last executing test programs: 12.550342196s ago: executing program 0 (id=4109): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0cc5604, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) fsopen(0x0, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="82", 0x1}, {0x0}], 0x2}}], 0x1, 0x4404c880) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11.168758034s ago: executing program 0 (id=4113): openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="44972d8f4b37d51182f9dfbe4d8a5383732e1de826cc1568fd7a4897a68f5bcea320d968207774cf24bd2c", 0x2b}], 0x1}}], 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000100)=@v={0x93, 0x0, 0x90, 0x0, @generic}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xe26, 0x101400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0xc0045520, &(0x7f00000000c0)=""/92) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x23, &(0x7f0000000000), 0x8) sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x802100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x36}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x24, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x10, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x229d}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x41) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) r8 = io_uring_setup(0x50b4, &(0x7f0000002240)={0x0, 0x9f12, 0x0, 0x1}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x18, &(0x7f0000000000), 0x1) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffe0}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 10.065977492s ago: executing program 3 (id=4116): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x0, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r4, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0xa) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x1, 0x806, 0x0, 0x80000007, 0x2, "6d1714a98b08633c45debea890564b7cdcd0f7", 0x6, 0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_emit_ethernet(0x122, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x2, 0x12) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_tables_names\x00') read$FUSE(r7, &(0x7f0000007100)={0x2020}, 0x941f) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x80000001, 0x2}}) 9.778410804s ago: executing program 4 (id=4118): pipe2(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0xf5, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r2) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) 9.68571549s ago: executing program 0 (id=4119): connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) prctl$PR_SET_UNALIGN(0x6, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x103000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$audion(0x0, 0x7, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000100)=0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r4, 0x10, &(0x7f0000001500)) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') lseek(r6, 0x289e0cb5, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket(0x1e, 0x805, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) 9.526293078s ago: executing program 2 (id=4120): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0xa78ec515a42c1b00, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) semctl$SETVAL(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x3) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x14) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) r4 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)=']{-*\'\\\x00', 0x0) r5 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000005a00)=[{{&(0x7f0000001540)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@multicast2]}]}}}], 0x18}}], 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) writev(r2, &(0x7f0000000100), 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220500000083"], 0x0}, 0x0) io_submit(r0, 0x0, 0x0) 8.508561634s ago: executing program 3 (id=4121): syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x2, 0x3ed2, {0x0}, {}, 0x7, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x7, 0x1}, 0x1c) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r6, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85) recvmmsg$unix(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}], 0x1, 0x40000000, 0x0) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000500)={0xa, @sliced={0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x3]}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 8.175656603s ago: executing program 0 (id=4123): syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x82083) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) sync() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) setpriority(0x2, r3, 0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b0000000904000002"], 0x0) syz_open_dev$midi(0x0, 0x500, 0xc900) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0xc}, 'port0\x00', 0x80, 0x90410, 0x8, 0x80001, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge0\x00'}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011", @ANYBLOB="00000000000000001c001a800800058004000500080000003e"], 0x44}}, 0x100) 8.098669214s ago: executing program 4 (id=4124): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000001c0)=0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000440)}) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0x4112, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000080)) userfaultfd(0x80800) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x2, {0x7, 0x7, 0xffff, 0xdc66}, {0x3, 0x0, 0x9d82, 0x5}, {0x6, 0x8001}}) 7.52134152s ago: executing program 2 (id=4125): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000380)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.180780266s ago: executing program 4 (id=4126): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0001, 0x0) writev(r0, &(0x7f0000001880)=[{&(0x7f0000000400)='{', 0x1}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket(0x10, 0x3, 0x3b7) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r3 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) r4 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x10c) syz_emit_vhci(&(0x7f0000001e00)=ANY=[@ANYBLOB='!6\a}'], 0xa) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc, 0x5, 0xfffffffffffffff3, 0xffffffffffffffbe, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) 6.751643524s ago: executing program 1 (id=4127): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0xff4, &(0x7f0000001840)=""/4084, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) sendto$inet6(r2, &(0x7f0000000140)='A', 0x1, 0x340c8890, &(0x7f000005ffe4)={0xa, 0x0, 0x9, @loopback, 0x1}, 0x1c) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0)) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, &(0x7f0000000180), 0xfe) 6.031279165s ago: executing program 4 (id=4128): setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, 0x0) socket$inet_udp(0x2, 0x2, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) r3 = fsopen(0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x8) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) dup2(r5, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44050) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10020) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) 5.353409446s ago: executing program 1 (id=4129): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x6}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r1, 0x5, 0x3671}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x6}], 0x1c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r9, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) io_submit(r9, 0x2, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x56, r2, &(0x7f0000000340)="36add896c6efa70fb576437ffbad64e52ed8ea490edf704a82abb4e536c783e28b0ad04832a9055a4f6ce7c32f0b9c853fe279", 0x33, 0x5, 0x0, 0x0, r4}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000500)="cb3115d9a07e2a7484dbcc47778f5d86351a50b6a6693e6bb21d10bffe5bee09766b21e5d7d83eed7f648b19383c5b15e0ce44f2a3f197ba61b246b7e72e8c256a5378e759cef54eb2fcb17bc2e41f08cfcee32b4997329cef88cbe53ae3f6c58bae62100e868ab5dbd30a1629d0007446602fbb1e423a06e3583dbf281ea7ece80b4a4ed178e96272913892fbbcbda16195f59a4564f9557b4ff6bc574d700b44c1d31fd86c", 0xa6, 0xfffffffffffffeff, 0x0, 0x2, r4}]) sendmsg$inet6(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4844) recvmsg$can_raw(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/71, 0x47}], 0x1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x2, 0xa, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d5, 0x4, 0x0, 0xe5, 0x3, 0x2689a58a0f2301f2}]}, 0x20}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x2, 0x22, 0x38, 0x67, 0x0, 0x2, 0x6, 0x0, @private=0xa010100, @loopback, {[@generic={0x88, 0x2}, @generic={0x44, 0xb, "081bfacd3a0a792149"}]}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xe, 0x0, 0xfe}}}}}}, 0x0) 5.234454353s ago: executing program 3 (id=4130): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0cc5604, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) fsopen(0x0, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="82", 0x1}, {0x0}], 0x2}}], 0x1, 0x4404c880) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 4.954510873s ago: executing program 4 (id=4131): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0xc}, 0x0, [0x40000000, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x0, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) r5 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x51, 0x0, @void}, 0x10) connect$can_bcm(r5, &(0x7f0000001ff0), 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.390248945s ago: executing program 0 (id=4132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe8800000000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f37000000000000", 0x8f, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000008000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x141, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc2c45512, &(0x7f0000000a00)={{0x8, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 4.278706359s ago: executing program 1 (id=4133): socket(0x40000000015, 0x805, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.197307384s ago: executing program 1 (id=4134): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) r3 = socket$vsock_stream(0x28, 0x1, 0x0) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 3.979470774s ago: executing program 2 (id=4135): socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x143800, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0xa) openat$sequencer2(0xffffff9c, &(0x7f0000000180), 0x2001, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000000000), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_io_uring_setup(0x462, &(0x7f0000000040)={0x0, 0xe079, 0x80, 0x0, 0x1bc}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x43, 0x0, @fd, 0x11e, 0x5, 0x0, 0x5, 0x0, {0x3, r5}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x48, 0x2000, @fd=r0, 0x0, 0x8, 0xd7, 0x4, 0x0, {0x3}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.85134068s ago: executing program 4 (id=4136): socket$inet(0x2, 0x1, 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x20, r7, 0x1, 0x0, 0x0, {0x1e}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000700), r9, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r9, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x6, {"ec48ec694b96429cea4a1f5d456505d9"}, 0xffffffffffffffff, 0x7, 0x7}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) socket$key(0xf, 0x3, 0x2) write$6lowpan_control(r2, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 3.728367848s ago: executing program 3 (id=4137): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0cc5604, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) fsopen(0x0, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="82", 0x1}, {0x0}], 0x2}}], 0x1, 0x4404c880) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3.644956388s ago: executing program 2 (id=4138): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8040) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, 0x0, 0x4) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0xf) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', 0x0}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0xfaf, &(0x7f0000000400)={0x0, 0x7aab, 0x10, 0x3, 0x10d7}, &(0x7f00000002c0), &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 2.953928601s ago: executing program 0 (id=4139): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1c", 0x1, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 2.680854234s ago: executing program 3 (id=4140): mkdir(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000180)={0xc0002000}) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x4, 0x40100000, 0x5, 0x0, 0x1, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81}) socket$inet(0x2, 0x2, 0xffffffff) r5 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, 0x0) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) 2.538685289s ago: executing program 1 (id=4141): socket(0x200000000000011, 0x2, 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1.595760207s ago: executing program 2 (id=4142): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4}, &(0x7f00000000c0)=""/80, 0x50, 0x0) r5 = openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, &(0x7f0000000040)) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x6, @mcast1, 0x9}, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x0, {[0x5, 0x0, 0x8, 0x8, 0x7, 0x98d, 0x22bb, 0x9]}}, 0x5c) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5218) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 1.247101027s ago: executing program 1 (id=4143): read$FUSE(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfc, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x3, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x40, 0x2}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x7, 0x2b, 0x4, 0x8, 0x7}, 0x37, &(0x7f0000000280)={0x5, 0xf, 0x37, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6c7daf5559e433e276615f2d9757cdfa"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x4, 0x9, 0x9, 0xfffd, 0xa7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x0, 0xa, 0x6}, @ptm_cap={0x3}]}, 0x7, [{0x41, &(0x7f00000002c0)=@string={0x41, 0x3, "5e164c7c9b5b7a50491ae77754eed9dbc7346a21aac751be33003090b6ef8dbbf87e9e9b99669502ffa385d68809fffc66e6fe50461cd7384ec8c0eb287125"}}, {0xc2, &(0x7f0000000540)=@string={0xc2, 0x3, "947d7804ee264c7bef8c99e535b0750bb182adc35b098d7e3ace25f513e7f4ecefd5a4b2ff1c1090e9fc35d69cc4be4c114660ae8a6d3c446946341df8aa47fb935c39226cf708bfd880ec4013f7e4db20dbe0dce9cf7048a5369b4c8fb344d90a4be5776c334fd98a71a52e4fa1af65ce825048cf998570ffec282f941ea157eac6ef8f3f5b6feb657ff9a810b04d1027822d291f385c6e68f80cbc47771297a108c8853f8a345bcea11df068299bd368f5c1b32dfc60d810029895787fdc70"}}, {0x9d, &(0x7f0000000400)=@string={0x9d, 0x3, "7ba24dfca66ec5d5a34abad25f1ed1a51bbb1d3b459db33d1f9381f17fb12c439c1efe8d6f8d8bd4c9ab5910261bd2e6bd3c05789d45e9237c0bec883638a4916c1a2a53a854cfd53e5ec2af53f739536330b1378909d3eaa09b9889aef51a680dd6e66f35fc889b7c635aa50062dfb14ba3754e66a4f74d520b0fce52f6bb6377292ba946ad139f4bf25058deb8792f202ffce42b70390fadbb87"}}, {0xbf, &(0x7f0000000680)=@string={0xbf, 0x3, "0e0d3c8b1c96acab08e3b1278650d3df8afb00ff4c8fae5fd774d75a71852f1b261cdf0f0170ce3447d8fba7a5f6a3c40d29c89c1c143283b578ca8695cb93ad6873a38602e8cf0816f9bbdaa1951039e682d42b22e9b6e334fca5699c94747704239d6fb74573f73da977f7b8e0bd1a9ea8ac3ae5050f3c66e58c04d0b46eaf4a707f3ba9abe138b86423718c2f5a9f33630f2382b8e50e83214fd694b1e467335dae4f043946269999f09cd3ffbd36fc562cccfc277aafaba1c423ee"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1801}}, {0x32, &(0x7f0000000780)=@string={0x32, 0x3, "83714f497ba514dfcd5b335e4a9b7a931111572015b3a546d1b36e94ef7aca0b4992ede3b517dbe62729efd56418b04d"}}]}) r5 = socket(0x0, 0x803, 0x1) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000003c0)={0x8001, 0xa, 0x3, "edbbb8a19a62740bcaac0a0d716bdae9bc4ff50bb087ac8d38665c29071151e7", 0x42303159}) sendto$packet(r2, &(0x7f00000003c0)="11eb534b", 0x4, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x4, 0x6, @local}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x2a, 0xf0]) 1.228448778s ago: executing program 3 (id=4144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03008000"], 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 0s ago: executing program 2 (id=4145): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_STATION(r1, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @broadcast}]}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r7, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r7, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) mq_timedsend(r7, 0x0, 0x0, 0x5, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) kernel console output (not intermixed with test programs): .3.3532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1244.048065][ T30] audit: type=1326 audit(1770684575.580:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.3.3532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1244.091396][ T30] audit: type=1326 audit(1770684575.580:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.3.3532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf717572b code=0x7ffc0000 [ 1244.120326][ T30] audit: type=1326 audit(1770684575.580:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.3.3532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf717572b code=0x7ffc0000 [ 1244.161326][ T30] audit: type=1326 audit(1770684575.580:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.3.3532" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf717572b code=0x7ffc0000 [ 1244.660528][T16036] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1244.862889][T16036] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1244.873594][T16036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.892088][T16036] usb 1-1: Product: syz [ 1244.897568][T16036] usb 1-1: Manufacturer: syz [ 1244.909544][T16036] usb 1-1: SerialNumber: syz [ 1244.928213][T16036] usb 1-1: config 0 descriptor?? [ 1244.938780][T20139] IPVS: Unknown mcast interface: batadv_slave_0 [ 1244.952859][T16036] hub 1-1:0.0: bad descriptor, ignoring hub [ 1244.964378][T16036] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1245.201052][T16036] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1245.221741][T16036] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1245.258544][T16036] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1245.276595][T16036] usb 1-1: media controller created [ 1245.312528][T16036] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1245.417889][T16036] DVB: Unable to find symbol dib7000p_attach() [ 1245.424219][T16036] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1245.521399][T16036] rc_core: IR keymap rc-dib0700-rc5 not found [ 1245.527800][T16036] Registered IR keymap rc-empty [ 1245.535155][T16036] dvb-usb: could not initialize remote control. [ 1245.555256][T16036] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1246.651707][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3540'. [ 1247.353060][T16036] usb 1-1: USB disconnect, device number 86 [ 1247.403841][T16036] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1247.880120][T16036] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1248.140460][T16036] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1248.150105][T16036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.159825][T16036] usb 1-1: Product: syz [ 1248.164115][T16036] usb 1-1: Manufacturer: syz [ 1248.170391][T16036] usb 1-1: SerialNumber: syz [ 1248.231580][T16036] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1248.237975][T16036] r8152-cfgselector 1-1: config 0 descriptor?? [ 1248.790101][T16036] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1248.825868][T10505] r8152-cfgselector 1-1: USB disconnect, device number 87 [ 1248.962188][T16036] usb 3-1: config 0 has no interfaces? [ 1248.980647][T16036] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1248.998680][T16036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.049542][T16036] usb 3-1: config 0 descriptor?? [ 1249.129436][T20190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1249.419830][T10519] usb 3-1: USB disconnect, device number 114 [ 1249.631164][T20196] tipc: Enabling of bearer rejected, already enabled [ 1249.818617][T20198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.861237][T20198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.099574][T20200] netlink: 'syz.2.3552': attribute type 1 has an invalid length. [ 1250.198947][T20200] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1250.269207][T20202] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1250.295747][T20202] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1250.334058][T20202] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 1250.403144][T20205] gretap1: entered promiscuous mode [ 1250.459753][T20205] bond9: (slave gretap1): making interface the new active one [ 1250.487455][T20205] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 1250.520334][T20208] macvlan4: entered promiscuous mode [ 1250.538247][T20208] macvlan4: entered allmulticast mode [ 1250.560351][T20208] bond9: entered promiscuous mode [ 1250.575232][T20208] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1250.596853][T20208] bond9: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1250.629721][T20208] bond9: left promiscuous mode [ 1251.171228][T18929] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1251.232591][T20229] fuse: Bad value for 'fd' [ 1251.339514][T18929] usb 1-1: config 0 has no interfaces? [ 1251.348162][T18929] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1251.369942][T18929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.388494][T18929] usb 1-1: config 0 descriptor?? [ 1251.479112][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3560'. [ 1251.626847][T18929] usb 1-1: USB disconnect, device number 88 [ 1251.810739][T16036] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1251.975122][T16036] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.985369][T16036] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1251.999586][T16036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.026812][T16036] usb 3-1: config 0 descriptor?? [ 1252.453638][T16036] usbhid 3-1:0.0: can't add hid device: -71 [ 1252.459650][T16036] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1252.476735][T16036] usb 3-1: USB disconnect, device number 115 [ 1252.668252][T18929] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1252.687873][T20243] support for the xor transformation has been removed. [ 1252.770871][T18929] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1252.789464][T20246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.848963][T20246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.965648][T20268] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3566'. [ 1255.413746][T20279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3570'. [ 1255.516661][T20282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.574335][T20282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.623914][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1255.742901][T20288] input: syz1 as /devices/virtual/input/input56 [ 1255.830910][T18929] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 1256.087839][T18929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1256.102382][T18929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1256.168054][T18929] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1256.177777][T10519] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1256.204072][T18929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.223444][T18929] usb 3-1: Product: syz [ 1256.229691][T18929] usb 3-1: Manufacturer: syz [ 1256.244254][T18929] usb 3-1: SerialNumber: syz [ 1256.255778][T18929] usb 3-1: config 0 descriptor?? [ 1256.293631][T18929] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 1256.340244][T10519] usb 1-1: Using ep0 maxpacket: 16 [ 1256.353134][T10519] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.367640][T10519] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1256.388092][T10519] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1256.401960][T10519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.423217][T10519] usb 1-1: config 0 descriptor?? [ 1256.862437][T10519] nzxt-smart2 0003:1E71:2009.0023: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1257.370214][T10505] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1257.535168][T10505] usb 4-1: config 0 has no interfaces? [ 1257.542597][T10505] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1257.558064][T10505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.585994][T10505] usb 4-1: config 0 descriptor?? [ 1257.807051][T10505] usb 4-1: USB disconnect, device number 106 [ 1259.085391][T10519] usb 1-1: USB disconnect, device number 89 [ 1259.963122][T10519] usb 3-1: USB disconnect, device number 116 [ 1260.108611][T20333] gretap1: left promiscuous mode [ 1260.192036][T20339] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3582'. [ 1260.700180][T10505] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1260.919767][T10505] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1260.930976][T10505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.955835][T10505] usb 3-1: Product: syz [ 1260.962321][T10505] usb 3-1: Manufacturer: syz [ 1260.985478][T10505] usb 3-1: SerialNumber: syz [ 1261.023796][T10505] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1261.037977][T10505] r8152-cfgselector 3-1: config 0 descriptor?? [ 1261.503546][T10505] r8152-cfgselector 3-1: USB disconnect, device number 117 [ 1262.918708][T20367] netlink: 'syz.0.3591': attribute type 21 has an invalid length. [ 1262.968770][T20367] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3591'. [ 1263.009094][T20367] netlink: 'syz.0.3591': attribute type 4 has an invalid length. [ 1263.017207][T20367] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3591'. [ 1263.520538][T20374] netlink: 'syz.4.3594': attribute type 3 has an invalid length. [ 1263.612216][T20374] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3594'. [ 1263.732707][T20374] netlink: 988 bytes leftover after parsing attributes in process `syz.4.3594'. [ 1265.320372][T16036] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1265.532589][T16036] usb 1-1: config 0 has no interfaces? [ 1265.544536][T16036] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1265.560217][T16036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.613253][T16036] usb 1-1: config 0 descriptor?? [ 1265.904894][T18929] usb 1-1: USB disconnect, device number 90 [ 1267.131335][T20432] tipc: Enabling of bearer rejected, failed to enable media [ 1267.244925][T20433] fuse: Bad value for 'fd' [ 1267.330892][T20434] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1267.337443][T20434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1267.423878][T20434] vhci_hcd vhci_hcd.0: Device attached [ 1267.660265][T16036] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 1268.455747][T20451] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3609'. [ 1269.189076][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1269.189096][ T30] audit: type=1326 audit(1770684601.050:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1269.290203][ T30] audit: type=1326 audit(1770684601.050:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1269.318596][ T30] audit: type=1326 audit(1770684601.050:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1269.371584][T10519] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1269.380386][ T30] audit: type=1326 audit(1770684601.050:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1269.430819][ T30] audit: type=1326 audit(1770684601.060:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1269.481138][ T30] audit: type=1326 audit(1770684601.060:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1269.524480][ T30] audit: type=1326 audit(1770684601.060:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1269.552796][ T30] audit: type=1326 audit(1770684601.060:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.0.