last executing test programs: 10.791972689s ago: executing program 0 (id=2263): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) r2 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x1030, 0x3e, 0x107, 0xfffffffe, 0x0, {0x11, 0x7c}, [@generic="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", @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x17, 0x0, 0x1, [@nested={0x4, 0x92}, @generic='}']}]}]}, 0x1030}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) r10 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x480) r11 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000400), 0x2) sendmmsg$unix(r9, &(0x7f0000000480)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)="23e9530e89a9a1f2ed7e3675a74c89e1ec959bd5210cb892c1a8d080e5e20db71de44a75bd1f19aa90a3ec66bdf57ed86a1986936353712d2736ded85b23d43abe232e67bc37e4d5396e69dc56a1dbb26505a70b8ab4bc6f0b5f1316bb07f9dd9079988ef49cb0d81179beda03a8e2eeca3a69f425516e80bf75a7c7008a81f5b8e4af9240105598eaee1318bf17b4ba9740de0f01fb9c369ac1e12438daa1327ab5e1ad235ecd6bd5aebc67a5", 0xad}, {&(0x7f0000000340)="6dd264a4cb349b283b2e45046b15a5844eb60e8edebb2a292e88cb66bd8a5762b13d0faec6e5cb20d2906a64f2e65cac51e16c1968a718d11c3ba6299407adf139462ef3dfee8d5dfe135cc934fba5ad8b78caffdff9d987941de1d152cbaa55aa4e0e7aa28cf17a429274084fee5033", 0x70}], 0x2, &(0x7f0000000440)=[@rights={{0x24, 0x1, 0x1, [r10, r11, r4, r6, r6]}}], 0x28, 0x4000010}}], 0x1, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 9.736214023s ago: executing program 0 (id=2270): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fcntl$getown(r0, 0x9) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x7, 0x8, 0x0, 0x3}, 0x0) rt_sigpending(0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) sendfile(r3, r3, 0x0, 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xaf) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000203505a8a440000102030109022400010109900d5adae8480997eb3631924109040006020701010209050102"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x100000000000000) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3377f877c734c40400", "000100", "0200", "be4d22a4", ["c386afeeffffffffffffec00", "51f3541a910080ffffcb3a10", "e100"]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xe, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}], 0x1c) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x28) 9.328134151s ago: executing program 3 (id=2273): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045f10030006600000501904cb27864010100ac1414bb0b0090780006009e1d1718edf200455c003b00657b74be41578cafce76b49840060004e00000017f000001"], 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x10, 0x70bd2d, 0x2ddfdbba, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[], 0x0) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0xfffffffffffffec4, 0xfffffffffffffffe) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000540)=ANY=[@ANYRES8, @ANYRESHEX], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa6442, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) 8.140156378s ago: executing program 3 (id=2275): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_sigqueueinfo(r0, 0x3d, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) 7.72300882s ago: executing program 3 (id=2277): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x500000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.556160978s ago: executing program 3 (id=2279): r0 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502", @ANYRES16], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="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"]) 6.866861084s ago: executing program 1 (id=2283): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x45, @ioapic={0xd000, 0xfffffbff, 0x2, 0x9, 0x0, [{0x3, 0x6}, {0x6, 0xf8, 0xb, '\x00', 0xda}, {0xff, 0x9, 0x3, '\x00', 0xe2}, {0x5, 0xe, 0x7, '\x00', 0x3}, {0x8, 0x2, 0x4, '\x00', 0x40}, {0x9, 0x5, 0xd, '\x00', 0xea}, {0x9, 0x68, 0x4, '\x00', 0xe}, {0x26, 0x8, 0xa0, '\x00', 0x56}, {0x3, 0x7, 0x4, '\x00', 0x4}, {0x13, 0x10, 0x9d, '\x00', 0x1}, {0x0, 0xc2, 0x38, '\x00', 0x6}, {0x5, 0x1, 0x5, '\x00', 0x4}, {0x7, 0x2, 0x1}, {0xe, 0x0, 0x8, '\x00', 0x8}, {0xa, 0xb, 0x9, '\x00', 0x7}, {0x7f, 0x2, 0x80, '\x00', 0x65}, {0x9c, 0x3, 0x8, '\x00', 0xe}, {0x6, 0x1, 0x6, '\x00', 0x3}, {0x1, 0x9, 0x1, '\x00', 0xb}, {0x4, 0x81, 0x9}, {0x2f, 0xf, 0x1c, '\x00', 0x2}, {0x6, 0x1, 0xf, '\x00', 0xfc}, {0x10, 0x1, 0x4, '\x00', 0x7}, {0x81, 0x3, 0x1, '\x00', 0x9}]}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.426709871s ago: executing program 4 (id=2285): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045f10030006600000501904cb27864010100ac1414bb0b0090780006009e1d1718edf200455c003b00657b74be41578cafce76b49840060004e00000017f000001"], 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x10, 0x70bd2d, 0x2ddfdbba, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[], 0x0) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0xfffffffffffffec4, 0xfffffffffffffffe) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000540)=ANY=[@ANYRES8, @ANYRESHEX], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa6442, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) 6.280225097s ago: executing program 0 (id=2286): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 6.272666554s ago: executing program 1 (id=2287): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) lseek(0xffffffffffffffff, 0x3, 0x3) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x3, 0xe92, 0x19}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$clear(0x5, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=',$@\x00', 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040800) io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x9a74, 0x0, 0x4, 0x15c}) pipe(&(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffffffffffffc}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4072, 0xfe8}], 0x1, 0x0, 0x0, 0x1f) 6.227255646s ago: executing program 0 (id=2288): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3f8, 0x2, 0x4070bd28}, 0x384}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001ad1eb7900010a0000010004000000800000df03"], 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)}], 0x1}, 0x4000000) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r5]) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000300)={0x2, 0xffffffffffffffff, 0x80000}) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000160a05ffeb00000000000000010000000900020073797a30000000000900010073797a300000000008000740000000032c00038008000240000000000800014000000000180003801400010073697430000000000000000000000000140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 5.611969614s ago: executing program 4 (id=2290): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{&(0x7f00000001c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)="3450c3352abf6040dc6d4e4eb8ce5e29d02478a6b75531afeaeb9d7733e7c495939cfce00ff35a2f81d4f7b0b92f3125564dffc3321a2c04b9d7eb28458354442099b85335023c910ca6b61f887e881f3cabd99dc1d14eead62f3d4b7f89723f4fe2a9ad6717cc1d57914658cfae512fbc6ddefe7d250398b7d711feb6c666d43f82812f572cc7e502467398752decc02f705cd7470bda3fbfd864eea5290a285bfdf7387d42090ff48e7a33a646907eaf038a0a90aef4b74112d39609749674c81030d61a78418d6c8547ee52f0fd338dbd78dd2f5440667e0e5982c6304fc9bf5eb7cd7f", 0xe5}], 0x1, &(0x7f0000000540)=[{0x70, 0x114, 0x2, "97719aedf047fce5bfe1137d01c38aafa26a9d1a1abec2ecb363a710a97e7b59fc45dfd3df211a624a3f6b079f0cee511da46c0c454901e019eb40af8fa962e2d9666d3fe6c84c074fee3731ebd8e66680f1ab2519862d00e82b1843b9b1ee8b"}, {0xf70, 0x107, 0xeb, "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"}, {0x48, 0x6, 0x5669, "b7edeb0014c2366b57bcc80c3baf892c82a981887266e7781a230d4469e943ec073a2486965ca2ddfc1cd87cfe87fe689e9c5ae3449f9e"}], 0x1028}}, {{&(0x7f0000000280)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="ee957f64fef4d490ddd3cf70e7ed17d5ce4bf7c1", 0x14}, {&(0x7f0000000140)="389ccbfc8309287112", 0x9}], 0x2, &(0x7f00000016c0)=[{0x70, 0x118, 0x87, "ff6a14a80378ee7bc3df8c84aa6de5c844b77b886220a291ec6b11dae9916501deef81b8759b8a0e47aae5454363534537e5019a63fdf4c84043b57f8bf2fd7a3ea64dabbf3a79c3a521e084d2217fd20fe090fbf281b1c6b05d"}, {0xd0, 0x11, 0xff, "76ae33db34e96ebfd8368753af0575e76c5d1fa266ca4d7ae97d318edf4700ef2e35fb438c102a3d0c4e6fd74710ca9de46ca117f05035937c38640a69f2a09fa4e44e17da34488251f7afbfeef0f2da1f04d10dcaa451a63915b7cd180fad92350b49e888b4ab44fd0998a5fea5d511746f24e1ac161f2b5f44e4f391908a4d2df3c5e5429237640eef6224ea417fb7d08044fbe89d0114de81a74bcf0d8e506cefeaa0ea2287e500c75f27c109ab6226790111d39da911d51b91e99b"}, {0xf8, 0x117, 0xbf, "749211fb2a2def3e1091200c25f87cc8a9ef834e63749aee39a69f966581a7fa58cb96e14d5ab6053038598ef5fed86835888560e44d9201e2bc0af98528fa615e7d7b5e1e55e5992d4b4a3987686220e69e560ab615a2be235df0aad3e90ef0f2824758022eaed855868bc90af7f109e190e3e6a600a029e781e96fbb4192883af7d69e9ffa4d8225a8e0c62019944336fc0d6e4651675744925713be7eb0d000cfcf52417381e9eaac1036fa05818489133c04db426bf2fa2e26a711386483df7f08bb5cc93689776fa60c94bd1156d8c56ac01f3ebd39658cf34f60c37a7dbdf1f7cd"}, {0x20, 0x109, 0x9, "496f68a695df4303fb154c"}, {0xfc0, 0x10c, 0xfffffffa, "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"}], 0x1218}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002980)="4f46e8b3557f0f79f72f48bef488d4da2a16f89e738c797089c465d832d8fa9b307e03acc18fc65af522d2555f775e26db3312938a937e78134d60b66de413d0776d232b1ff864128246318bb40949f656795de6054faa8aa6ad43b75ce833811dfeb956eeb2d852291cb3018344d876494567f3a0b8a8c278ee534de9174da090a4efd90aac7e4522c438a7a3c0a8d5089cc244eaba3da9d40f95", 0x9b}, {&(0x7f0000002a40)="541b5e7ec09652062e456379dbc2fe567659f205ab2351fded236eeaf139600760b3868d67cc0f570ac41f263131a26d3a47d3bcacf0c84203194ce0b4ca4502cff86532794c677bb48ad03a6a24c69d7557d95b", 0x54}, {&(0x7f00000003c0)="ab399f81786d17920d", 0x9}], 0x3, &(0x7f0000002b00)=[{0x90, 0x104, 0x6, "ab240dd1279428d43e111e1e0a32c1290c75069e60493648e6cef7a68f641bed25dd2adb63307115b15e0d33a0fe9cb656ab9db390a2f05404d1fbd9d12c38abe7d40a4cb7d0786406ef49f27410a159c6ba053328056d55efd17f51f0847a66f80a78f85c105bc2ea4f784deb4707098268566f9a1b4ed235e8a711eed7d1"}], 0x90}}, {{&(0x7f0000002bc0)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002c40)="5b74d5e7cf49337fe1ec7107b2a41ac0510343ed2db6d9559e86330763c8050f99164e251012da2e2602801545106d9d9b39565a1c4f5c1a335494dfdf6a3383de0225f9c63e600e3bd6b76676ba833ac3870a00363b9c9b94b5fa5ac8cabd23eb1abd1f1294d399c80d742500ccd3c15e95e72bf30d4c5ffbf052e1cda837df35e9056d93b22cc35f400ddbc8d36811ae91248bddb1a18e4ff874fc74fd752aee99158f874be6df2109f70cf64ba60293f720c92f06286c4a1fbae08d2af74d027c008f6decdbca73096caf14e6402a8ff88dde9f2eea6db0cff3303cf5", 0xde}, {&(0x7f0000002d40)="1b2e66ba3a49755481fddb929c00e069bcfbd2bcb648b81f7f1102f11c9384e81e194138fb6ac2d40602b53dd6c79b8509b88d44b77cb59de0a5c7f5647d6ce96eb74471718f509fe3ed27a81b71c887886a9b0f28607abecbf2591ff18fb3c05f", 0x61}], 0x2}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002e00)="927b6cba974db87ce8c99e3d62ccff8db1f58d9a611eabc6b7", 0x19}, {&(0x7f0000002e40)="f6801af586205675403558d7", 0xc}], 0x2, &(0x7f0000002ec0)=[{0x50, 0x112, 0x6, "aa10ab512b169dd0b39582252991b95a424488f2e1e8fc49517b26f867abd3150e1f3715ab66062d2194eb2098250f40ca4d123871693f01f9a2e2506e40f9"}, {0xa8, 0x1, 0x66, "bc8aecde8bd92fd6c46d2591fc15ebe05619209ac89e8c431818477c16521eb4313e3ab3700cac50d68db2218a4cb7bceac527e03bb9967d4828445d37e5a75b7cf7dcfbc48b760d7d1537cea5215b0bc0ffdd76c9f9c9792fc0eadd3be7ebf7a91072e062a2d63cd1f7d07268969d16899157679b76e3631eca5a85d6f2089ef6db7804512dd46795429a7367dec149f2d23c3acce2"}, {0xd8, 0x3a, 0x7, "e6b0d551f7dffa1d095a481c89a06bba51a3f572d037dfe3682b7c7be7c7977caedd938a535010630e13a3bdfbe0f72f14c57f4c7aebe93284ed16bbae62059cdfcc42222f688619c2f42db42d0d4b100d9d0f71cd5995330f4501dd41c022c6e2c2916eb27b043786fa426a39e281936a249c9b6fb0640d8765fc748a70115fdecc430e33dd2d148efef869860d5f15ffd741ceab91d5dc56fffafd41442c45e7e212295c3b48046a23f2b866a394bc41bc226bf45169153b6882e89e995297017f644b"}], 0x1d0}}], 0x5, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7ffd, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x3ff, 0x8, 0x8000000000000000, 0xcc, 0x6, 0x9, 0x1}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000140)) io_setup(0x8, &(0x7f0000000000)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000003400)=""/225, &(0x7f0000003500)=0xe1) r4 = syz_clone(0x2000080, &(0x7f0000003200)="a74575be76fd0d09bb191f12f737540da6b7ae703f25a983279c021229823368e74ae058785dd9627b094669d407e87bfa8babe056b6d24234dcbf605d9f4cffa0611656baec78eb9c1f7ea18e1078932eb0acfd8e1e89ddb8e8c036e2a4560f80b06297add4f73c5f0633b77b4e0aa24d8068e434f0f69472639457d93595de03ccd68e13bd844f4bb7cd091f6bfcf33cc3d8f3177e836bf9b588ae5e631f5d86207e15e1ef743a0b4fa87a1e918e954e2962120fb237eb92cf7e384f683d3a7db8f81fab87c001101682751cc65e313a50472e9bad4523", 0xd8, &(0x7f0000003300), &(0x7f0000003340), &(0x7f0000003380)="8361f97ffd8979a8b121192cea1e3a789cfbf44c917dedf4bccf5d60e84aae4b20a53b3a3ba93684535afd51fa1c") sched_setparam(r4, &(0x7f00000033c0)=0x9) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r5, 0x4b44, 0x10000000000004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x1003, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) listen(r3, 0x6) 5.407457931s ago: executing program 1 (id=2291): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r6, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) syz_emit_ethernet(0x4e, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000105804380100000000000109022400010000000009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e1a, @local}, {0x2, 0x4e64, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @loopback}, 0x20c, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0xbc2f0b7, 0x7}) 4.574867086s ago: executing program 3 (id=2292): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x130) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r0 = landlock_create_ruleset(&(0x7f00000003c0)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x2, &(0x7f0000000280)={0x100}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000980)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x20, 0x1, 0x29, {0x29, 0x6, "5bfd859eb939fc96cb4307c7c05fa35ffe09da2a36c5efc046979d0f91597dd58d7251c93bd28d"}}, &(0x7f0000000840)=ANY=[@ANYBLOB="0003b7000000b703ae7cb07e0a9cc08310cf099448899abf38c57170f7090a084b90eabf5f393aaaae5c1cce05587e8e79dcb2088f33ab8d544cf8d08faf0db331cb290c541d0bdf40a271b3d7153f1f7ef4996d2066c91f62d6ed08e0ee2650eb0670dea275445458516544043fa57ecc543a0d8c1e4c8defbe66ac5505e3da075e151bb904e5d2aadddfefd7725a0831c9e8ed5acb50e5b8e319bf50c14bb3706f986da90962e27a54a99f73a5404d7f379db16d538256b7ec4f9c53"], &(0x7f0000000180)=ANY=[@ANYBLOB="080f2c000000050f2c00050b1001084000070802003b03100b03100b0a101202000000ff04000c100bdf82134b12f83efce7"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x10, 0x4, 0x8, "6c65fc26", "60c83b87"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x4, 0x80, 0x2, 0x6, 0xffff}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x16, 0x81, "5851cf98e4159e2ffc4127e300887174c3176f7acbdba7a8bfd75a7d3e9247e8e989cb83da0ccd070a7e46a54ae5fea6c0dda214f4be324ddea081fbdfea64a270ca11bb0ed21f4ff80f1a34a46349e13863d032aac207bb0a600f2807734d4bd1fc5c22c904077d54373e34ea5502e564596e0840d739974e11da767c0650e469"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000080000009c150200f0000000e5e7aef0715a9f4eeeb7ef62580763988ff7854d355e9d70cd5e726c006994e0a456a39d850652a68c4987d45d044293f6cbc4dd435a775724966a1565bdf905daa50418649f514da30d5c38e008a070467081ce46788b85e3be1e29"], &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000540)={0x40, 0xb, 0x2, "20c1"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "0349"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xa6}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000180)={@empty, @remote, @void, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x1, 0x0, 0x0, 0x0, "7679fa242ea1ec69"}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) unshare(0x2c020400) syz_emit_ethernet(0x39, &(0x7f0000000480)={@random="4f42324e8601", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@x25={0x805, {0x3, 0x2, 0x1b, "c7c4e8d931f9817de14c94e10aed12dd98bca71e1a6fbe06a00f1d2e1524f9c4ec2c1835b353df54"}}}}, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x50) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000240)={0x7, {0x3ff, 0x800, 0x5}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 4.331845596s ago: executing program 4 (id=2293): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0xff7f}}, 0x20}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f0000000280)='1', 0x1) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r12, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r13, &(0x7f0000000000), 0x0) 3.444258664s ago: executing program 4 (id=2294): creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x7f, 0x101000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001980)) r1 = syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) r2 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) r3 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x1f67fffe, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x6, 0x1, 0x3}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ff4000/0x3000)=nil) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x8ba, 0x0, 0x104}]}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x0, 0x3c}) 3.339031366s ago: executing program 4 (id=2295): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x100000001]}, 0x8) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x340) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x401) inotify_rm_watch(r0, r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000180)=0x800005, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}, 0x0) recvmmsg(r5, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x7027}], 0x2, 0x2, 0x0) r6 = epoll_create1(0x0) fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r3}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000330000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/126, 0x7e, 0x0, &(0x7f00000002c0)=""/164, 0xa4}, &(0x7f0000000380)=0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x4, 0x4}, [], {0x4, 0x4}, [{0x8, 0x1}]}, 0x2c, 0x0) shutdown(r2, 0x1) 2.971988443s ago: executing program 0 (id=2296): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001d80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0xfffffffb, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r8 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000000)=0x2) syz_io_uring_setup(0xecb, &(0x7f0000000200)={0x0, 0xb6ea, 0x20, 0x0, 0x233, 0x0, r7}, &(0x7f0000000480), &(0x7f0000000300)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000440)}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 2.51016749s ago: executing program 2 (id=2298): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 2.317837953s ago: executing program 1 (id=2299): mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x138}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002e00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='4'], 0x20) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FBIOGET_CON2FBMAP(r4, 0x460f, &(0x7f0000000040)={0x3e, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x4010, r4, 0x74d89000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000200)=0x5) fcntl$notify(r7, 0x402, 0x8) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c1200002d00010026bd7000fcdbdf250400"], 0x122c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2000, 0x0) 2.244016998s ago: executing program 1 (id=2300): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045f10030006600000501904cb27864010100ac1414bb0b0090780006009e1d1718edf200455c003b00657b74be41578cafce76b49840060004e00000017f000001"], 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x10, 0x70bd2d, 0x2ddfdbba, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[], 0x0) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0xfffffffffffffec4, 0xfffffffffffffffe) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000540)=ANY=[@ANYRES8, @ANYRESHEX], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa6442, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) 2.243642042s ago: executing program 2 (id=2301): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000000400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x4000) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x68, r4, 0x909, 0x20000000, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x80000000, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f0000000040)=@ieee802154={0x24, @short={0x2, 0xfffe, 0xfffe}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)="c4ccefc1dbc68cff6ce6438509f23e91f1887c3cc271a39ef9649c2ed9cc07498833b2333c597f8bbb94a713d69a02494f5691a98b0f55f65a0dab15d185f442adac65e963b4fdf073e5629b2f63aa6090d0f79ef8bf9fff99dcf147224703991db54b3a7993be3e83ff7e474a93b4636e82783df8fdb53b405ee3e0223b77ea561f12b64e1455ed7efd3b3eb4436471555639ed390be35f4a5eed387d0739b72356de68f5bb3201a274f835c590f0acf476030b23878540dfe4394401365060569b84a5175bce17775dc5fc0669afa90c44426c2b96a506aef915090d5e26", 0xdf}, {&(0x7f00000000c0)="0a080f8ff860e9a722fa0cbf88d62f3683244ab50ca4545014110ede3b8e811f29bf7094ee2268b1", 0x28}, {&(0x7f00000004c0)="cc9cd18e8fc1b649e5bfea46e509865a5f7f58f1f80b869099fcb5adb82c3d7f98746a6d7f80d22056a5a5c61aef40ab486dd7a7dbc22949646eb1e08cf20959bdd2266e3144b3ea068ac2533061be1e1f57cd237a9adedf973e3511ae866ad82f4554e273c2382e841bb5a22177510835b253776f29e9f29769dac193ba559083417006aca4702e96d8d2af8218b715cc20fbdae8bfb51ef5c721beb04ef6e40b6e559ccfc7156fc383cd6455ea8c11510aeb2b6d6290a914607078b224a84767e7858bda", 0xc5}, {&(0x7f0000000140)="9a3383a5a84fcd091d334a0d857fe226679db8bc6fddd177263122f8a7fc0ce63ab7368ed3e29ada597ba7374fbf43ddbff54605ce8381a2a4a3308e3a9e2fb46a56e77f536b9ae33049116f2efe9c", 0x4f}, {&(0x7f00000005c0)="b223d6eae4f4677713c1f3afadb9b8b0617718691557e856213f94d07c0859b65595b875b8651531242603e5c59909266cf1ac3cccfcc99c97f25ef320797705f7a897b56ab05db149569fb65c508236389aaedd6037df79cd8794a7ff92ae10d64949344eec0b7f02aa0819b4f8478ec4e86ca98bdb84c6ee1c6b9608252c864cb7121d471bc02cb1ccd286b774bdf461fdb0f7703de7a58b0ae70a41a82d0106cce29d351fc5b4796da4aa5b8e5f4fa0ce5c9247e3be513da49d902b71a587b280e0e603106e8f89a04672b8ed09c6e717a9a75ad8b0de5479d70ff2c8183c5aab8608a72aca066f1e3a5ae3cb6300", 0xf0}, {&(0x7f00000001c0)="1285b8f205facb13e0b58b8282ce44444f720492da5655b29b29324dcc9eab39dff7421aac683ccbfcbf3db1189a08991376d5e0bf8658c3b81b3214fe0a", 0x3e}, {&(0x7f0000000700)="8497a0a4b3434fc2565a872c8e1e8b040299989b2a27b4143c0538614cdcb21d0fc930b5a241612646f64c38e4f0c7eb5df9ab49e74d0867c7553854d6f1388adf965ae226dd6c32631866f96e50da760248aeaa3520611e810eb0eeda7c18d03c66728e502b66b0664fb3f30610841ad0a0833c87ffcd2038c5c4e2a4274434a56ad2192be8968d9df3f839103489b123ca252e58ea490ebfc1497737349997fccf316a69725ffc91aeb52a859765a08c6646067a2440ec7eb64be5a0b095121af835b632dc81ca04f7", 0xca}], 0x7, &(0x7f0000000900)=ANY=[@ANYBLOB="2800000000000000e20000000010000059050000000000000091cf06890e890a561d000000000000283bd133ede17f77c1b16eace18926e732e2aa0ac696127741447696f10fe0fea6adaffd5add434650cd897b1e8570210b8dea8f66f1eff5c87e082ac332cb6d3ed3eb000000000000000000"], 0x28}}], 0x1, 0x2400cc40) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.849021625s ago: executing program 2 (id=2302): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0xff7f}}, 0x20}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f0000000280)='1', 0x1) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r12, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r13, &(0x7f0000000000), 0x0) 1.756213869s ago: executing program 4 (id=2303): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x48000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0xf, 0x1, 'D'}, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000380)={0x20, 0xf, 0x3, "2643ba"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000400)={0x2, 0xfffffffffffffff3, 0x9, &(0x7f00000003c0)=""/9}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e23, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa2f5}, {0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0xffffffffffffffff, {[0x4, 0x9, 0x7264, 0x710, 0xffff, 0xa46, 0x2]}}, 0x5c) 1.375111117s ago: executing program 1 (id=2304): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 1.264181349s ago: executing program 0 (id=2305): socket$inet(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c80000003060500000000000000fbff04000107000000000700e1ffd021c98cfc1f51aba0fe459388129b58ae6025b25f8abf60c6ec97f9fe9de3c20cd9a6cdce8bd482157900246be1d3832447c31c4bf89fd14fdd81b89ac09a2972fe67df2e38568c0ea025f13c5e0fdc386a848b05e903ef19bb55636e94bd193f18c7da2044a34e870b4ae46205898fbbb1735e73ce2996e35662ae1b712021a7b041dadcb7402993d7a58bcc2c9bad5a4926be3acd29"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x8000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket(0x10, 0x80000, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 434.343888ms ago: executing program 2 (id=2306): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0xff, 0x1, 0x1, 0x1}, 0x10) 432.922213ms ago: executing program 3 (id=2307): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffdd, 0x11, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x14}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffc}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000851}, 0x4008040) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x2b, 0x1, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0]}, 0x40) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x8001, 0x100000001, 0x0, 0x2000000000000}) move_mount(r6, &(0x7f0000000340)='./file0\x00', r7, &(0x7f0000000480)='./file0\x00', 0x104) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000380)={0xffffffff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r7, @ANYRESDEC=r4, @ANYBLOB="270000003c00000000000000071aa9f1b0687932af9b09c69b022031e28a3335f092acfa242cf7ce3d3ace366d7e69ff447458b7356a45793daef3c64cf54d4c3b5ec47c69fd19e3e95ce76d186e75c0c42791669d23ae730fc1614fbd69fa889b00407df201da831891f2136f741b5b5fd5872e22907fa66635bfd9e09089bb9a28184b", @ANYRES32=r8, @ANYRESDEC=0x0], 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) 138.874772ms ago: executing program 2 (id=2308): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x6, 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040)=0xffffffa4, 0x4) 0s ago: executing program 2 (id=2309): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r6, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) syz_emit_ethernet(0x4e, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000105804380100000000000109022400010000000009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) kernel console output (not intermixed with test programs): T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.055598][ T9] usb 5-1: Product: syz [ 772.060105][ T56] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 772.069151][ T9] usb 5-1: Manufacturer: syz [ 772.073783][ T9] usb 5-1: SerialNumber: syz [ 772.085708][ T9] usb 5-1: config 0 descriptor?? [ 772.103841][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 772.113253][ T9] usb 5-1: selecting invalid altsetting 1 [ 772.120369][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 772.130097][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 772.143032][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 772.151805][ T9] usb 5-1: media controller created [ 772.176377][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 772.218603][ T56] usb 4-1: Using ep0 maxpacket: 8 [ 772.240661][ T56] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 772.251012][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.259255][ T56] usb 4-1: Product: syz [ 772.263573][ T56] usb 4-1: Manufacturer: syz [ 772.270482][ T56] usb 4-1: SerialNumber: syz [ 772.278726][ T56] usb 4-1: config 0 descriptor?? [ 772.287606][ T56] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 772.297352][ T56] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 772.492577][ T10] usb 4-1: USB disconnect, device number 48 [ 772.705345][T15867] netlink: 'syz.2.1830': attribute type 1 has an invalid length. [ 772.747337][T15867] bond24: (slave bridge24): Enslaving as a backup interface with an up link [ 772.909643][T15851] delete_channel: no stack [ 773.002593][T15870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.027958][T15870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.076142][T15873] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (13) [ 773.241857][T15870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.261968][T15870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.292531][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 773.339505][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 773.340081][T15870] sctp: [Deprecated]: syz.1.1831 (pid 15870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 773.340081][T15870] Use struct sctp_sack_info instead [ 773.375525][T15870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.384643][T15863] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 773.406362][T15870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.505847][T15883] sctp: [Deprecated]: syz.2.1835 (pid 15883) Use of struct sctp_assoc_value in delayed_ack socket option. [ 773.505847][T15883] Use struct sctp_sack_info instead [ 773.526152][T15883] sctp: [Deprecated]: syz.2.1835 (pid 15883) Use of struct sctp_assoc_value in delayed_ack socket option. [ 773.526152][T15883] Use struct sctp_sack_info instead [ 773.882290][T15895] netlink: 'syz.2.1837': attribute type 1 has an invalid length. [ 773.983038][T15890] bond25: entered promiscuous mode [ 773.989661][T15890] bond25: entered allmulticast mode [ 773.996448][T15890] 8021q: adding VLAN 0 to HW filter on device bond25 [ 774.025301][T15890] bridge25: entered promiscuous mode [ 774.032036][T15890] bridge25: entered allmulticast mode [ 774.037999][T15890] bond25: (slave bridge25): Enslaving as a backup interface with an up link [ 774.055156][T15890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1837'. [ 774.088467][ T36] bond25: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 774.153243][T15903] tipc: Started in network mode [ 774.158248][T15903] tipc: Node identity 42217eaf20b4, cluster identity 4711 [ 774.165933][T15903] tipc: Enabled bearer , priority 0 [ 774.176134][T15903] syzkaller0: entered promiscuous mode [ 774.182441][T15903] syzkaller0: entered allmulticast mode [ 774.208823][ T36] bond25: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 774.386241][T15902] tipc: Resetting bearer [ 774.395715][T15902] tipc: Disabling bearer [ 774.771988][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 774.803806][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 774.825041][ T24] usb 1-1: can't read configurations, error -71 [ 774.887315][T15916] netlink: 'syz.3.1842': attribute type 1 has an invalid length. [ 774.938096][T15916] bond39: (slave bridge35): Enslaving as a backup interface with an up link [ 775.006459][T15392] usb 5-1: USB disconnect, device number 35 [ 775.137737][T15923] netlink: 'syz.4.1845': attribute type 1 has an invalid length. [ 775.172376][T15923] bond34: (slave bridge32): Enslaving as a backup interface with an up link [ 775.288860][ T43] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 775.332037][ T24] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 775.530868][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.540904][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 775.569426][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.588511][ T24] usb 1-1: device descriptor read/64, error -71 [ 775.599715][ T43] usb 3-1: config 0 descriptor?? [ 775.742430][ T24] usb usb1-port1: attempt power cycle [ 775.979154][ T43] lg-g15 0003:046D:C222.0002: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 776.150799][T15933] ptrace attach of "./syz-executor exec"[15937] was attempted by "./syz-executor exec"[15933] [ 776.150854][ T24] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 776.177099][ T56] usb 3-1: USB disconnect, device number 36 [ 776.219920][ T24] usb 1-1: device descriptor read/8, error -71 [ 776.311535][T15947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.330960][T15947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.368164][T15947] program syz.1.1851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 776.431688][T15952] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1852'. [ 776.488697][ T24] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 776.531234][ T24] usb 1-1: device descriptor read/8, error -71 [ 776.639567][ T24] usb usb1-port1: unable to enumerate USB device [ 777.010178][T15957] IPVS: length: 225 != 8 [ 777.286101][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 777.286113][ T30] audit: type=1326 audit(1755418991.055:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15959 comm="syz.3.1856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb8b58ebe9 code=0x0 [ 778.002401][T15976] netlink: 'syz.0.1859': attribute type 1 has an invalid length. [ 778.050644][T15976] bond37: (slave bridge32): Enslaving as a backup interface with an up link [ 778.059523][ T43] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 778.161156][T15979] input: syz1 as /devices/virtual/input/input13 [ 778.258428][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 778.267358][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 778.286685][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 778.312853][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 778.335041][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.352938][ T43] usb 3-1: Product: syz [ 778.363024][ T43] usb 3-1: Manufacturer: syz [ 778.374261][ T43] usb 3-1: SerialNumber: syz [ 778.407858][ T43] usb 3-1: config 0 descriptor?? [ 778.454663][ T43] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 778.474239][ T43] em28xx 3-1:0.0: Video interface 0 found: [ 778.512157][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 778.653831][T15972] binder: 15971:15972 ioctl 4018620d 0 returned -22 [ 778.728759][ T43] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 778.801119][ T43] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 778.809337][ T43] em28xx 3-1:0.0: board has no eeprom [ 778.882517][ T43] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 778.905562][ T43] em28xx 3-1:0.0: Currently, V4L2 is not supported on this model [ 778.917996][T15392] em28xx 3-1:0.0: Binding DVB extension [ 778.923809][T15392] em28xx 3-1:0.0: no endpoint for DVB mode and transfer type 0 [ 778.935754][ T43] usb 3-1: USB disconnect, device number 37 [ 778.942800][T15392] em28xx 3-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 778.952405][ T43] em28xx 3-1:0.0: Disconnecting em28xx [ 778.967549][T15392] em28xx 3-1:0.0: Registering input extension [ 778.973795][ T24] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 778.984590][ T43] em28xx 3-1:0.0: Closing input extension [ 778.996196][ T43] em28xx 3-1:0.0: Freeing device [ 779.131661][ T24] usb 5-1: config 0 has no interfaces? [ 779.141007][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 779.150437][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.158542][ T24] usb 5-1: Product: syz [ 779.163905][ T24] usb 5-1: Manufacturer: syz [ 779.192886][ T24] usb 5-1: SerialNumber: syz [ 779.199295][ T24] usb 5-1: config 0 descriptor?? [ 779.384291][T16002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.405574][T16002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.442710][T15986] program syz.4.1862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 779.554625][T16004] netlink: 'syz.3.1865': attribute type 1 has an invalid length. [ 779.596011][T16004] bond40: entered promiscuous mode [ 779.611320][T16004] bond40: entered allmulticast mode [ 779.620202][T16004] 8021q: adding VLAN 0 to HW filter on device bond40 [ 779.633367][T16004] bridge36: entered promiscuous mode [ 779.633469][T16004] bridge36: entered allmulticast mode [ 779.633883][T16004] bond40: (slave bridge36): Enslaving as a backup interface with an up link [ 779.698622][ T36] bond40: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 779.868584][ T1153] bond40: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 780.465884][T16015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.476607][T16015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.599040][ T56] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 780.698436][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 780.780723][ T56] usb 4-1: Using ep0 maxpacket: 16 [ 780.788563][ T10] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 780.796493][ T56] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 780.805871][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.815548][ T56] usb 4-1: config 0 descriptor?? [ 780.823567][ T56] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 780.859744][ T24] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 780.868943][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.880965][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 780.893454][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.901872][ T24] usb 1-1: Product: syz [ 780.906213][ T24] usb 1-1: Manufacturer: syz [ 780.911207][ T24] usb 1-1: SerialNumber: syz [ 780.917326][ T24] usb 1-1: config 0 descriptor?? [ 780.924712][ T24] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 780.932119][ T24] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 780.960199][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 780.972137][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 780.981493][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.991097][ T10] usb 3-1: config 0 descriptor?? [ 780.996843][T16019] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 781.124745][T16015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.135250][T16015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.144660][ T9] usb 1-1: USB disconnect, device number 40 [ 781.210481][T16019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.221760][T16019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.633038][T16019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.643505][T16020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.649839][T16019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.654449][T16020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.705391][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 781.722314][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 781.733465][ T10] usb 3-1: USB disconnect, device number 38 [ 781.786001][ T43] usb 5-1: USB disconnect, device number 36 [ 781.836315][T16030] netlink: 'syz.0.1873': attribute type 1 has an invalid length. [ 781.945870][T16030] bond38: (slave bridge33): Enslaving as a backup interface with an up link [ 782.439783][ T10] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 782.671338][ T10] usb 5-1: config 0 has no interfaces? [ 782.683445][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 782.696075][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.705664][ T10] usb 5-1: Product: syz [ 782.711362][ T10] usb 5-1: Manufacturer: syz [ 782.716300][ T10] usb 5-1: SerialNumber: syz [ 782.731764][ T10] usb 5-1: config 0 descriptor?? [ 783.009971][T16046] program syz.4.1876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 783.616105][ T56] gspca_sonixj: reg_w1 err -71 [ 783.621039][ T56] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 783.642731][ T56] usb 4-1: USB disconnect, device number 49 [ 783.840070][ T43] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 783.969098][T16055] fuse: Unknown parameter 'Bd' [ 784.023170][ T43] usb 1-1: config 0 has no interfaces? [ 784.042117][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 784.052315][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.060450][ T43] usb 1-1: Product: syz [ 784.064616][ T43] usb 1-1: Manufacturer: syz [ 784.071575][ T43] usb 1-1: SerialNumber: syz [ 784.077868][ T43] usb 1-1: config 0 descriptor?? [ 784.187147][T16061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.197912][T16061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.214947][T16061] program syz.1.1881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 784.349624][T16052] program syz.0.1879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 784.482460][ T43] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 784.648545][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 784.663086][ T43] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 784.678745][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.687069][ T43] usb 4-1: Product: syz [ 784.696576][ T43] usb 4-1: Manufacturer: syz [ 784.701476][ T43] usb 4-1: SerialNumber: syz [ 784.712292][ T43] r8152-cfgselector 4-1: Unknown version 0x0000 [ 784.719132][ T43] r8152-cfgselector 4-1: config 0 descriptor?? [ 785.144565][ T43] r8152-cfgselector 4-1: USB disconnect, device number 50 [ 785.162520][T15392] usb 5-1: USB disconnect, device number 37 [ 785.928541][ T43] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 786.088461][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 786.095652][ T43] usb 3-1: config 0 has an invalid interface number: 39 but max is 0 [ 786.106298][ T43] usb 3-1: config 0 has no interface number 0 [ 786.115341][ T43] usb 3-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=30.27 [ 786.124774][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.133769][ T43] usb 3-1: Product: syz [ 786.138624][ T43] usb 3-1: Manufacturer: syz [ 786.143416][ T43] usb 3-1: SerialNumber: syz [ 786.150335][ T43] usb 3-1: config 0 descriptor?? [ 786.162210][ T43] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 786.422887][ T56] usb 1-1: USB disconnect, device number 41 [ 786.799516][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 786.809190][ T56] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 786.958488][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 786.964847][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.967200][ T56] usb 1-1: config 0 has an invalid interface number: 125 but max is 0 [ 786.976493][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 786.993632][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.996163][ T56] usb 1-1: config 0 has no interface number 0 [ 787.011156][ T24] usb 4-1: config 0 descriptor?? [ 787.012775][ T56] usb 1-1: New USB device found, idVendor=04e8, idProduct=a100, bcdDevice=b2.9d [ 787.026690][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.035142][ T56] usb 1-1: Product: syz [ 787.041252][ T56] usb 1-1: Manufacturer: syz [ 787.048719][ T56] usb 1-1: SerialNumber: syz [ 787.062893][ T56] usb 1-1: config 0 descriptor?? [ 787.115517][T16092] RDS: rds_bind could not find a transport for fe80::38, load rds_tcp or rds_rdma? [ 787.186153][T16096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.196822][T16096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.206993][T16096] binder: 16095:16096 ioctl 4018620d 0 returned -22 [ 787.244601][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 787.251928][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 787.263207][ T24] usb 4-1: USB disconnect, device number 51 [ 787.688909][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 787.850603][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.854160][T16100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.870453][T16100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.885239][T16100] program syz.1.1891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 787.947760][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 787.960768][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.975562][ T9] usb 4-1: config 0 descriptor?? [ 788.394337][ T9] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 788.407378][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input15 [ 788.502100][ T9] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 788.715947][ T9] usb 3-1: USB disconnect, device number 39 [ 788.796807][ T43] usb 4-1: USB disconnect, device number 52 [ 788.885192][T16110] misc userio: No port type given on /dev/userio [ 789.098429][T16114] input: syz1 as /devices/virtual/input/input16 [ 789.117416][T16114] loop3: detected capacity change from 0 to 1 [ 789.126908][T16114] Dev loop3: unable to read RDB block 1 [ 789.132840][T16114] loop3: AHDI p1 [ 789.136527][T16114] loop3: partition table partially beyond EOD, truncated [ 789.322448][ T5233] Dev loop3: unable to read RDB block 1 [ 789.328115][ T5233] loop3: AHDI p1 [ 789.332199][ T5233] loop3: partition table partially beyond EOD, truncated [ 789.421098][ T5233] Dev loop3: unable to read RDB block 1 [ 789.428475][ T5233] loop3: AHDI p1 [ 789.433760][ T5233] loop3: partition table partially beyond EOD, truncated [ 789.480235][ T56] usb 1-1: USB disconnect, device number 42 [ 789.688448][ T43] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 789.828651][ T56] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 789.850428][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 789.882254][ T43] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 789.901291][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.912611][ T43] usb 4-1: Product: syz [ 789.917090][ T43] usb 4-1: Manufacturer: syz [ 789.923050][ T43] usb 4-1: SerialNumber: syz [ 789.940384][ T43] r8152-cfgselector 4-1: Unknown version 0x0000 [ 789.948826][ T43] r8152-cfgselector 4-1: config 0 descriptor?? [ 789.997670][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 790.008531][ T56] usb 1-1: no configurations [ 790.013280][ T56] usb 1-1: can't read configurations, error -22 [ 790.113824][T16134] IPVS: length: 225 != 8 [ 790.188459][ T56] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 790.338453][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 790.344262][ T56] usb 1-1: no configurations [ 790.351048][ T56] usb 1-1: can't read configurations, error -22 [ 790.357666][ T56] usb usb1-port1: attempt power cycle [ 790.411626][ T9] r8152-cfgselector 4-1: USB disconnect, device number 53 [ 790.729481][ T56] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 790.819524][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 790.825604][ T56] usb 1-1: no configurations [ 790.892876][ T56] usb 1-1: can't read configurations, error -22 [ 791.028774][ T56] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 791.058881][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 791.064668][ T56] usb 1-1: no configurations [ 791.076811][ T56] usb 1-1: can't read configurations, error -22 [ 791.084991][ T56] usb usb1-port1: unable to enumerate USB device [ 791.398441][ T24] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 791.488573][ T56] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 791.497115][ T5916] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 791.565091][T16166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.576147][T16166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.609169][ T24] usb 4-1: config 0 has no interfaces? [ 791.626134][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 791.628752][ T5916] usb 3-1: device descriptor read/64, error -71 [ 791.651593][ T56] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 791.846067][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.846066][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 791.846092][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 791.898209][ T24] usb 4-1: Product: syz [ 791.902492][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 791.922840][ T24] usb 4-1: Manufacturer: syz [ 791.927626][ T56] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 791.947860][ T24] usb 4-1: SerialNumber: syz [ 791.954183][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.972713][ T56] usb 5-1: config 0 descriptor?? [ 791.980794][T16162] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 791.994228][ T24] usb 4-1: config 0 descriptor?? [ 792.118545][ T5916] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 792.221854][T16155] program syz.3.1905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 792.248452][ T5916] usb 3-1: device descriptor read/64, error -71 [ 792.368876][ T5916] usb usb3-port1: attempt power cycle [ 792.393601][ T56] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 792.407060][ T56] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 792.679417][T16171] netlink: 'syz.0.1911': attribute type 20 has an invalid length. [ 792.710179][ T5916] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 792.738970][ T5916] usb 3-1: device descriptor read/8, error -71 [ 792.757034][T16173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1909'. [ 792.978508][ T5916] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 792.998994][ T5916] usb 3-1: device descriptor read/8, error -71 [ 793.109358][ T5916] usb usb3-port1: unable to enumerate USB device [ 793.839035][ T24] usb 5-1: reset high-speed USB device number 38 using dummy_hcd [ 794.094547][T10729] usb 4-1: USB disconnect, device number 54 [ 794.267073][T16192] tipc: Started in network mode [ 794.279847][T16192] tipc: Node identity ea2abd31de53, cluster identity 4711 [ 794.287187][T16192] tipc: Enabled bearer , priority 0 [ 794.296706][T16192] syzkaller0: entered promiscuous mode [ 794.302626][T16192] syzkaller0: entered allmulticast mode [ 794.325744][T16192] tipc: Resetting bearer [ 794.523150][T16201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.542898][T16201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.708589][ T56] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 794.778551][ T5916] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 794.880437][ T56] usb 4-1: config 0 has no interfaces? [ 794.896629][ T56] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 794.916317][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.924412][ T56] usb 4-1: Product: syz [ 794.928691][ T56] usb 4-1: Manufacturer: syz [ 794.942343][ T56] usb 4-1: SerialNumber: syz [ 794.961635][ T56] usb 4-1: config 0 descriptor?? [ 794.983989][ T5916] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 795.010301][ T5916] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 795.098135][ T5916] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 795.119063][T15392] usb 5-1: USB disconnect, device number 38 [ 795.156967][ T5916] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 795.167346][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.222387][T16220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.236915][T16220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.239587][T16199] program syz.3.1917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 795.341294][T15392] tipc: Node number set to 880393521 [ 795.368273][T16225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.441323][T16225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.888452][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 795.900373][T16234] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1926'. [ 795.941459][ T5916] usb 3-1: string descriptor 0 read error: -71 [ 795.951263][T16192] tipc: Resetting bearer [ 795.961579][T16192] tipc: Disabling bearer [ 795.981106][ T5916] usb 3-1: USB disconnect, device number 44 [ 796.039631][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 796.050469][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 796.066942][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.081429][ T10] usb 1-1: config 0 descriptor?? [ 796.087088][ T30] audit: type=1326 audit(1755419009.855:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 796.109555][ T30] audit: type=1326 audit(1755419009.855:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 796.196028][ T30] audit: type=1326 audit(1755419009.855:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 796.218886][ T30] audit: type=1326 audit(1755419009.855:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 796.241208][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.250810][ T30] audit: type=1326 audit(1755419009.855:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 796.272984][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.283196][ T30] audit: type=1326 audit(1755419009.855:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 796.305461][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.312065][ T30] audit: type=1326 audit(1755419009.855:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 796.317702][T16233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.348737][T16233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.378347][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 796.384695][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 796.398065][ T10] usb 1-1: USB disconnect, device number 47 [ 797.181060][T16252] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 797.302191][T15392] usb 4-1: USB disconnect, device number 55 [ 797.507176][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 797.673327][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 797.681518][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 797.708607][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 797.722040][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 797.731457][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.756924][ T10] usb 3-1: Product: syz [ 797.763236][ T10] usb 3-1: Manufacturer: syz [ 797.767834][ T10] usb 3-1: SerialNumber: syz [ 797.776216][ T10] usb 3-1: config 0 descriptor?? [ 797.784720][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 797.798079][ T10] em28xx 3-1:0.0: Video interface 0 found: [ 797.809066][T16262] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 798.039614][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 798.103842][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 798.114709][ T10] em28xx 3-1:0.0: board has no eeprom [ 798.198681][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 798.236275][ T10] em28xx 3-1:0.0: Currently, V4L2 is not supported on this model [ 798.261142][ T56] em28xx 3-1:0.0: Binding DVB extension [ 798.266816][ T56] em28xx 3-1:0.0: no endpoint for DVB mode and transfer type 0 [ 798.294863][ T10] usb 3-1: USB disconnect, device number 45 [ 798.304154][ T56] em28xx 3-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 798.323332][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 798.372992][ T56] em28xx 3-1:0.0: Registering input extension [ 798.393856][ T10] em28xx 3-1:0.0: Closing input extension [ 798.527662][ T10] em28xx 3-1:0.0: Freeing device [ 798.752256][T16284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1936'. [ 799.016101][T16291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 799.114554][ T10] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 799.122602][ T10] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 799.130683][ T10] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 799.139918][ T10] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 799.147622][ T10] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 799.157771][ T10] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 799.170880][ T10] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 799.183027][ T10] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 799.195582][ T10] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 799.223578][ T10] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 799.444063][ T10] hid-generic 0008:0006:0007.0005: hidraw0: HID v0.0b Device [syz1] on syz0 [ 799.586601][T16302] netlink: 'syz.3.1943': attribute type 1 has an invalid length. [ 799.828755][T16294] fido_id[16294]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 799.841966][T16304] bond41: entered promiscuous mode [ 799.847962][T16304] bond41: entered allmulticast mode [ 799.861349][T16304] 8021q: adding VLAN 0 to HW filter on device bond41 [ 799.931487][T16310] netlink: 'syz.0.1945': attribute type 1 has an invalid length. [ 800.017296][T16304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1943'. [ 800.272838][T16308] bridge37: entered promiscuous mode [ 800.285947][T16308] bridge37: entered allmulticast mode [ 800.294553][T16308] bond41: (slave bridge37): Enslaving as a backup interface with an up link [ 800.322600][ T1153] bond41: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 800.458666][T13324] bond41: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 800.477647][T16311] bond39: entered promiscuous mode [ 800.483949][T16311] bond39: entered allmulticast mode [ 800.496718][T16311] 8021q: adding VLAN 0 to HW filter on device bond39 [ 800.804591][T16332] netlink: 'syz.2.1949': attribute type 1 has an invalid length. [ 800.853692][T16332] bond26: entered promiscuous mode [ 800.859054][T16332] bond26: entered allmulticast mode [ 800.865337][T16332] 8021q: adding VLAN 0 to HW filter on device bond26 [ 801.825772][T16350] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1955'. [ 801.875322][T16352] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1953'. [ 802.109473][T16374] netlink: 'syz.2.1961': attribute type 1 has an invalid length. [ 802.142606][T16374] bond27: entered promiscuous mode [ 802.147954][T16374] bond27: entered allmulticast mode [ 802.153828][T16374] 8021q: adding VLAN 0 to HW filter on device bond27 [ 802.370470][ T30] audit: type=1326 audit(1755419016.125:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.4.