T10] wacom 0003:056A:00ED.001E: parse failed [ 1587.247881][ T10] wacom 0003:056A:00ED.001E: probe with driver wacom failed with error -22 [ 1587.287812][T21101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5293'. [ 1587.436096][T21109] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5297'. [ 1587.436120][T21109] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5297'. [ 1587.458009][T18062] usb 4-1: USB disconnect, device number 29 [ 1587.529779][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1587.690674][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1587.693917][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.693948][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1587.693985][ T10] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 1587.694009][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.749489][ T10] usb 5-1: config 0 descriptor?? [ 1588.274545][T21139] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5310'. [ 1588.403903][T21143] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5312'. [ 1588.403919][T21143] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5312'. [ 1589.219589][ T10] hid_mf 0003:0079:1801.001F: item fetching failed at offset 0/2 [ 1589.220399][ T10] hid_mf 0003:0079:1801.001F: HID parse failed. [ 1589.220472][ T10] hid_mf 0003:0079:1801.001F: probe with driver hid_mf failed with error -22 [ 1589.265025][ T10] usb 5-1: USB disconnect, device number 9 [ 1589.416506][T21155] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5317'. [ 1589.513060][T21161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5320'. [ 1589.535867][T21163] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5321'. [ 1589.614912][ T9685] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1589.850124][ T9685] usb 1-1: Using ep0 maxpacket: 8 [ 1589.855054][ T9685] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1589.855082][ T9685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.855135][ T9685] usb 1-1: Product: syz [ 1589.855149][ T9685] usb 1-1: Manufacturer: syz [ 1589.855163][ T9685] usb 1-1: SerialNumber: syz [ 1589.860097][ T9685] usb 1-1: config 0 descriptor?? [ 1589.872766][ T9685] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1590.112782][T21187] rdma_op ffff8880110f7a70 conn xmit_rdma 0000000000000000 [ 1590.415503][T21200] sp0: Synchronizing with TNC [ 1590.555490][ T9685] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 1590.555596][ T9685] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 1590.603500][ T9685] usb 1-1: USB disconnect, device number 24 [ 1591.382775][T21206] tipc: Invalid UDP bearer configuration [ 1591.382820][T21206] tipc: Enabling of bearer rejected, failed to enable media [ 1591.524398][T21216] __nla_validate_parse: 2 callbacks suppressed [ 1591.524410][T21216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5345'. [ 1591.730265][T21226] netlink: 'syz.3.5351': attribute type 3 has an invalid length. [ 1591.730287][T21226] netlink: 'syz.3.5351': attribute type 1 has an invalid length. [ 1591.730301][T21226] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5351'. [ 1592.324830][T21255] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5365'. [ 1592.423811][T21260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5368'. [ 1592.424280][T21261] CIFS: VFS: Malformed UNC in devname [ 1592.760173][T21282] netlink: 'syz.3.5378': attribute type 1 has an invalid length. [ 1593.142976][T10905] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1593.303332][T10905] usb 5-1: Using ep0 maxpacket: 8 [ 1593.306928][T10905] usb 5-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 1593.306957][T10905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.316712][T10905] usb 5-1: config 0 descriptor?? [ 1593.787961][T10905] a4tech 0003:09DA:001A.0020: hidraw0: USB HID v0.05 Device [HID 09da:001a] on usb-dummy_hcd.4-1/input0 [ 1593.989792][ T31] usb 5-1: USB disconnect, device number 10 [ 1594.264553][T21367] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5418'. [ 1594.416701][T21373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5421'. [ 1595.318804][T21402] program syz.3.5435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1595.612750][T13456] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1595.794644][T13456] usb 1-1: Using ep0 maxpacket: 16 [ 1595.796994][T13456] usb 1-1: config 0 has an invalid interface number: 198 but max is 0 [ 1595.797020][T13456] usb 1-1: config 0 has no interface number 0 [ 1595.800097][T13456] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=30.1d [ 1595.800126][T13456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.800147][T13456] usb 1-1: Product: syz [ 1595.800163][T13456] usb 1-1: Manufacturer: syz [ 1595.800178][T13456] usb 1-1: SerialNumber: syz [ 1595.810897][T13456] usb 1-1: config 0 descriptor?? [ 1595.891157][T13456] usb_ehset_test 1-1:0.198: probe with driver usb_ehset_test failed with error -32 [ 1596.094834][T13456] usb 1-1: USB disconnect, device number 25 [ 1596.887435][T21468] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5466'. [ 1597.766584][ T9685] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1597.927808][ T9685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.927860][ T9685] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1597.927885][ T9685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.945658][ T9685] usb 5-1: config 0 descriptor?? [ 1598.297077][ T5815] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1598.412454][ T9685] holtek 0003:1241:5015.0021: unbalanced delimiter at end of report description [ 1598.413196][ T9685] holtek 0003:1241:5015.0021: parse failed [ 1598.413268][ T9685] holtek 0003:1241:5015.0021: probe with driver holtek failed with error -22 [ 1598.456864][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 1598.460821][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.460876][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1598.460906][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1598.460930][ T5815] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1598.460952][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1598.462210][ T5815] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1598.462237][ T5815] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1598.462259][ T5815] usb 4-1: Manufacturer: syz [ 1598.478622][ T5815] usb 4-1: config 0 descriptor?? [ 1598.655126][ T9685] usb 5-1: USB disconnect, device number 11 [ 1598.866684][ T5815] rc_core: IR keymap rc-hauppauge not found [ 1598.866704][ T5815] Registered IR keymap rc-empty [ 1598.866822][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1598.884360][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1598.907453][ T5815] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1598.910401][ T5815] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input26 [ 1598.913948][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1598.927124][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1598.948497][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1598.970918][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1598.991412][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1599.012819][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1599.035280][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1599.056043][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1599.086531][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1599.101794][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1599.147951][ T5815] mceusb 4-1:0.0: Registered   with mce emulator interface version 1 [ 1599.147966][ T5815] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1599.301980][ T5815] usb 4-1: USB disconnect, device number 30 [ 1599.663569][T21593] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5526'. [ 1599.797246][T21601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5529'. [ 