last executing test programs: 2m48.247718236s ago: executing program 0 (id=624): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000d080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x7, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x7, 0x1, {0x8, 0xfff8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) 2m45.015493033s ago: executing program 0 (id=636): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0xc040) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x40043d14, &(0x7f00000003c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x1, 0xb, 0x9}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) 2m40.312467359s ago: executing program 0 (id=657): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(0xffffffffffffffff, &(0x7f0000000340)=""/36, 0x24) 2m39.80797635s ago: executing program 0 (id=659): socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1e5}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_open_procfs$userns(0x0, &(0x7f0000000580)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000bff000/0x400000)=nil], &(0x7f0000001180), 0x0, 0x0) 2m36.340055278s ago: executing program 0 (id=681): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) close(0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}) r4 = syz_open_dev$loop(0x0, 0x81, 0x86fc3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, "fee8a2ab78fc17a29d09f8421ddaac09000000a4b4ffff9603dda1af1ea80000000039cc2bdd000000deff00000000000000fbffffff0014a2648f00", "68bae8db0808038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac006482283b00", "90be8b1c55f96400", [0x800]}}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m34.066449613s ago: executing program 0 (id=688): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020}, 0xfffffffffffffc88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[], 0x1074}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x7) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) 2m18.945158813s ago: executing program 32 (id=688): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020}, 0xfffffffffffffc88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[], 0x1074}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x7) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) 14.71002805s ago: executing program 1 (id=1339): socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbdd600fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e32b359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0493121eec3e05eacbe7835e79e74881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369346a9ad948fd5dd8f87496a30a9d888cdbcee8f3592dd69165358c4cd474639fc13300317b7fed115fb9818b20d177a39157101dbd8e23bc9ed32efed96c410a103d35336fb4ee4000bfb3d32b0181ff", 0x1e5}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_open_procfs$userns(0x0, &(0x7f0000000580)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000bff000/0x400000)=nil], &(0x7f0000001180), 0x0, 0x0) 11.665340506s ago: executing program 2 (id=1343): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000080000000804"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000140)="082cf084") 11.303184098s ago: executing program 3 (id=1344): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="03000000000000002800"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.213736217s ago: executing program 3 (id=1345): openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) socket(0x2b, 0x80801, 0x1) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) unshare(0xe060400) memfd_create(0x0, 0x3) rt_sigqueueinfo(0x0, 0x21, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x36}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 11.099751826s ago: executing program 1 (id=1346): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg(r7, &(0x7f0000000cc0)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f00000005c0)=""/181, 0xb5}, {&(0x7f0000000680)=""/206, 0xce}], 0x5, &(0x7f0000000800)=""/172, 0xac}, 0x9eea}, {{&(0x7f00000008c0)=@rc, 0x80, &(0x7f0000000040)=[{&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000000940)=""/101, 0x65}], 0x2, &(0x7f0000000b80)=""/145, 0x91}, 0x80000000}, {{&(0x7f0000000c40)=@ax25={{0x3, @default}, [@null, @bcast, @bcast, @rose, @netrom, @bcast]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/8, 0x8}], 0x1, &(0x7f0000001d40)=""/4096, 0x1000}, 0x8}], 0x3, 0x2, &(0x7f00000009c0)={0x0, 0x989680}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$tun(0xffffffffffffff9c, &(0x7f0000000d80), 0x20100, 0x0) 9.587211522s ago: executing program 5 (id=1347): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$alg(0x26, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_complete(r1) 9.060949061s ago: executing program 4 (id=1349): socket$netlink(0x10, 0x3, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000d080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x7, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x7, 0x1, {0x8, 0xfff8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) 8.581118566s ago: executing program 5 (id=1350): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x14e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r2) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 8.509581723s ago: executing program 2 (id=1351): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8.213646789s ago: executing program 2 (id=1352): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_tables_matches\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) rt_sigqueueinfo(0x0, 0x21, 0x0) pread64(r2, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x36}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 7.139701228s ago: executing program 3 (id=1353): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) exit(0xfe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8007ffd, 0x0, 0x9, 0xbe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x42804}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) socket$tipc(0x1e, 0x2, 0x0) getdents64(r3, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r6, 0x0, 0x3, 0x0) close(r6) 7.102477745s ago: executing program 1 (id=1354): openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() r2 = syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) memfd_create(0x0, 0x3) rt_sigqueueinfo(0x0, 0x21, 0x0) pread64(r2, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x36}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 5.839529113s ago: executing program 3 (id=1355): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="03000000000000002800"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.63941056s ago: executing program 3 (id=1356): futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000080)=0x1000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x7, '\x00', @string=&(0x7f00000000c0)}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) 5.20806398s ago: executing program 1 (id=1357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000010380)="d800000018007b29e00212ba0d8105040a601800fe0f041c067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262fbb9ad8ffd5e1cace81ccd40dd601edef3d9393f975307ff0ff0e97031e9f05e9f16e9c95115568624f7ab5000000000000000000000000000000000000000000007a630a5092", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x2000c844) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x48, 0xb}) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0x508, 0x6000000000000000, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0) unshare(0x62040200) 4.919596077s ago: executing program 4 (id=1358): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0) socket$alg(0x26, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_complete(r1) 4.747490774s ago: executing program 2 (id=1361): socket(0x40000000015, 0x5, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0/..\x00', 0x22a040, 0x121) socket$inet6_sctp(0xa, 0x801, 0x84) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000890000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc0}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x50) io_uring_enter(r4, 0x2219, 0xcf74, 0x51, 0x0, 0x0) 4.494188348s ago: executing program 5 (id=1362): socket$xdp(0x2c, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) fsopen(&(0x7f00000000c0)='vxfs\x00', 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000000000}) 3.982519648s ago: executing program 4 (id=1363): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newchain={0x64, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_nat={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x64}}, 0x44004) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x51, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[], 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.693950325s ago: executing program 4 (id=1364): openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) socket(0x2b, 0x80801, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) unshare(0xe060400) memfd_create(0x0, 0x3) rt_sigqueueinfo(0x0, 0x21, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x36}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 2.636119101s ago: executing program 3 (id=1365): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000813000/0x1000)=nil, 0x1000, 0x1000004, 0x11, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, 0x0, 0x90) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008011) close(r2) syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) 2.439178819s ago: executing program 4 (id=1366): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x633a43bbb115904b, 0x36, &(0x7f0000000140)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x80000) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1.910809185s ago: executing program 5 (id=1367): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x20be}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.779482198s ago: executing program 1 (id=1368): socket$netlink(0x10, 0x3, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000d080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x7, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x7, 0x1, {0x8, 0xfff8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) 1.668982172s ago: executing program 5 (id=1369): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000280)=[{0x2, 0x1, 0x2, &(0x7f0000000100)="61ec"}, {0x9, 0x10, 0x0, 0x0}, {0x0, 0x3800, 0x0, 0x0}, {0xfffb, 0x5200, 0x0, 0x0}, {0x5, 0x1001, 0x64, &(0x7f0000000200)="858011c666cb1cf0ab5ac3f86ede4bc041735772e51abd1f68972a6e5303198da49335f71425a7ce9cd3cfa24e0fb05d9f2e907262c367a2ef6f201cebc15cf16538fd5aa9fdd2e72bf85ad2d4e651df991c68879e0886d375d7ec9c618f76963436aeac"}], 0x5}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) 538.772506ms ago: executing program 1 (id=1370): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)="cc3a", 0x2}], 0x1) 469.68744ms ago: executing program 2 (id=1371): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_tables_matches\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) rt_sigqueueinfo(0x0, 0x21, 0x0) pread64(r2, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x36}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 0s ago: executing program 5 (id=1372): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000280)=[{0x2, 0x1, 0x2, &(0x7f0000000100)="61ec"}, {0x9, 0x10, 0x0, 0x0}, {0x0, 0x3800, 0x0, 0x0}, {0xfffb, 0x5200, 0x0, 0x0}, {0x5, 0x1001, 0x64, &(0x7f0000000200)="858011c666cb1cf0ab5ac3f86ede4bc041735772e51abd1f68972a6e5303198da49335f71425a7ce9cd3cfa24e0fb05d9f2e907262c367a2ef6f201cebc15cf16538fd5aa9fdd2e72bf85ad2d4e651df991c68879e0886d375d7ec9c618f76963436aeac"}], 0x5}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): ing remainder of the config [ 228.216171][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.216257][ T36] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 228.216279][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.253526][ T5794] usb 2-1: USB disconnect, device number 7 [ 228.326045][ T5941] usb 1-1: config 0 descriptor?? [ 228.388908][ T36] usb 5-1: config 0 descriptor?? [ 228.511235][ T6983] fido_id[6983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 228.523083][ T36] ldusb 5-1:0.0: Interrupt in endpoint not found [ 228.606715][ T36] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 228.725456][ T36] usb 5-1: USB disconnect, device number 7 [ 228.994045][ T5865] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 229.027438][ T5941] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 229.144126][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 229.152587][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.152642][ T5865] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 229.152663][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.212320][ T5865] usb 3-1: config 0 descriptor?? [ 229.243550][ T5865] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 229.330692][ T5941] usb 1-1: USB disconnect, device number 8 [ 229.490798][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 229.637871][ T6986] vlan2: entered promiscuous mode [ 229.637892][ T6986] dummy0: entered promiscuous mode [ 229.804793][ T5941] usb 3-1: USB disconnect, device number 16 [ 230.726284][ T7005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.362705][ T7017] netlink: 156 bytes leftover after parsing attributes in process `syz.0.259'. [ 231.660284][ T37] audit: type=1326 audit(1773906424.494:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe956c799 code=0x7ffc0000 [ 231.660385][ T37] audit: type=1326 audit(1773906424.494:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfe952cfce code=0x7ffc0000 [ 231.660424][ T37] audit: type=1326 audit(1773906424.494:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe956c799 code=0x7ffc0000 [ 231.660461][ T37] audit: type=1326 audit(1773906424.504:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe956c799 code=0x7ffc0000 [ 231.660548][ T37] audit: type=1326 audit(1773906424.504:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fdfe956c799 code=0x7ffc0000 [ 231.660586][ T37] audit: type=1326 audit(1773906424.504:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe956c799 code=0x7ffc0000 [ 231.660625][ T37] audit: type=1326 audit(1773906424.504:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe956c799 code=0x7ffc0000 [ 231.660712][ T37] audit: type=1326 audit(1773906424.504:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdfe956c799 code=0x7ffc0000 [ 231.660751][ T37] audit: type=1326 audit(1773906424.504:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe956c799 code=0x7ffc0000 [ 231.660860][ T37] audit: type=1326 audit(1773906424.504:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7010 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe956c799 code=0x7ffc0000 [ 231.678742][ T5941] IPVS: starting estimator thread 0... [ 231.784046][ T7023] IPVS: using max 9 ests per chain, 21600 per kthread [ 232.964696][ T5941] usb 4-1: USB disconnect, device number 7 [ 