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 802.393087][ T5916] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 802.423085][ T30] audit: type=1326 audit(1755419016.125:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.4.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 802.447218][ T30] audit: type=1326 audit(1755419016.125:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.4.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 802.508598][ T30] audit: type=1326 audit(1755419016.125:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.4.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 802.535569][ T30] audit: type=1326 audit(1755419016.125:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.4.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 802.620236][T16382] ptrace attach of "./syz-executor exec"[5865] was attempted by "./syz-executor exec"[16382] [ 802.647672][T16384] netlink: 'syz.4.1964': attribute type 1 has an invalid length. [ 802.658832][ T5916] usb 1-1: config 0 has an invalid interface number: 94 but max is 0 [ 802.712704][ T5916] usb 1-1: config 0 has no interface number 0 [ 802.782541][ T5916] usb 1-1: too many endpoints for config 0 interface 94 altsetting 140: 230, using maximum allowed: 30 [ 802.799616][ T5916] usb 1-1: config 0 interface 94 altsetting 140 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 802.813085][ T30] audit: type=1326 audit(1755419016.125:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.4.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 802.839388][ T5916] usb 1-1: config 0 interface 94 has no altsetting 0 [ 802.931023][ T5916] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 802.988455][ T30] audit: type=1326 audit(1755419016.125:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.4.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 803.039633][ T30] audit: type=1326 audit(1755419016.125:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.4.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 803.042671][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.074853][ T30] audit: type=1326 audit(1755419016.125:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.4.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 803.103241][T16391] netlink: 'syz.3.1965': attribute type 1 has an invalid length. [ 803.189839][ T30] audit: type=1326 audit(1755419016.125:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.4.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f307bb8ebe9 code=0x7ffc0000 [ 803.233457][T16388] bond35: entered promiscuous mode [ 803.250459][ T5916] usb 1-1: config 0 descriptor?? [ 803.265825][T16394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1964'. [ 803.275404][T16388] bond35: entered allmulticast mode [ 803.309044][T16388] 8021q: adding VLAN 0 to HW filter on device bond35 [ 803.333444][T16390] bridge34: entered promiscuous mode [ 803.349225][ T1153] bond35: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 803.363315][T16390] bridge34: entered allmulticast mode [ 803.377352][T16390] bond35: (slave bridge34): Enslaving as an active interface with an up link [ 803.431302][T16393] bond42: entered promiscuous mode [ 803.441086][T16393] bond42: entered allmulticast mode [ 803.447532][T16393] 8021q: adding VLAN 0 to HW filter on device bond42 [ 803.522387][ T1153] bond35: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 804.260448][T16408] ptrace attach of "./syz-executor exec"[5877] was attempted by "./syz-executor exec"[16408] [ 804.655497][ T5916] usb 1-1: string descriptor 0 read error: -71 [ 804.665708][ T5916] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 804.692958][ T5916] usb 1-1: USB disconnect, device number 48 [ 804.962017][T16421] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[16421] [ 805.458953][ T5916] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 805.506179][T16430] fuse: Unknown parameter 'b±¯¦¬²00000000000000000000' [ 805.729174][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 805.735682][ T5916] usb 1-1: config 0 has no interfaces? [ 805.743154][ T5916] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 805.753259][ T5916] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 805.842810][T16433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1974'. [ 805.921604][T16434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1974'. [ 806.058323][ T5916] usb 1-1: Product: syz [ 806.069395][ T5916] usb 1-1: Manufacturer: syz [ 806.074639][ T5916] usb 1-1: SerialNumber: syz [ 806.089180][ T5916] usb 1-1: config 0 descriptor?? [ 806.320665][T16442] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 806.603846][T16442] bond43: entered promiscuous mode [ 806.640957][T16442] bond43: entered allmulticast mode [ 806.660396][T16442] 8021q: adding VLAN 0 to HW filter on device bond43 [ 806.715966][T16454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.725684][T16454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.788465][ T5916] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 806.938559][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 806.953914][ T5916] usb 3-1: config 0 has an invalid interface number: 115 but max is 0 [ 806.965115][ T5916] usb 3-1: config 0 has no interface number 0 [ 806.973550][ T5916] usb 3-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 807.003539][ T5916] usb 3-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 807.016733][ T5916] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 807.026325][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.034631][ T5916] usb 3-1: Product: syz [ 807.039357][ T5916] usb 3-1: Manufacturer: syz [ 807.044075][ T5916] usb 3-1: SerialNumber: syz [ 807.059880][ T5916] usb 3-1: config 0 descriptor?? [ 807.271489][T16445] ksmbd: Unknown IPC event: 3, ignore. [ 807.278122][ T5916] usb 3-1: USB disconnect, device number 46 [ 807.400089][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 807.468134][T16468] IPVS: length: 225 != 8 [ 807.561748][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 807.574456][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.582936][ T24] usb 4-1: Product: syz [ 807.587280][ T24] usb 4-1: Manufacturer: syz [ 807.592222][ T24] usb 4-1: SerialNumber: syz [ 807.612879][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 807.703531][T15392] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 807.880931][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 807.880947][ T30] audit: type=1326 audit(1755419021.655:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046f78ebe9 code=0x7ffc0000 [ 807.911894][ T30] audit: type=1326 audit(1755419021.695:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046f78ebe9 code=0x7ffc0000 [ 807.945867][ T30] audit: type=1326 audit(1755419021.695:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f046f78ebe9 code=0x7ffc0000 [ 807.987695][ T24] usb 1-1: USB disconnect, device number 49 [ 807.997033][ T30] audit: type=1326 audit(1755419021.695:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046f78ebe9 code=0x7ffc0000 [ 808.019607][ T30] audit: type=1326 audit(1755419021.715:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046f78ebe9 code=0x7ffc0000 [ 808.048636][ T30] audit: type=1326 audit(1755419021.715:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f046f78ebe9 code=0x7ffc0000 [ 808.072199][ T30] audit: type=1326 audit(1755419021.715:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046f78ebe9 code=0x7ffc0000 [ 808.103292][T16476] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1988'. [ 808.114945][ T30] audit: type=1326 audit(1755419021.715:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f046f78ebe9 code=0x7ffc0000 [ 808.139647][ T30] audit: type=1326 audit(1755419021.715:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046f78ebe9 code=0x7ffc0000 [ 808.164863][T16459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.175379][T16459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.214607][T16459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.231164][T16480] netlink: 'syz.0.1989': attribute type 1 has an invalid length. [ 808.271929][ T30] audit: type=1326 audit(1755419021.715:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16471 comm="syz.2.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f046f78ebe9 code=0x7ffc0000 [ 808.272502][T16459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.321564][T16482] bond40: entered promiscuous mode [ 808.326986][T16482] bond40: entered allmulticast mode [ 808.333154][T16482] 8021q: adding VLAN 0 to HW filter on device bond40 [ 808.370457][T16480] bridge35: entered promiscuous mode [ 808.379339][T16480] bridge35: entered allmulticast mode [ 808.404431][T12475] bond40: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 808.416833][T16480] bond40: (slave bridge35): Enslaving as an active interface with an up link [ 808.571852][ T5916] usb 4-1: USB disconnect, device number 56 [ 808.588555][T12475] bond40: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 808.604872][T16487] netlink: 'syz.4.1991': attribute type 1 has an invalid length. [ 808.738945][T16480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1989'. [ 808.761057][T15392] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 808.768546][T15392] ath9k_htc: Failed to initialize the device [ 808.777407][T16489] bond36: entered promiscuous mode [ 808.789620][ T5916] usb 4-1: ath9k_htc: USB layer deinitialized [ 808.800035][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.811970][T16493] capability: warning: `syz.1.1993' uses 32-bit capabilities (legacy support in use) [ 808.825969][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.841651][T16493] input: syz1 as /devices/virtual/input/input19 [ 808.876893][T16489] bond36: entered allmulticast mode [ 808.884978][T16489] 8021q: adding VLAN 0 to HW filter on device bond36 [ 809.368662][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 809.397024][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 810.226447][T16519] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[16519] [ 810.344179][ T24] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 810.556006][ T24] usb 3-1: config 0 has no interfaces? [ 810.574610][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 810.589013][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.624603][ T24] usb 3-1: Product: syz [ 810.634898][ T24] usb 3-1: Manufacturer: syz [ 810.649936][ T24] usb 3-1: SerialNumber: syz [ 810.670328][ T24] usb 3-1: config 0 descriptor?? [ 810.889643][T16545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.929966][T16545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.930971][T16547] input: syz1 as /devices/virtual/input/input20 [ 810.967989][T16545] binder: 16544:16545 ioctl 4018620d 0 returned -22 [ 810.983537][T16527] program syz.2.2001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 811.827069][T16564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.847830][T16564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.861887][T16559] IPVS: length: 225 != 8 [ 812.248542][ T5916] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 812.402074][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 812.409593][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 812.463072][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 812.615450][ T5916] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 812.642697][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.733046][ T5916] usb 1-1: Product: syz [ 812.790974][ T5916] usb 1-1: Manufacturer: syz [ 812.803265][ T24] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 812.817587][ T5916] usb 1-1: SerialNumber: syz [ 812.833756][T16588] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2023'. [ 812.843873][ T5916] usb 1-1: config 0 descriptor?? [ 812.853973][ T5916] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 812.875111][ T5916] em28xx 1-1:0.0: Video interface 0 found: [ 812.935454][ T43] usb 3-1: USB disconnect, device number 47 [ 813.052860][T16571] binder: 16570:16571 ioctl 4018620d 0 returned -22 [ 813.208580][ T10] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 813.358729][ T5916] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 813.557275][ T5916] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 813.567292][ T5916] em28xx 1-1:0.0: board has no eeprom [ 813.594996][ T56] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 813.611238][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 813.621402][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.632036][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 813.642205][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 813.657577][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 813.720051][T16599] sctp: [Deprecated]: syz.1.2027 (pid 16599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 813.720051][T16599] Use struct sctp_sack_info instead [ 813.736754][ T5916] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 813.771440][ T5916] em28xx 1-1:0.0: Currently, V4L2 is not supported on this model [ 813.779302][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.787726][ T9] em28xx 1-1:0.0: Binding DVB extension [ 813.800162][T16599] process 'syz.1.2027' launched './file0' with NULL argv: empty string added [ 813.813924][T16599] program syz.1.2027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 813.853536][ T56] usb 3-1: config 0 has no interfaces? [ 813.877583][ T9] em28xx 1-1:0.0: no endpoint for DVB mode and transfer type 0 [ 813.885623][ T5916] usb 1-1: USB disconnect, device number 50 [ 813.900725][ T10] usb 5-1: Product: syz [ 813.904990][ T10] usb 5-1: Manufacturer: syz [ 813.946687][ T5916] em28xx 1-1:0.0: Disconnecting em28xx [ 813.956223][ T9] em28xx 1-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 813.968656][ T10] usb 5-1: SerialNumber: syz [ 813.976020][ T9] em28xx 1-1:0.0: Registering input extension [ 813.990699][T16603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.031771][T16603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.065866][ T5916] em28xx 1-1:0.0: Closing input extension [ 814.074317][ T10] cdc_ncm 5-1:1.0: skipping garbage [ 814.118848][ T56] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 814.129190][ T10] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 814.146588][ T5916] em28xx 1-1:0.0: Freeing device [ 814.156039][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.173770][T16607] netlink: 'syz.0.2030': attribute type 1 has an invalid length. [ 814.174801][ T10] cdc_ncm 5-1:1.0: bind() failure [ 814.215105][T16607] bond41: entered promiscuous mode [ 814.215129][T16607] bond41: entered allmulticast mode [ 814.215432][T16607] 8021q: adding VLAN 0 to HW filter on device bond41 [ 814.236113][T16607] bridge36: entered promiscuous mode [ 814.236238][T16607] bridge36: entered allmulticast mode [ 814.238468][T16607] bond41: (slave bridge36): Enslaving as a backup interface with an up link [ 814.248453][T16607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2030'. [ 814.265538][ T1153] bond41: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 814.304754][ T56] usb 3-1: Product: syz [ 814.304775][ T56] usb 3-1: Manufacturer: syz [ 814.304788][ T56] usb 3-1: SerialNumber: syz [ 814.326339][ T56] usb 3-1: config 0 descriptor?? [ 814.373854][T12475] bond41: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 814.537283][T16596] program syz.2.2026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 815.241499][T16626] fuse: Bad value for 'fd' [ 815.251700][T16626] fuse: Bad value for 'fd' [ 815.258315][T16626] fuse: Bad value for 'fd' [ 815.267213][T16626] fuse: Bad value for 'fd' [ 815.274686][T16626] fuse: Bad value for 'fd' [ 815.283631][T16626] fuse: Bad value for 'fd' [ 815.297224][T16626] fuse: Bad value for 'fd' [ 815.301437][T16627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2035'. [ 815.326955][T16627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2035'. [ 815.351042][T16627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2035'. [ 