1599.797275][T21601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5529'. [ 1599.797291][T21601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5529'. [ 1600.028718][ T5815] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1600.199391][ T5815] usb 1-1: Using ep0 maxpacket: 32 [ 1600.215816][ T5815] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1600.217119][ T5815] usb 1-1: config 4 has an invalid interface number: 136 but max is 0 [ 1600.217144][ T5815] usb 1-1: config 4 has no interface number 0 [ 1600.217177][ T5815] usb 1-1: config 4 interface 136 has no altsetting 0 [ 1600.243602][ T5815] usb 1-1: string descriptor 0 read error: -22 [ 1600.243736][ T5815] usb 1-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=16.c8 [ 1600.243765][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.278032][ T5815] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state. [ 1600.278094][ T5815] dvb-usb: bulk message failed: -22 (4/0) [ 1600.278103][ T5815] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1600.278170][ T5815] dvb-usb: bulk message failed: -22 (5/0) [ 1600.278177][ T5815] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1600.281091][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1600.281099][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1600.292142][ T5815] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650) [ 1600.292195][ T5815] usb 1-1: media controller created [ 1600.345486][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1600.443214][ T5815] ttusb2: set interface to alts=3 failed [ 1600.507517][T21600] dvb-usb: bulk message failed: -22 (7/0) [ 1600.507537][T21600] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1600.507578][T21600] ttusb2: i2c transfer failed. [ 1600.590360][ T5815] DVB: Unable to find symbol tda10023_attach() [ 1600.590375][ T5815] dvb-usb: no frontend was attached by 'Technotrend TT-connect CT-3650' [ 1600.625035][ T37] audit: type=1326 audit(1768983857.936:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21630 comm="syz.3.5544" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe063cdf749 code=0x0 [ 1600.734271][ T5815] rc_core: IR keymap rc-tt-1500 not found [ 1600.734290][ T5815] Registered IR keymap rc-empty [ 1600.741323][ T5815] rc rc0: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1600.766640][ T5815] input: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input27 [ 1600.770289][ T5815] dvb-usb: schedule remote query interval to 150 msecs. [ 1600.770367][ T5815] dvb-usb: bulk message failed: -22 (4/0) [ 1600.770381][ T5815] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1600.770521][ T5815] dvb-usb: bulk message failed: -22 (5/0) [ 1600.770535][ T5815] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1600.770599][ T5815] dvb-usb: Technotrend TT-connect CT-3650 successfully initialized and connected. [ 1600.773693][ T5815] usb 1-1: USB disconnect, device number 26 [ 1600.907934][ T5815] dvb-usb: Technotrend TT-connect CT-3650 successfully deinitialized and disconnected. [ 1602.333651][T13227] Bluetooth: hci4: command 0x0405 tx timeout [ 1603.175565][T21715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5580'. [ 1603.321119][T21727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1603.328846][T21727] IPv6: NLM_F_CREATE should be set when creating new route [ 1603.328890][T21727] IPv6: NLM_F_CREATE should be set when creating new route [ 1603.346779][T21727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1603.503144][T10852] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1603.582905][T21742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5592'. [ 1603.690029][T10852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.690057][T10852] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1603.691213][T10852] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1603.691240][T10852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1603.691261][T10852] usb 4-1: SerialNumber: syz [ 1603.927155][T10852] usb 4-1: 0:2 : does not exist [ 1603.954437][T10852] usb 4-1: USB disconnect, device number 31 [ 1604.180353][T21765] sctp: [Deprecated]: syz.7.5605 (pid 21765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1604.180353][T21765] Use struct sctp_sack_info instead [ 1604.379529][T21778] netlink: 'syz.7.5611': attribute type 4 has an invalid length. [ 1605.505507][T21836] gfs2: gfs2 mount does not exist [ 1605.807361][T21855] program syz.0.5648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1606.382763][T21888] netlink: 'syz.4.5662': attribute type 1 has an invalid length. [ 1606.382777][T21888] netlink: 'syz.4.5662': attribute type 3 has an invalid length. [ 1606.382784][T21888] netlink: 'syz.4.5662': attribute type 2 has an invalid length. [ 1606.382791][T21888] netlink: 'syz.4.5662': attribute type 3 has an invalid length. [ 1606.382798][T21888] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5662'. [ 1607.787413][T21958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5694'. [ 1608.198213][T21982] ip6gre1: entered promiscuous mode [ 1608.198236][T21982] ip6gre1: entered allmulticast mode [ 1608.202558][ T4100] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1608.206693][ T4100] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1608.229355][T10852] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1608.325066][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1608.411262][T21992] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5708'. [ 1608.440354][T21994] io-wq is not configured for unbound workers [ 1608.499684][ T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1608.499714][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.504670][ T10] usb 4-1: config 0 descriptor?? [ 1608.760925][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1608.859855][T10852] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1608.902428][ T9685] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1608.975791][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 1609.056738][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1609.056761][ T10] [drm] Initialized udl on minor 2 [ 1609.073649][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1609.074103][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1609.121074][ T9685] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.121098][ T9685] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1609.121149][ T9685] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1609.121171][ T9685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.149936][ T9685] usb 5-1: config 0 descriptor?? [ 1609.169310][T10852] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1609.189219][ T10] usb 4-1: USB disconnect, device number 32 [ 1609.208678][T10852] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1609.208856][T10852] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1609.341932][T18062] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1609.819848][ T9685] Bluetooth: Can't get version to change to load ram patch err [ 1609.819868][ T9685] Bluetooth: Loading sysconfig file failed [ 1609.819904][ T9685] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 1609.837604][ T9685] usb 5-1: USB disconnect, device number 12 [ 1610.023398][T22032] dvmrp1: tun_chr_ioctl cmd 2147767521 [ 1610.087118][T22034] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5728'. [ 1610.942153][T22084] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5749'. [ 1611.006974][T22088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5751'. [ 1611.007039][T22088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5751'. [ 1611.479461][T22115] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5762'. [ 1612.014055][ T9685] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1612.174279][ T9685] usb 5-1: Using ep0 maxpacket: 16 [ 1612.176637][ T9685] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1612.176661][ T9685] usb 5-1: config 0 has no interface number 0 [ 1612.176698][ T9685] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1612.176715][ T9685] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1612.178536][ T9685] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1612.178564][ T9685] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1612.178584][ T9685] usb 5-1: Product: syz [ 1612.178598][ T9685] usb 5-1: SerialNumber: syz [ 1612.185369][ T9685] usb 5-1: config 0 descriptor?? [ 1612.222168][ T9685] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1612.225559][ T9685] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input28 [ 1612.529535][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.538121][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.538386][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.538617][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.538844][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.539785][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.540025][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.540250][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.540474][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.540704][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.591231][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1612.608158][ T10] usb 5-1: USB disconnect, device number 13 [ 1612.608297][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1612.670744][ T10] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1612.914590][T22168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5788'. [ 1612.914613][T22168] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5788'. [ 1612.970791][T22172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5788'. [ 1612.970813][T22172] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5788'. [ 1614.296328][T22205] netlink: 'syz.0.5804': attribute type 13 has an invalid length. [ 1614.296350][T22205] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5804'. [ 1614.300923][T22205] syz_tun: refused to change device tx_queue_len [ 1614.300942][T22205] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1615.493815][T22264] netlink: 'syz.3.5832': attribute type 3 has an invalid length. [ 1616.572740][ T37] audit: type=1326 audit(1768983872.854:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22312 comm="syz.1.5855" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f845fddf749 code=0x0 [ 1617.584210][T22342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5869'. [ 1617.832043][T22342] bond0: (slave bond_slave_1): Releasing backup interface [ 1618.033176][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1618.209128][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1618.210041][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1618.210061][ T10] usb 4-1: can't read configurations, error -71 [ 1618.386534][T22358] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 1619.019085][T22395] program syz.0.5893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1619.326775][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1619.492578][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.492603][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1619.492643][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1619.492668][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.543195][ T10] usb 4-1: config 0 descriptor?? [ 1620.016080][ T10] usb 4-1: string descriptor 0 read error: -71 [ 1620.019547][ T10] usb 4-1: USB disconnect, device number 34 [ 1620.695617][T22440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5915'. [ 1621.149048][T10340] wlan1: Trigger new scan to find an IBSS to join [ 1621.464129][T22475] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5931'. [ 1621.527342][T22481] program syz.7.5934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1621.657628][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1622.452985][T22501] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1622.677769][T22511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5946'. [ 1623.096130][T22526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5954'. [ 1623.098052][T22526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5954'. [ 1623.427786][T22534] pimreg: entered allmulticast mode [ 1623.434522][T22534] pimreg: left allmulticast mode [ 1623.657014][ T9685] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1623.814405][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5963'. [ 1623.819160][ T9685] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1623.819185][ T9685] usb 5-1: config 0 has no interface number 0 [ 1623.842616][ T9685] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1623.842638][ T9685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.842650][ T9685] usb 5-1: Product: syz [ 1623.842657][ T9685] usb 5-1: Manufacturer: syz [ 1623.842665][ T9685] usb 5-1: SerialNumber: syz [ 1623.845481][ T9685] usb 5-1: config 0 descriptor?? [ 1624.041806][T10852] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1624.078676][ T9685] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1624.081897][ T9685] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1624.082123][ T9685] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1624.082158][ T9685] usb 5-1: media controller created [ 1624.113743][ T9685] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1624.202187][T10852] usb 4-1: Using ep0 maxpacket: 32 [ 1624.204762][T10852] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1624.204788][T10852] usb 4-1: config 0 has no interface number 0 [ 1624.208530][T10852] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1624.208558][T10852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.208578][T10852] usb 4-1: Product: syz [ 1624.208593][T10852] usb 4-1: Manufacturer: syz [ 1624.208607][T10852] usb 4-1: SerialNumber: syz [ 1624.264007][T10852] usb 4-1: config 0 descriptor?? [ 1624.278256][T10852] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1624.409331][T17724] wlan1: Trigger new scan to find an IBSS to join [ 1624.516675][T10852] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1624.550052][T10852] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1624.966030][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1624.968773][T10852] usb 4-1: USB disconnect, device number 35 [ 1624.996724][T10852] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1625.027063][T10852] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1625.028325][T10852] quatech2 4-1:0.51: device disconnected [ 1625.342755][ T9685] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1625.407591][ T9685] usb 5-1: USB disconnect, device number 14 [ 1626.511102][T22606] 9p: Bad value for 'rfdno' [ 1626.526125][T22609] netlink: 'syz.4.5993': attribute type 2 has an invalid length. [ 1626.679441][T22613] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1626.790858][T22623] netlink: 277 bytes leftover after parsing attributes in process `syz.7.5999'. [ 1626.866554][T22619] sp0: Synchronizing with TNC [ 1627.645195][T10340] wlan1: Trigger new scan to find an IBSS to join [ 1627.720091][T22655] netlink: 'syz.1.6014': attribute type 15 has an invalid length. [ 1628.438309][T13249] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1628.658557][ T3444] wlan1: Creating new IBSS network, BSSID da:21:41:dd:f3:fc [ 1629.607304][T10833] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1629.727785][T22723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6044'. [ 1629.789610][T10833] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1629.789642][T10833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.793044][T10833] usb 4-1: config 0 descriptor?? [ 1629.824272][T10833] cp210x 4-1:0.0: cp210x converter detected [ 