233.740688][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 233.901352][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.901376][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.904533][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 233.904559][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.904578][ T9] usb 4-1: Product: syz [ 233.904591][ T9] usb 4-1: Manufacturer: syz [ 233.904604][ T9] usb 4-1: SerialNumber: syz [ 233.920068][ T9] usb 4-1: config 0 descriptor?? [ 234.799325][ T7055] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 234.799349][ T7055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 234.802245][ T7055] vhci_hcd vhci_hcd.0: Device attached [ 234.861655][ T7055] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 234.861674][ T7055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 234.861706][ T7055] vhci_hcd vhci_hcd.0: Device attached [ 234.901111][ T7055] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 234.901139][ T7055] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 234.901191][ T7055] vhci_hcd vhci_hcd.0: Device attached [ 234.914254][ T7055] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 234.914280][ T7055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.006436][ T7055] vhci_hcd vhci_hcd.0: Device attached [ 235.029837][ T7055] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 235.029857][ T7055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.030049][ T7055] vhci_hcd vhci_hcd.0: Device attached [ 235.031222][ T7055] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.033974][ T5865] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 235.104814][ T7055] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 235.104841][ T7055] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 235.104942][ T7055] vhci_hcd vhci_hcd.0: Device attached [ 235.107043][ T7060] vhci_hcd: connection closed [ 235.107422][ T13] vhci_hcd vhci_hcd.0: stop threads [ 235.107446][ T13] vhci_hcd vhci_hcd.0: release socket [ 235.112789][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 235.112837][ T7062] vhci_hcd: connection closed [ 235.113234][ T13] vhci_hcd vhci_hcd.0: stop threads [ 235.113244][ T13] vhci_hcd vhci_hcd.0: release socket [ 235.116080][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 235.116570][ T7064] vhci_hcd: connection closed [ 235.119350][ T7058] vhci_hcd: connection closed [ 235.120339][ T7068] vhci_hcd: connection closed [ 235.121738][ T7056] vhci_hcd: connection reset by peer [ 235.144111][ T134] vhci_hcd vhci_hcd.0: stop threads [ 235.144138][ T134] vhci_hcd vhci_hcd.0: release socket [ 235.144207][ T134] vhci_hcd vhci_hcd.0: disconnect device [ 235.144583][ T134] vhci_hcd vhci_hcd.0: stop threads [ 235.144777][ T134] vhci_hcd vhci_hcd.0: release socket [ 235.144838][ T134] vhci_hcd vhci_hcd.0: disconnect device [ 235.145135][ T134] vhci_hcd vhci_hcd.0: stop threads [ 235.145148][ T134] vhci_hcd vhci_hcd.0: release socket [ 235.145180][ T134] vhci_hcd vhci_hcd.0: disconnect device [ 235.145436][ T134] vhci_hcd vhci_hcd.0: stop threads [ 235.145448][ T134] vhci_hcd vhci_hcd.0: release socket [ 235.145478][ T134] vhci_hcd vhci_hcd.0: disconnect device [ 235.633974][ T5955] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 235.794052][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 235.796248][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.796279][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.796316][ T5955] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 235.796338][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.841961][ T5955] usb 3-1: config 0 descriptor?? [ 236.023969][ T5850] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 236.173957][ T5850] usb 2-1: Using ep0 maxpacket: 16 [ 236.175955][ T5850] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.175985][ T5850] usb 2-1: config 0 interface 0 has no altsetting 0 [ 236.176018][ T5850] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 236.176039][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.249975][ T5850] usb 2-1: config 0 descriptor?? [ 236.363259][ T5955] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 236.426463][ T7087] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 236.426481][ T7087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.427576][ T7087] vhci_hcd vhci_hcd.0: Device attached [ 236.475337][ T7087] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 236.475367][ T7087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.475816][ T7087] vhci_hcd vhci_hcd.0: Device attached [ 236.483198][ T7087] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 236.483215][ T7087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.483780][ T7087] vhci_hcd vhci_hcd.0: Device attached [ 236.531172][ T7087] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 236.531200][ T7087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.531304][ T7087] vhci_hcd vhci_hcd.0: Device attached [ 236.532663][ T7087] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 236.547232][ T7087] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 236.578060][ T36] usb 3-1: USB disconnect, device number 17 [ 236.581478][ T7087] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 236.581503][ T7087] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 236.581687][ T7087] vhci_hcd vhci_hcd.0: Device attached [ 236.614726][ T7095] vhci_hcd: connection closed [ 236.617445][ T7093] vhci_hcd: connection closed [ 236.620793][ T7091] vhci_hcd: connection closed [ 236.629197][ T7088] vhci_hcd: connection closed [ 236.634321][ T13] vhci_hcd vhci_hcd.0: stop threads [ 236.634349][ T13] vhci_hcd vhci_hcd.0: release socket [ 236.634420][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 236.651518][ T13] vhci_hcd vhci_hcd.0: stop threads [ 236.651535][ T13] vhci_hcd vhci_hcd.0: release socket [ 236.651609][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 236.682388][ T13] vhci_hcd vhci_hcd.0: stop threads [ 236.682408][ T13] vhci_hcd vhci_hcd.0: release socket [ 236.682485][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 236.715638][ T13] vhci_hcd vhci_hcd.0: stop threads [ 236.715665][ T13] vhci_hcd vhci_hcd.0: release socket [ 236.715742][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 236.720033][ T7098] vhci_hcd: connection closed [ 236.740580][ T13] vhci_hcd vhci_hcd.0: stop threads [ 236.740603][ T13] vhci_hcd vhci_hcd.0: release socket [ 236.740625][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 236.949406][ T7101] fido_id[7101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 237.032550][ T5850] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 237.450501][ T5850] usb 4-1: USB disconnect, device number 8 [ 237.698196][ T7111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.272021][ T5879] usb 2-1: USB disconnect, device number 8 [ 238.443057][ T7120] loop2: detected capacity change from 0 to 7 [ 238.510726][ T5799] Dev loop2: unable to read RDB block 7 [ 238.510782][ T5799] loop2: unable to read partition table [ 238.511029][ T5799] loop2: partition table beyond EOD, truncated [ 238.543420][ T7120] Dev loop2: unable to read RDB block 7 [ 238.543464][ T7120] loop2: unable to read partition table [ 238.543693][ T7120] loop2: partition table beyond EOD, truncated [ 238.543710][ T7120] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 239.380940][ T7139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.154009][ T5865] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 241.379986][ T5878] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 241.653932][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 241.656244][ T5878] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.656272][ T5878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.656303][ T5878] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 241.656326][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.668377][ T5878] usb 4-1: config 0 descriptor?? [ 242.237660][ T5878] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 243.345926][ T5955] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 243.493939][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 243.496606][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.496636][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.496662][ T5955] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 243.496674][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.507785][ T5955] usb 3-1: config 0 descriptor?? [ 244.009316][ T5955] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 244.299672][ T5878] usb 3-1: USB disconnect, device number 18 [ 244.461084][ T5865] usb 4-1: USB disconnect, device number 9 [ 244.821669][ T7202] fido_id[7202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 244.915176][ T7217] loop5: detected capacity change from 0 to 7 [ 244.931854][ T7205] m1Ie5n: entered promiscuous mode [ 245.157907][ T58] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.159041][ T58] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.197925][ T7217] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.215039][ T7217] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.215940][ T7217] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.215971][ T7217] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.216024][ T7217] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.216047][ T7217] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.216109][ T7217] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.216133][ T7217] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.216184][ T7217] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.216208][ T7217] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.216246][ T7217] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.216270][ T7217] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.216290][ T7217] ldm_validate_partition_table(): Disk read failed. [ 245.216326][ T7217] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.216350][ T7217] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.216387][ T7217] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.216415][ T7217] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.216457][ T7217] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.216480][ T7217] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.216526][ T7217] Dev loop5: unable to read RDB block 0 [ 245.216646][ T7217] loop5: unable to read partition table [ 245.216859][ T7217] loop5: partition table beyond EOD, truncated [ 245.216890][ T7217] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 245.403991][ T5879] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 245.557277][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.557329][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.557355][ T5879] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 245.561982][ T5879] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 245.562009][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.562028][ T5879] usb 4-1: Product: syz [ 245.562041][ T5879] usb 4-1: Manufacturer: syz [ 245.562054][ T5879] usb 4-1: SerialNumber: syz [ 245.591160][ T5879] usb 4-1: config 0 descriptor?? [ 247.037623][ T5865] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 247.216422][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 247.216448][ T5865] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 247.222360][ T5865] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 247.222390][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.222410][ T5865] usb 3-1: Product: syz [ 247.222423][ T5865] usb 3-1: Manufacturer: syz [ 247.222437][ T5865] usb 3-1: SerialNumber: syz [ 247.456703][ T5865] usb 3-1: config 0 descriptor?? [ 249.392109][ T7248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.991066][ T5865] usb 3-1: USB disconnect, device number 19 [ 250.858496][ T5865] usb 4-1: USB disconnect, device number 10 [ 251.403968][ T5865] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 251.472389][ T7284] netlink: 48 bytes leftover after parsing attributes in process `syz.2.351'. [ 251.556224][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 251.558981][ T5865] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.559013][ T5865] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.559036][ T5865] usb 4-1: config 0 interface 0 has no altsetting 0 [ 251.559069][ T5865] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 251.559092][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.583986][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 251.668222][ T5865] usb 4-1: config 0 descriptor?? [ 251.740788][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.740821][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.740835][ T10] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 251.749366][ T10] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 251.749396][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.749415][ T10] usb 2-1: Product: syz [ 251.749428][ T10] usb 2-1: Manufacturer: syz [ 251.749441][ T10] usb 2-1: SerialNumber: syz [ 251.892148][ T10] usb 2-1: config 0 descriptor?? [ 251.923847][ T7284] netlink: 48 bytes leftover after parsing attributes in process `syz.2.351'. [ 252.262718][ T5865] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 252.479158][ T5865] usb 4-1: USB disconnect, device number 11 [ 253.468665][ T7299] loop5: detected capacity change from 0 to 7 [ 254.239372][ T7299] Dev loop5: unable to read RDB block 7 [ 254.239458][ T7299] loop5: unable to read partition table [ 254.239777][ T7299] loop5: partition table beyond EOD, truncated [ 254.254102][ T7299] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 254.424871][ T7301] fido_id[7301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 254.671398][ T7298] m1Ie5n: entered promiscuous mode [ 255.616988][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.617031][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.117663][ T5879] usb 2-1: USB disconnect, device number 9 [ 257.407379][ T7330] tipc: Started in network mode [ 257.407406][ T7330] tipc: Node identity bec0e10bbdb3, cluster identity 4711 [ 257.450956][ T7330] tipc: Enabled bearer , priority 0 [ 257.452507][ T7330] syzkaller0: entered promiscuous mode [ 257.452635][ T7330] syzkaller0: entered allmulticast mode [ 257.716051][ T7336] tipc: Resetting bearer [ 257.814000][ T5955] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 257.816993][ T7328] tipc: Resetting bearer [ 257.966887][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.966939][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 257.966956][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.968627][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.968676][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 257.968691][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.970679][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.970712][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 