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1269.694105][T10519] usb 3-1: Using ep0 maxpacket: 8 [ 1270.043873][T10519] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1270.094014][T10519] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1270.125469][T10519] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1270.167682][T20464] netlink: 'syz.1.3614': attribute type 1 has an invalid length. [ 1270.196308][T20464] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1270.281483][T20464] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1270.294734][T20464] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1270.322225][T20464] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 1270.393112][T20470] macvlan2: entered promiscuous mode [ 1270.398554][T20470] macvlan2: entered allmulticast mode [ 1270.405371][T20470] bond4: entered promiscuous mode [ 1270.411652][T20470] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1270.425638][T20470] bond4: left promiscuous mode [ 1270.470412][T20474] delete_channel: no stack [ 1270.496278][T10519] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1270.506181][T10519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.515511][T10519] usb 3-1: Product: syz [ 1270.521826][T10519] usb 3-1: Manufacturer: syz [ 1270.526529][T10519] usb 3-1: SerialNumber: syz [ 1270.540385][T20455] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1270.577510][T10519] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1270.586752][T10519] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 1270.593389][T10519] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 1270.610559][T18929] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1270.761925][T18929] usb 4-1: config 0 has no interfaces? [ 1270.767559][T18929] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1270.777668][T18929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.799434][T18929] usb 4-1: config 0 descriptor?? [ 1271.023393][T18929] usb 4-1: USB disconnect, device number 107 [ 1271.326297][T20455] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1272.455505][T10505] usb 3-1: USB disconnect, device number 118 [ 1273.610479][T20509] fuse: Bad value for 'fd' [ 1275.107129][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3627'. [ 1275.196864][T20525] input: syz1 as /devices/virtual/input/input57 [ 1275.680404][T10505] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1275.852803][T10505] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1275.861497][T10505] usb 4-1: not running at top speed; connect to a high speed hub [ 1275.875166][T10505] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 1275.884720][T10505] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.904906][T10505] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 1275.918955][T10505] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 1275.935407][T10505] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1275.963122][T10505] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1275.972934][T10505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.986846][T10505] usb 4-1: Product: syz [ 1275.993758][T10505] usb 4-1: Manufacturer: syz [ 1276.002834][T10505] usb 4-1: SerialNumber: syz [ 1276.248741][T20539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.305585][T20539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.588150][T10505] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1276.637291][T10505] usb 4-1: USB disconnect, device number 108 [ 1276.761659][T20550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3633'. [ 1276.800142][T20550] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3633'. [ 1277.096558][T20559] delete_channel: no stack [ 1277.128826][T20559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.173447][T20559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.308042][T20559] veth1_to_team: entered promiscuous mode [ 1277.396566][T20559] debugfs: 'hsr1' already exists in 'hsr' [ 1277.402696][T20559] Cannot create hsr debugfs directory [ 1277.408537][T20559] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 1277.419395][T20559] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 1277.430605][T20559] hsr1: entered allmulticast mode [ 1277.594740][T20559] veth1_to_team: entered allmulticast mode [ 1277.600679][T20559] bridge0: entered allmulticast mode [ 1277.628373][T20568] tipc: Enabling of bearer rejected, failed to enable media [ 1278.623200][T20574] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1278.713130][T20578] netlink: 'syz.1.3649': attribute type 3 has an invalid length. [ 1278.753448][T20578] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3649'. [ 1278.766204][T20578] netlink: 988 bytes leftover after parsing attributes in process `syz.1.3649'. [ 1279.302479][T20592] F2FS-fs: Conflicting test_dummy_encryption options [ 1279.451120][T20590] delete_channel: no stack [ 1281.028138][T20616] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1282.455420][T20624] netlink: 'syz.4.3650': attribute type 33 has an invalid length. [ 1282.485718][T20624] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3650'. [ 1282.693223][T20632] netlink: 'syz.2.3648': attribute type 10 has an invalid length. [ 1282.727585][T20632] team0: Port device netdevsim0 added [ 1282.775964][T20632] netlink: 'syz.2.3648': attribute type 10 has an invalid length. [ 1282.830552][T20632] team0: Port device netdevsim0 removed [ 1282.901080][T20632] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1285.493397][T10519] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1285.651989][T10519] usb 2-1: Using ep0 maxpacket: 32 [ 1285.662089][T10519] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1285.670857][T10519] usb 2-1: config 0 has no interface number 0 [ 1285.678286][T10519] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1285.698066][T10519] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1285.707568][T10519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.720542][T10519] usb 2-1: Product: syz [ 1285.726650][T10519] usb 2-1: Manufacturer: syz [ 1285.736808][T10519] usb 2-1: SerialNumber: syz [ 1285.800598][T10519] usb 2-1: config 0 descriptor?? [ 1285.821906][T10519] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1285.841353][T10519] em28xx 2-1:0.132: Video interface 132 found: [ 1286.434195][T10519] em28xx 2-1:0.132: chip ID is em2884 [ 1286.634757][T20663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.650877][T20663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.778578][T10519] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1286.805148][T10519] em28xx 2-1:0.132: board has no eeprom [ 1286.870258][T10519] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1286.881309][T10519] em28xx 2-1:0.132: analog set to bulk mode. [ 1286.892342][T18929] em28xx 2-1:0.132: Registering V4L2 extension [ 1286.926300][T10519] usb 2-1: USB disconnect, device number 125 [ 1286.945727][T10519] em28xx 2-1:0.132: Disconnecting em28xx [ 1287.334766][T18929] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1287.342856][T18929] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1287.361788][T18929] em28xx 2-1:0.132: No AC97 audio processor [ 1287.378895][T18929] usb 2-1: Decoder not found [ 1287.384296][T18929] em28xx 2-1:0.132: failed to create media graph [ 1287.391289][T18929] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1287.406195][T18929] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1287.417848][T10519] em28xx 2-1:0.132: Closing input extension [ 1287.429231][T10519] em28xx 2-1:0.132: Freeing device [ 1287.560107][T18929] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1287.731157][T18929] usb 1-1: config 0 has no interfaces? [ 1287.737277][T18929] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1287.751315][T18929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.777814][T18929] usb 1-1: config 0 descriptor?? [ 1288.033172][T10505] usb 1-1: USB disconnect, device number 91 [ 1288.880183][T18929] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1289.040143][T18929] usb 4-1: Using ep0 maxpacket: 8 [ 1289.054484][T18929] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1289.063289][T18929] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1289.075892][T18929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1289.097025][T18929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1289.111964][T18929] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1289.125113][T18929] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1289.134535][T18929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.353419][T18929] usb 4-1: usb_control_msg returned -32 [ 1289.362710][T18929] usbtmc 4-1:16.0: can't read capabilities [ 1289.714487][T20711] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1289.721821][T20711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3663'. [ 1289.735470][T20711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3663'. [ 1289.970304][T20726] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3667'. [ 1291.709067][T10505] usb 4-1: USB disconnect, device number 109 [ 1293.044807][T20763] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1293.664915][T20778] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1293.671500][T20778] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1293.701719][T20778] vhci_hcd vhci_hcd.0: Device attached [ 1293.980516][T18929] usb 42-1: SetAddress Request (2) to port 0 [ 1293.988480][T18929] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1294.574318][T20779] vhci_hcd: connection reset by peer [ 1294.584998][ T1155] vhci_hcd vhci_hcd.4: stop threads [ 1294.590439][ T1155] vhci_hcd vhci_hcd.4: release socket [ 1294.595915][ T1155] vhci_hcd vhci_hcd.4: disconnect device [ 1295.030160][T10515] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1295.247430][T10515] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1295.259139][T10515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1295.281049][T10515] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1295.304384][T10515] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1295.315341][T10515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.326339][T10515] usb 1-1: Product: syz [ 1295.330786][T10515] usb 1-1: Manufacturer: syz [ 1295.342117][T10515] usb 1-1: SerialNumber: syz [ 1295.381373][T10515] usb 1-1: config 0 descriptor?? [ 1295.387175][T20795] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1295.785500][T20795] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1298.005225][T20832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3687'. [ 1298.330360][T10515] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1298.490230][T10515] usb 3-1: Using ep0 maxpacket: 16 [ 1298.498826][T10515] usb 3-1: config 0 has no interfaces? [ 1298.511748][T10515] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1298.525368][T10515] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1298.540633][T10515] usb 3-1: Manufacturer: syz [ 1298.555251][T10515] usb 3-1: config 0 descriptor?? [ 1298.973882][T20847] batadv_slave_0: left promiscuous mode [ 1298.994600][T20847] batadv_slave_0: left allmulticast mode [ 1299.041527][T20847] syzkaller0: left promiscuous mode [ 1299.063256][T20847] syzkaller0: left