1630.253752][T10852] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1630.266968][T10833] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1630.307728][T10833] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1630.413998][T10852] usb 5-1: Using ep0 maxpacket: 32 [ 1630.417287][T10852] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1630.417314][T10852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.422189][T10852] usb 5-1: config 0 descriptor?? [ 1630.505793][T10833] usb 4-1: USB disconnect, device number 36 [ 1630.517530][T10833] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1630.645043][T10833] cp210x 4-1:0.0: device disconnected [ 1630.671075][T10852] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1630.703954][T10852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1630.705017][T10852] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1630.705070][T10852] usb 5-1: media controller created [ 1630.761614][T10852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1630.892065][T10852] az6027: usb out operation failed. (-71) [ 1630.892496][T10852] az6027: usb out operation failed. (-71) [ 1630.892510][T10852] stb0899_attach: Driver disabled by Kconfig [ 1630.892521][T10852] az6027: no front-end attached [ 1630.892521][T10852] [ 1630.892928][T10852] az6027: usb out operation failed. (-71) [ 1630.892940][T10852] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1630.934647][T10852] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 1630.936789][T10852] dvb-usb: schedule remote query interval to 400 msecs. [ 1630.936809][T10852] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1630.966457][T10852] usb 5-1: USB disconnect, device number 15 [ 1631.067537][T10852] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1632.007156][T18062] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1632.181997][T18062] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1632.182029][T18062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.209869][T18062] usb 5-1: config 0 descriptor?? [ 1632.223694][T18062] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1632.449551][T18062] gp8psk: usb in 128 operation failed. [ 1632.668807][T18062] gp8psk: FW Version = 45.65.142 (0x2d418e) Build 2187/10/70 [ 1632.884566][T18062] gp8psk: usb in 149 operation failed. [ 1632.884585][T18062] gp8psk: failed to get FPGA version [ 1632.910645][T18062] gp8psk: usb in 138 operation failed. [ 1632.910662][T18062] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1632.911554][T18062] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1632.911608][T18062] usb 5-1: media controller created [ 1632.991671][T18062] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1633.044809][T18062] gp8psk_fe: Frontend attached [ 1633.046784][T18062] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1633.048242][T18062] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1633.218992][T18062] gp8psk: usb in 138 operation failed. [ 1633.219009][T18062] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1633.219022][T18062] gp8psk: found Genpix USB device pID = 203 (hex) [ 1633.221648][T18062] usb 5-1: USB disconnect, device number 16 [ 1633.419733][T18062] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1635.227505][T11875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.730268][T13227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1635.736058][T13227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1635.744973][T13227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1635.749533][T13227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1635.750348][T13227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1635.875468][T11875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.953259][T22839] netem: change failed [ 1636.314704][T13227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1636.344149][T13227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1636.345868][T13227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1636.354649][T13227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1636.355352][T13227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1636.479286][T11875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.192677][T18062] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1637.366530][T18062] usb 5-1: Using ep0 maxpacket: 32 [ 1637.372925][T18062] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1637.372954][T18062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.372981][T18062] usb 5-1: Product: syz [ 1637.372995][T18062] usb 5-1: Manufacturer: syz [ 1637.373010][T18062] usb 5-1: SerialNumber: syz [ 1637.409363][T18062] usb 5-1: config 0 descriptor?? [ 1637.444741][T18062] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1637.861763][T18062] gspca_topro: reg_w err -71 [ 1637.889158][T18062] gspca_topro: Sensor soi763a [ 1637.908930][T13227] Bluetooth: hci3: command tx timeout [ 1637.913583][T18062] usb 5-1: USB disconnect, device number 17 [ 1638.191298][T22853] chnl_net:caif_netlink_parms(): no params data found [ 1638.213086][T11875] bridge_slave_1: left allmulticast mode [ 1638.213111][T11875] bridge_slave_1: left promiscuous mode [ 1638.213346][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.273826][T11875] bridge_slave_0: left allmulticast mode [ 1638.273852][T11875] bridge_slave_0: left promiscuous mode [ 1638.274097][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.278694][ T37] audit: type=1326 audit(1768983893.159:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22894 comm="syz.1.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1638.280267][ T37] audit: type=1326 audit(1768983893.159:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22894 comm="syz.1.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1638.281401][ T37] audit: type=1326 audit(1768983893.159:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22894 comm="syz.1.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1638.281541][ T37] audit: type=1326 audit(1768983893.159:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22894 comm="syz.1.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1638.282423][ T37] audit: type=1326 audit(1768983893.159:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22894 comm="syz.1.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1638.282835][ T37] audit: type=1326 audit(1768983893.159:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22894 comm="syz.1.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1638.432090][ T37] audit: type=1326 audit(1768983893.159:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22894 comm="syz.1.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1638.432246][ T37] audit: type=1326 audit(1768983893.300:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22894 comm="syz.1.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1638.432458][ T37] audit: type=1326 audit(1768983893.300:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22894 comm="syz.1.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1638.442071][ T37] audit: type=1326 audit(1768983893.300:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22894 comm="syz.1.