257.970724][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.975013][ T5955] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 257.975039][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.975057][ T5955] usb 2-1: Product: syz [ 257.975069][ T5955] usb 2-1: Manufacturer: syz [ 257.975081][ T5955] usb 2-1: SerialNumber: syz [ 257.980149][ T5955] usb 2-1: config 0 descriptor?? [ 257.985670][ T5955] ti_usb_3410_5052 2-1:0.0: required endpoints missing [ 258.447082][ T7328] tipc: Disabling bearer [ 258.615266][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'. [ 258.891858][ T5865] tipc: Node number set to 57925899 [ 259.893952][ T5865] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 260.050633][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.050672][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.050686][ T5865] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 260.057750][ T5865] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 260.057777][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.057796][ T5865] usb 3-1: Product: syz [ 260.057810][ T5865] usb 3-1: Manufacturer: syz [ 260.057823][ T5865] usb 3-1: SerialNumber: syz [ 260.099535][ T5865] usb 3-1: config 0 descriptor?? [ 263.146955][ T5941] usb 2-1: USB disconnect, device number 10 [ 263.913913][ T5955] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 264.049609][ T5865] usb 3-1: USB disconnect, device number 20 [ 264.108662][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 264.108682][ T5955] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 264.118538][ T5955] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 264.118566][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.118585][ T5955] usb 2-1: Product: syz [ 264.118598][ T5955] usb 2-1: Manufacturer: syz [ 264.118612][ T5955] usb 2-1: SerialNumber: syz [ 264.175008][ T5955] usb 2-1: config 0 descriptor?? [ 264.399468][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.399'. [ 266.387472][ T5955] usb 2-1: USB disconnect, device number 11 [ 266.680391][ T7445] netlink: 156 bytes leftover after parsing attributes in process `syz.1.406'. [ 266.704072][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 266.704095][ T37] audit: type=1326 audit(1773906459.534:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 266.704142][ T37] audit: type=1326 audit(1773906459.534:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36f069cfce code=0x7ffc0000 [ 266.704178][ T37] audit: type=1326 audit(1773906459.534:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 266.704212][ T37] audit: type=1326 audit(1773906459.534:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 266.704251][ T37] audit: type=1326 audit(1773906459.534:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 266.704288][ T37] audit: type=1326 audit(1773906459.534:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 266.704325][ T37] audit: type=1326 audit(1773906459.544:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 266.704361][ T37] audit: type=1326 audit(1773906459.544:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 266.704398][ T37] audit: type=1326 audit(1773906459.544:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36f069cfce code=0x7ffc0000 [ 266.704435][ T37] audit: type=1326 audit(1773906459.544:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7439 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 268.083444][ T7464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.523957][ T5879] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 268.698312][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 268.698333][ T5879] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 268.786660][ T5879] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 268.786680][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.786690][ T5879] usb 1-1: Product: syz [ 268.786697][ T5879] usb 1-1: Manufacturer: syz [ 268.786704][ T5879] usb 1-1: SerialNumber: syz [ 268.793278][ T5879] usb 1-1: config 0 descriptor?? [ 269.434052][ T5865] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 269.558837][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 269.584013][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 269.591336][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.591368][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.591404][ T5865] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 269.591425][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.649432][ T5865] usb 4-1: config 0 descriptor?? [ 270.197195][ T5865] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 270.373504][ T5941] usb 4-1: USB disconnect, device number 12 [ 270.668017][ T7488] fido_id[7488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 271.799226][ T5879] usb 1-1: USB disconnect, device number 9 [ 272.802144][ T5865] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 273.265720][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.265904][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 273.265932][ T5865] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 273.536850][ T5865] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 273.537057][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.537078][ T5865] usb 1-1: Product: syz [ 273.537089][ T5865] usb 1-1: Manufacturer: syz [ 273.537101][ T5865] usb 1-1: SerialNumber: syz [ 273.605792][ T5865] usb 1-1: config 0 descriptor?? [ 275.445151][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 275.445223][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 275.705110][ T7542] netlink: 'syz.1.442': attribute type 4 has an invalid length. [ 277.067389][ T5879] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 277.233918][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 277.303584][ T5879] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 277.339936][ T5879] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 277.339956][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.339966][ T5879] usb 4-1: Product: syz [ 277.339973][ T5879] usb 4-1: Manufacturer: syz [ 277.339982][ T5879] usb 4-1: SerialNumber: syz [ 277.634224][ T5879] usb 4-1: config 0 descriptor?? [ 277.635867][ T5865] usb 1-1: USB disconnect, device number 10 [ 277.663107][ T5879] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 277.674753][ T5879] usb 4-1: Detected FT232R [ 277.805964][ T7568] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 277.881238][ T5879] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 277.883406][ T5879] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 277.884423][ T5879] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 277.886914][ T5879] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 277.945230][ T5879] usb 4-1: USB disconnect, device number 13 [ 278.079074][ T5879] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 278.079474][ T5879] ftdi_sio 4-1:0.0: device disconnected [ 278.440164][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 278.511758][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'. [ 278.894775][ T7584] syzkaller0: entered promiscuous mode [ 278.894799][ T7584] syzkaller0: entered allmulticast mode [ 279.159182][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'. [ 281.614001][ T5865] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 281.735059][ T7659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.787127][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 281.790437][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 281.795366][ T5865] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 281.795384][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.795394][ T5865] usb 2-1: Product: syz [ 281.795401][ T5865] usb 2-1: Manufacturer: syz [ 281.795408][ T5865] usb 2-1: SerialNumber: syz [ 281.925787][ T5865] usb 2-1: config 0 descriptor?? [ 281.929708][ T5865] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 281.961284][ T5865] usb 2-1: Detected FT232R [ 286.541386][ T5865] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 286.541702][ T5865] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 286.542038][ T5865] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 286.543573][ T5865] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 286.634026][ T5865] usb 2-1: USB disconnect, device number 12 [ 286.652593][ T5865] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 286.653350][ T5865] ftdi_sio 2-1:0.0: device disconnected [ 287.224141][ T5794] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 287.400791][ T5794] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 287.400812][ T5794] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 287.406995][ T5794] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 287.407023][ T5794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.407044][ T5794] usb 2-1: Product: syz [ 287.407063][ T5794] usb 2-1: Manufacturer: syz [ 287.407086][ T5794] usb 2-1: SerialNumber: syz [ 287.432275][ T5794] usb 2-1: config 0 descriptor?? [ 287.445005][ T7720] netlink: 156 bytes leftover after parsing attributes in process `syz.3.504'. [ 287.514884][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 287.514902][ T37] audit: type=1326 audit(1773906480.334:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7712 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 287.514948][ T37] audit: type=1326 audit(1773906480.334:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7712 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74d558cfce code=0x7ffc0000 [ 287.514985][ T37] audit: type=1326 audit(1773906480.334:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7712 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 287.515022][ T37] audit: type=1326 audit(1773906480.344:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7712 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 287.515061][ T37] audit: type=1326 audit(1773906480.344:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7712 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 287.515098][ T37] audit: type=1326 audit(1773906480.354:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7712 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 287.515134][ T37] audit: type=1326 audit(1773906480.354:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7712 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 287.515175][ T37] audit: type=1326 audit(1773906480.354:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7712 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 287.515211][ T37] audit: type=1326 audit(1773906480.354:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7712 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74d558cfce code=0x7ffc0000 [ 287.515248][ T37] audit: type=1326 audit(1773906480.354:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7712 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 289.028963][ T5794] usb 2-1: USB disconnect, device number 13 [ 290.543927][ T5865] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 290.701490][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 290.701516][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 290.709370][ T5865] usb 2-1: Using ep0 maxpacket: 32 [ 290.722218][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.722251][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.722290][ T5865] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 290.722311][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.752933][ T5865] usb 2-1: config 0 descriptor?? [ 291.322079][ T5865] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 291.528884][ T5955] usb 2-1: USB disconnect, device number 14 [ 293.859458][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 294.012959][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 294.570941][ T7835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.284047][ T5850] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 295.446845][ T7850] syzkaller0: entered promiscuous mode [ 295.446871][ T7850] syzkaller0: entered allmulticast mode [ 295.593911][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 295.600098][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.600130][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.600163][ T5850] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 295.600175][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.774114][ T5850] usb 2-1: config 0 descriptor?? [ 296.507229][ T5850] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 296.723026][ T5794] usb 2-1: USB disconnect, device number 15 [ 297.075394][ T7858] fido_id[7858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 298.822002][ T5955] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 298.996994][ T5955] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.997028][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 298.997039][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.998439][ T5955] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.998468][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 298.998479][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.000504][ T5955] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.000554][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 299.000574][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.147555][ T5955] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 299.147584][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.147602][ T5955] usb 1-1: Product: syz [ 299.147614][ T5955] usb 1-1: Manufacturer: syz [ 299.147628][ T5955] usb 1-1: SerialNumber: syz [ 299.235500][ T5955] usb 1-1: config 0 descriptor?? [ 299.248913][ T5955] ti_usb_3410_5052 1-1:0.0: required endpoints missing [ 301.030558][ T5879] usb 1-1: USB disconnect, device number 11 [ 301.944092][ T5865] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 302.099544][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 302.111116][ T5865] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.111148][ T5865] usb 4-1: config 0 interface 0 has no altsetting 0 [ 302.111183][ T5865] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 302.111205][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.160717][ T5865] usb 4-1: config 0 descriptor?? [ 303.002185][ T5865] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 306.160695][ T5879] usb 4-1: USB disconnect, device number 14 [ 306.603936][ T5879] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 306.780626][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 306.783105][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.783147][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.783182][ T5879] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 306.783204][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.800746][ T5879] usb 4-1: config 0 descriptor?? [ 307.303002][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 