allmulticast mode [ 1299.082501][T18929] usb 42-1: device descriptor read/8, error -110 [ 1299.175383][T10505] usb 1-1: USB disconnect, device number 92 [ 1299.471744][T18929] usb usb42-port1: attempt power cycle [ 1300.036224][T18929] usb usb42-port1: unable to enumerate USB device [ 1300.293576][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.300384][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.360348][T18929] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1300.544334][T18929] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.570083][T18929] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1300.596484][T18929] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1300.616005][T18929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.655374][T18929] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1300.696791][T18929] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1300.714643][T20693] udevd[20693]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1301.028860][T20872] netlink: 'syz.3.3697': attribute type 25 has an invalid length. [ 1301.103778][T20880] vhci_hcd vhci_hcd.0: port 0 already used [ 1301.137567][T20880] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 1301.144379][T20880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1301.183196][T20880] vhci_hcd vhci_hcd.0: Device attached [ 1301.199164][T20885] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 1301.205810][T20885] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1301.257775][T20880] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 1301.264426][T20880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1301.272790][T20880] vhci_hcd vhci_hcd.0: Device attached [ 1301.326290][T20880] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 1301.332930][T20880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1301.367282][T20892] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(22) [ 1301.373928][T20892] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1301.382084][T20885] vhci_hcd vhci_hcd.0: Device attached [ 1301.399069][T20880] vhci_hcd vhci_hcd.0: Device attached [ 1301.399181][T20892] vhci_hcd vhci_hcd.0: Device attached [ 1301.415463][T20885] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1301.452859][T20880] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1301.481631][T20880] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(26) [ 1301.488265][T20880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1301.496284][T20880] vhci_hcd vhci_hcd.0: Device attached [ 1301.521550][T20880] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1301.599826][T20895] vhci_hcd: connection closed [ 1301.600401][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1301.611119][ T12] vhci_hcd vhci_hcd.0: release socket [ 1301.616638][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1301.625286][T20893] vhci_hcd: connection closed [ 1301.625595][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1301.636493][T20890] vhci_hcd: connection closed [ 1301.636886][ T12] vhci_hcd vhci_hcd.0: release socket [ 1301.650762][T20888] vhci_hcd: connection closed [ 1301.652158][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1301.652353][T20886] vhci_hcd: connection closed [ 1301.664425][T20883] vhci_hcd: connection closed [ 1301.669321][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1301.684449][ T12] vhci_hcd vhci_hcd.0: release socket [ 1301.709695][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1301.718398][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1301.726232][ T12] vhci_hcd vhci_hcd.0: release socket [ 1301.735616][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1301.751223][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1301.757240][ T12] vhci_hcd vhci_hcd.0: release socket [ 1301.767072][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1301.778414][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1301.784713][ T12] vhci_hcd vhci_hcd.0: release socket [ 1301.804776][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1301.871952][T10505] usb 3-1: USB disconnect, device number 119 [ 1302.210746][T20904] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3700'. [ 1302.274703][T20907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3700'. [ 1302.726168][T20914] fuse: Bad value for 'fd' [ 1303.236629][T10505] usb 2-1: USB disconnect, device number 126 [ 1303.257457][T20866] delete_channel: no stack [ 1303.501663][T20925] macsec1: entered promiscuous mode [ 1303.506934][T20925] macvlan0: entered promiscuous mode [ 1303.563538][T20925] macvlan0: left promiscuous mode [ 1303.831205][T20934] support for the xor transformation has been removed. [ 1303.874462][T18929] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1304.082364][T18929] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.093428][T18929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1304.111999][T18929] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1304.150089][T18929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1304.160701][T18929] usb 1-1: SerialNumber: syz [ 1304.794073][T18929] usb 1-1: 0:2 : does not exist [ 1304.803480][T18929] usb 1-1: usbmixer: too many channels (61) in unit 5 [ 1304.876101][T18929] usb 1-1: USB disconnect, device number 93 [ 1305.045049][T20693] udevd[20693]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1305.649387][T20948] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1306.010472][T20964] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1306.893173][T20978] fuse: Bad value for 'fd' [ 1307.757047][T20981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'. [ 1308.319751][T20999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.350395][T20999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.634136][T21000] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1309.697750][T21008] tap0: tun_chr_ioctl cmd 1074025677 [ 1309.722497][T21008] tap0: linktype set to 825 [ 1310.219623][T21022] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1310.242276][T21019] netlink: 'syz.3.3724': attribute type 10 has an invalid length. [ 1310.289440][T21017] netlink: 'syz.3.3724': attribute type 10 has an invalid length. [ 1311.545596][T21035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.567120][T21035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.122309][T21083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3740'. [ 1315.391754][T21088] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1315.584535][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3741'. [ 1315.595994][T21091] netlink: 'syz.1.3741': attribute type 12 has an invalid length. [ 1315.640557][T21091] netlink: 'syz.1.3741': attribute type 13 has an invalid length. [ 1315.720238][T21095] input: syz1 as /devices/virtual/input/input58 [ 1315.959894][T21091] vxlan0: entered promiscuous mode [ 1316.108221][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1316.117145][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1316.130458][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1316.725015][T10519] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1316.750590][T10505] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1316.891714][T10519] usb 4-1: config 0 has no interfaces? [ 1316.897465][T10519] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1316.907134][T10519] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.938488][T10519] usb 4-1: config 0 descriptor?? [ 1316.956656][T10505] usb 2-1: config 0 has no interfaces? [ 1316.963218][T10505] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1316.976994][T10505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.985235][T20406] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1317.004005][T10505] usb 2-1: config 0 descriptor?? [ 1317.140202][T20406] usb 1-1: Using ep0 maxpacket: 16 [ 1317.155553][T10519] usb 4-1: USB disconnect, device number 110 [ 1317.245539][T20406] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1317.260308][T20406] usb 1-1: config 0 has no interface number 0 [ 1317.269671][T20406] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.287487][T10505] usb 2-1: USB disconnect, device number 127 [ 1317.297859][T20406] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.322105][T20406] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1317.340702][T20406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.353117][T20406] usb 1-1: config 0 descriptor?? [ 1317.433553][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1317.446470][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1317.455832][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.004752][T21123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3749'. [ 1318.118902][T20406] usbhid 1-1:0.1: can't add hid device: -71 [ 1318.148484][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3748'. [ 1318.157837][T20406] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 1318.207397][T20406] usb 1-1: USB disconnect, device number 94 [ 1318.220976][T21128] ip6gre1: entered allmulticast mode [ 1318.431171][T10505] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1318.611403][T10505] usb 4-1: Using ep0 maxpacket: 8 [ 1318.653805][T10505] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1318.664780][T10505] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1318.683842][T10505] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1318.700237][T10505] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1318.711475][T10505] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1318.730574][T10505] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1318.745807][T10505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.047065][T10505] usb 4-1: GET_CAPABILITIES returned 0 [ 1319.053009][T10505] usbtmc 4-1:16.0: can't read capabilities [ 1319.550117][T10505] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1319.783336][T10505] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1319.792785][T10505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.801666][T10505] usb 3-1: Product: syz [ 1319.810805][T10505] usb 3-1: Manufacturer: syz [ 1319.816484][T10505] usb 3-1: SerialNumber: syz [ 1319.864763][T10505] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1319.871309][T10505] r8152-cfgselector 3-1: config 0 descriptor?? [ 1320.434942][T21152] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1320.586716][T21155] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1321.323141][T10505] usb 4-1: USB disconnect, device number 111 [ 1321.703564][T21168] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3758'. [ 1322.799389][T10519] r8152-cfgselector 3-1: USB disconnect, device number 120 [ 1323.125531][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3763'. [ 1323.461201][T21198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3765'. [ 1324.947024][T21218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.988184][T21218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.470084][T10505] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1325.511067][T21226] F2FS-fs: Conflicting test_dummy_encryption options [ 1325.597417][T21231] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1325.604119][T21231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1325.643217][T10505] usb 4-1: config 0 has no interfaces? [ 1325.650513][T10505] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1325.665348][T21231] vhci_hcd vhci_hcd.0: Device attached [ 1325.670034][T10505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.682011][T21234] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 1325.688727][T21234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1325.702557][T10505] usb 4-1: config 0 descriptor?? [ 1325.740240][T21231] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 1325.746882][T21231] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1325.754817][T21234] vhci_hcd vhci_hcd.0: Device attached [ 1325.796065][T21231] vhci_hcd vhci_hcd.0: Device attached [ 1325.796320][T21234] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 1325.808158][T21234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1325.841988][T21234] vhci_hcd vhci_hcd.0: Device attached [ 1325.866947][T21231] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 1325.873562][T21231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1325.900312][T18929] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1325.922272][T21246] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(22) [ 1325.928932][T21246] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1325.950375][T21231] vhci_hcd vhci_hcd.0: Device attached [ 1325.980613][T10505] usb 4-1: USB disconnect, device number 112 [ 1326.007286][T21246] vhci_hcd vhci_hcd.0: Device attached [ 1326.036274][T21231] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1326.073840][T21234] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1326.109300][T21231] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(24) [ 1326.115950][T21231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1326.157325][T21231] vhci_hcd vhci_hcd.0: Device attached [ 1326.163940][T21234] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1326.251030][T21252] vhci_hcd: connection closed [ 1326.251358][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1326.251537][T21247] vhci_hcd: connection closed [ 1326.256205][ T36] vhci_hcd vhci_hcd.2: release socket [ 1326.262281][T21238] vhci_hcd: connection closed [ 1326.266084][T21244] vhci_hcd: connection closed [ 1326.280395][T21241] vhci_hcd: connection closed [ 1326.288231][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1326.299493][T21232] vhci_hcd: connection reset by peer [ 1326.305082][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1326.305609][T21235] vhci_hcd: connection closed [ 1326.311209][ T36] vhci_hcd vhci_hcd.2: release socket [ 1326.323711][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1326.329521][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1326.336360][ T36] vhci_hcd vhci_hcd.2: release socket [ 1326.345170][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1326.356834][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1326.362180][ T36] vhci_hcd vhci_hcd.2: release socket [ 1326.370512][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1326.380752][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1326.386048][ T36] vhci_hcd vhci_hcd.2: release socket [ 1326.397265][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1326.404233][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1326.409599][ T36] vhci_hcd vhci_hcd.2: release socket [ 1326.420924][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1326.427146][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1326.441011][ T36] vhci_hcd vhci_hcd.2: release socket [ 1326.449212][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1326.800136][T20406] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1327.066466][T20406] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1327.075666][T20406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.083778][T20406] usb 1-1: Product: syz [ 1327.098240][T20406] usb 1-1: Manufacturer: syz [ 1327.103214][T20406] usb 1-1: SerialNumber: syz [ 1327.202743][T20406] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1327.212805][T20406] r8152-cfgselector 1-1: config 0 descriptor?? [ 1327.470240][T14761] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1327.506764][T21274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.525766][T21274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.673610][T14761] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1327.683196][T14761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.695667][T14761] usb 3-1: Product: syz [ 1327.699898][T14761] usb 3-1: Manufacturer: syz [ 1327.708166][T14761] usb 3-1: SerialNumber: syz [ 1327.724065][T14761] usb 3-1: config 0 descriptor?? [ 1327.743412][T10519] r8152-cfgselector 1-1: USB disconnect, device number 95 [ 1327.911008][T10526] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1327.946357][T14761] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1329.037299][T21285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3781'. [ 1329.286706][T10526] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.297740][T10526] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1329.322534][T10526] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1329.334534][T10526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1329.351519][T10526] usb 2-1: SerialNumber: syz [ 1330.055720][T14761] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1330.094827][T14761] usb 3-1: USB disconnect, device number 121 [ 1331.070285][T18929] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1331.083683][T21290] netlink: 'syz.0.3782': attribute type 25 has an invalid length. [ 1331.172364][ T30] audit: type=1326 audit(1770684663.050:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21301 comm="syz.4.3786" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x0 [ 1331.370163][T14761] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1331.540644][T14761] usb 3-1: Using ep0 maxpacket: 16 [ 1331.558253][T14761] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1331.571580][T14761] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1331.586480][T14761] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1331.600259][T14761] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1331.617030][T14761] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1331.630682][T14761] usb 3-1: config 0 has no interface number 0 [ 1331.657554][T14761] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1331.689954][T14761] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1331.700157][T14761] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1331.710404][T14761] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1331.723756][T14761] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1331.730677][T14761] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1331.746216][T14761] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1331.756007][T14761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.765057][T14761] usb 3-1: Product: syz [ 1331.771602][T14761] usb 3-1: Manufacturer: syz [ 1331.786535][T14761] usb 3-1: SerialNumber: syz [ 1331.793609][T14761] usb 3-1: config 0 descriptor?? [ 1331.821857][T14761] usb 3-1: selecting invalid altsetting 2 [ 1331.836165][T21321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3790'. [ 1332.391469][T10505] usb usb38-port1: attempt power cycle [ 1332.478883][T10526] usb 2-1: 0:2 : does not exist [ 1332.504622][T10526] usb 2-1: USB disconnect, device number 2 [ 1332.684275][T21334] netlink: 392 bytes leftover after parsing attributes in process `syz.3.3793'. [ 1332.954896][T10505] usb usb38-port1: unable to enumerate USB device [ 1333.576678][T10505] usb 3-1: USB disconnect, device number 122 [ 1334.218484][T21355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.269335][T21355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.630393][T10505] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1334.800168][T10505] usb 1-1: Using ep0 maxpacket: 16 [ 1334.810124][T10505] usb 1-1: config 0 has no interfaces? [ 1334.817174][T10505] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1334.826500][T10505] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1334.836741][T10505] usb 1-1: Manufacturer: syz [ 1334.844161][T10505] usb 1-1: config 0 descriptor?? [ 1335.890400][T10505] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1336.062410][T10505] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.084696][T10505] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1336.116658][T10505] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1336.147933][T10505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.191498][T10505] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1336.267933][T10505] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1336.442136][T21386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3805'. [ 1336.704524][T21378] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1337.321683][T10526] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1337.609058][T10526] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1337.619181][T10526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.644487][T10526] usb 3-1: Product: syz [ 1337.648760][T10526] usb 3-1: Manufacturer: syz [ 1337.653625][T10526] usb 3-1: SerialNumber: syz [ 1337.689533][T10526] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1337.696406][T10526] r8152-cfgselector 3-1: config 0 descriptor?? [ 1338.062484][T10505] usb 1-1: USB disconnect, device number 96 [ 1338.215264][T14761] r8152-cfgselector 3-1: USB disconnect, device number 123 [ 1338.562350][T10505] usb 2-1: USB disconnect, device number 3 [ 1338.569175][T21373] delete_channel: no stack [ 1338.573729][T14761] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1338.750097][T14761] usb 4-1: Using ep0 maxpacket: 8 [ 1338.756764][T14761] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1338.783625][T14761] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1338.803606][T14761] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1338.890218][T14761] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1338.900371][T14761] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1338.913746][T14761] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1338.923469][T14761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.184939][T14761] usb 4-1: usb_control_msg returned -32 [ 1339.190802][T14761] usbtmc 4-1:16.0: can't read capabilities [ 1339.545767][T21422] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1339.680193][T10526] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1339.688024][T18929] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1339.840371][T18929] usb 1-1: Using ep0 maxpacket: 16 [ 1339.850280][T10526] usb 3-1: config 0 has no interfaces? [ 1339.858167][T10526] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1339.869791][T18929] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1339.879144][T18929] usb 1-1: config 0 has no interface number 0 [ 1339.888621][T10526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.897718][T18929] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1339.912072][T18929] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1339.922993][T10526] usb 3-1: config 0 descriptor?? [ 1339.947466][T18929] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1339.957696][T18929] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1339.968506][T18929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.980357][T18929] usb 1-1: Product: syz [ 1339.987120][T18929] usb 1-1: Manufacturer: syz [ 1339.993741][T18929] usb 1-1: SerialNumber: syz [ 1340.003150][T18929] usb 1-1: config 0 descriptor?? [ 1340.010600][T21421] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1340.020973][T21421] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1340.101426][T21424] vxlan0: left promiscuous mode [ 1340.108419][T21424] ip6gre1: left allmulticast mode [ 1340.157076][T10526] usb 3-1: USB disconnect, device number 124 [ 1340.383991][T21433] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1340.410676][T21433] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1340.466536][T21436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.508722][T21436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.849659][T18929] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -32 [ 1341.290656][T18929] usb 4-1: USB disconnect, device number 113 [ 1342.122461][T14761] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1342.176946][T21450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1342.315646][T21452] netlink: 'syz.1.3818': attribute type 10 has an invalid length. [ 1342.323675][T14761] usb 4-1: Using ep0 maxpacket: 16 [ 1342.343865][T21452] netlink: 'syz.1.3818': attribute type 10 has an invalid length. [ 1342.360829][T14761] usb 4-1: config 0 has no interfaces? [ 1342.396079][T14761] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1342.405359][T14761] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1342.413648][T14761] usb 4-1: Manufacturer: syz [ 1342.431576][T14761] usb 4-1: config 0 descriptor?? [ 1343.451285][T18929] usb 1-1: USB disconnect, device number 97 [ 1343.858914][T21432] delete_channel: no stack [ 1344.257125][T21476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3823'. [ 1344.272697][T21476] netlink: 'syz.4.3823': attribute type 12 has an invalid length. [ 1344.287828][T21476] netlink: 'syz.4.3823': attribute type 13 has an invalid length. [ 1344.355649][T21476] vxlan0: entered promiscuous mode [ 1344.405542][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.433841][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.446215][ T7167] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.670673][T14761] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1344.713331][T18929] usb 4-1: USB disconnect, device number 114 [ 1344.915073][T14761] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1344.929048][T14761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.939295][T14761] usb 3-1: Product: syz [ 1344.943893][T14761] usb 3-1: Manufacturer: syz [ 1344.948635][T14761] usb 3-1: SerialNumber: syz [ 1345.000608][T14761] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1345.009444][T14761] r8152-cfgselector 3-1: config 0 descriptor?? [ 1345.055409][T21483] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3825'. [ 1345.855255][T21496] delete_channel: no stack [ 1346.569051][ T30] audit: type=1326 audit(1770684678.440:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.3.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1346.610930][ T30] audit: type=1326 audit(1770684678.470:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.3.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1346.638254][ T30] audit: type=1326 audit(1770684678.480:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.3.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1346.670336][ T30] audit: type=1326 audit(1770684678.480:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.3.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1346.703624][ T30] audit: type=1326 audit(1770684678.480:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.3.