815.375370][T16627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2035'. [ 815.404855][T16627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2035'. [ 815.426181][T16627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2035'. [ 815.448494][T16627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2035'. [ 815.471296][T16627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2035'. [ 815.615649][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 815.631058][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 815.638827][ T24] usb 4-1: can't read configurations, error -71 [ 815.726941][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 815.726958][ T30] audit: type=1326 audit(1755419029.495:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8b58ebe9 code=0x7ffc0000 [ 815.756111][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.772316][T16636] binder: BINDER_SET_CONTEXT_MGR already set [ 815.779213][T16636] binder: 16635:16636 ioctl 4018620d 200000000040 returned -16 [ 815.789666][ T30] audit: type=1326 audit(1755419029.535:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb8b58ebe9 code=0x7ffc0000 [ 815.813600][ T30] audit: type=1326 audit(1755419029.535:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8b58ebe9 code=0x7ffc0000 [ 815.836009][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.899230][ T30] audit: type=1326 audit(1755419029.535:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbb8b58ebe9 code=0x7ffc0000 [ 815.921592][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.931496][ T30] audit: type=1326 audit(1755419029.535:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8b58ebe9 code=0x7ffc0000 [ 815.953913][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.963349][ T30] audit: type=1326 audit(1755419029.535:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbb8b58ebe9 code=0x7ffc0000 [ 815.999985][ T30] audit: type=1326 audit(1755419029.535:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8b58ebe9 code=0x7ffc0000 [ 816.022410][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.030112][ T30] audit: type=1326 audit(1755419029.535:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbb8b58ebe9 code=0x7ffc0000 [ 816.052530][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.067149][ T30] audit: type=1326 audit(1755419029.535:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8b58ebe9 code=0x7ffc0000 [ 816.089521][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.155769][T10729] usb 5-1: USB disconnect, device number 39 [ 816.210871][ T30] audit: type=1326 audit(1755419029.535:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbb8b58ebe9 code=0x7ffc0000 [ 816.235855][T16647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.244756][T16647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.311656][T16647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.355919][T16647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.408964][ T56] usb 3-1: USB disconnect, device number 48 [ 816.800623][ T24] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 817.103076][ T24] usb 4-1: config 0 has no interfaces? [ 817.114518][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 817.192280][T16675] IPVS: length: 225 != 8 [ 817.295027][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.353281][ T24] usb 4-1: Product: syz [ 817.385218][T16648] delete_channel: no stack [ 817.408510][ T24] usb 4-1: Manufacturer: syz [ 817.413159][ T24] usb 4-1: SerialNumber: syz [ 817.420913][ T24] usb 4-1: config 0 descriptor?? [ 817.484898][T16661] netlink: 'syz.0.2043': attribute type 6 has an invalid length. [ 817.887274][T16689] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 817.895967][T16689] __nla_validate_parse: 57 callbacks suppressed [ 817.895985][T16689] netlink: 724 bytes leftover after parsing attributes in process `syz.2.2047'. [ 817.896014][T16689] netlink: 724 bytes leftover after parsing attributes in process `syz.2.2047'. [ 817.908463][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 817.993334][T16687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2050'. [ 818.033980][T16691] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 818.076965][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 818.102178][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 818.102196][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.102206][ T24] usb 1-1: Product: syz [ 818.102213][ T24] usb 1-1: Manufacturer: syz [ 818.102220][ T24] usb 1-1: SerialNumber: syz [ 818.103139][ T24] usb 1-1: config 0 descriptor?? [ 818.379671][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 819.255114][T16706] netlink: 'syz.1.2054': attribute type 4 has an invalid length. [ 819.308225][T16706] netlink: 'syz.1.2054': attribute type 4 has an invalid length. [ 819.892036][T16719] netlink: 'syz.2.2055': attribute type 3 has an invalid length. [ 819.899940][T16719] netlink: 152988 bytes leftover after parsing attributes in process `syz.2.2055'. [ 819.934085][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 819.947215][ T24] usb 1-1: USB disconnect, device number 51 [ 819.991976][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2058'. [ 820.385782][T16722] sctp: [Deprecated]: syz.1.2059 (pid 16722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 820.385782][T16722] Use struct sctp_sack_info instead [ 820.460391][ T24] usb 4-1: USB disconnect, device number 59 [ 820.665295][ T9] hid_parser_main: 43 callbacks suppressed [ 820.665310][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 821.370329][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 822.219005][ T24] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 822.359693][T15392] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 822.379040][T16729] raw_sendmsg: syz.1.2062 forgot to set AF_INET. Fix it! [ 822.598913][T15392] usb 1-1: Using ep0 maxpacket: 16 [ 822.606704][T15392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.629102][T15392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.652963][ T24] usb 4-1: config 0 has no interfaces? [ 822.688462][T10729] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 822.711291][T15392] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 822.723710][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 822.768431][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.776499][T15392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.788071][ T24] usb 4-1: Product: syz [ 822.798199][ T24] usb 4-1: Manufacturer: syz [ 822.807103][ T24] usb 4-1: SerialNumber: syz [ 822.812337][T15392] usb 1-1: config 0 descriptor?? [ 822.834072][ T24] usb 4-1: config 0 descriptor?? [ 822.915982][T10729] usb 5-1: config 0 has no interfaces? [ 822.971602][T16755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.986083][T16755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.076717][T16739] program syz.3.2063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.171345][T10729] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 823.171365][T10729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.171375][T10729] usb 5-1: Product: syz [ 823.171395][T10729] usb 5-1: Manufacturer: syz [ 823.171402][T10729] usb 5-1: SerialNumber: syz [ 823.180876][T10729] usb 5-1: config 0 descriptor?? [ 823.427259][T16746] program syz.4.2065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.524952][T15392] usbhid 1-1:0.0: can't add hid device: -71 [ 823.535701][T15392] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 823.547687][T15392] usb 1-1: USB disconnect, device number 52 [ 823.743108][T16767] netlink: 'syz.1.2072': attribute type 1 has an invalid length. [ 823.759839][T16767] 8021q: adding VLAN 0 to HW filter on device bond39 [ 823.769890][T16767] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 823.793036][T16767] bond39: (slave veth3): Enslaving as an active interface with a down link [ 824.145415][T16773] netlink: 'syz.0.2074': attribute type 8 has an invalid length. [ 824.198235][T16778] netlink: 'syz.2.2076': attribute type 12 has an invalid length. [ 824.210799][T16778] xt_limit: Overflow, try lower: 271964/0 [ 824.217383][T16778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2076'. [ 824.421359][T16786] IPVS: length: 225 != 8 [ 824.749433][T15298] usb 4-1: USB disconnect, device number 60 [ 825.251470][ T5916] usb 5-1: USB disconnect, device number 40 [ 825.254620][T15298] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 825.440769][T15298] usb 4-1: config 0 has no interfaces? [ 825.447737][T15298] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 825.457387][T15298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.468509][T15298] usb 4-1: Product: syz [ 825.475263][T15298] usb 4-1: Manufacturer: syz [ 825.488400][T15298] usb 4-1: SerialNumber: syz [ 825.504108][T15298] usb 4-1: config 0 descriptor?? [ 825.728534][ T5916] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 825.741559][ T56] usb 4-1: USB disconnect, device number 61 [ 825.909179][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 825.926340][ T5916] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 825.936290][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.945686][ T5916] usb 5-1: Product: syz [ 825.991966][ T5916] usb 5-1: Manufacturer: syz [ 825.997109][ T5916] usb 5-1: SerialNumber: syz [ 826.008798][ T5916] usb 5-1: config 0 descriptor?? [ 826.022069][ T5916] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 826.598579][ T56] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 826.945768][ T56] usb 3-1: config 0 has no interfaces? [ 826.994762][ T56] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 827.005110][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.014299][ T56] usb 3-1: Product: syz [ 827.031522][ T56] usb 3-1: Manufacturer: syz [ 827.045610][ T56] usb 3-1: SerialNumber: syz [ 827.054179][ T56] usb 3-1: config 0 descriptor?? [ 827.093290][T16828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2088'. [ 827.333426][T16833] netlink: 'syz.1.2089': attribute type 1 has an invalid length. [ 827.380401][T16833] bond40: entered promiscuous mode [ 827.385613][T16833] bond40: entered allmulticast mode [ 827.391543][T16833] 8021q: adding VLAN 0 to HW filter on device bond40 [ 827.412295][T16833] bridge41: entered promiscuous mode [ 827.417978][T16833] bridge41: entered allmulticast mode [ 827.424786][T16833] bond40: (slave bridge41): Enslaving as a backup interface with an up link [ 827.440220][T16833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2089'. [ 827.463387][ T3547] bond40: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 827.501238][T16816] program syz.2.2084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 827.761254][T13324] bond40: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 828.391758][ T5916] gspca_m5602: Failed to find a sensor [ 828.397312][ T5916] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 828.409204][ T5916] usb 5-1: USB disconnect, device number 41 [ 828.490167][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2090'. [ 828.493042][T16843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.562012][T16845] IPVS: length: 225 != 8 [ 828.648745][T16843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.712422][T16843] binder: 16842:16843 ioctl 4018620d 0 returned -22 [ 829.243425][T15392] usb 3-1: USB disconnect, device number 49 [ 829.405663][T16865] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 829.521672][T16866] bond28: entered promiscuous mode [ 829.527201][T16866] bond28: entered allmulticast mode [ 829.533105][T16866] 8021q: adding VLAN 0 to HW filter on device bond28 [ 829.598089][T16865] bridge29: entered promiscuous mode [ 829.604534][T16865] bridge29: entered allmulticast mode [ 829.610908][T16865] bond28: (slave bridge29): Enslaving as a backup interface with an up link [ 829.674718][ T1038] bond28: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 829.814487][ T36] bond28: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 829.938418][ T5916] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 830.221054][ T5916] usb 5-1: config 0 has no interfaces? [ 830.276984][T16880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.288160][T16880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.300560][T16880] mmap: syz.1.2101 (16880) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 830.339483][T16883] FAULT_INJECTION: forcing a failure. [ 830.339483][T16883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.357417][T16883] CPU: 1 UID: 0 PID: 16883 Comm: syz.0.2102 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 830.357435][T16883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 830.357442][T16883] Call Trace: [ 830.357447][T16883] [ 830.357453][T16883] dump_stack_lvl+0x189/0x250 [ 830.357470][T16883] ? __pfx____ratelimit+0x10/0x10 [ 830.357483][T16883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 830.357497][T16883] ? __pfx__printk+0x10/0x10 [ 830.357509][T16883] ? __might_fault+0xb0/0x130 [ 830.357523][T16883] ? rcu_is_watching+0x15/0xb0 [ 830.357533][T16883] should_fail_ex+0x414/0x560 [ 830.357546][T16883] _copy_from_user+0x2d/0xb0 [ 830.357557][T16883] kstrtouint_from_user+0xc4/0x170 [ 830.357570][T16883] ? __might_fault+0xb0/0x130 [ 830.357581][T16883] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 830.357602][T16883] ? vfs_write+0x211/0xb30 [ 830.357618][T16883] ? rcu_is_watching+0x15/0xb0 [ 830.357634][T16883] proc_fail_nth_write+0x88/0x200 [ 830.357653][T16883] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 830.357662][T16883] ? security_file_permission+0x75/0x290 [ 830.357675][T16883] ? preempt_count_add+0x91/0x1a0 [ 830.357688][T16883] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 830.357698][T16883] vfs_write+0x27e/0xb30 [ 830.357710][T16883] ? __pfx_vfs_write+0x10/0x10 [ 830.357722][T16883] ? __fget_files+0x3a0/0x420 [ 830.357730][T16883] ? __fget_files+0x2a/0x420 [ 830.357739][T16883] ksys_write+0x145/0x250 [ 830.357750][T16883] ? __pfx_ksys_write+0x10/0x10 [ 830.357762][T16883] ? rcu_is_watching+0x15/0xb0 [ 830.357771][T16883] do_syscall_64+0xfa/0x3b0 [ 830.357784][T16883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.357793][T16883] ? clear_bhb_loop+0x60/0xb0 [ 830.357803][T16883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.357812][T16883] RIP: 0033:0x7f3f8ef8d69f [ 830.357822][T16883] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 830.357830][T16883] RSP: 002b:00007f3f8fd8a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 830.357842][T16883] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3f8ef8d69f [ 830.357849][T16883] RDX: 0000000000000001 RSI: 00007f3f8fd8a0a0 RDI: 0000000000000003 [ 830.357855][T16883] RBP: 00007f3f8fd8a090 R08: 0000000000000000 R09: 0000000000000000 [ 830.357861][T16883] R10: 0000200000001640 R11: 0000000000000293 R12: 0000000000000001 [ 830.357867][T16883] R13: 00007f3f8f1b6128 R14: 00007f3f8f1b6090 R15: 00007f3f8f2dfa28 [ 830.357876][T16883] [ 830.696427][ T5916] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 830.751028][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.804825][ T5916] usb 5-1: Product: syz [ 830.811984][ T5916] usb 5-1: Manufacturer: syz [ 830.816770][ T5916] usb 5-1: SerialNumber: syz [ 830.825323][ T5916] usb 5-1: config 0 descriptor?? [ 831.125663][T16901] IPVS: length: 225 != 8 [ 831.175451][T16872] program syz.4.2099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 832.181844][T16918] input: syz1 as /devices/virtual/input/input22 [ 832.238789][T15392] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 832.380618][T16872] delete_channel: no stack [ 832.386197][T10729] usb 5-1: USB disconnect, device number 42 [ 832.409717][T15392] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.421518][T15392] usb 1-1: config 0 has no interfaces? [ 832.427077][T15392] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 832.441985][T15392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.451293][T15392] usb 1-1: config 0 descriptor?? [ 832.701811][T15298] usb 1-1: USB disconnect, device number 53 [ 832.829761][T10729] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 833.015983][T16924] capability: warning: `syz.4.2115' uses deprecated v2 capabilities in a way that may be insecure [ 833.952610][T16948] IPVS: length: 225 != 8 [ 834.749549][T16961] input: syz1 as /devices/virtual/input/input23 [ 835.227448][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057cdf400: rx timeout, send abort [ 835.305789][T16976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.400779][T16976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.727512][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057cdc000: rx timeout, send abort [ 835.736570][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057cdf400: abort rx timeout. Force session deactivation [ 836.179516][T10729] usb 5-1: unable to get BOS descriptor or descriptor too short [ 836.235789][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057cdc000: abort rx timeout. Force session deactivation [ 836.286246][T10729] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 836.297372][T10729] usb 5-1: can't read configurations, error -71 [ 837.006796][ T5916] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 837.260486][ T5916] usb 4-1: config 0 has no interfaces? [ 837.271634][ T5916] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 837.280894][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.289112][ T5916] usb 4-1: Product: syz [ 837.293368][ T5916] usb 4-1: Manufacturer: syz [ 837.298024][ T5916] usb 4-1: SerialNumber: syz [ 837.307530][ T5916] usb 4-1: config 0 descriptor?? [ 837.626998][T17011] IPVS: length: 225 != 8 [ 837.712046][T16990] program syz.3.