307.303124][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 307.324329][ T5879] usb 4-1: USB disconnect, device number 15 [ 307.343997][ T5955] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 307.495072][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 307.496612][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.496629][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.496650][ T5955] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 307.496668][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.499614][ T5955] usb 2-1: config 0 descriptor?? [ 308.288953][ T5955] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 308.488753][ T5955] usb 2-1: USB disconnect, device number 16 [ 308.850455][ T7996] fido_id[7996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 312.533976][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 312.717364][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.717398][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 312.717411][ T10] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 312.792964][ T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 312.792998][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.793011][ T10] usb 4-1: Product: syz [ 312.793018][ T10] usb 4-1: Manufacturer: syz [ 312.793025][ T10] usb 4-1: SerialNumber: syz [ 312.880980][ T10] usb 4-1: config 0 descriptor?? [ 317.066616][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.070041][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.129650][ T5879] usb 4-1: USB disconnect, device number 16 [ 319.191293][ T8125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.951089][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.662'. [ 319.951109][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.662'. [ 319.951154][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.662'. [ 320.086713][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.662'. [ 320.086738][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.662'. [ 320.086782][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.662'. [ 320.315597][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.662'. [ 320.315615][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.662'. [ 320.315656][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.662'. [ 323.124074][ T5941] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 323.174385][ T5879] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 323.297308][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 323.299498][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 323.302247][ T5941] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 323.302263][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.302273][ T5941] usb 2-1: Product: syz [ 323.302281][ T5941] usb 2-1: Manufacturer: syz [ 323.302288][ T5941] usb 2-1: SerialNumber: syz [ 323.316631][ T5941] usb 2-1: config 0 descriptor?? [ 323.325926][ T5941] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 323.325960][ T5941] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 323.387014][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 323.396792][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.396825][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.396862][ T5879] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 323.396883][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.409227][ T5879] usb 1-1: config 0 descriptor?? [ 323.846131][ T5879] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 323.935495][ T5941] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 324.103961][ T5865] usb 1-1: USB disconnect, device number 12 [ 324.224787][ T8199] fido_id[8199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 324.377758][ T5941] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 324.377778][ T5941] em28xx 2-1:0.0: board has no eeprom [ 324.711675][ T5941] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 324.713338][ T5941] em28xx 2-1:0.0: dvb set to bulk mode. [ 324.719541][ T5879] em28xx 2-1:0.0: Binding DVB extension [ 324.773548][ T5941] usb 2-1: USB disconnect, device number 17 [ 324.780837][ T5941] em28xx 2-1:0.0: Disconnecting em28xx [ 325.154025][ T5879] em28xx 2-1:0.0: Registering input extension [ 325.161365][ T5941] em28xx 2-1:0.0: Closing input extension [ 326.077453][ T5941] em28xx 2-1:0.0: Freeing device [ 326.501079][ T5941] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 326.665828][ T8235] syzkaller0: entered promiscuous mode [ 326.665858][ T8235] syzkaller0: entered allmulticast mode [ 326.693909][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 326.696813][ T5941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 326.715214][ T5941] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 326.715232][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.715242][ T5941] usb 2-1: Product: syz [ 326.715249][ T5941] usb 2-1: Manufacturer: syz [ 326.715256][ T5941] usb 2-1: SerialNumber: syz [ 326.722658][ T5941] usb 2-1: config 0 descriptor?? [ 326.745486][ T5941] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 326.746468][ T5941] usb 2-1: Detected FT232R [ 329.679562][ T5941] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 329.679871][ T5941] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 329.680198][ T5941] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 329.681624][ T5941] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 329.694000][ T5941] usb 2-1: USB disconnect, device number 18 [ 329.745024][ T5941] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 329.745773][ T5941] ftdi_sio 2-1:0.0: device disconnected [ 330.044966][ T8263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.601660][ T8275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.883984][ T5941] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 333.061773][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.061822][ T5941] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 333.061845][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.070978][ T5941] usb 2-1: config 0 descriptor?? [ 333.321442][ T5941] usbhid 2-1:0.0: can't add hid device: -71 [ 333.321562][ T5941] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 333.397531][ T5941] usb 2-1: USB disconnect, device number 19 [ 333.874175][ T5941] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 334.029095][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 334.031781][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.031809][ T5941] usb 2-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40 [ 334.031821][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.035319][ T5941] usb 2-1: config 0 descriptor?? [ 334.460334][ T5941] usbhid 2-1:0.0: can't add hid device: -71 [ 334.460459][ T5941] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 334.471538][ T5941] usb 2-1: USB disconnect, device number 20 [ 338.339124][ T5880] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 338.504170][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 338.506332][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.506363][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.506400][ T5880] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 338.506422][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.552992][ T5880] usb 2-1: config 0 descriptor?? [ 339.031809][ T5880] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 339.228471][ T5865] usb 2-1: USB disconnect, device number 21 [ 340.546415][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.550178][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.578697][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.591095][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.591670][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.653669][ T60] Bluetooth: hci5: command tx timeout [ 344.728145][ T60] Bluetooth: hci5: command tx timeout [ 346.804199][ T60] Bluetooth: hci5: command tx timeout [ 348.160697][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'. [ 348.399012][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'. [ 348.884416][ T60] Bluetooth: hci5: command tx timeout [ 349.354319][ T8481] chnl_net:caif_netlink_parms(): no params data found [ 350.155411][ T191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.671568][ T191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.196236][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.196425][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.196647][ T8481] bridge_slave_0: entered allmulticast mode [ 351.247871][ T8481] bridge_slave_0: entered promiscuous mode [ 351.305062][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.305198][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.305566][ T8481] bridge_slave_1: entered allmulticast mode [ 351.355300][ T8481] bridge_slave_1: entered promiscuous mode [ 351.577658][ T191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.861661][ T8896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1000'. [ 351.861680][ T8896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1000'. [ 351.861733][ T8896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1000'. [ 351.979648][ T191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.047958][ T8896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1000'. [ 352.047984][ T8896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1000'. [ 352.048048][ T8896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1000'. [ 352.106625][ T8481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.121482][ T8481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.307134][ T8896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1000'. [ 352.307152][ T8896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1000'. [ 352.339201][ T8481] team0: Port device team_slave_0 added [ 352.406931][ T8909] netlink: 'syz.1.1003': attribute type 4 has an invalid length. [ 352.415940][ T8481] team0: Port device team_slave_1 added [ 352.654293][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.654311][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.654335][ T8481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.861095][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.861112][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.861139][ T8481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.437381][ T191] bridge_slave_1: left allmulticast mode [ 353.437550][ T191] bridge_slave_1: left promiscuous mode [ 353.462228][ T191] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.566456][ T191] bridge_slave_0: left allmulticast mode [ 353.566476][ T191] bridge_slave_0: left promiscuous mode [ 353.566624][ T191] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.645592][ T5880] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 353.840914][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.841782][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 353.841802][ T5880] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 353.851082][ T5880] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 353.851112][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.851131][ T5880] usb 3-1: Product: syz [ 353.851146][ T5880] usb 3-1: Manufacturer: syz [ 353.851160][ T5880] usb 3-1: SerialNumber: syz [ 353.859955][ T5880] usb 3-1: config 0 descriptor?? [ 355.971190][ T191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.098259][ T191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.138529][ T191] bond0 (unregistering): Released all slaves [ 356.307921][ T8481] hsr_slave_0: entered promiscuous mode [ 356.313359][ T8481] hsr_slave_1: entered promiscuous mode [ 356.345461][ T8481] debugfs: 'hsr0' already exists in 'hsr' [ 356.346568][ T8481] Cannot create hsr debugfs directory [ 356.512438][ T191] m1Ie5n: left promiscuous mode [ 357.170261][ T5880] usb 3-1: USB disconnect, device number 21 [ 358.967933][ T9040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.788606][ T191] hsr_slave_0: left promiscuous mode [ 359.863906][ T191] hsr_slave_1: left promiscuous mode [ 359.867135][ T191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.867224][ T191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.917682][ T191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.917711][ T191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.107577][ T191] veth1_macvtap: left promiscuous mode [ 360.107849][ T191] veth0_macvtap: left promiscuous mode [ 360.108140][ T191] veth1_vlan: left promiscuous mode [ 360.110289][ T191] veth0_vlan: left promiscuous mode [ 361.502986][ T191] team0 (unregistering): Port device team_slave_1 removed [ 361.575784][ T191] team0 (unregistering): Port device team_slave_0 removed [ 362.437048][ T8481] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 362.469208][ T8481] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 362.546166][ T8481] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 362.592243][ T8481] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 363.712887][ T8481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.789893][ T8481] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.795404][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 363.927216][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.927295][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.962060][ T182] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.967643][ T182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.066349][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 364.066382][ T10] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 364.073632][ T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 364.073662][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.073682][ T10] usb 4-1: Product: syz [ 364.073702][ T10] usb 4-1: Manufacturer: syz [ 364.073716][ T10] usb 4-1: SerialNumber: syz [ 364.164006][ T10] usb 4-1: config 0 descriptor?? [ 366.203592][ T191] IPVS: stop unused estimator thread 0... [ 367.668792][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.134129][ T5880] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 369.355727][ T5879] usb 4-1: USB disconnect, device number 17 [ 369.436214][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.436268][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 369.436295][ T5880] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 369.580126][ T5880] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 369.580146][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.580157][ T5880] usb 3-1: Product: syz [ 369.580165][ T5880] usb 3-1: Manufacturer: syz [ 369.580172][ T5880] usb 3-1: SerialNumber: syz [ 369.583133][ T5880] usb 3-1: config 0 descriptor?? [ 369.917362][ T8481] veth0_vlan: entered promiscuous mode [ 369.937700][ T8481] veth1_vlan: entered promiscuous mode [ 370.384405][ T8481] veth0_macvtap: entered promiscuous mode [ 370.406260][ T8481] veth1_macvtap: entered promiscuous mode [ 370.638228][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.732519][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.813235][ T182] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.826842][ T182] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.829595][ T182] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.829640][ T182] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.639777][ T1456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.639800][ T1456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.723998][ T10] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 373.901215][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.901289][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 373.901315][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.904217][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.904347][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 373.904370][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.907613][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.907718][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 373.907741][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.923929][ T10] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 373.923959][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.923978][ T10] usb 4-1: Product: syz [ 373.923992][ T10] usb 4-1: Manufacturer: syz [ 373.924006][ T10] usb 4-1: SerialNumber: syz [ 373.942711][ T10] usb 4-1: config 0 descriptor?? [ 373.968607][ T10] ti_usb_3410_5052 4-1:0.0: required endpoints missing [ 374.031954][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.031975][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.262130][ T5880] usb 3-1: USB disconnect, device number 22 [ 375.927750][ T5878] usb 4-1: USB disconnect, device number 18 [ 376.415047][ T9302] fuse: Bad value for 'fd' [ 376.574298][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 376.580302][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 376.581729][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 376.582821][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 376.675568][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.900537][ T9314] m1Ie5n: entered promiscuous mode [ 378.099867][ T9320] mmap: syz.5.1135 (9320) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 378.501428][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.501495][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.804874][ T60] Bluetooth: hci4: command tx timeout [ 379.987053][ T9337] __nla_validate_parse: 3 callbacks suppressed [ 379.987068][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1137'. [ 380.042279][ T9341] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1136'. [ 380.065394][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 380.065413][ T37] audit: type=1326 audit(1773906572.914:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 380.069524][ T37] audit: type=1326 audit(1773906572.914:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 380.069902][ T37] audit: type=1326 audit(1773906572.914:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74d558cfce code=0x7ffc0000 [ 380.070538][ T37] audit: type=1326 audit(1773906572.914:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 380.071045][ T37] audit: type=1326 audit(1773906572.914:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 380.085786][ T37] audit: type=1326 audit(1773906572.934:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 380.085840][ T37] audit: type=1326 audit(1773906572.934:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 380.085883][ T37] audit: type=1326 audit(1773906572.934:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 380.102204][ T37] audit: type=1326 audit(1773906572.944:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 380.102260][ T37] audit: type=1326 audit(1773906572.944:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 380.581899][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1137'. [ 380.641173][ T9298] chnl_net:caif_netlink_parms(): no params data found [ 380.883902][ T60] Bluetooth: hci4: command tx timeout [ 381.064663][ T9352] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1140'. [ 381.113055][ T1126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.352027][ T9354] binder: 9353:9354 ioctl c0306201 0 returned -14 [ 381.592444][ T1126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.612651][ T9364] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1144'. [ 381.664076][ T9365] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1144'. [ 381.811399][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.817059][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.892372][ T9365] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.892519][ T9365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.922936][ T9365] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.923084][ T9365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.927696][ T9365] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1144'. [ 381.976037][ T9365] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.979958][ T9365] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.116378][ T9371] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1145'. [ 382.190395][ T1126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.251166][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.273526][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.998602][ T60] Bluetooth: hci4: command tx timeout [ 383.420180][ T1126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.473486][ T9298] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.473653][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.500442][ T9298] bridge_slave_0: entered allmulticast mode [ 383.516901][ T9298] bridge_slave_0: entered promiscuous mode [ 383.587122][ T9298] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.587251][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.587418][ T9298] bridge_slave_1: entered allmulticast mode [ 383.623347][ T9298] bridge_slave_1: entered promiscuous mode [ 383.921208][ T9298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.923522][ T9298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.803940][ T9396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1150'. [ 384.925157][ T9298] team0: Port device team_slave_0 added [ 385.011521][ T9298] team0: Port device team_slave_1 added [ 385.044410][ T60] Bluetooth: hci4: command tx timeout [ 385.140054][ T9399] loop5: detected capacity change from 0 to 7 [ 385.214041][ T58] blk_print_req_error: 5 callbacks suppressed [ 385.214062][ T58] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.214086][ T58] buffer_io_error: 5 callbacks suppressed [ 385.214096][ T58] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.226816][ T9399] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.226851][ T9399] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.226906][ T9399] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.226930][ T9399] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.226971][ T9399] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.226996][ T9399] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.227061][ T9399] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.227085][ T9399] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.227153][ T9399] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.227177][ T9399] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.227218][ T9399] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.227243][ T9399] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.227265][ T9399] ldm_validate_partition_table(): Disk read failed. [ 385.227297][ T9399] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.227509][ T9399] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.227563][ T9399] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.227588][ T9399] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.227626][ T9399] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.227650][ T9399] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.227699][ T9399] Dev loop5: unable to read RDB block 0 [ 385.227823][ T9399] loop5: unable to read partition table [ 385.228056][ T9399] loop5: partition table beyond EOD, truncated [ 385.228089][ T9399] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 385.705773][ T9398] m1Ie5n: entered promiscuous mode [ 385.708233][ T9396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1150'. [ 385.801687][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1151'. [ 385.868806][ T9406] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1152'. [ 385.898353][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.898370][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.898395][ T9298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.901314][ T9406] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.901903][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.971771][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.971787][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.971810][ T9298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.990323][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1151'. [ 386.733973][ T9298] hsr_slave_0: entered promiscuous mode [ 386.734750][ T9298] hsr_slave_1: entered promiscuous mode [ 386.738835][ T9298] debugfs: 'hsr0' already exists in 'hsr' [ 386.738852][ T9298] Cannot create hsr debugfs directory [ 386.743306][ T1126] bridge_slave_1: left allmulticast mode [ 386.743323][ T1126] bridge_slave_1: left promiscuous mode [ 386.748539][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.845056][ T1126] bridge_slave_0: left allmulticast mode [ 386.845076][ T1126] bridge_slave_0: left promiscuous mode [ 386.845330][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.936480][ T5880] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 388.064857][ T5880] usb 6-1: device descriptor read/64, error -71 [ 388.274450][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.324105][ T5880] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 388.372955][ T9436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1161'. [ 388.424468][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.453901][ T5880] usb 6-1: device descriptor read/64, error -71 [ 388.481475][ T1126] bond0 (unregistering): Released all slaves [ 388.584352][ T5880] usb usb6-port1: attempt power cycle [ 388.659837][ T9436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1161'. [ 388.923960][ T5880] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 388.946631][ T5880] usb 6-1: device descriptor read/8, error -71 [ 389.203997][ T5880] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 389.224420][ T5880] usb 6-1: device descriptor read/8, error -71 [ 389.344986][ T5880] usb usb6-port1: unable to enumerate USB device [ 390.444018][ T1126] hsr_slave_0: left promiscuous mode [ 390.464148][ T1126] hsr_slave_1: left promiscuous mode [ 390.464811][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.464828][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.526506][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.526528][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.627563][ T1126] veth1_macvtap: left promiscuous mode [ 390.627632][ T1126] veth0_macvtap: left promiscuous mode [ 390.627767][ T1126] veth1_vlan: left promiscuous mode [ 390.627862][ T1126] veth0_vlan: left promiscuous mode [ 390.775013][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1164'. [ 390.880380][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1164'. [ 391.086802][ T9454] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1165'. [ 392.524802][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 392.599951][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 393.199230][ T9452] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.354789][ T9468] loop5: detected capacity change from 0 to 7 [ 393.422838][ T9452] bridge_slave_0 (unregistering): left allmulticast mode [ 393.422859][ T9452] bridge_slave_0 (unregistering): left promiscuous mode [ 393.422911][ T9452] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.469015][ T11] blk_print_req_error: 5 callbacks suppressed [ 393.469033][ T11] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.469058][ T11] buffer_io_error: 5 callbacks suppressed [ 393.469068][ T11] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.829387][ T9468] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.829413][ T9468] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.829453][ T9468] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.829467][ T9468] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.829489][ T9468] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.829504][ T9468] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.829541][ T9468] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.829554][ T9468] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.829591][ T9468] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.829604][ T9468] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.829638][ T9468] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.829650][ T9468] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.829661][ T9468] ldm_validate_partition_table(): Disk read failed. [ 393.829686][ T9468] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.829698][ T9468] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.829719][ T9468] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.829731][ T9468] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.829752][ T9468] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.829765][ T9468] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.829790][ T9468] Dev loop5: unable to read RDB block 0 [ 393.829856][ T9468] loop5: unable to read partition table [ 393.829985][ T9468] loop5: partition table beyond EOD, truncated [ 393.830011][ T9468] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 394.288536][ T9467] m1Ie5n: entered promiscuous mode [ 394.633963][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 394.783893][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 394.786264][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.786295][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.786332][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 394.786355][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.894073][ T9] usb 6-1: config 0 descriptor?? [ 395.156267][ T9482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 395.332013][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 395.332130][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 395.365744][ T9] usb 6-1: USB disconnect, device number 6 [ 395.713209][ T9482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 395.904913][ T1126] IPVS: stop unused estimator thread 0... [ 396.279229][ T36] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 396.443885][ T36] usb 3-1: device descriptor read/64, error -71 [ 396.466546][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 396.466570][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 396.570018][ T9507] netlink: 'syz.1.1174': attribute type 4 has an invalid length. [ 396.696156][ T36] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 396.827262][ T36] usb 3-1: device descriptor read/64, error -71 [ 397.013941][ T36] usb usb3-port1: attempt power cycle [ 397.353874][ T36] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 397.378086][ T36] usb 3-1: device descriptor read/8, error -71 [ 397.403920][ T5941] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 397.434288][ T9298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 397.567018][ T5941] usb 6-1: Using ep0 maxpacket: 16 [ 397.674276][ T5941] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.674311][ T5941] usb 6-1: config 0 interface 0 has no altsetting 0 [ 397.674343][ T5941] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 397.674365][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.680128][ T5941] usb 6-1: config 0 descriptor?? [ 397.744861][ T9298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.783960][ T36] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 397.803619][ T9514] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1176'. [ 397.813699][ T36] usb 3-1: device descriptor read/8, error -71 [ 397.849075][ T9298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 397.914710][ T36] usb usb3-port1: unable to enumerate USB device [ 397.986548][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 397.986567][ T37] audit: type=1326 audit(1773906590.794:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9510 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 397.986601][ T37] audit: type=1326 audit(1773906590.794:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9510 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 397.986623][ T37] audit: type=1326 audit(1773906590.804:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9510 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74d558cfce code=0x7ffc0000 [ 397.986673][ T37] audit: type=1326 audit(1773906590.804:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9510 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 397.986724][ T37] audit: type=1326 audit(1773906590.804:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9510 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 397.986848][ T37] audit: type=1326 audit(1773906590.804:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9510 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 397.986889][ T37] audit: type=1326 audit(1773906590.804:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9510 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 397.986927][ T37] audit: type=1326 audit(1773906590.814:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9510 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 397.986958][ T37] audit: type=1326 audit(1773906590.814:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9510 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74d558cfce code=0x7ffc0000 [ 397.986980][ T37] audit: type=1326 audit(1773906590.814:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9510 comm="syz.3.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 398.243202][ T5941] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 398.243233][ T5941] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 398.243249][ T5941] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 398.243265][ T5941] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 398.243280][ T5941] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 398.414277][ T5941] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 398.414664][ C1] usb 6-1: input irq status -75 received [ 398.520785][ T5878] usb 6-1: USB disconnect, device number 7 [ 398.650414][ T9518] fido_id[9518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 398.829961][ T9298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 399.370682][ T9298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.417319][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 399.417346][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 399.534292][ T9539] netlink: 'syz.2.1177': attribute type 4 has an invalid length. [ 399.535875][ T9298] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.838588][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.838721][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.841044][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.841185][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.939046][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 400.072380][ T9553] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1181'. [ 400.073197][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 400.116421][ T9553] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.116502][ T9553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.116708][ T9553] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.116785][ T9553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.117750][ T9553] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1181'. [ 400.144704][ T9553] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.144955][ T9553] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.203943][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 400.353947][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 400.356265][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 400.360407][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 400.360436][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.360456][ T10] usb 6-1: Product: syz [ 400.360469][ T10] usb 6-1: Manufacturer: syz [ 400.360483][ T10] usb 6-1: SerialNumber: syz [ 400.376639][ T10] usb 6-1: config 0 descriptor?? [ 400.389386][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 400.389420][ T10] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 400.427916][ T9560] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1182'. [ 400.791026][ T9566] loop5: detected capacity change from 0 to 7 [ 400.876348][ T11] blk_print_req_error: 5 callbacks suppressed [ 400.876367][ T11] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 400.876384][ T11] buffer_io_error: 5 callbacks suppressed [ 400.876389][ T11] Buffer I/O error on dev loop5, logical block 0, async page read [ 400.878493][ T9566] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 400.878525][ T9566] Buffer I/O error on dev loop5, logical block 0, async page read [ 400.880737][ T9566] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 400.880767][ T9566] Buffer I/O error on dev loop5, logical block 0, async page read [ 400.880810][ T9566] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 400.880921][ T9566] Buffer I/O error on dev loop5, logical block 0, async page read [ 400.880991][ T9566] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 400.881083][ T9566] Buffer I/O error on dev loop5, logical block 0, async page read [ 400.881142][ T9566] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 400.881166][ T9566] Buffer I/O error on dev loop5, logical block 0, async page read [ 400.881294][ T9566] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 400.881319][ T9566] Buffer I/O error on dev loop5, logical block 0, async page read [ 400.881339][ T9566] ldm_validate_partition_table(): Disk read failed. [ 400.881445][ T9566] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 400.881470][ T9566] Buffer I/O error on dev loop5, logical block 0, async page read [ 400.881508][ T9566] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 400.881603][ T9566] Buffer I/O error on dev loop5, logical block 0, async page read [ 400.881801][ T9566] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 400.881827][ T9566] Buffer I/O error on dev loop5, logical block 0, async page read [ 400.881975][ T9566] Dev loop5: unable to read RDB block 0 [ 400.882168][ T9566] loop5: unable to read partition table [ 400.882556][ T9566] loop5: partition table beyond EOD, truncated [ 400.882665][ T9566] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 401.019728][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 401.462822][ T10] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 401.462852][ T10] em28xx 6-1:0.0: board has no eeprom [ 401.524584][ T10] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 401.524729][ T10] em28xx 6-1:0.0: dvb set to bulk mode. [ 401.526351][ T5878] em28xx 6-1:0.0: Binding DVB extension [ 401.566701][ T10] usb 6-1: USB disconnect, device number 8 [ 401.568982][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 401.791509][ T5878] em28xx 6-1:0.0: Registering input extension [ 401.794535][ T10] em28xx 6-1:0.0: Closing input extension [ 401.943116][ T10] em28xx 6-1:0.0: Freeing device [ 402.174809][ T9298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.457708][ T9576] netlink: 'syz.5.1184': attribute type 1 has an invalid length. [ 404.270945][ T9298] veth0_vlan: entered promiscuous mode [ 404.539564][ T9298] veth1_vlan: entered promiscuous mode [ 404.833879][ T36] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 404.963903][ T36] usb 2-1: device descriptor read/64, error -71 [ 405.186679][ T9298] veth0_macvtap: entered promiscuous mode [ 405.215743][ T36] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 405.226077][ T9298] veth1_macvtap: entered promiscuous mode [ 405.307788][ T9298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.343951][ T36] usb 2-1: device descriptor read/64, error -71 [ 405.405547][ T9298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.439018][ T1456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.439535][ T1456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.439876][ T1456] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.440096][ T1456] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.463924][ T36] usb usb2-port1: attempt power cycle [ 405.843919][ T36] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 405.896883][ T36] usb 2-1: device descriptor read/8, error -71 [ 406.134289][ T36] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 406.154799][ T36] usb 2-1: device descriptor read/8, error -71 [ 406.204822][ T182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.204843][ T182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.264528][ T36] usb usb2-port1: unable to enumerate USB device [ 406.396063][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.396086][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.762577][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 406.920466][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 407.016769][ T9646] fuse: Invalid rootmode [ 407.805885][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1194'. [ 407.805903][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1194'. [ 407.878450][ T9651] netlink: 'syz.4.1194': attribute type 4 has an invalid length. [ 410.290962][ T9688] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1199'. [ 410.845317][ T9697] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1201'. [ 411.046498][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'. [ 411.046524][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'. [ 411.103323][ T9698] netlink: 'syz.3.1200': attribute type 4 has an invalid length. [ 411.273901][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 411.423863][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 411.425333][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.425352][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 411.425370][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 411.425382][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.512859][ T9] usb 3-1: config 0 descriptor?? [ 412.298630][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 412.298704][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 412.315447][ T9] usb 3-1: USB disconnect, device number 27 [ 413.497572][ T9722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.163901][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 414.295030][ T10] usb 6-1: device descriptor read/64, error -71 [ 414.573902][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 414.703894][ T10] usb 6-1: device descriptor read/64, error -71 [ 414.785525][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1207'. [ 414.785544][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1207'. [ 414.814453][ T10] usb usb6-port1: attempt power cycle [ 414.846516][ T9730] netlink: 'syz.1.1207': attribute type 4 has an invalid length. [ 415.288994][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 415.304363][ T10] usb 6-1: device descriptor read/8, error -71 [ 415.369201][ T9735] fuse: Invalid rootmode [ 415.565012][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 415.589812][ T10] usb 6-1: device descriptor read/8, error -71 [ 415.694346][ T10] usb usb6-port1: unable to enumerate USB device [ 416.271460][ T9745] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1210'. [ 416.290166][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 416.290191][ T37] audit: type=1326 audit(1773906609.124:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9741 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 416.291310][ T37] audit: type=1326 audit(1773906609.124:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9741 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c8811cfce code=0x7ffc0000 [ 416.291343][ T37] audit: type=1326 audit(1773906609.124:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9741 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 416.291365][ T37] audit: type=1326 audit(1773906609.124:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9741 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 416.291386][ T37] audit: type=1326 audit(1773906609.124:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9741 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 416.291410][ T37] audit: type=1326 audit(1773906609.124:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9741 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 416.291432][ T37] audit: type=1326 audit(1773906609.124:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9741 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 416.291452][ T37] audit: type=1326 audit(1773906609.124:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9741 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c8811cfce code=0x7ffc0000 [ 416.291473][ T37] audit: type=1326 audit(1773906609.124:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9741 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 416.291494][ T37] audit: type=1326 audit(1773906609.134:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9741 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 416.421438][ T5850] IPVS: starting estimator thread 0... [ 416.503947][ T9746] IPVS: using max 8 ests