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1346.729021][ T30] audit: type=1326 audit(1770684678.480:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.3.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf717572b code=0x7ffc0000 [ 1346.760308][ T30] audit: type=1326 audit(1770684678.480:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.3.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1346.782946][ T30] audit: type=1326 audit(1770684678.480:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.3.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1346.805688][ T30] audit: type=1326 audit(1770684678.480:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.3.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1346.838040][ T30] audit: type=1326 audit(1770684678.480:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.3.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1347.282127][T14761] r8152-cfgselector 3-1: USB disconnect, device number 125 [ 1347.902423][T21524] fuse: Bad value for 'fd' [ 1348.153255][T21526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1349.686455][T21536] syz.4.3836 (21536): drop_caches: 2 [ 1349.880329][T14761] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1350.050159][T14761] usb 4-1: Using ep0 maxpacket: 16 [ 1350.057867][T14761] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1350.074069][T14761] usb 4-1: config 0 has no interface number 0 [ 1350.082775][T14761] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1350.097158][T14761] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.115912][T14761] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1350.133272][T14761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.155679][T14761] usb 4-1: config 0 descriptor?? [ 1350.242862][T21552] hsr1: left allmulticast mode [ 1350.273194][T21552] veth1_to_team: left allmulticast mode [ 1350.297367][T21552] bridge0: left allmulticast mode [ 1350.392863][T21552] vxlan0: left promiscuous mode [ 1350.408435][ T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.417726][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.428600][ T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.638043][T21548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3839'. [ 1350.701655][T21548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3839'. [ 1350.731820][T21548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3839'. [ 1350.824437][T14761] usbhid 4-1:0.1: can't add hid device: -71 [ 1350.830617][T14761] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 1350.850207][T14761] usb 4-1: USB disconnect, device number 115 [ 1351.717588][T21581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3849'. [ 1351.741769][T21579] delete_channel: no stack [ 1353.209290][T21592] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1353.650595][T21596] ALSA: mixer_oss: invalid OSS volume '' [ 1353.983709][T21601] syz.1.3852 (21601): drop_caches: 2 [ 1354.815571][T21614] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1354.822107][T21614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1354.913876][T21614] vhci_hcd vhci_hcd.0: Device attached [ 1355.144158][T21615] vhci_hcd: connection closed [ 1355.144402][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1355.154590][T19586] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1355.164294][ T12] vhci_hcd vhci_hcd.4: release socket [ 1355.180783][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1355.318571][T21621] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1356.040209][T10505] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1356.056727][T21636] sit2: entered allmulticast mode [ 1356.200287][T10505] usb 1-1: Using ep0 maxpacket: 8 [ 1356.208133][T10505] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1356.217251][T10505] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1356.228703][T10505] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1356.241108][T10505] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1356.269748][T10505] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1356.286132][T10505] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1356.295670][T10505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.565046][T10505] usb 1-1: usb_control_msg returned -32 [ 1356.583615][T10505] usbtmc 1-1:16.0: can't read capabilities [ 1356.637531][T21643] ip6t_REJECT: ECHOREPLY is not supported [ 1356.781256][T21645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3863'. [ 1357.000388][T21647] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1357.017817][T21647] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3862'. [ 1357.351084][T10505] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1357.534154][T10505] usb 4-1: config 0 has no interfaces? [ 1357.547766][T10505] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1357.558360][T10505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.570559][T10505] usb 4-1: Product: syz [ 1357.583619][T10505] usb 4-1: Manufacturer: syz [ 1357.588275][T10505] usb 4-1: SerialNumber: syz [ 1357.598211][T10505] usb 4-1: config 0 descriptor?? [ 1357.991008][T18929] usb 4-1: USB disconnect, device number 116 [ 1358.516854][T21672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3869'. [ 1358.788760][T18929] usb 1-1: USB disconnect, device number 98 [ 1358.899949][T21677] syz.3.3870 (21677): drop_caches: 2 [ 1360.280164][T19586] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1360.516472][T21700] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3875'. [ 1360.984896][T21704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.019076][T21704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.140177][T18929] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1361.733441][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.743912][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.130242][T21722] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1362.156410][T21719] input: syz0 as /devices/virtual/input/input60 [ 1362.206456][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3877'. [ 1362.595764][T21729] PKCS7: Unknown OID: [5] (bad) [ 1362.647961][T21729] PKCS7: Only support pkcs7_signedData type [ 1363.327628][T21738] usb usb8: usbfs: process 21738 (syz.2.3884) did not claim interface 0 before use [ 1363.690261][T10505] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1363.854584][T10505] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1363.870163][T10505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.878422][T10505] usb 1-1: Product: syz [ 1363.889755][T10505] usb 1-1: Manufacturer: syz [ 1363.914417][T10505] usb 1-1: SerialNumber: syz [ 1363.923497][T10505] usb 1-1: config 0 descriptor?? [ 1363.982052][T21750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3886'. [ 1364.196813][T10505] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1364.390168][T20406] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1364.647495][T20406] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.667417][T20406] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1364.693879][T20406] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1364.710494][T20406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.744662][T20406] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1364.805238][T20406] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1365.061057][T21760] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3889'. [ 1365.760137][T20406] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1365.831112][T21765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.840547][T21765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.863547][T21765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.890722][T21765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.942406][T20406] usb 2-1: config 0 has no interfaces? [ 1365.948145][T20406] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1365.957413][T20406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.978111][T20406] usb 2-1: config 0 descriptor?? [ 1366.202286][T20406] usb 2-1: USB disconnect, device number 4 [ 1366.432240][T21769] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3892'. [ 1366.473179][T10505] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1366.489336][T10505] usb 1-1: USB disconnect, device number 99 [ 1367.054433][T18929] usb 4-1: USB disconnect, device number 117 [ 1367.074565][T21743] delete_channel: no stack [ 1367.300323][T21779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3895'. [ 1367.380419][T10526] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1367.393331][T21779] netlink: 'syz.3.3895': attribute type 10 has an invalid length. [ 1367.637174][T10526] usb 1-1: Using ep0 maxpacket: 8 [ 1367.644762][T10526] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 1367.654413][T10526] usb 1-1: config 0 has no interface number 0 [ 1367.665652][T10526] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1367.679465][T10526] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1367.696112][T10526] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1367.712904][T10526] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1367.734380][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1367.734394][ T30] audit: type=1326 audit(1770684699.610:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1367.773375][ T30] audit: type=1326 audit(1770684699.640:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1367.803824][T10526] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1367.814069][T10526] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.824922][T10526] usb 1-1: Product: syz [ 1367.829121][T10526] usb 1-1: Manufacturer: syz [ 1367.834775][ T30] audit: type=1326 audit(1770684699.640:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1367.857036][T10526] usb 1-1: SerialNumber: syz [ 1367.863797][T10526] usb 1-1: config 0 descriptor?? [ 1367.869392][ T30] audit: type=1326 audit(1770684699.640:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1367.923918][ T30] audit: type=1326 audit(1770684699.640:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1367.961088][ T30] audit: type=1326 audit(1770684699.640:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1367.994249][ T30] audit: type=1326 audit(1770684699.640:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1368.033991][ T30] audit: type=1326 audit(1770684699.640:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1368.080102][ T30] audit: type=1326 audit(1770684699.640:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1368.138128][ T30] audit: type=1326 audit(1770684699.640:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21781 comm="syz.2.3896" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 1368.178814][T21779] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1368.275035][T21789] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1368.340746][T10526] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1 [ 1368.359936][T10526] usb 1-1: USB disconnect, device number 100 [ 1370.341076][T21819] input: syz0 as /devices/virtual/input/input61 [ 1371.761097][T20406] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1371.855281][T21835] program syz.0.3906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1371.940180][T20406] usb 3-1: Using ep0 maxpacket: 8 [ 1371.950188][T20406] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1371.959390][T20406] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1371.980097][T20406] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1372.000104][T20406] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1372.051124][T20406] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1372.163599][T20406] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1372.252313][T20406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.522678][T20406] usb 3-1: usb_control_msg returned -32 [ 1372.532669][T20406] usbtmc 3-1:16.0: can't read capabilities [ 1372.880290][T21850] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1372.984805][T21849] delete_channel: no stack [ 1374.496203][T19586] usb 3-1: USB disconnect, device number 127 [ 1375.100719][T19586] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1375.265605][T19586] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1375.273039][T19586] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1375.282931][T19586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.293955][T19586] usb 1-1: config 0 descriptor?? [ 1375.831313][T19586] arvo 0003:1E7D:30D4.