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 839.509121][T15298] usb 4-1: USB disconnect, device number 62 [ 839.658057][T17028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.668248][T17028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.680146][T17028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.689024][T17028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.697561][T17028] netlink: 'syz.1.2144': attribute type 15 has an invalid length. [ 839.706454][T17028] JFS: charset not found [ 839.716741][T17028] batadv0: entered promiscuous mode [ 839.722976][T17028] bond0: entered promiscuous mode [ 839.728027][T17028] bond_slave_0: entered promiscuous mode [ 839.733956][T17028] bond_slave_1: entered promiscuous mode [ 839.741398][T17028] hsr1: entered allmulticast mode [ 839.746461][T17028] batadv0: entered allmulticast mode [ 839.751863][T17028] bond0: entered allmulticast mode [ 839.757166][T17028] bond_slave_0: entered allmulticast mode [ 839.763074][T17028] bond_slave_1: entered allmulticast mode [ 839.769981][T17028] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 839.770037][T17029] netlink: 'syz.1.2144': attribute type 11 has an invalid length. [ 839.791304][T17028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.800160][T17028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.848431][T15298] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 839.880165][T16998] delete_channel: no stack [ 840.001546][T17033] netlink: 'syz.4.2145': attribute type 1 has an invalid length. [ 840.047153][T17033] bond37: entered promiscuous mode [ 840.052436][T17033] bond37: entered allmulticast mode [ 840.058291][T17033] 8021q: adding VLAN 0 to HW filter on device bond37 [ 840.082598][T17033] bridge37: entered promiscuous mode [ 840.088136][T17033] bridge37: entered allmulticast mode [ 840.094935][T17033] bond37: (slave bridge37): Enslaving as a backup interface with an up link [ 840.108224][ T36] bond37: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 840.144670][T15298] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 840.161231][T15298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.172395][T17033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2145'. [ 840.195020][T15298] usb 4-1: Product: syz [ 840.206095][T15298] usb 4-1: Manufacturer: syz [ 840.218258][T15298] usb 4-1: SerialNumber: syz [ 840.238436][T13324] bond37: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 840.280514][T15298] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 840.299898][T15392] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 840.394224][T17038] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2146'. [ 840.659450][ T5916] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 840.849597][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 840.902786][ T5916] usb 3-1: config 8 has an invalid interface number: 109 but max is 1 [ 840.915904][ T5916] usb 3-1: config 8 has an invalid interface number: 255 but max is 1 [ 840.951278][ T5916] usb 3-1: config 8 has no interface number 0 [ 840.963525][ T5916] usb 3-1: config 8 has no interface number 1 [ 840.973195][ T5916] usb 3-1: config 8 interface 109 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 840.987612][ T5916] usb 3-1: config 8 interface 255 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 841.032681][ T5916] usb 3-1: config 8 interface 255 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 1024 [ 841.049847][ T5916] usb 3-1: config 8 interface 255 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 841.068188][ T5916] usb 3-1: config 8 interface 255 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 841.149487][ T5916] usb 3-1: config 8 interface 109 has no altsetting 0 [ 841.158425][ T5916] usb 3-1: config 8 interface 255 has no altsetting 0 [ 841.172510][ T5916] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=b3.c4 [ 841.181962][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.192906][ T5916] usb 3-1: Product: syz [ 841.197131][ T5916] usb 3-1: Manufacturer: syz [ 841.206079][ T5916] usb 3-1: SerialNumber: syz [ 841.364651][T15392] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 841.392031][T15392] ath9k_htc: Failed to initialize the device [ 841.445912][T15392] usb 4-1: ath9k_htc: USB layer deinitialized [ 841.466527][T17038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.529123][T17038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.825496][T17065] FAULT_INJECTION: forcing a failure. [ 841.825496][T17065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.869666][T17066] netlink: 'syz.1.2154': attribute type 1 has an invalid length. [ 841.909395][T17065] CPU: 1 UID: 0 PID: 17065 Comm: syz.4.2153 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 841.909418][T17065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 841.909425][T17065] Call Trace: [ 841.909430][T17065] [ 841.909434][T17065] dump_stack_lvl+0x189/0x250 [ 841.909449][T17065] ? __pfx____ratelimit+0x10/0x10 [ 841.909462][T17065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 841.909472][T17065] ? __pfx__printk+0x10/0x10 [ 841.909490][T17065] ? __might_fault+0xb0/0x130 [ 841.909514][T17065] ? rcu_is_watching+0x15/0xb0 [ 841.909531][T17065] should_fail_ex+0x414/0x560 [ 841.909553][T17065] _copy_from_user+0x2d/0xb0 [ 841.909568][T17065] ? semctl_main+0xee/0x15f0 [ 841.909579][T17065] semctl_main+0x6f5/0x15f0 [ 841.909592][T17065] ? semctl_main+0xee/0x15f0 [ 841.909605][T17065] ? __pfx_semctl_main+0x10/0x10 [ 841.909627][T17065] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 841.909650][T17065] ? __pfx_vfs_write+0x10/0x10 [ 841.909673][T17065] __se_sys_semctl+0x31c/0x3a0 [ 841.909694][T17065] ? __pfx___se_sys_semctl+0x10/0x10 [ 841.909712][T17065] ? __pfx_ksys_write+0x10/0x10 [ 841.909724][T17065] ? rcu_is_watching+0x15/0xb0 [ 841.909732][T17065] do_syscall_64+0xfa/0x3b0 [ 841.909745][T17065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.909754][T17065] ? clear_bhb_loop+0x60/0xb0 [ 841.909763][T17065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.909775][T17065] RIP: 0033:0x7f307bb8ebe9 [ 841.909790][T17065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.909804][T17065] RSP: 002b:00007f3079db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 841.909823][T17065] RAX: ffffffffffffffda RBX: 00007f307bdb6180 RCX: 00007f307bb8ebe9 [ 841.909836][T17065] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000000 [ 841.909846][T17065] RBP: 00007f3079db4090 R08: 0000000000000000 R09: 0000000000000000 [ 841.909855][T17065] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 841.909861][T17065] R13: 00007f307bdb6218 R14: 00007f307bdb6180 R15: 00007f307bedfa28 [ 841.909870][T17065] [ 842.196539][T17068] bond41: entered promiscuous mode [ 842.287698][T17068] bond41: entered allmulticast mode [ 842.304574][T17068] 8021q: adding VLAN 0 to HW filter on device bond41 [ 842.635360][T17075] IPVS: length: 225 != 8 [ 842.830959][T15392] usb 4-1: USB disconnect, device number 63 [ 843.053761][T17082] netlink: 'syz.3.2158': attribute type 1 has an invalid length. [ 843.120353][T17085] bond44: entered promiscuous mode [ 843.125758][T17085] bond44: entered allmulticast mode [ 843.136633][T17085] 8021q: adding VLAN 0 to HW filter on device bond44 [ 843.201067][T17082] bridge41: entered promiscuous mode [ 843.206613][T17082] bridge41: entered allmulticast mode [ 843.238875][ T5916] ssu100 3-1:8.109: Quatech SSU-100 USB to Serial Driver converter detected [ 843.251461][ T5916] ssu100 3-1:8.109: probe with driver ssu100 failed with error -71 [ 843.261527][ T3547] bond44: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 843.271084][ T5916] ssu100 3-1:8.255: Quatech SSU-100 USB to Serial Driver converter detected [ 843.284332][T17082] bond44: (slave bridge41): Enslaving as an active interface with an up link [ 843.306810][ T5916] ssu100 3-1:8.255: probe with driver ssu100 failed with error -71 [ 843.420257][T13324] bond44: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 843.424205][ T5916] usb 3-1: USB disconnect, device number 50 [ 843.917940][ T10] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 844.278693][ T10] usb 5-1: config 0 has no interfaces? [ 844.291832][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 844.343575][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.382552][ T10] usb 5-1: Product: syz [ 844.390716][ T10] usb 5-1: Manufacturer: syz [ 844.395350][ T10] usb 5-1: SerialNumber: syz [ 844.497317][ T10] usb 5-1: config 0 descriptor?? [ 844.708498][ T9] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 844.722523][T17125] netlink: 'syz.2.2169': attribute type 1 has an invalid length. [ 844.744247][T17124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.753369][T17124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.763735][T17124] program syz.1.2168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 844.810738][T17127] netlink: 'syz.0.2170': attribute type 1 has an invalid length. [ 844.841283][T17090] program syz.4.2157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 844.882737][T17128] bond29: entered promiscuous mode [ 844.888222][T17128] bond29: entered allmulticast mode [ 844.895203][T17128] 8021q: adding VLAN 0 to HW filter on device bond29 [ 845.045071][T17133] bond42: entered promiscuous mode [ 845.057306][T17133] bond42: entered allmulticast mode [ 845.063409][T17133] 8021q: adding VLAN 0 to HW filter on device bond42 [ 845.099595][ T9] usb 4-1: config 0 has no interfaces? [ 845.109546][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 845.130768][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.173924][ T9] usb 4-1: Product: syz [ 845.214793][ T9] usb 4-1: Manufacturer: syz [ 845.224357][ T9] usb 4-1: SerialNumber: syz [ 845.245620][ T9] usb 4-1: config 0 descriptor?? [ 845.476880][T17108] program syz.3.2162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 846.128847][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 846.297688][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.312719][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 846.328310][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.342395][ T5916] usb 5-1: USB disconnect, device number 45 [ 846.368865][ T10] usb 1-1: config 0 descriptor?? [ 846.391313][T17140] input: syz1 as /devices/virtual/input/input24 [ 846.478603][T15392] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 846.640946][T15392] usb 3-1: Using ep0 maxpacket: 8 [ 846.795224][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 846.805325][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 846.822983][ T10] usb 1-1: USB disconnect, device number 54 [ 846.855100][T15392] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.870107][T15392] usb 3-1: config 0 has no interfaces? [ 846.875696][T15392] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 846.885278][T15392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.907597][T15392] usb 3-1: config 0 descriptor?? [ 847.156437][ T5916] usb 3-1: USB disconnect, device number 51 [ 847.328587][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 847.478399][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 847.491017][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.503100][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 847.512685][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.523251][ T10] usb 1-1: config 0 descriptor?? [ 847.536771][ T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 847.563789][ T10] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 847.669374][T15392] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 847.959748][ T10] usb 1-1: USB disconnect, device number 55 [ 847.991020][ T10] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 848.320251][T17166] netlink: 'syz.2.2181': attribute type 1 has an invalid length. [ 848.501786][T17166] bond30: entered promiscuous mode [ 848.507504][T17166] bond30: entered allmulticast mode [ 848.514771][T17166] 8021q: adding VLAN 0 to HW filter on device bond30 [ 848.626093][ T5916] usb 4-1: USB disconnect, device number 64 [ 849.228591][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 849.470123][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 849.730916][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 849.856453][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 849.905274][ T10] usb 1-1: SerialNumber: syz [ 850.582525][ T10] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 851.059723][T17172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.082904][T15392] usb 5-1: unable to get BOS descriptor or descriptor too short [ 851.130651][T17172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.154851][T15392] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 851.174248][T15392] usb 5-1: can't read configurations, error -71 [ 851.213338][T17199] IPVS: length: 225 != 8 [ 851.377272][T15298] usb 1-1: USB disconnect, device number 56 [ 851.384957][T15298] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 851.473733][T17210] IPVS: length: 225 != 8 [ 851.742758][T17219] netlink: 'syz.2.2192': attribute type 1 has an invalid length. [ 851.802610][T17221] bond31: entered promiscuous mode [ 851.808323][T17221] bond31: entered allmulticast mode [ 851.818238][T17221] 8021q: adding VLAN 0 to HW filter on device bond31 [ 852.338426][T15392] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 852.500135][T15392] usb 5-1: Using ep0 maxpacket: 16 [ 852.520004][T15392] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.541343][T15392] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.816929][T15392] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 852.830234][T15298] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 852.847527][T15392] usb 5-1: config 0 interface 0 has no altsetting 0 [ 852.857577][T15392] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 852.884019][T15392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.907247][T15392] usb 5-1: config 0 descriptor?? [ 853.245609][T15298] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 853.255911][T15298] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 853.274420][T15298] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 853.297726][T15298] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 853.361391][T17259] netlink: 'syz.2.2197': attribute type 1 has an invalid length. [ 853.391666][T15392] hid (null): unknown global tag 0xd [ 853.397304][T15392] hid (null): report_id 3474074428 is invalid [ 853.405672][T15298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.573088][T17259] bond32: entered promiscuous mode [ 853.583596][T17259] bond32: entered allmulticast mode [ 853.594739][T15298] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 853.604490][T15392] hid (null): unknown global tag 0xe [ 853.622808][T15392] hid (null): global environment stack underflow [ 853.627925][T17259] 8021q: adding VLAN 0 to HW filter on device bond32 [ 853.650339][T15298] usb 1-1: invalid MIDI out EP 0 [ 853.656604][T15392] hid (null): unknown global tag 0xd [ 853.751130][T15392] usb 5-1: USB disconnect, device number 47 [ 853.766124][T15298] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 853.997354][ T10] usb 1-1: USB disconnect, device number 57 [ 854.159278][ T43] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 854.214732][T17272] ptrace attach of "./syz-executor exec"[5865] was attempted by "./syz-executor exec"[17272] [ 854.338579][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 854.610397][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 854.707168][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 854.822886][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 854.854181][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.076652][ T43] usb 4-1: Product: syz [ 855.083301][ T43] usb 4-1: Manufacturer: syz [ 855.088196][ T43] usb 4-1: SerialNumber: syz [ 855.099924][ T43] usb 4-1: config 0 descriptor?? [ 855.111597][ T43] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 855.121383][ T43] em28xx 4-1:0.0: Video interface 0 found: [ 855.128552][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 855.138434][T15392] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 855.290082][T15392] usb 3-1: config 9 has an invalid interface number: 51 but max is 1 [ 855.382670][T17268] binder: 17267:17268 ioctl 4018620d 0 returned -22 [ 855.395740][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.412998][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 855.422391][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.434600][ T9] usb 1-1: config 0 descriptor?? [ 855.463352][T15392] usb 3-1: config 9 has an invalid interface number: 73 but max is 1 [ 855.485135][T15392] usb 3-1: config 9 has no interface number 0 [ 855.492930][T15392] usb 3-1: config 9 has no interface number 1 [ 855.502464][T15392] usb 3-1: config 9 interface 51 has no altsetting 0 [ 855.512625][T15392] usb 3-1: config 9 interface 73 has no altsetting 0 [ 855.525922][T15392] usb 3-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=c4.19 [ 855.535427][ T43] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 855.542585][T15392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.551220][T15392] usb 3-1: Product: syz [ 855.555455][T15392] usb 3-1: Manufacturer: syz [ 855.561463][T15392] usb 3-1: SerialNumber: syz [ 855.610882][ T43] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 855.622058][ T43] em28xx 4-1:0.0: board has no eeprom [ 855.644537][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 855.653400][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 855.684546][ T9] usb 1-1: USB disconnect, device number 58 [ 855.688624][ T43] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 855.699397][ T43] em28xx 4-1:0.0: Currently, V4L2 is not supported on this model [ 855.708182][T10729] em28xx 4-1:0.0: Binding DVB extension [ 855.713977][T10729] em28xx 4-1:0.0: no endpoint for DVB mode and transfer type 0 [ 855.724812][T10729] em28xx 4-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 855.742646][ T43] usb 4-1: USB disconnect, device number 65 [ 855.751117][T10729] em28xx 4-1:0.0: Registering input extension [ 855.761328][ T43] em28xx 4-1:0.0: Disconnecting em28xx [ 855.767022][ T43] em28xx 4-1:0.0: Closing input extension [ 855.780852][ T43] em28xx 4-1:0.0: Freeing device [ 856.248460][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 856.398451][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 856.418393][ T43] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 856.764229][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.782958][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 856.803834][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.846805][ T9] usb 1-1: config 0 descriptor?? [ 856.863431][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 856.895502][ T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 856.901093][ T43] usb 4-1: config 0 has no interfaces? [ 856.924080][ T43] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 