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845fddf749 code=0x7ffc0000 [ 1638.593948][T13227] Bluetooth: hci5: command tx timeout [ 1639.448669][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1640.138923][T13227] Bluetooth: hci3: command tx timeout [ 1640.817059][T13227] Bluetooth: hci5: command tx timeout [ 1641.481137][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1641.546139][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1641.568425][T11875] bond0 (unregistering): Released all slaves [ 1641.833333][T22840] chnl_net:caif_netlink_parms(): no params data found [ 1641.840978][T11875] tipc: Left network mode [ 1641.962167][T11875] IPVS: stopping backup sync thread 19288 ... [ 1642.197903][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1642.197969][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1642.356949][T13227] Bluetooth: hci3: command tx timeout [ 1642.616711][T22853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.616940][T22853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.617229][T22853] bridge_slave_0: entered allmulticast mode [ 1642.619603][T22853] bridge_slave_0: entered promiscuous mode [ 1642.678732][T22853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.678800][T22853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.678931][T22853] bridge_slave_1: entered allmulticast mode [ 1642.680422][T22853] bridge_slave_1: entered promiscuous mode [ 1643.040861][T13227] Bluetooth: hci5: command tx timeout [ 1643.495540][T22840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.529104][T22840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.529348][T22840] bridge_slave_0: entered allmulticast mode [ 1643.531839][T22840] bridge_slave_0: entered promiscuous mode [ 1643.648791][T22853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.649095][T22840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.649209][T22840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.649383][T22840] bridge_slave_1: entered allmulticast mode [ 1643.652022][T22840] bridge_slave_1: entered promiscuous mode [ 1643.811936][T11875] hsr_slave_0: left promiscuous mode [ 1643.853477][T11875] hsr_slave_1: left promiscuous mode [ 1643.854528][T11875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1643.854552][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1643.907635][T11875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1643.907653][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1644.029476][T11875] veth1_macvtap: left promiscuous mode [ 1644.029546][T11875] veth0_macvtap: left promiscuous mode [ 1644.029685][T11875] veth1_vlan: left promiscuous mode [ 1644.029778][T11875] veth0_vlan: left promiscuous mode [ 1644.580483][T13227] Bluetooth: hci3: command tx timeout [ 1645.264730][T13227] Bluetooth: hci5: command tx timeout [ 1646.337822][T22993] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 1646.612377][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1647.008008][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1648.153144][T23010] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6174'. [ 1648.277684][T23010] nbd: socks must be embedded in a SOCK_ITEM attr [ 1650.004564][T22853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1650.339769][T22840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1650.493267][T10833] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1650.498630][T22840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1650.501367][T22853] team0: Port device team_slave_0 added [ 1650.611512][T22853] team0: Port device team_slave_1 added [ 1650.698833][T10833] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1650.698854][T10833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.698865][T10833] usb 5-1: Product: syz [ 1650.698873][T10833] usb 5-1: Manufacturer: syz [ 1650.698881][T10833] usb 5-1: SerialNumber: syz [ 1650.703209][T10833] usb 5-1: config 0 descriptor?? [ 1650.873230][T22840] team0: Port device team_slave_0 added [ 1650.879902][T22840] team0: Port device team_slave_1 added [ 1651.372763][T22853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.372774][T22853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.372789][T22853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1651.375543][T22840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.375556][T22840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.375583][T22840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1651.379400][T22853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.379604][T22853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.379621][T22853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1651.456074][T22840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.456091][T22840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.456117][T22840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1651.603829][T10833] usb 5-1: Firmware version (0.0) predates our first public release. [ 1651.603844][T10833] usb 5-1: Please update to version 0.2 or newer [ 1651.625270][T23048] syz.7.6190 (23048): /proc/23047/oom_adj is deprecated, please use /proc/23047/oom_score_adj instead. [ 1651.822245][T10833] usb 5-1: USB disconnect, device number 18 [ 1651.901861][T22853] hsr_slave_0: entered promiscuous mode [ 1651.902640][T22853] hsr_slave_1: entered promiscuous mode [ 1651.917601][T22853] debugfs: 'hsr0' already exists in 'hsr' [ 1651.917617][T22853] Cannot create hsr debugfs directory [ 1652.419500][T22840] hsr_slave_0: entered promiscuous mode [ 1652.421037][T22840] hsr_slave_1: entered promiscuous mode [ 1652.422082][T22840] debugfs: 'hsr0' already exists in 'hsr' [ 1652.422105][T22840] Cannot create hsr debugfs directory [ 1652.967737][T11875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.314117][T11875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.628522][T23086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6207'. [ 1653.737717][T11875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.790385][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6210'. [ 1653.920202][T23094] batadv_slave_1: entered promiscuous mode [ 1653.920745][T23097] batadv_slave_1: left promiscuous mode [ 1654.164180][T11875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.293182][T23111] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.6219'. [ 1654.293207][T23111] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.6219'. [ 1654.958379][T11875] bridge_slave_1: left allmulticast mode [ 1654.958407][T11875] bridge_slave_1: left promiscuous mode [ 1654.958661][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.050469][T11875] bridge_slave_0: left allmulticast mode [ 1655.050495][T11875] bridge_slave_0: left promiscuous mode [ 1655.050721][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.353045][T23164] sctp: [Deprecated]: syz.7.6244 (pid 23164) Use of int in max_burst socket option deprecated. [ 1655.353045][T23164] Use struct sctp_assoc_value instead [ 1657.442936][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.528465][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.552530][T11875] bond0 (unregistering): Released all slaves [ 1657.599986][T23166] netlink: 'syz.7.6245': attribute type 1 has an invalid length. [ 1657.916142][T11875] tipc: Disabling bearer [ 1657.916360][T11875] tipc: Left network mode [ 1658.002914][T23179] netlink: 'syz.4.6252': attribute type 3 has an invalid length. [ 1658.064489][T11875] IPVS: stopping master sync thread 19200 ... [ 1659.137502][T23209] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1659.415696][T23231] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6276'. [ 1659.453032][T11875] hsr_slave_0: left promiscuous mode [ 1659.498224][T11875] hsr_slave_1: left promiscuous mode [ 1659.499121][T11875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.499145][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.595108][T11875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1659.595134][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.736053][T11875] veth1_macvtap: left promiscuous mode [ 1659.736113][T11875] veth0_macvtap: left promiscuous mode [ 1659.736247][T11875] veth1_vlan: left promiscuous mode [ 1659.736347][T11875] veth0_vlan: left promiscuous mode [ 1660.468820][T11875] pimreg3 (unregistering): left allmulticast mode [ 1660.812058][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1661.952263][T23250] program