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 1377.828849][T19586] usb 1-1: USB disconnect, device number 101 [ 1377.933151][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1377.933169][ T30] audit: type=1326 audit(1770684709.810:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21909 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1377.968191][ T30] audit: type=1326 audit(1770684709.840:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21909 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1378.004525][ T30] audit: type=1326 audit(1770684709.840:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21909 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1378.040193][ T30] audit: type=1326 audit(1770684709.840:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21909 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1378.072252][ T30] audit: type=1326 audit(1770684709.840:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21909 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1378.111098][ T30] audit: type=1326 audit(1770684709.840:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21909 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71c572b code=0x7ffc0000 [ 1378.202339][ T30] audit: type=1326 audit(1770684710.060:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21909 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1378.232380][ T30] audit: type=1326 audit(1770684710.100:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21909 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1378.389689][ T30] audit: type=1326 audit(1770684710.260:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21909 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1378.430365][ T30] audit: type=1326 audit(1770684710.300:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21909 comm="syz.1.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1378.924258][T21923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3924'. [ 1379.108989][T21926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.180409][T21926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.255338][T21926] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1379.388200][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3923'. [ 1379.410661][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3923'. [ 1379.477590][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3923'. [ 1381.319335][T21956] bridge3: entered promiscuous mode [ 1381.650091][T20406] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1381.815926][T20406] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1381.826390][T20406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.843154][T20406] usb 3-1: Product: syz [ 1381.850117][T20406] usb 3-1: Manufacturer: syz [ 1381.871409][T20406] usb 3-1: SerialNumber: syz [ 1381.883056][T20406] usb 3-1: config 0 descriptor?? [ 1381.917109][T21973] pimreg: entered allmulticast mode [ 1382.105839][T20406] hso 3-1:0.0: Failed to find INT IN ep [ 1382.115870][T20406] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1383.378116][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1383.378133][ T30] audit: type=1326 audit(1770684715.250:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21981 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1383.417915][ T30] audit: type=1326 audit(1770684715.290:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21981 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1383.450138][ T30] audit: type=1326 audit(1770684715.290:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21981 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1383.480473][ T30] audit: type=1326 audit(1770684715.290:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21981 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1383.510456][ T30] audit: type=1326 audit(1770684715.290:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21981 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1383.542022][T21985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.550706][ T30] audit: type=1326 audit(1770684715.320:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21981 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1383.580296][ T30] audit: type=1326 audit(1770684715.360:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21981 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1383.611386][T21985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.620928][ T30] audit: type=1326 audit(1770684715.360:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21981 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1383.646043][T21985] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1383.652981][ T30] audit: type=1326 audit(1770684715.360:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21981 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1383.661219][T21985] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3939'. [ 1383.675616][ T30] audit: type=1326 audit(1770684715.360:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21981 comm="syz.3.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1383.917983][T21992] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3940'. [ 1384.490162][T10526] usb 3-1: USB disconnect, device number 2 [ 1384.910115][T10526] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1385.089130][T10526] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1385.111308][T10526] usb 3-1: not running at top speed; connect to a high speed hub [ 1385.139199][T10526] usb 3-1: config 56 has an invalid interface number: 216 but max is 0 [ 1385.150720][T10526] usb 3-1: config 56 has no interface number 0 [ 1385.158250][T10526] usb 3-1: config 56 interface 216 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 1385.170127][T10526] usb 3-1: config 56 interface 216 has no altsetting 0 [ 1385.191995][T10526] usb 3-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 1385.203100][T10526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.216533][T10526] usb 3-1: Product: syz [ 1385.220933][T10526] usb 3-1: Manufacturer: syz [ 1385.225677][T10526] usb 3-1: SerialNumber: syz [ 1385.233634][T22003] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1385.595543][T22015] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1385.659084][T22014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3945'. [ 1387.280101][T20406] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1387.461747][T20406] usb 1-1: config 0 has no interfaces? [ 1387.468489][T20406] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1387.489022][T20406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.566641][T20406] usb 1-1: config 0 descriptor?? [ 1387.806018][T10505] usb 1-1: USB disconnect, device number 102 [ 1387.850130][T20406] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1388.018559][T20406] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1388.030141][T20406] usb 4-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1388.043970][T20406] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1388.056735][T20406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.132272][T20406] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1388.142168][T20406] usb 4-1: invalid MIDI out EP 0 [ 1388.295098][T20406] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1388.501842][T10526] hub 3-1:56.216: bad descriptor, ignoring hub [ 1388.515485][T10526] hub 3-1:56.216: probe with driver hub failed with error -5 [ 1388.534086][T10526] option 3-1:56.216: GSM modem (1-port) converter detected [ 1388.581500][T10526] usb 3-1: USB disconnect, device number 3 [ 1388.599152][T10526] option 3-1:56.216: device disconnected [ 1389.280239][T20406] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1389.939707][T20406] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.002203][T20406] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1390.101946][T20406] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1390.111146][T20406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1390.119191][T20406] usb 3-1: SerialNumber: syz [ 1390.730266][T10505] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1390.860294][T10505] usb 1-1: device descriptor read/64, error -71 [ 1391.053062][T22076] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3954'. [ 1391.121259][T10505] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1391.308935][T10505] usb 1-1: device descriptor read/64, error -71 [ 1391.421017][T10505] usb usb1-port1: attempt power cycle [ 1391.506157][T10526] usb 4-1: USB disconnect, device number 118 [ 1391.780267][T10505] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1391.799451][T20406] usb 3-1: 0:2 : does not exist [ 1391.806833][T10505] usb 1-1: device descriptor read/8, error -71 [ 1391.838510][T20406] usb 3-1: USB disconnect, device number 4 [ 1392.051654][T10505] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1392.085543][T10505] usb 1-1: device descriptor read/8, error -71 [ 1392.210151][T10505] usb usb1-port1: unable to enumerate USB device [ 1393.955163][T22112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3963'. [ 1394.038723][T22113] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3961'. [ 1394.293382][T10505] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1394.482135][T10505] usb 3-1: Using ep0 maxpacket: 8 [ 1394.496763][T10505] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1394.560576][T10505] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1394.579684][T10505] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1394.590318][T10505] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1394.600592][T10505] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1394.613923][T10505] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1394.630154][T10505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.670120][T19586] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1394.830816][T19586] usb 4-1: device descriptor read/64, error -71 [ 1394.890979][T10505] usb 3-1: GET_CAPABILITIES returned 0 [ 1394.900177][T10505] usbtmc 3-1:16.0: can't read capabilities [ 1395.151962][T19586] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1395.313608][T19586] usb 4-1: device descriptor read/64, error -71 [ 1395.440225][T19586] usb usb4-port1: attempt power cycle [ 1395.460238][T22122] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1395.586227][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3964'. [ 1395.820128][T19586] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1395.850917][T19586] usb 4-1: device descriptor read/8, error -71 [ 1396.090139][T19586] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1396.111042][T19586] usb 4-1: device descriptor read/8, error -71 [ 1396.220522][T19586] usb usb4-port1: unable to enumerate USB device [ 1396.594734][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3965'. [ 1396.749626][T18929] usb 3-1: USB disconnect, device number 5 [ 1396.850593][T19586] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1397.023223][T22148] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3969'. [ 1397.083851][T19586] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1397.110167][T19586] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1397.125975][T19586] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1397.140233][T19586] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1397.148522][T19586] usb 2-1: Product: syz [ 1397.154313][T19586] usb 2-1: Manufacturer: syz [ 1397.164445][T19586] usb 2-1: SerialNumber: syz [ 1397.185316][T19586] usb 2-1: config 0 descriptor?? [ 1397.191098][T22138] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1397.230991][T19586] usb 2-1: selecting invalid altsetting 0 [ 1398.660087][T10505] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1398.853092][T10505] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1398.870574][T10505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1398.889485][T10505] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1398.905846][T10505] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1398.919119][T10505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.928935][T10505] usb 3-1: Product: syz [ 1398.937133][T10505] usb 3-1: Manufacturer: syz [ 1398.943673][T10505] usb 3-1: SerialNumber: syz [ 1398.958207][T10505] usb 3-1: config 0 descriptor?? [ 1398.969914][T22161] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1399.208019][T22161] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1399.394865][T22169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.423235][T22169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.563075][T19586] usb 2-1: USB disconnect, device number 5 [ 1400.244688][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1400.244704][ T30] audit: type=1326 audit(1770684732.120:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22176 comm="syz.3.3978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1400.308346][ T30] audit: type=1326 audit(1770684732.120:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22176 comm="syz.3.3978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1400.343826][ T30] audit: type=1326 audit(1770684732.120:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22176 comm="syz.3.3978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1400.366978][ T30] audit: type=1326 audit(1770684732.120:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22176 comm="syz.3.3978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1400.416141][ T30] audit: type=1326 audit(1770684732.240:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22176 comm="syz.3.3978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1400.450423][ T30] audit: type=1326 audit(1770684732.240:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22176 