per chain, 19200 per kthread [ 417.538875][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'. [ 417.651256][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'. [ 417.848543][ T9758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.263926][ T5955] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 418.447035][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.447098][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 418.447121][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.448643][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.448692][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 418.448713][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.464080][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.464140][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 418.464168][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.553910][ T5955] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 418.553928][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.553939][ T5955] usb 3-1: Product: syz [ 418.553953][ T5955] usb 3-1: Manufacturer: syz [ 418.553961][ T5955] usb 3-1: SerialNumber: syz [ 418.613441][ T5955] usb 3-1: config 0 descriptor?? [ 418.647746][ T5955] ti_usb_3410_5052 3-1:0.0: required endpoints missing [ 418.827606][ T5955] usb 3-1: USB disconnect, device number 28 [ 419.303935][ T5941] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 419.494430][ T5941] usb 4-1: device descriptor read/64, error -71 [ 419.733996][ T5941] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 419.917994][ T5941] usb 4-1: device descriptor read/64, error -71 [ 420.024556][ T5941] usb usb4-port1: attempt power cycle [ 420.171639][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'. [ 420.420118][ T5941] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 420.588496][ T5941] usb 4-1: device descriptor read/8, error -71 [ 420.823908][ T5941] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 420.844629][ T5941] usb 4-1: device descriptor read/8, error -71 [ 420.954318][ T5941] usb usb4-port1: unable to enumerate USB device [ 421.757451][ T9808] binder_alloc: 9807: binder_alloc_buf, no vma [ 421.800072][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1232'. [ 421.800091][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1232'. [ 421.836305][ T9806] netlink: 'syz.5.1232': attribute type 4 has an invalid length. [ 422.049197][ T9814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.612277][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1237'. [ 423.576374][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 423.792030][ T9846] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1245'. [ 423.792222][ T9846] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.792382][ T9846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.825675][ T9846] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.825770][ T9846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.243305][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'. [ 425.423533][ T9868] netlink: 'syz.2.1250': attribute type 4 has an invalid length. [ 427.386950][ T9885] tipc: Enabling of bearer rejected, failed to enable media [ 427.545672][ T9894] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1257'. [ 427.545919][ T9894] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.546041][ T9894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.546256][ T9894] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.546329][ T9894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.611527][ T9895] netlink: 'syz.5.1255': attribute type 1 has an invalid length. [ 428.331375][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 428.484742][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 428.490708][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.490735][ T9] usb 2-1: config 0 has no interfaces? [ 428.492990][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 428.493006][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.493016][ T9] usb 2-1: Product: syz [ 428.493023][ T9] usb 2-1: Manufacturer: syz [ 428.493034][ T9] usb 2-1: SerialNumber: syz [ 428.497626][ T9] usb 2-1: config 0 descriptor?? [ 428.704317][ T9] usb 2-1: USB disconnect, device number 26 [ 429.074511][ T9908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.277887][ T9935] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1269'. [ 431.278065][ T9935] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.278147][ T9935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.279414][ T9935] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.279535][ T9935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.309240][ T9932] syzkaller0: entered promiscuous mode [ 431.309265][ T9932] syzkaller0: entered allmulticast mode [ 431.318128][ T9932] tipc: Started in network mode [ 431.318170][ T9932] tipc: Node identity 7e1e0e1efd49, cluster identity 4711 [ 431.318466][ T9932] tipc: Enabled bearer , priority 0 [ 431.406017][ T9930] tipc: Resetting bearer [ 431.589143][ T9930] tipc: Disabling bearer [ 431.801678][ T9945] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1271'. [ 431.878435][ T37] audit: type=1326 audit(1773906624.704:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9941 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 431.878491][ T37] audit: type=1326 audit(1773906624.704:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9941 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36f069cfce code=0x7ffc0000 [ 431.878529][ T37] audit: type=1326 audit(1773906624.704:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9941 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 431.878568][ T37] audit: type=1326 audit(1773906624.704:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9941 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 431.878609][ T37] audit: type=1326 audit(1773906624.704:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9941 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 431.878654][ T37] audit: type=1326 audit(1773906624.704:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9941 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 431.878701][ T37] audit: type=1326 audit(1773906624.704:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9941 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 431.878745][ T37] audit: type=1326 audit(1773906624.704:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9941 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36f069cfce code=0x7ffc0000 [ 431.878785][ T37] audit: type=1326 audit(1773906624.704:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9941 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 431.878825][ T37] audit: type=1326 audit(1773906624.714:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9941 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f06dc799 code=0x7ffc0000 [ 433.575904][ T9961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.425831][ T9967] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1276'. [ 434.426074][ T9967] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1276'. [ 434.484831][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 434.695101][ T1126] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.699184][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 434.699400][ T1126] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.703015][ T1126] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.703045][ T1126] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.463920][ T5850] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 436.743502][ T5850] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 436.743524][ T5850] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 436.754576][ T5850] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 436.754594][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.754605][ T5850] usb 5-1: Product: syz [ 436.754613][ T5850] usb 5-1: Manufacturer: syz [ 436.754620][ T5850] usb 5-1: SerialNumber: syz [ 436.826166][ T5850] usb 5-1: config 0 descriptor?? [ 438.479366][T10006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.667348][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1287'. [ 439.954192][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.954235][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.787603][ T5850] usb 5-1: USB disconnect, device number 8 [ 443.248972][T10042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.776136][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1298'. [ 446.015217][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1299'. [ 446.740704][ T36] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 446.907347][ T36] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 446.907382][ T36] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 446.911881][ T36] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 446.911899][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.911909][ T36] usb 3-1: Product: syz [ 446.911916][ T36] usb 3-1: Manufacturer: syz [ 446.911925][ T36] usb 3-1: SerialNumber: syz [ 447.009745][T10086] netlink: 'syz.4.1303': attribute type 4 has an invalid length. [ 447.052117][ T36] usb 3-1: config 0 descriptor?? [ 451.088943][ T36] usb 3-1: USB disconnect, device number 29 [ 451.280152][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 451.348659][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 451.364268][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 451.513864][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 451.515736][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.515944][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 451.515966][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 451.515979][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.519065][ T9] usb 2-1: config 0 descriptor?? [ 451.966403][ T9] nzxt-smart2 0003:1E71:2009.0015: unknown main item tag 0x0 [ 451.966442][ T9] nzxt-smart2 0003:1E71:2009.0015: unknown main item tag 0x0 [ 451.966470][ T9] nzxt-smart2 0003:1E71:2009.0015: unknown main item tag 0x0 [ 451.966497][ T9] nzxt-smart2 0003:1E71:2009.0015: unknown main item tag 0x0 [ 452.007157][ T9] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 452.290517][ C0] usb 2-1: input irq status -75 received [ 452.501738][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 452.988622][ T37] audit: type=1326 audit(1773906645.794:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 452.988675][ T37] audit: type=1326 audit(1773906645.804:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c8811cfce code=0x7ffc0000 [ 452.988714][ T37] audit: type=1326 audit(1773906645.804:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 452.988752][ T37] audit: type=1326 audit(1773906645.814:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 452.988936][ T37] audit: type=1326 audit(1773906645.814:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 452.989149][ T37] audit: type=1326 audit(1773906645.814:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 452.989189][ T37] audit: type=1326 audit(1773906645.814:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 452.989225][ T37] audit: type=1326 audit(1773906645.824:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10115 comm="syz.4.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 454.136953][ T811] usb 2-1: USB disconnect, device number 27 [ 455.802404][T10144] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1318'. [ 455.852838][ T37] audit: type=1326 audit(1773906648.674:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10136 comm="syz.3.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 455.852891][ T37] audit: type=1326 audit(1773906648.674:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10136 comm="syz.3.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 458.171076][T10167] netlink: 'syz.3.1322': attribute type 4 has an invalid length. [ 458.647208][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1324'. [ 460.958521][T10195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.093940][ T811] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 461.240629][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 461.286543][ T811] usb 3-1: Using ep0 maxpacket: 8 [ 461.288731][ T811] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 461.290738][ T811] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 461.290755][ T811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.290765][ T811] usb 3-1: Product: syz [ 461.290772][ T811] usb 3-1: Manufacturer: syz [ 461.290780][ T811] usb 3-1: SerialNumber: syz [ 461.306354][ T811] usb 3-1: config 0 descriptor?? [ 461.317568][ T811] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 461.317703][ T811] usb 3-1: setting power ON [ 461.317755][ T811] dvb-usb: bulk message failed: -22 (2/0) [ 461.372883][ T811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 461.432467][ T811] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 461.432528][ T811] usb 3-1: media controller created [ 461.457211][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.457313][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 461.457338][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.467156][ T9] usb 4-1: config 0 descriptor?? [ 461.526381][T10189] dvb-usb: bulk message failed: -22 (3/0) [ 461.526399][T10189] dvb-usb: bulk message failed: -22 (4/0) [ 461.526407][T10189] cxusb: i2c read failed [ 461.641294][ T811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.686805][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 461.686887][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 461.741554][ T811] usb 3-1: selecting invalid altsetting 6 [ 461.741578][ T811] usb 3-1: digital interface selection failed (-22) [ 461.741627][ T811] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 461.741856][ T9] usb 4-1: USB disconnect, device number 23 [ 461.742458][ T811] usb 3-1: setting power OFF [ 461.742477][ T811] dvb-usb: bulk message failed: -22 (2/0) [ 461.742493][ T811] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 461.742505][ T811] (NULL device *): no alternate interface [ 461.930341][ T811] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 461.979588][ T811] usb 3-1: USB disconnect, device number 30 [ 462.182011][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 462.253841][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 462.568552][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 462.568569][ T37] audit: type=1326 audit(1773906655.404:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 462.568605][ T37] audit: type=1326 audit(1773906655.404:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c8811cfce code=0x7ffc0000 [ 462.568639][ T37] audit: type=1326 audit(1773906655.404:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 462.568669][ T37] audit: type=1326 audit(1773906655.404:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 462.568698][ T37] audit: type=1326 audit(1773906655.404:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 462.568726][ T37] audit: type=1326 audit(1773906655.414:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 462.568755][ T37] audit: type=1326 audit(1773906655.414:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 462.568784][ T37] audit: type=1326 audit(1773906655.414:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.4.