syz.7.6285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1662.886300][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1663.163510][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1666.072125][T22853] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1666.119930][T22853] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1666.306107][T22853] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1666.363097][T22853] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1666.699763][T22840] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1666.751433][T22840] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1666.789993][T22840] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1666.915486][T22840] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1667.307854][T22853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1667.424639][T22853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1667.448146][ T9921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.448368][ T9921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1667.497196][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.497339][ T4100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1667.597919][T22840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1667.703051][T22840] 8021q: adding VLAN 0 to HW filter on device team0 [ 1667.743061][T17124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.743282][T17124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1667.794649][T17124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.794733][T17124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1668.182689][T23340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1668.183453][T23340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1668.338135][T22853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1668.567416][T22840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1668.757370][T23367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6325'. [ 1668.964193][T22853] veth0_vlan: entered promiscuous mode [ 1669.013452][T22853] veth1_vlan: entered promiscuous mode [ 1669.123606][T22853] veth0_macvtap: entered promiscuous mode [ 1669.145776][T22853] veth1_macvtap: entered promiscuous mode [ 1669.191502][T22853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1669.211157][T22853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1669.232748][T11875] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.234609][T22840] veth0_vlan: entered promiscuous mode [ 1669.235008][T11875] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.239948][T11875] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.239989][T11875] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.339409][T22840] veth1_vlan: entered promiscuous mode [ 1669.634551][T22840] veth0_macvtap: entered promiscuous mode [ 1669.637736][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.637755][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.670931][T22840] veth1_macvtap: entered promiscuous mode [ 1669.709738][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.709760][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.749185][T22840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1669.761910][T22840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1669.787941][T11875] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.788922][T11875] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.788963][T11875] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.788994][T11875] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.311076][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1670.311097][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1670.479501][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1670.479522][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1670.772743][T13227] Bluetooth: hci5: connection err: -111 [ 1671.143012][T23437] binder: 23434:23437 ioctl c018620c 200000000180 returned -1 [ 1671.225709][ T37] audit: type=1326 audit(1768983923.968:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23440 comm="syz.4.6356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7424d3f749 code=0x0 [ 1671.267322][ T5815] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1671.382053][T23451] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6359'. [ 1671.424157][T23453] input: syz0 as /devices/virtual/input/input31 [ 1671.455085][ T5815] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1671.455119][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1671.455146][ T5815] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1671.488477][ T5815] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1671.488507][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.488528][ T5815] usb 6-1: Product: syz [ 1671.488542][ T5815] usb 6-1: Manufacturer: syz [ 1671.488557][ T5815] usb 6-1: SerialNumber: syz [ 1671.494105][ T5815] usb 6-1: config 0 descriptor?? [ 1671.495355][T23429] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1671.692680][T23459] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6363'. [ 1671.692835][T23459] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6363'. [ 1671.753886][T23429] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1672.009295][T10833] usb 6-1: USB disconnect, device number 6 [ 1672.108984][T23477] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6372'. [ 1672.327510][T23486] netlink: 277 bytes leftover after parsing attributes in process `syz.1.6376'. [ 1673.219814][T23529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6395'. [ 1673.219835][T23529] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6395'. [ 1673.661810][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1673.757433][T23543] __nla_validate_parse: 1 callbacks suppressed [ 1673.757452][T23543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6402'. [ 1674.127036][T23561] program syz.5.6411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1674.437276][ T37] audit: type=1107 audit(1768983926.943:455): pid=23571 uid=0 auid=0 ses=1 subj=_ msg='' [ 1674.720173][ T5989] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1674.824250][T23597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6428'. [ 1674.904202][ T5989] usb 6-1: config 0 has no interfaces? [ 1674.907911][ T5989] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1674.907940][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1674.907961][ T5989] usb 6-1: Product: syz [ 1674.907976][ T5989] usb 6-1: Manufacturer: syz [ 1674.936230][ T5989] usb 6-1: config 0 descriptor?? [ 1674.967115][T23600] netlink: 'syz.4.6430': attribute type 14 has an invalid length. [ 1675.170590][ T5989] usb 6-1: USB disconnect, device number 7 [ 1675.258124][T23611] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 1675.547236][T23620] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1675.550715][T23620] team0: Port device batadv1 added [ 1675.626549][T23624] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6440'. [ 1675.628320][T23624] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6440'. [ 1675.827306][T23629] netlink: 'syz.1.6443': attribute type 2 has an invalid length. [ 1676.680536][ T5989] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1676.848950][ T5989] usb 6-1: Using ep0 maxpacket: 8 [ 1676.851483][ T5989] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1676.851507][ T5989] usb 6-1: config 0 has no interface number 0 [ 1676.851555][ T5989] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1676.851598][ T5989] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1676.851622][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.873130][ T5989] usb 6-1: config 0 descriptor?? [ 1676.922941][ T5989] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1676.923169][T23657] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6456'. [ 1677.096298][ T10] usb 6-1: USB disconnect, device number 8 [ 1677.717683][ T37] audit: type=1326 audit(1768984186.045:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23689 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7424d3f749 code=0x7ffc0000 [ 