856.961760][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.974348][ T43] usb 4-1: Product: syz [ 856.985737][ T43] usb 4-1: Manufacturer: syz [ 856.994616][ T43] usb 4-1: SerialNumber: syz [ 857.008503][ T43] usb 4-1: config 0 descriptor?? [ 857.259060][T17302] program syz.3.2206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 857.341203][ T43] usb 1-1: USB disconnect, device number 59 [ 857.344252][ T43] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 857.373170][T17309] netlink: 'syz.1.2209': attribute type 11 has an invalid length. [ 857.373185][T17309] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2209'. [ 857.375060][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 857.375072][ T30] audit: type=1326 audit(1755419071.145:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8b78ebe9 code=0x7ffc0000 [ 857.376685][ T30] audit: type=1326 audit(1755419071.145:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b8b78ebe9 code=0x7ffc0000 [ 857.376725][ T30] audit: type=1326 audit(1755419071.145:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8b78ebe9 code=0x7ffc0000 [ 857.376744][ T30] audit: type=1326 audit(1755419071.145:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0b8b78ebe9 code=0x7ffc0000 [ 857.376761][ T30] audit: type=1326 audit(1755419071.145:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8b78ebe9 code=0x7ffc0000 [ 857.376777][ T30] audit: type=1326 audit(1755419071.145:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b8b78d550 code=0x7ffc0000 [ 857.376793][ T30] audit: type=1326 audit(1755419071.145:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8b78ebe9 code=0x7ffc0000 [ 857.376810][ T30] audit: type=1326 audit(1755419071.145:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8b78ebe9 code=0x7ffc0000 [ 857.376826][ T30] audit: type=1326 audit(1755419071.145:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0b8b78ebe9 code=0x7ffc0000 [ 857.376853][ T30] audit: type=1326 audit(1755419071.145:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8b78ebe9 code=0x7ffc0000 [ 857.754218][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.803031][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.861096][T15392] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 857.861245][T15392] usb 3-1: invalid MIDI in EP 0 [ 857.861466][T15392] snd-usb-audio 3-1:9.51: probe with driver snd-usb-audio failed with error -22 [ 857.864525][T15392] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 857.870499][T15392] snd-usb-audio 3-1:9.73: probe with driver snd-usb-audio failed with error -2 [ 857.871830][T15392] usb 3-1: USB disconnect, device number 52 [ 857.941816][T16529] udevd[16529]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.73/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 858.722073][T15392] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 858.897822][T15392] usb 3-1: config 0 has no interfaces? [ 858.912247][T15392] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 858.921738][T15392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.963100][T15392] usb 3-1: Product: syz [ 858.981697][T15392] usb 3-1: Manufacturer: syz [ 858.988221][T15392] usb 3-1: SerialNumber: syz [ 859.020046][T15392] usb 3-1: config 0 descriptor?? [ 859.094699][T17323] delete_channel: no stack [ 859.531231][T17333] program syz.2.2216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 859.613479][T17343] syzkaller0: entered promiscuous mode [ 859.613494][T17343] syzkaller0: entered allmulticast mode [ 859.808244][T17346] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 859.814769][T17346] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 859.835765][T17346] vhci_hcd vhci_hcd.0: Device attached [ 859.865970][T17347] vhci_hcd: connection closed [ 859.867228][T12475] vhci_hcd: stop threads [ 859.877779][T12475] vhci_hcd: release socket [ 859.883595][T12475] vhci_hcd: disconnect device [ 859.915246][ T9] usb 4-1: USB disconnect, device number 66 [ 860.014188][T17352] fuse: Bad value for 'user_id' [ 860.020002][T17352] fuse: Bad value for 'user_id' [ 860.645669][T17373] netlink: 'syz.1.2226': attribute type 1 has an invalid length. [ 860.717485][T17375] bond42: entered promiscuous mode [ 860.723983][T17375] bond42: entered allmulticast mode [ 860.729878][T17375] 8021q: adding VLAN 0 to HW filter on device bond42 [ 860.764050][T17373] bridge42: entered promiscuous mode [ 860.791728][T17373] bridge42: entered allmulticast mode [ 860.836679][ T3547] bond42: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 860.884381][T17373] bond42: (slave bridge42): Enslaving as an active interface with an up link [ 861.017839][T12475] bond42: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 861.177441][T10729] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 861.458673][T10729] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 861.468010][T10729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.478404][T10729] usb 5-1: Product: syz [ 861.483126][T10729] usb 5-1: Manufacturer: syz [ 861.492639][T10729] usb 5-1: SerialNumber: syz [ 861.521627][T10729] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 861.537450][ T43] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 861.688446][T15392] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 861.760553][T17396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.771276][T17396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.836194][T10729] usb 3-1: USB disconnect, device number 53 [ 861.859764][T15392] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 861.874290][T15392] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 861.885692][T15392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 861.894204][T15392] usb 1-1: SerialNumber: syz [ 862.192979][T17388] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20003 [ 862.398697][T10729] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 862.558538][ T43] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 862.568543][T10729] usb 3-1: Using ep0 maxpacket: 16 [ 862.575609][ T43] ath9k_htc: Failed to initialize the device [ 862.587555][T10729] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 862.605376][T10729] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 862.622323][T10729] usb 3-1: config 0 interface 0 has no altsetting 0 [ 862.629414][T10729] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 862.642727][T15392] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 862.668298][T10729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.686629][ T43] usb 5-1: ath9k_htc: USB layer deinitialized [ 862.735499][T10729] usb 3-1: config 0 descriptor?? [ 862.740678][T15298] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 862.794607][T17402] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 862.910701][T15298] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 862.934044][T15298] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.964570][T15298] usb 4-1: config 0 has no interface number 0 [ 862.984989][T15298] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 863.052542][ T9] usb 1-1: USB disconnect, device number 60 [ 863.063418][ T9] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 863.082049][T15298] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.145253][T15298] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 863.185321][T15298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.204070][T15298] usb 4-1: Product: syz [ 863.217134][T15298] usb 4-1: Manufacturer: syz [ 863.230729][T15298] usb 4-1: SerialNumber: syz [ 863.248306][T15298] usb 4-1: config 0 descriptor?? [ 863.714436][T17442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.732073][T17442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.748528][T17442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.761881][T17442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.788179][T17442] program syz.3.2240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 863.858482][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 863.915991][ T43] usb 5-1: USB disconnect, device number 48 [ 864.009892][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 864.030817][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 864.040370][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 864.048707][ T9] usb 1-1: SerialNumber: syz [ 864.695644][ T9] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 864.895720][T17438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.930698][T17438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.154203][T15392] usb 1-1: USB disconnect, device number 61 [ 865.162800][T15392] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 865.260099][T10729] usbhid 3-1:0.0: can't add hid device: -71 [ 865.270962][T10729] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 865.306717][T10729] usb 3-1: USB disconnect, device number 54 [ 865.446209][T17484] netlink: 'syz.1.2247': attribute type 1 has an invalid length. [ 865.576249][T17489] bond43: entered promiscuous mode [ 865.581477][T17489] bond43: entered allmulticast mode [ 865.587460][T17489] 8021q: adding VLAN 0 to HW filter on device bond43 [ 865.625836][T17484] bridge43: entered promiscuous mode [ 865.638521][T17484] bridge43: entered allmulticast mode [ 865.645144][T17484] bond43: (slave bridge43): Enslaving as a backup interface with an up link [ 865.689376][T15298] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 865.714259][T15298] usb 4-1: USB disconnect, device number 67 [ 865.719636][ T49] bond43: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 865.922220][ T49] bond43: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 866.238035][T17506] IPVS: length: 225 != 8 [ 867.355049][T17518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.365987][T17518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.794029][T17534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2263'. [ 868.316033][T17563] netlink: 'syz.2.2268': attribute type 1 has an invalid length. [ 868.347621][T17563] bond33: entered promiscuous mode [ 868.353261][T17563] bond33: entered allmulticast mode [ 868.360374][T17563] 8021q: adding VLAN 0 to HW filter on device bond33 [ 868.604889][T17563] bridge31: entered promiscuous mode [ 868.612638][T17563] bridge31: entered allmulticast mode [ 868.621424][T17563] bond33: (slave bridge31): Enslaving as a backup interface with an up link [ 868.701951][ T36] bond33: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 868.834088][ T36] bond33: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 869.068408][ T5916] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 869.176053][T17580] netlink: 'syz.4.2272': attribute type 1 has an invalid length. [ 869.217106][T17580] bond38: entered promiscuous mode [ 869.224615][T17580] bond38: entered allmulticast mode [ 869.244436][T17580] 8021q: adding VLAN 0 to HW filter on device bond38 [ 869.267080][T17580] bridge38: entered promiscuous mode [ 869.273311][T17580] bridge38: entered allmulticast mode [ 869.280040][T17580] bond38: (slave bridge38): Enslaving as a backup interface with an up link [ 869.315712][T12475] bond38: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 869.431243][ T3547] bond38: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 869.810315][T17587] netlink: 'syz.2.2274': attribute type 1 has an invalid length. [ 870.027660][T17587] bond34: entered promiscuous mode [ 870.107634][T17587] bond34: entered allmulticast mode [ 870.129057][T17587] 8021q: adding VLAN 0 to HW filter on device bond34 [ 870.187173][T17589] bridge32: entered promiscuous mode [ 870.193726][T17589] bridge32: entered allmulticast mode [ 870.201717][T17589] bond34: (slave bridge32): Enslaving as a backup interface with an up link [ 870.270021][ T49] bond34: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 870.282017][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.288523][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.398549][ T49] bond34: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 870.998466][ T43] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 871.118456][ T56] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 871.118520][T10729] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 871.148385][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 871.157504][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 871.182472][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 871.197333][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 871.206957][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.216067][ T43] usb 5-1: Product: syz [ 871.220520][ T43] usb 5-1: Manufacturer: syz [ 871.225811][ T43] usb 5-1: SerialNumber: syz [ 871.237317][ T43] usb 5-1: config 0 descriptor?? [ 871.247829][ T43] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 871.257472][ T43] em28xx 5-1:0.0: Video interface 0 found: [ 871.270228][T17608] loop7: detected capacity change from 0 to 1 [ 871.288746][T10729] usb 4-1: Using ep0 maxpacket: 16 [ 871.296860][ T56] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.300247][T10729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.319123][ T56] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 871.328237][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.339731][ T56] usb 3-1: config 0 descriptor?? [ 871.351324][T10729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 871.352606][ T56] pwc: Askey VC010 type 2 USB webcam detected. [ 871.365748][T10729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 871.380981][T10729] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 871.396111][T10729] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 871.408853][T10729] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 871.417159][T10729] usb 4-1: Manufacturer: syz [ 871.425008][T10729] usb 4-1: config 0 descriptor?? [ 871.444934][T17594] binder: 17593:17594 ioctl 4018620d 0 returned -22 [ 871.510056][ T43] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 871.552204][ T56] pwc: recv_control_msg error -32 req 02 val 2b00 [ 871.578529][ T56] pwc: recv_control_msg error -71 req 02 val 2700 [ 871.588069][ T56] pwc: recv_control_msg error -71 req 02 val 2c00 [ 871.597518][ T43] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 871.627374][ T56] pwc: recv_control_msg error -71 req 04 val 1000 [ 871.631407][ T43] em28xx 5-1:0.0: board has no eeprom [ 871.642313][T17613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.652283][T17613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.658829][ T56] pwc: recv_control_msg error -71 req 04 val 1300 [ 871.669997][ T56] pwc: recv_control_msg error -71 req 04 val 1400 [ 871.676833][ T56] pwc: recv_control_msg error -71 req 02 val 2000 [ 871.684022][ T56] pwc: recv_control_msg error -71 req 02 val 2100 [ 871.690957][ T56] pwc: recv_control_msg error -71 req 04 val 1500 [ 871.697706][ T56] pwc: recv_control_msg error -71 req 02 val 2500 [ 871.704896][ T56] pwc: recv_control_msg error -71 req 02 val 2400 [ 871.708496][ T43] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 871.713421][ T56] pwc: recv_control_msg error -71 req 02 val 2600 [ 871.726959][ T56] pwc: recv_control_msg error -71 req 02 val 2900 [ 871.755438][T17617] netlink: 'syz.2.2284': attribute type 1 has an invalid length. [ 871.777457][ T43] em28xx 5-1:0.0: Currently, V4L2 is not supported on this model [ 871.786102][T15298] em28xx 5-1:0.0: Binding DVB extension [ 871.792094][T15298] em28xx 5-1:0.0: no endpoint for DVB mode and transfer type 0 [ 871.800513][ T56] pwc: recv_control_msg error -71 req 02 val 2800 [ 871.819110][T17617] bond35: entered promiscuous mode [ 871.824409][T17617] bond35: entered allmulticast mode [ 871.830326][T17617] 8021q: adding VLAN 0 to HW filter on device bond35 [ 871.852410][T17617] bridge33: entered promiscuous mode [ 871.858029][T17617] bridge33: entered allmulticast mode [ 871.866795][T17617] bond35: (slave bridge33): Enslaving as a backup interface with an up link [ 871.906630][ T56] pwc: recv_control_msg error -71 req 04 val 1100 [ 871.913291][ T3547] bond35: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 871.914153][ T56] pwc: recv_control_msg error -71 req 04 val 1200 [ 871.934887][ T56] pwc: Registered as video103. [ 871.937866][T15298] em28xx 5-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 871.950943][ T43] usb 5-1: USB disconnect, device number 49 [ 871.951144][ T56] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 871.957513][ T43] em28xx 5-1:0.0: Disconnecting em28xx [ 871.976518][T15298] em28xx 5-1:0.0: Registering input extension [ 871.983486][ T43] em28xx 5-1:0.0: Closing input extension [ 871.996377][ T43] em28xx 5-1:0.0: Freeing device [ 872.038787][ T36] bond35: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 872.105242][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 872.113643][ T56] usb 3-1: USB disconnect, device number 55 [ 872.123912][ T5916] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 872.175469][ T5916] usb 1-1: can't read configurations, error -71 [ 872.688966][ T5916] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 872.860774][ T5916] usb 1-1: config 0 has no interfaces? [ 872.870963][ T5916] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 872.880260][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.954186][T17640] IPVS: length: 225 != 8 [ 872.978066][ T5916] usb 1-1: Product: syz [ 872.985886][ T5916] usb 1-1: Manufacturer: syz [ 872.991426][ T5916] usb 1-1: SerialNumber: syz [ 872.997673][ T5916] usb 1-1: config 0 descriptor?? [ 873.207352][T17645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.216419][T17645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.281068][T17631] program syz.0.2288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 874.008744][T10729] rc_core: IR keymap rc-hauppauge not found [ 874.022659][T10729] Registered IR keymap rc-empty [ 874.035117][T10729] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 874.083431][T10729] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 874.108928][T10729] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 874.147500][T10729] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 874.183475][T10729] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 874.209865][T10729] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 874.239048][T10729] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 