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8815c799 code=0x7ffc0000 [ 462.609564][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.609616][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 462.609635][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.621585][ T9] usb 4-1: config 0 descriptor?? [ 463.031667][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 463.031787][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 463.074088][ T9] usb 4-1: USB disconnect, device number 24 [ 463.740798][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'. [ 463.848264][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'. [ 464.015612][T10219] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1337'. [ 464.018308][T10219] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.018558][T10219] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.074139][T10219] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1337'. [ 464.074302][T10219] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1337'. [ 464.558455][T10224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.280643][T10241] netlink: 'syz.4.1341': attribute type 4 has an invalid length. [ 467.623870][ T5800] Bluetooth: hci5: command 0x0406 tx timeout [ 467.934467][ T5941] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 468.094460][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 468.102911][ T5941] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.102932][ T5941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 468.102952][ T5941] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 468.102964][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.177021][ T5941] usb 3-1: config 0 descriptor?? [ 468.601432][ T5941] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 468.601456][ T5941] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 468.601472][ T5941] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 468.603388][ T5941] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 468.907587][ C1] usb 3-1: input irq status -75 received [ 469.864937][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1348'. [ 469.985771][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1348'. [ 470.601459][ T5941] usb 3-1: USB disconnect, device number 31 [ 470.858740][T10281] fuse: Unknown parameter '00000000000000000000' [ 472.615013][ T37] audit: type=1326 audit(1773906665.454:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10287 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 472.615053][ T37] audit: type=1326 audit(1773906665.454:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10287 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74d558cfce code=0x7ffc0000 [ 472.615077][ T37] audit: type=1326 audit(1773906665.454:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10287 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 472.615098][ T37] audit: type=1326 audit(1773906665.454:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10287 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 472.615121][ T37] audit: type=1326 audit(1773906665.454:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10287 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 472.615146][ T37] audit: type=1326 audit(1773906665.454:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10287 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 472.615168][ T37] audit: type=1326 audit(1773906665.454:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10287 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 472.615189][ T37] audit: type=1326 audit(1773906665.454:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10287 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d55cc799 code=0x7ffc0000 [ 474.318770][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1359'. [ 474.346730][T10312] netlink: 'syz.1.1357': attribute type 4 has an invalid length. [ 477.371935][T10339] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1367'. [ 477.403989][ T5941] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 477.594133][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 477.618888][ T5941] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 477.648353][ T5941] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 477.648394][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.648414][ T5941] usb 4-1: Product: syz [ 477.648428][ T5941] usb 4-1: Manufacturer: syz [ 477.648442][ T5941] usb 4-1: SerialNumber: syz [ 477.712243][ T5941] usb 4-1: config 0 descriptor?? [ 477.745792][ T5941] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 477.747760][ T5941] usb 4-1: Detected FT232R [ 478.020442][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 478.176549][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 478.176578][ T9] usb 6-1: config 0 has no interface number 0 [ 478.179739][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 478.179767][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.179786][ T9] usb 6-1: Product: syz [ 478.179808][ T9] usb 6-1: Manufacturer: syz [ 478.179822][ T9] usb 6-1: SerialNumber: syz [ 478.220314][ T9] usb 6-1: config 0 descriptor?? [ 478.277993][ T9] usb 6-1: selecting invalid altsetting 1 [ 478.301930][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 478.301950][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 478.875019][ T9] DVB: Unable to find symbol stv0299_attach() [ 479.011956][ T5850] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 479.196883][ T5850] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 479.199601][ T5850] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 479.199630][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.199650][ T5850] usb 2-1: Product: syz [ 479.199663][ T5850] usb 2-1: Manufacturer: syz [ 479.199677][ T5850] usb 2-1: SerialNumber: syz [ 479.214582][ T5850] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 479.480524][ T9] DVB: Unable to find symbol tda8083_attach() [ 479.480541][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 479.545534][ T9] usb 6-1: USB disconnect, device number 13 [ 479.862842][T10362] ------------[ cut here ]------------ [ 479.862856][T10362] refcount_t: addition on 0; use-after-free. [ 479.862871][T10362] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x9f/0x110, CPU#0: syz.1.1370/10362 [ 479.863129][T10362] Modules linked in: [ 479.863164][T10362] CPU: 0 UID: 0 PID: 10362 Comm: syz.1.1370 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 479.863192][T10362] Tainted: [L]=SOFTLOCKUP [ 479.863200][T10362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 479.863216][T10362] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 479.863252][T10362] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 6b 66 26 fd 48 8d 3d 94 5f d6 0a 67 48 0f b9 3a eb 4a e8 58 66 26 fd 48 8d 3d 91 5f d6 0a <67> 48 0f b9 3a eb 37 e8 45 66 26 fd 48 8d 3d 8e 5f d6 0a 67 48 0f [ 479.863271][T10362] RSP: 0018:ffffc9000e7376d8 EFLAGS: 00010287 [ 479.863288][T10362] RAX: ffffffff849e10a8 RBX: 0000000000000002 RCX: 0000000000080000 [ 479.863303][T10362] RDX: ffffc9000f54a000 RSI: 0000000000000783 RDI: ffffffff8f747040 [ 479.863317][T10362] RBP: 0000000000000000 R08: ffff88805f9b9e80 R09: 0000000000000005 [ 479.863331][T10362] R10: 0000000000000100 R11: 0000000000000004 R12: ffffffff8c049388 [ 479.863349][T10362] R13: dffffc0000000000 R14: ffff88803728cd98 R15: dffffc0000000000 [ 479.863364][T10362] FS: 00007f36ee9156c0(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 479.863381][T10362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 479.863421][T10362] CR2: 00007f36ee8f3ff8 CR3: 00000000261a2000 CR4: 00000000003526f0 [ 479.863456][T10362] Call Trace: [ 479.863465][T10362] [ 479.863476][T10362] kobject_get+0xfa/0x120 [ 479.863587][T10362] i2c_get_adapter+0x6d/0xa0 [ 479.863753][T10362] i2cdev_open+0x48/0x190 [ 479.863813][T10362] chrdev_open+0x4d0/0x5f0 [ 479.863900][T10362] ? __pfx_chrdev_open+0x10/0x10 [ 479.863931][T10362] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 479.864021][T10362] ? __pfx_chrdev_open+0x10/0x10 [ 479.864041][T10362] do_dentry_open+0x83d/0x13e0 [ 479.864104][T10362] vfs_open+0x3b/0x350 [ 479.864127][T10362] ? path_openat+0x2e2b/0x38a0 [ 479.864186][T10362] path_openat+0x2e43/0x38a0 [ 479.864246][T10362] ? __pfx_path_openat+0x10/0x10 [ 479.864275][T10362] ? __lock_acquire+0x6b5/0x2cf0 [ 479.864332][T10362] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 479.864428][T10362] ? do_raw_spin_lock+0x12b/0x2f0 [ 479.864466][T10362] do_file_open+0x23e/0x4a0 [ 479.864504][T10362] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 479.864606][T10362] ? __pfx_do_file_open+0x10/0x10 [ 479.864633][T10362] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 479.864682][T10362] ? alloc_fd+0x64e/0x6c0 [ 479.864776][T10362] do_sys_openat2+0x113/0x200 [ 479.864815][T10362] ? __pfx_do_sys_openat2+0x10/0x10 [ 479.864863][T10362] __x64_sys_openat+0x138/0x170 [ 479.864910][T10362] do_syscall_64+0x14d/0xf80 [ 479.864987][T10362] ? trace_irq_disable+0x3b/0x150 [ 479.865030][T10362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.865075][T10362] ? clear_bhb_loop+0x40/0x90 [ 479.865100][T10362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.865119][T10362] RIP: 0033:0x7f36f069cfce [ 479.865146][T10362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 479.865163][T10362] RSP: 002b:00007f36ee914b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 479.865185][T10362] RAX: ffffffffffffffda RBX: 00007f36ee9156c0 RCX: 00007f36f069cfce [ 479.865201][T10362] RDX: 0000000000000402 RSI: 00007f36ee914c00 RDI: ffffffffffffff9c [ 479.865215][T10362] RBP: 00007f36ee914c00 R08: 0000000000000000 R09: 0000000000000000 [ 479.865228][T10362] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 479.865242][T10362] R13: 00007f36f0956128 R14: 00007f36f0956090 R15: 00007ffc4a00bd38 [ 479.865274][T10362] [ 479.865292][T10362] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 479.865311][T10362] CPU: 0 UID: 0 PID: 10362 Comm: syz.1.1370 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 479.865349][T10362] Tainted: [L]=SOFTLOCKUP [ 479.865356][T10362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 479.865369][T10362] Call Trace: [ 479.865377][T10362] [ 479.865386][T10362] vpanic+0x56c/0xa60 [ 479.865441][T10362] ? __pfx__printk+0x10/0x10 [ 479.865464][T10362] ? __pfx_vpanic+0x10/0x10 [ 479.865492][T10362] ? is_bpf_text_address+0x292/0x2b0 [ 479.865531][T10362] ? is_bpf_text_address+0x26/0x2b0 [ 479.865565][T10362] panic+0xc5/0xd0 [ 479.865594][T10362] ? __pfx_panic+0x10/0x10 [ 479.865664][T10362] __warn+0x315/0x4f0 [ 479.865704][T10362] ? refcount_warn_saturate+0x9f/0x110 [ 479.865748][T10362] ? refcount_warn_saturate+0x9f/0x110 [ 479.865777][T10362] __report_bug+0x29a/0x540 [ 479.865860][T10362] ? rt_mutex_slowlock_block+0x56c/0x680 [ 479.865893][T10362] ? refcount_warn_saturate+0x9f/0x110 [ 479.865924][T10362] ? __pfx___report_bug+0x10/0x10 [ 479.865960][T10362] ? rt_mutex_slowlock+0x420/0x7b0 [ 479.865987][T10362] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 479.866014][T10362] report_bug_entry+0x19a/0x290 [ 479.866045][T10362] ? refcount_warn_saturate+0x9f/0x110 [ 479.866072][T10362] ? refcount_warn_saturate+0xa4/0x110 [ 479.866100][T10362] handle_bug+0xce/0x200 [ 479.866122][T10362] exc_invalid_op+0x1a/0x50 [ 479.866154][T10362] asm_exc_invalid_op+0x1a/0x20 [ 479.866178][T10362] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 479.866207][T10362] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 6b 66 26 fd 48 8d 3d 94 5f d6 0a 67 48 0f b9 3a eb 4a e8 58 66 26 fd 48 8d 3d 91 5f d6 0a <67> 48 0f b9 3a eb 37 e8 45 66 26 fd 48 8d 3d 8e 5f d6 0a 67 48 0f [ 479.866224][T10362] RSP: 0018:ffffc9000e7376d8 EFLAGS: 00010287 [ 479.866259][T10362] RAX: ffffffff849e10a8 RBX: 0000000000000002 RCX: 0000000000080000 [ 479.866274][T10362] RDX: ffffc9000f54a000 RSI: 0000000000000783 RDI: ffffffff8f747040 [ 479.866289][T10362] RBP: 0000000000000000 R08: ffff88805f9b9e80 R09: 0000000000000005 [ 479.866306][T10362] R10: 0000000000000100 R11: 0000000000000004 R12: ffffffff8c049388 [ 479.866320][T10362] R13: dffffc0000000000 R14: ffff88803728cd98 R15: dffffc0000000000 [ 479.866345][T10362] ? refcount_warn_saturate+0x98/0x110 [ 479.866376][T10362] ? refcount_warn_saturate+0x98/0x110 [ 479.866401][T10362] kobject_get+0xfa/0x120 [ 479.866421][T10362] i2c_get_adapter+0x6d/0xa0 [ 479.866450][T10362] i2cdev_open+0x48/0x190 [ 479.866480][T10362] chrdev_open+0x4d0/0x5f0 [ 479.866504][T10362] ? __pfx_chrdev_open+0x10/0x10 [ 479.866524][T10362] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 479.866558][T10362] ? __pfx_chrdev_open+0x10/0x10 [ 479.866578][T10362] do_dentry_open+0x83d/0x13e0 [ 479.866611][T10362] vfs_open+0x3b/0x350 [ 479.866632][T10362] ? path_openat+0x2e2b/0x38a0 [ 479.866662][T10362] path_openat+0x2e43/0x38a0 [ 479.866728][T10362] ? __pfx_path_openat+0x10/0x10 [ 479.866759][T10362] ? __lock_acquire+0x6b5/0x2cf0 [ 479.866780][T10362] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 479.866816][T10362] ? do_raw_spin_lock+0x12b/0x2f0 [ 479.866853][T10362] do_file_open+0x23e/0x4a0 [ 479.866881][T10362] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 479.866914][T10362] ? __pfx_do_file_open+0x10/0x10 [ 479.866940][T10362] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 479.866985][T10362] ? alloc_fd+0x64e/0x6c0 [ 479.867018][T10362] do_sys_openat2+0x113/0x200 [ 479.867054][T10362] ? __pfx_do_sys_openat2+0x10/0x10 [ 479.867101][T10362] __x64_sys_openat+0x138/0x170 [ 479.867131][T10362] do_syscall_64+0x14d/0xf80 [ 479.867160][T10362] ? trace_irq_disable+0x3b/0x150 [ 479.867182][T10362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.867201][T10362] ? clear_bhb_loop+0x40/0x90 [ 479.867225][T10362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.867244][T10362] RIP: 0033:0x7f36f069cfce [ 479.867263][T10362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 479.867279][T10362] RSP: 002b:00007f36ee914b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 479.867299][T10362] RAX: ffffffffffffffda RBX: 00007f36ee9156c0 RCX: 00007f36f069cfce [ 479.867315][T10362] RDX: 0000000000000402 RSI: 00007f36ee914c00 RDI: ffffffffffffff9c [ 479.867329][T10362] RBP: 00007f36ee914c00 R08: 0000000000000000 R09: 0000000000000000 [ 479.867341][T10362] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 479.867354][T10362] R13: 00007f36f0956128 R14: 00007f36f0956090 R15: 00007ffc4a00bd38 [ 479.867384][T10362] [ 479.867659][T10362] Kernel Offset: disabled