1678.730418][T23730] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6488'. [ 1678.730444][T23730] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6488'. [ 1678.732165][T23730] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6488'. [ 1678.732186][T23730] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6488'. [ 1678.976816][T23743] 9p: Bad value for 'rfdno' [ 1679.304414][T23758] 9p: Bad value for 'rfdno' [ 1680.072188][T23793] team0: No ports can be present during mode change [ 1680.172091][T23798] netlink: 'syz.4.6521': attribute type 2 has an invalid length. [ 1680.441969][T13227] block nbd0: Receive control failed (result -32) [ 1681.230809][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1681.391349][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1681.393659][ T10] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1681.393687][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.410279][ T10] usb 10-1: config 0 descriptor?? [ 1681.605072][T23841] tap0: tun_chr_ioctl cmd 1074812118 [ 1681.641381][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1681.648743][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1681.650749][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1681.650801][ T10] usb 10-1: media controller created [ 1681.683258][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1681.867116][ T10] az6027: usb out operation failed. (-71) [ 1681.867534][ T10] az6027: usb out operation failed. (-71) [ 1681.867547][ T10] stb0899_attach: Driver disabled by Kconfig [ 1681.867557][ T10] az6027: no front-end attached [ 1681.867557][ T10] [ 1681.867948][ T10] az6027: usb out operation failed. (-71) [ 1681.867961][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1681.870632][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input32 [ 1681.896572][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1681.896594][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1681.904022][ T10] usb 10-1: USB disconnect, device number 6 [ 1682.122529][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1682.567134][ T5815] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1682.581925][T23887] program syz.5.6560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1682.738407][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 1682.742598][ T5815] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1682.742625][ T5815] usb 5-1: config 0 has no interface number 0 [ 1682.742673][ T5815] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1682.742699][ T5815] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1682.742725][ T5815] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1682.742752][ T5815] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1682.742794][ T5815] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1682.742819][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.803589][ T5815] usb 5-1: config 0 descriptor?? [ 1682.822375][ T5815] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1682.844173][T23901] netlink: 'syz.9.6566': attribute type 21 has an invalid length. [ 1683.001171][T23908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6570'. [ 1683.001194][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6570'. [ 1683.001222][T23908] netlink: 'syz.5.6570': attribute type 18 has an invalid length. [ 1683.070951][T10852] usb 5-1: USB disconnect, device number 19 [ 1683.088191][T10852] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1683.205223][T23921] netlink: 'syz.1.6577': attribute type 10 has an invalid length. [ 1683.237949][T23921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1683.252065][T23921] batadv0: entered promiscuous mode [ 1683.253302][T23921] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1683.935746][ T5815] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1684.108839][ T5815] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1684.108870][ T5815] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1684.108891][ T5815] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1684.108948][ T5815] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1684.108976][ T5815] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1684.111189][ T5815] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1684.111216][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1684.111237][ T5815] usb 6-1: Product: syz [ 1684.111252][ T5815] usb 6-1: Manufacturer: syz [ 1684.212775][ T5815] cdc_wdm 6-1:1.0: skipping garbage [ 1684.212795][ T5815] cdc_wdm 6-1:1.0: skipping garbage [ 1684.255169][ T5815] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1684.255252][ T5815] cdc_wdm 6-1:1.0: Unknown control protocol [ 1685.098263][T23988] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6609'. [ 1686.921186][ T5989] usb 6-1: USB disconnect, device number 9 [ 1687.395681][T24060] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6644'. [ 1687.402411][T24057] loop5: detected capacity change from 0 to 7 [ 1687.423486][T24057] Dev loop5: unable to read RDB block 7 [ 1687.423534][T24057] loop5: AHDI p1 p2 p3 [ 1687.423564][T24057] loop5: partition table partially beyond EOD, truncated [ 1687.423679][T24057] loop5: p1 size 16318467 extends beyond EOD, truncated [ 1687.453218][T24057] loop5: p2 start 167772160 is beyond EOD, truncated [ 1688.474436][T24070] syz.7.6645 (24070) used obsolete PPPIOCDETACH ioctl [ 1688.990801][T24098] netlink: 84 bytes leftover after parsing attributes in process `syz.9.6660'. [ 1689.577978][T24124] ALSA: mixer_oss: invalid OSS volume '' [ 1689.646942][T24126] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.6674'. [ 1690.474167][T24151] sch_fq: defrate 8 ignored. [ 1690.948648][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1691.109049][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1691.112184][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.117915][ T9] usb 10-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 1691.117942][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.117963][ T9] usb 10-1: Product: syz [ 1691.117978][ T9] usb 10-1: Manufacturer: syz [ 1691.117994][ T9] usb 10-1: SerialNumber: syz [ 1691.175557][ T9] usb 10-1: config 0 descriptor?? [ 1691.434897][ T9] kaweth 10-1:0.0: Firmware present in device. [ 1691.634341][ T9] kaweth 10-1:0.0: Statistics collection: 0 [ 1691.634364][ T9] kaweth 10-1:0.0: Multicast filter limit: 0 [ 1691.634379][ T9] kaweth 10-1:0.0: MTU: 0 [ 1691.634393][ T9] kaweth 10-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1691.867680][T24209] input: syz1 as /devices/virtual/input/input33 [ 1691.867721][T24209] input: failed to attach handler leds to device input33, error: -6 [ 1692.066002][ T9] kaweth 10-1:0.0: Error setting SOFS wait [ 1692.066272][ T9] kaweth 10-1:0.0: probe with driver kaweth failed with error -5 [ 1692.070347][ T9] usb 10-1: USB disconnect, device number 7 [ 1692.081842][ T9685] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1692.244497][ T9685] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1692.244557][ T9685] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1692.244580][ T9685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1692.244594][ T9685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1692.244607][ T9685] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1692.248160][ T9685] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1692.248189][ T9685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1692.248209][ T9685] usb 5-1: Product: syz [ 1692.248219][ T9685] usb 5-1: Manufacturer: syz [ 1692.248226][ T9685] usb 5-1: SerialNumber: syz [ 1692.252003][ T9685] usb 5-1: config 0 descriptor?? [ 1692.498840][T10833] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1692.573644][ T9685] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1692.573670][ T9685] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1692.659186][T10833] usb 6-1: Using ep0 maxpacket: 