874.271862][T17653] netlink: 'syz.4.2293': attribute type 1 has an invalid length. [ 874.279761][T10729] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 874.318871][T10729] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 874.341450][T17653] bond39: entered promiscuous mode [ 874.346708][T17653] bond39: entered allmulticast mode [ 874.356702][T10729] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 874.370601][T17653] 8021q: adding VLAN 0 to HW filter on device bond39 [ 874.381179][T10729] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 874.421416][T10729] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 874.479509][T10729] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 874.499788][T10729] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 874.532339][T10729] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 874.542702][T10729] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 874.559220][T10729] usb 4-1: USB disconnect, device number 68 [ 874.889184][T10729] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 875.065307][T10729] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 875.075430][T10729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.085243][T10729] usb 4-1: Product: syz [ 875.090270][T10729] usb 4-1: Manufacturer: syz [ 875.094996][T10729] usb 4-1: SerialNumber: syz [ 875.108788][T10729] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 875.136299][T15392] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 875.411798][ T56] usb 1-1: USB disconnect, device number 63 [ 875.893963][T17672] loop2: detected capacity change from 0 to 1 [ 876.205886][T15392] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 876.213692][T15392] ath9k_htc: Failed to initialize the device [ 876.323507][T15392] usb 4-1: ath9k_htc: USB layer deinitialized [ 876.979498][T17689] netlink: 'syz.2.2302': attribute type 1 has an invalid length. [ 877.023498][T17689] bond36: entered promiscuous mode [ 877.037150][T17689] bond36: entered allmulticast mode [ 877.065950][T17689] 8021q: adding VLAN 0 to HW filter on device bond36 [ 877.108073][T17689] bridge34: entered promiscuous mode [ 877.119932][T17689] bridge34: entered allmulticast mode [ 877.125898][T17689] bond36: (slave bridge34): Enslaving as a backup interface with an up link [ 877.135078][ T5916] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 877.148527][ T49] bond36: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 877.268606][ T36] bond36: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 877.298464][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 877.305479][ T5916] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 877.314344][ T5916] usb 5-1: config 0 has no interface number 0 [ 877.962938][T14632] usb 4-1: USB disconnect, device number 69 [ 877.984072][ T5916] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 878.273110][ T5916] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 878.304721][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.321389][ T5916] usb 5-1: Product: syz [ 878.326776][ T5916] usb 5-1: Manufacturer: syz [ 878.374691][ T5916] usb 5-1: SerialNumber: syz [ 878.385393][ T5916] usb 5-1: config 0 descriptor?? [ 878.403581][ T5916] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 878.418502][ T5916] em28xx 5-1:0.132: Video interface 132 found: [ 878.644256][T14632] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 878.818963][ T5916] em28xx 5-1:0.132: chip ID is em2884 [ 878.861778][ T56] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 878.912235][T14632] usb 4-1: Using ep0 maxpacket: 32 [ 878.920067][T14632] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 878.965951][T14632] usb 4-1: config 0 has no interface number 0 [ 878.994273][T14632] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 879.012121][T14632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.042212][T14632] usb 4-1: Product: syz [ 879.046438][T14632] usb 4-1: Manufacturer: syz [ 879.058571][T14632] usb 4-1: SerialNumber: syz [ 879.128577][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 879.151582][T14632] usb 4-1: config 0 descriptor?? [ 879.172263][T14632] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 879.186696][ T56] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 879.199042][ T56] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 879.210710][ T56] usb 3-1: config 0 interface 0 has no altsetting 0 [ 879.218916][ T56] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 879.231223][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.247990][ T56] usb 3-1: config 0 descriptor?? [ 879.257967][T17713] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 879.386697][T14632] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 879.401438][T14632] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 879.431413][ T5916] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 879.451356][ T5916] em28xx 5-1:0.132: board has no eeprom [ 879.508754][ T5916] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 879.517024][ T5916] em28xx 5-1:0.132: analog set to bulk mode. [ 879.539039][T14632] em28xx 5-1:0.132: Registering V4L2 extension [ 879.625382][ T5916] usb 5-1: USB disconnect, device number 50 [ 879.664409][ T5916] em28xx 5-1:0.132: Disconnecting em28xx [ 879.694011][ T56] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 879.700935][ T56] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 879.719275][ T56] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 879.764501][T14632] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 879.772882][ T56] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 879.779661][T14632] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 879.786822][ T56] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 879.793579][T14632] em28xx 5-1:0.132: No AC97 audio processor [ 879.799555][ T56] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 879.808948][T14632] usb 5-1: Decoder not found [ 879.832515][T14632] em28xx 5-1:0.132: failed to create media graph [ 879.860580][ T56] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 879.875525][T14632] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 879.882498][ T56] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 879.907557][T14632] em28xx 5-1:0.132: Remote control support is not available for this card. [ 879.907704][T17717] ================================================================== [ 879.916344][ T56] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 879.924256][T17717] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 879.924289][T17717] Read of size 8 at addr ffff88804e5b0740 by task v4l_id/17717 [ 879.924303][T17717] [ 879.924313][T17717] CPU: 1 UID: 0 PID: 17717 Comm: v4l_id Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 879.924333][T17717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 879.924344][T17717] Call Trace: [ 879.924353][T17717] [ 879.924361][T17717] dump_stack_lvl+0x189/0x250 [ 879.924382][T17717] ? rcu_is_watching+0x15/0xb0 [ 879.924401][T17717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 879.924419][T17717] ? rcu_is_watching+0x15/0xb0 [ 879.924434][T17717] ? lock_release+0x4b/0x3e0 [ 879.924457][T17717] ? __virt_addr_valid+0x1c8/0x5c0 [ 879.924477][T17717] ? __virt_addr_valid+0x4a5/0x5c0 [ 879.924498][T17717] print_report+0xca/0x240 [ 879.924540][T17717] ? v4l2_fh_open+0xc7/0x430 [ 879.924559][T17717] kasan_report+0x118/0x150 [ 879.924583][T17717] ? v4l2_fh_open+0xc7/0x430 [ 879.924606][T17717] v4l2_fh_open+0xc7/0x430 [ 879.924630][T17717] em28xx_v4l2_open+0x157/0x9a0 [ 879.924656][T17717] v4l2_open+0x20c/0x360 [ 879.924680][T17717] chrdev_open+0x4cc/0x5e0 [ 879.924704][T17717] ? __pfx_chrdev_open+0x10/0x10 [ 879.924728][T17717] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 879.924754][T17717] ? __pfx_chrdev_open+0x10/0x10 [ 879.924775][T17717] do_dentry_open+0x953/0x13f0 [ 879.924796][T17717] vfs_open+0x3b/0x340 [ 879.924810][T17717] ? path_openat+0x2ecd/0x3830 [ 879.924830][T17717] path_openat+0x2ee5/0x3830 [ 879.924848][T17717] ? arch_stack_walk+0xfc/0x150 [ 879.924873][T17717] ? stack_depot_save_flags+0x40/0x860 [ 879.924899][T17717] ? __pfx_path_openat+0x10/0x10 [ 879.924917][T17717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.924940][T17717] do_filp_open+0x1fa/0x410 [ 879.924961][T17717] ? __pfx_do_filp_open+0x10/0x10 [ 879.924987][T17717] ? _raw_spin_unlock+0x28/0x50 [ 879.925005][T17717] ? alloc_fd+0x64c/0x6c0 [ 879.925031][T17717] do_sys_openat2+0x121/0x1c0 [ 879.925049][T17717] ? __pfx_do_sys_openat2+0x10/0x10 [ 879.925065][T17717] ? lock_release+0x4b/0x3e0 [ 879.925087][T17717] ? do_user_addr_fault+0xc8a/0x1390 [ 879.925110][T17717] __x64_sys_openat+0x138/0x170 [ 879.925129][T17717] do_syscall_64+0xfa/0x3b0 [ 879.925151][T17717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.925167][T17717] ? clear_bhb_loop+0x60/0xb0 [ 879.925183][T17717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.925199][T17717] RIP: 0033:0x7fc3a66a7407 [ 879.925215][T17717] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 879.925229][T17717] RSP: 002b:00007ffcf08c6710 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 879.925247][T17717] RAX: ffffffffffffffda RBX: 00007fc3a6d61880 RCX: 00007fc3a66a7407 [ 879.925259][T17717] RDX: 0000000000000000 RSI: 00007ffcf08c6f1b RDI: ffffffffffffff9c [ 879.925271][T17717] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 879.925280][T17717] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 879.925289][T17717] R13: 00007ffcf08c6960 R14: 00007fc3a6ec8000 R15: 000055a15268d4d8 [ 879.925307][T17717] [ 879.925313][T17717] [ 879.938450][ T5916] em28xx 5-1:0.132: Closing input extension [ 879.945849][T17717] Allocated by task 14632: [ 879.945865][T17717] kasan_save_track+0x3e/0x80 [ 879.945888][T17717] __kasan_kmalloc+0x93/0xb0 [ 879.945906][T17717] __kmalloc_cache_noprof+0x230/0x3d0 [ 880.268381][T17717] em28xx_v4l2_init+0x10b/0x2e70 [ 880.273322][T17717] em28xx_init_extension+0x11d/0x1c0 [ 880.278589][T17717] process_scheduled_works+0xade/0x17b0 [ 880.284113][T17717] worker_thread+0x8a0/0xda0 [ 880.288687][T17717] kthread+0x70e/0x8a0 [ 880.292829][T17717] ret_from_fork+0x3f9/0x770 [ 880.297411][T17717] ret_from_fork_asm+0x1a/0x30 [ 880.302160][T17717] [ 880.304480][T17717] Freed by task 14632: [ 880.308539][T17717] kasan_save_track+0x3e/0x80 [ 880.313201][T17717] kasan_save_free_info+0x46/0x50 [ 880.318215][T17717] __kasan_slab_free+0x5b/0x80 [ 880.322982][T17717] kfree+0x18e/0x440 [ 880.326874][T17717] em28xx_v4l2_init+0x1683/0x2e70 [ 880.332013][T17717] em28xx_init_extension+0x11d/0x1c0 [ 880.337569][T17717] process_scheduled_works+0xade/0x17b0 [ 880.343101][T17717] worker_thread+0x8a0/0xda0 [ 880.347675][T17717] kthread+0x70e/0x8a0 [ 880.351813][T17717] ret_from_fork+0x3f9/0x770 [ 880.356389][T17717] ret_from_fork_asm+0x1a/0x30 [ 880.361163][T17717] [ 880.363478][T17717] The buggy address belongs to the object at ffff88804e5b0000 [ 880.363478][T17717] which belongs to the cache kmalloc-8k of size 8192 [ 880.377515][T17717] The buggy address is located 1856 bytes inside of [ 880.377515][T17717] freed 8192-byte region [ffff88804e5b0000, ffff88804e5b2000) [ 880.391485][T17717] [ 880.393806][T17717] The buggy address belongs to the physical page: [ 880.400219][T17717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4e5b0 [ 880.409068][T17717] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 880.417656][T17717] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 880.425188][T17717] page_type: f5(slab) [ 880.429165][T17717] raw: 00fff00000000040 ffff88801a442280 ffffea0000c01200 0000000000000004 [ 880.437801][T17717] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 880.446387][T17717] head: 00fff00000000040 ffff88801a442280 ffffea0000c01200 0000000000000004 [ 880.455048][T17717] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 880.463708][T17717] head: 00fff00000000003 ffffea0001396c01 00000000ffffffff 00000000ffffffff [ 880.472448][T17717] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 880.481108][T17717] page dumped because: kasan: bad access detected [ 880.487609][T17717] page_owner tracks the page as allocated [ 880.493339][T17717] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 17371, tgid 17370 (syz.4.2227), ts 860627645165, free_ts 860625947393 [ 880.513304][T17717] post_alloc_hook+0x240/0x2a0 [ 880.518068][T17717] get_page_from_freelist+0x21e4/0x22c0 [ 880.523596][T17717] __alloc_frozen_pages_noprof+0x181/0x370 [ 880.529383][T17717] alloc_pages_mpol+0x232/0x4a0 [ 880.534220][T17717] allocate_slab+0x8a/0x370 [ 880.538702][T17717] ___slab_alloc+0xbeb/0x1410 [ 880.543449][T17717] __kvmalloc_node_noprof+0x429/0x5f0 [ 880.548804][T17717] xdp_umem_pin_pages+0x52/0x340 [ 880.553728][T17717] xdp_umem_create+0x677/0x8e0 [ 880.558476][T17717] xsk_setsockopt+0x7b0/0x8d0 [ 880.563136][T17717] do_sock_setsockopt+0x179/0x1b0 [ 880.568158][T17717] __x64_sys_setsockopt+0x13f/0x1b0 [ 880.573363][T17717] do_syscall_64+0xfa/0x3b0 [ 880.578047][T17717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.583939][T17717] page last free pid 17371 tgid 17370 stack trace: [ 880.590438][T17717] __free_frozen_pages+0xbc4/0xd30 [ 880.595540][T17717] __slab_free+0x303/0x3c0 [ 880.599933][T17717] qlist_free_all+0x97/0x140 [ 880.604503][T17717] kasan_quarantine_reduce+0x148/0x160 [ 880.609942][T17717] __kasan_slab_alloc+0x22/0x80 [ 880.614775][T17717] __kmalloc_cache_noprof+0x1be/0x3d0 [ 880.620127][T17717] allocate_file_region_entries+0x1e7/0x5a0 [ 880.626004][T17717] region_chg+0x2c4/0x3c0 [ 880.630316][T17717] __vma_reservation_common+0x328/0x6e0 [ 880.635836][T17717] alloc_hugetlb_folio+0x2d2/0x16a0 [ 880.641027][T17717] hugetlb_fault+0x1dc2/0x2970 [ 880.645791][T17717] handle_mm_fault+0x740/0x8e0 [ 880.650541][T17717] __get_user_pages+0x1699/0x2ce0 [ 880.655547][T17717] populate_vma_page_range+0x29f/0x3a0 [ 880.660988][T17717] __mm_populate+0x24c/0x380 [ 880.665562][T17717] vm_mmap_pgoff+0x387/0x4d0 [ 880.670133][T17717] [ 880.672435][T17717] Memory state around the buggy address: [ 880.678048][T17717] ffff88804e5b0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 880.686084][T17717] ffff88804e5b0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 880.694123][T17717] >ffff88804e5b0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 880.702162][T17717] ^ [ 880.708293][T17717] ffff88804e5b0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 880.716337][T17717] ffff88804e5b0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 880.724372][T17717] ================================================================== [ 880.738992][ T56] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 880.749900][ T56] kye 0003:0458:0138.0008: unexpected long global item [ 880.757245][ T56] kye 0003:0458:0138.0008: parse failed [ 880.763220][ T56] kye 0003:0458:0138.0008: probe with driver kye failed with error -22 [ 880.775042][T17717] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 880.782273][T17717] CPU: 0 UID: 0 PID: 17717 Comm: v4l_id Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 880.794086][T17717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 880.804146][T17717] Call Trace: [ 880.807535][T17717] [ 880.810510][T17717] dump_stack_lvl+0x99/0x250 [ 880.815111][T17717] ? __asan_memcpy+0x40/0x70 [ 880.819701][T17717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 880.824894][T17717] ? __pfx__printk+0x10/0x10 [ 880.829487][T17717] vpanic+0x281/0x750 [ 880.833480][T17717] ? preempt_schedule+0xae/0xc0 [ 880.838363][T17717] ? __pfx_vpanic+0x10/0x10 [ 880.842848][T17717] ? preempt_schedule_common+0x83/0xd0 [ 880.848290][T17717] ? preempt_schedule+0xae/0xc0 [ 880.853138][T17717] ? __pfx_preempt_schedule+0x10/0x10 [ 880.858507][T17717] panic+0xb9/0xc0 [ 880.862314][T17717] ? __pfx_panic+0x10/0x10 [ 880.866810][T17717] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 880.872699][T17717] ? v4l2_fh_open+0xc7/0x430 [ 880.877296][T17717] check_panic_on_warn+0x89/0xb0 [ 880.882228][T17717] ? v4l2_fh_open+0xc7/0x430 [ 880.886831][T17717] end_report+0x78/0x160 [ 880.891061][T17717] kasan_report+0x129/0x150 [ 880.895557][T17717] ? v4l2_fh_open+0xc7/0x430 [ 880.900133][T17717] v4l2_fh_open+0xc7/0x430 [ 880.904624][T17717] em28xx_v4l2_open+0x157/0x9a0 [ 880.909740][T17717] v4l2_open+0x20c/0x360 [ 880.913974][T17717] chrdev_open+0x4cc/0x5e0 [ 880.918381][T17717] ? __pfx_chrdev_open+0x10/0x10 [ 880.923305][T17717] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 880.929623][T17717] ? __pfx_chrdev_open+0x10/0x10 [ 880.934550][T17717] do_dentry_open+0x953/0x13f0 [ 880.939298][T17717] vfs_open+0x3b/0x340 [ 880.943354][T17717] ? path_openat+0x2ecd/0x3830 [ 880.948147][T17717] path_openat+0x2ee5/0x3830 [ 880.952747][T17717] ? arch_stack_walk+0xfc/0x150 [ 880.957604][T17717] ? stack_depot_save_flags+0x40/0x860 [ 880.963155][T17717] ? __pfx_path_openat+0x10/0x10 [ 880.968074][T17717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.974126][T17717] do_filp_open+0x1fa/0x410 [ 880.978616][T17717] ? __pfx_do_filp_open+0x10/0x10 [ 880.983643][T17717] ? _raw_spin_unlock+0x28/0x50 [ 880.988480][T17717] ? alloc_fd+0x64c/0x6c0 [ 880.992809][T17717] do_sys_openat2+0x121/0x1c0 [ 880.997473][T17717] ? __pfx_do_sys_openat2+0x10/0x10 [ 881.002652][T17717] ? lock_release+0x4b/0x3e0 [ 881.007273][T17717] ? do_user_addr_fault+0xc8a/0x1390 [ 881.012555][T17717] __x64_sys_openat+0x138/0x170 [ 881.017396][T17717] do_syscall_64+0xfa/0x3b0 [ 881.021886][T17717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.027934][T17717] ? clear_bhb_loop+0x60/0xb0 [ 881.032598][T17717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.038510][T17717] RIP: 0033:0x7fc3a66a7407 [ 881.042912][T17717] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 881.062782][T17717] RSP: 002b:00007ffcf08c6710 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 881.071190][T17717] RAX: ffffffffffffffda RBX: 00007fc3a6d61880 RCX: 00007fc3a66a7407 [ 881.079163][T17717] RDX: 0000000000000000 RSI: 00007ffcf08c6f1b RDI: ffffffffffffff9c [ 881.087122][T17717] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 881.095111][T17717] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 881.103069][T17717] R13: 00007ffcf08c6960 R14: 00007fc3a6ec8000 R15: 000055a15268d4d8 [ 881.111030][T17717] [ 881.114302][T17717] Kernel Offset: disabled [ 881.118643][T17717] Rebooting in 86400 seconds..