32 [ 1692.661620][T10833] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1692.661645][T10833] usb 6-1: config 0 has no interface number 0 [ 1692.669574][T10833] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1692.669784][T10833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.669858][T10833] usb 6-1: Product: syz [ 1692.669873][T10833] usb 6-1: Manufacturer: syz [ 1692.669888][T10833] usb 6-1: SerialNumber: syz [ 1692.718170][T10833] usb 6-1: config 0 descriptor?? [ 1692.743775][T10833] smsc95xx v2.0.0 [ 1692.785518][ T9685] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1692.785533][ T9685] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1692.785544][ T9685] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1692.940063][ T43] ------------[ cut here ]------------ [ 1692.940076][ T43] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 1692.940100][ T43] WARNING: net/mac80211/tx.c:758 at ieee80211_tx_h_rate_ctrl+0xbe9/0x1760, CPU#0: kworker/u8:2/43 [ 1692.940236][ T43] Modules linked in: [ 1692.940268][ T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1692.940294][ T43] Tainted: [L]=SOFTLOCKUP [ 1692.940301][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1692.940314][ T43] Workqueue: events_unbound cfg80211_wiphy_work [ 1692.940386][ T43] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc56/0x1760 [ 1692.940406][ T43] Code: 00 00 48 8b 44 24 50 8b 30 45 31 ff 83 e6 07 41 0f 95 c7 31 ff e8 6a 32 70 f7 43 8d 0c 7f 83 c1 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 be 01 00 00 00 49 bf 00 00 00 00 00 fc ff df e9 [ 1692.940423][ T43] RSP: 0018:ffffc90000b57380 EFLAGS: 00010206 [ 1692.940438][ T43] RAX: ffffffff8a4f7f66 RBX: ffffffff8eeaf580 RCX: 0000000000000005 [ 1692.940453][ T43] RDX: ffff88802a7dea84 RSI: ffff88803c63d9c8 RDI: ffffffff8eeaf580 [ 1692.940466][ T43] RBP: ffffc90000b574e8 R08: 0000000000000000 R09: 0000000000000000 [ 1692.940478][ T43] R10: dffffc0000000000 R11: ffffed101475865f R12: ffff88802a7dea84 [ 1692.940492][ T43] R13: 1ffff9200016ae84 R14: ffff88803c63d9c8 R15: 0000000000000001 [ 1692.940505][ T43] FS: 0000000000000000(0000) GS:ffff888126cee000(0000) knlGS:0000000000000000 [ 1692.940521][ T43] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1692.940534][ T43] CR2: 0000001b3101dff8 CR3: 0000000083110000 CR4: 00000000003526f0 [ 1692.940551][ T43] Call Trace: [ 1692.940562][ T43] [ 1692.940589][ T43] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1692.940617][ T43] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 1692.940672][ T43] invoke_tx_handlers_late+0xbd/0x18b0 [ 1692.940702][ T43] ? invoke_tx_handlers_early+0xa24/0x1d70 [ 1692.940735][ T43] ieee80211_tx+0x2ac/0x460 [ 1692.940791][ T43] ? __pfx_ieee80211_tx+0x10/0x10 [ 1692.940851][ T43] ? __local_bh_disable_ip+0x3c/0x420 [ 1692.940935][ T43] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 1692.940957][ T43] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 1692.940984][ T43] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 1692.941032][ T43] ieee80211_scan_state_send_probe+0x594/0xa00 [ 1692.941080][ T43] ieee80211_scan_work+0x65f/0x1c50 [ 1692.941133][ T43] cfg80211_wiphy_work+0x2ab/0x450 [ 1692.941158][ T43] ? process_scheduled_works+0x9ef/0x1770 [ 1692.941193][ T43] process_scheduled_works+0xad1/0x1770 [ 1692.941246][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 1692.941265][ T43] ? do_raw_spin_lock+0x121/0x290 [ 1692.941314][ T43] worker_thread+0x8a0/0xda0 [ 1692.941369][ T43] kthread+0x711/0x8a0 [ 1692.941398][ T43] ? __pfx_worker_thread+0x10/0x10 [ 1692.941425][ T43] ? __pfx_kthread+0x10/0x10 [ 1692.941445][ T43] ? rt_spin_unlock+0x150/0x200 [ 1692.941550][ T43] ? rt_spin_unlock+0x161/0x200 [ 1692.941572][ T43] ? __pfx_kthread+0x10/0x10 [ 1692.941598][ T43] ret_from_fork+0x510/0xa50 [ 1692.941628][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 1692.941647][ T43] ? __switch_to+0xc9e/0x1480 [ 1692.941679][ T43] ? __pfx_kthread+0x10/0x10 [ 1692.941705][ T43] ret_from_fork_asm+0x1a/0x30 [ 1692.941768][ T43] [ 1692.941785][ T43] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1692.941801][ T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1692.941828][ T43] Tainted: [L]=SOFTLOCKUP [ 1692.941835][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1692.941846][ T43] Workqueue: events_unbound cfg80211_wiphy_work [ 1692.941869][ T43] Call Trace: [ 1692.941876][ T43] [ 1692.941884][ T43] vpanic+0x1e0/0x670 [ 1692.941921][ T43] panic+0xb9/0xc0 [ 1692.941944][ T43] ? __pfx_panic+0x10/0x10 [ 1692.941979][ T43] ? ret_from_fork_asm+0x1a/0x30 [ 1692.942010][ T43] __warn+0x317/0x4b0 [ 1692.942031][ T43] ? ieee80211_tx_h_rate_ctrl+0xbe9/0x1760 [ 1692.942054][ T43] ? ieee80211_tx_h_rate_ctrl+0xbe9/0x1760 [ 1692.942074][ T43] __report_bug+0x288/0x500 [ 1692.942132][ T43] ? arch_stack_walk+0x11c/0x150 [ 1692.942156][ T43] ? ieee80211_tx_h_rate_ctrl+0xbe9/0x1760 [ 1692.942183][ T43] ? __pfx___report_bug+0x10/0x10 [ 1692.942210][ T43] ? stack_depot_save_flags+0x33/0x810 [ 1692.942322][ T43] report_bug_entry+0x19a/0x290 [ 1692.942349][ T43] ? ieee80211_tx_h_rate_ctrl+0xc56/0x1760 [ 1692.942367][ T43] ? ieee80211_tx_h_rate_ctrl+0xc5b/0x1760 [ 1692.942385][ T43] handle_bug+0xca/0x200 [ 1692.942454][ T43] exc_invalid_op+0x1a/0x50 [ 1692.942476][ T43] asm_exc_invalid_op+0x1a/0x20 [ 1692.942513][ T43] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc56/0x1760 [ 1692.942534][ T43] Code: 00 00 48 8b 44 24 50 8b 30 45 31 ff 83 e6 07 41 0f 95 c7 31 ff e8 6a 32 70 f7 43 8d 0c 7f 83 c1 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 be 01 00 00 00 49 bf 00 00 00 00 00 fc ff df e9 [ 1692.942550][ T43] RSP: 0018:ffffc90000b57380 EFLAGS: 00010206 [ 1692.942567][ T43] RAX: ffffffff8a4f7f66 RBX: ffffffff8eeaf580 RCX: 0000000000000005 [ 1692.942582][ T43] RDX: ffff88802a7dea84 RSI: ffff88803c63d9c8 RDI: ffffffff8eeaf580 [ 1692.942597][ T43] RBP: ffffc90000b574e8 R08: 0000000000000000 R09: 0000000000000000 [ 1692.942609][ T43] R10: dffffc0000000000 R11: ffffed101475865f R12: ffff88802a7dea84 [ 1692.942624][ T43] R13: 1ffff9200016ae84 R14: ffff88803c63d9c8 R15: 0000000000000001 [ 1692.942646][ T43] ? ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 1692.942692][ T43] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1692.942719][ T43] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 1692.942750][ T43] invoke_tx_handlers_late+0xbd/0x18b0 [ 1692.942781][ T43] ? invoke_tx_handlers_early+0xa24/0x1d70 [ 1692.942815][ T43] ieee80211_tx+0x2ac/0x460 [ 1692.942845][ T43] ? __pfx_ieee80211_tx+0x10/0x10 [ 1692.942894][ T43] ? __local_bh_disable_ip+0x3c/0x420 [ 1692.942928][ T43] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 1692.942949][ T43] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 1692.942977][ T43] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 1692.942999][ T43] ieee80211_scan_state_send_probe+0x594/0xa00 [ 1692.943046][ T43] ieee80211_scan_work+0x65f/0x1c50 [ 1692.943097][ T43] cfg80211_wiphy_work+0x2ab/0x450 [ 1692.943123][ T43] ? process_scheduled_works+0x9ef/0x1770 [ 1692.943147][ T43] process_scheduled_works+0xad1/0x1770 [ 1692.943200][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 1692.943220][ T43] ? do_raw_spin_lock+0x121/0x290 [ 1692.943259][ T43] worker_thread+0x8a0/0xda0 [ 1692.943308][ T43] kthread+0x711/0x8a0 [ 1692.943343][ T43] ? __pfx_worker_thread+0x10/0x10 [ 1692.943365][ T43] ? __pfx_kthread+0x10/0x10 [ 1692.943385][ T43] ? rt_spin_unlock+0x150/0x200 [ 1692.943415][ T43] ? rt_spin_unlock+0x161/0x200 [ 1692.943437][ T43] ? __pfx_kthread+0x10/0x10 [ 1692.943464][ T43] ret_from_fork+0x510/0xa50 [ 1692.943488][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 1692.943511][ T43] ? __switch_to+0xc9e/0x1480 [ 1692.943543][ T43] ? __pfx_kthread+0x10/0x10 [ 1692.943569][ T43] ret_from_fork_asm+0x1a/0x30 [ 1692.943613][ T43] [ 1692.943933][ T43] Kernel Offset: disabled