comm="syz.3.3978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1400.490179][ T30] audit: type=1326 audit(1770684732.240:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22176 comm="syz.3.3978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1400.514497][ T30] audit: type=1326 audit(1770684732.240:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22176 comm="syz.3.3978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf717572b code=0x7ffc0000 [ 1400.540325][ T30] audit: type=1326 audit(1770684732.240:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22176 comm="syz.3.3978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1400.575162][ T30] audit: type=1326 audit(1770684732.240:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22176 comm="syz.3.3978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1400.854664][T22182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3979'. [ 1401.300107][T10505] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1401.471951][T10505] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.488829][T10505] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1401.524018][T10505] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1401.537826][T10505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.575509][T10505] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1401.622884][T10505] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1402.049377][T10505] usb 3-1: USB disconnect, device number 6 [ 1402.580712][T22212] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3984'. [ 1402.917391][T22216] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1403.018046][T22214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3983'. [ 1404.257694][T22230] tipc: Enabling of bearer rejected, failed to enable media [ 1404.494326][T19586] usb 1-1: USB disconnect, device number 107 [ 1404.519488][T22191] delete_channel: no stack [ 1404.940153][T10526] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1405.101484][T10526] usb 1-1: config 0 has no interfaces? [ 1405.110184][T10526] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1405.124810][T10526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.145235][T10526] usb 1-1: config 0 descriptor?? [ 1405.366494][T10526] usb 1-1: USB disconnect, device number 108 [ 1406.570195][T19586] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1406.737130][T19586] usb 2-1: Using ep0 maxpacket: 32 [ 1406.744065][T19586] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1406.757449][T19586] usb 2-1: config 0 has no interface number 0 [ 1406.765776][T19586] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1406.775073][T19586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.783547][T19586] usb 2-1: Product: syz [ 1406.790702][T19586] usb 2-1: Manufacturer: syz [ 1406.798115][T19586] usb 2-1: SerialNumber: syz [ 1406.816293][T19586] usb 2-1: config 0 descriptor?? [ 1406.825622][T19586] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1407.018688][T22266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.060821][T19586] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1407.084476][T19586] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1407.099939][T22266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.758146][T22274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3999'. [ 1408.063725][T22282] program syz.4.4001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1409.180899][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1409.188838][T19586] usb 2-1: USB disconnect, device number 6 [ 1409.197289][T19586] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1409.219747][T19586] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1409.233176][T19586] quatech2 2-1:0.51: device disconnected [ 1409.360198][T10526] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1409.521289][T10526] usb 4-1: Using ep0 maxpacket: 8 [ 1409.532847][T10526] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1409.542763][T10526] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1409.555650][T10526] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1409.569491][T10526] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1409.594795][T10526] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1409.608660][T10526] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1409.618079][T10526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.660321][T19586] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1409.719859][T10505] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 1409.732124][T10505] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 1409.739633][T10505] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 1409.749145][T10505] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 1409.756838][T10505] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 1409.769830][T10505] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 1409.777450][T10505] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 1409.793039][T10505] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 1409.807529][T10505] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 1409.817578][T10505] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 1409.827022][T19586] usb 2-1: config 0 has no interfaces? [ 1409.838813][T10526] usb 4-1: usb_control_msg returned -32 [ 1409.845969][T19586] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1409.858202][T10526] usbtmc 4-1:16.0: can't read capabilities [ 1409.867899][T10505] hid-generic 0006:0004:0009.0025: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1409.879560][T19586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.922992][T19586] usb 2-1: config 0 descriptor?? [ 1409.994531][T22301] fido_id[22301]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1410.135908][T10505] usb 2-1: USB disconnect, device number 7 [ 1410.178790][T22304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4007'. [ 1410.233973][T22306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4007'. [ 1410.239478][T22305] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1410.260775][T22305] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4004'. [ 1410.444073][T22310] sctp: [Deprecated]: syz.0.4009 (pid 22310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1410.444073][T22310] Use struct sctp_sack_info instead [ 1410.638229][T22313] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1411.365230][T22314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4009'. [ 1412.117712][T10526] usb 4-1: USB disconnect, device number 123 [ 1412.270127][T10505] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1412.336630][T22339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4015'. [ 1412.440085][T10505] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.451426][T10505] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1412.464258][T10505] usb 1-1: New USB device found, idVendor=0cf3, idProduct=0475, bcdDevice=1a.00 [ 1412.476890][T10505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.488759][T10505] usb 1-1: config 0 descriptor?? [ 1412.764423][T22331] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3394018074 (6788036148 ns) > initial count (6222627426 ns). Using initial count to start timer. [ 1412.827103][T10526] usb 1-1: USB disconnect, device number 109 [ 1413.682686][T22362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4020'. [ 1415.465867][T22384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.523543][T22384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.526911][T22397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4027'. [ 1416.720211][T19586] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1416.908764][T22405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4029'. [ 1416.954236][T19586] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1416.963665][T19586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.981787][T19586] usb 4-1: Product: syz [ 1416.989006][T19586] usb 4-1: Manufacturer: syz [ 1416.999612][T19586] usb 4-1: SerialNumber: syz [ 1417.011211][T22408] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1417.041861][T19586] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1417.048139][T19586] r8152-cfgselector 4-1: config 0 descriptor?? [ 1418.630173][T10505] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1418.740172][T19586] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1418.782130][T10505] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 1418.791768][T10505] usb 3-1: config 0 has no interface number 0 [ 1418.800614][T10505] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=ff.d1 [ 1418.810094][T10505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.821909][T10505] usb 3-1: Product: syz [ 1418.826123][T10505] usb 3-1: Manufacturer: syz [ 1418.838947][T10505] usb 3-1: SerialNumber: syz [ 1418.857232][T10505] usb 3-1: config 0 descriptor?? [ 1418.874418][T10505] usb_ehset_test 3-1:0.244: probe with driver usb_ehset_test failed with error -32 [ 1418.922067][T19586] usb 2-1: config 0 has no interfaces? [ 1418.927650][T19586] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1418.936946][T19586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.947935][T19586] usb 2-1: config 0 descriptor?? [ 1419.165168][T10505] usb 2-1: USB disconnect, device number 8 [ 1419.399332][T19586] r8152-cfgselector 4-1: USB disconnect, device number 124 [ 1419.600591][T10526] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1419.753217][T10526] usb 1-1: config 0 has no interfaces? [ 1419.760377][T10526] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1419.775369][T10526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.793333][T10526] usb 1-1: config 0 descriptor?? [ 1420.019934][T10505] usb 1-1: USB disconnect, device number 110 [ 1421.447839][T22454] : renamed from bridge_slave_0 [ 1421.603432][T22456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4042'. [ 1422.105599][T10526] usb 3-1: USB disconnect, device number 7 [ 1422.751197][T18929] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1423.173053][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.179485][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.496864][T18929] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1423.510222][T18929] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1423.523473][T18929] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1423.543689][T18929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.610649][T22468] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1423.623398][T18929] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1423.730335][T10526] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1423.900122][T10526] usb 4-1: Using ep0 maxpacket: 8 [ 1423.908959][T10526] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1423.918896][T10526] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1423.929295][T10526] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1423.948868][T10526] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1423.967824][T10526] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1423.991796][T10526] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1424.014991][T10526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.132060][T22487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.158020][T22487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.248706][T10526] usb 4-1: usb_control_msg returned -32 [ 1424.254598][T10526] usbtmc 4-1:16.0: can't read capabilities [ 1424.466786][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1424.466804][ T30] audit: type=1326 audit(1770684756.330:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22461 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1424.504782][ T30] audit: type=1326 audit(1770684756.370:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22461 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1424.540603][ T30] audit: type=1326 audit(1770684756.370:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22461 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1424.581324][ T30] audit: type=1326 audit(1770684756.440:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22461 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1424.606461][ T30] audit: type=1326 audit(1770684756.440:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22461 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1424.671212][T10505] usb 1-1: USB disconnect, device number 111 [ 1424.704955][ T30] audit: type=1326 audit(1770684756.440:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22461 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1424.730975][ T30] audit: type=1326 audit(1770684756.500:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22461 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1424.754221][ T30] audit: type=1326 audit(1770684756.510:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22461 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1424.776694][T22488] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1424.785915][ T30] audit: type=1326 audit(1770684756.510:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22461 comm="syz.0.4045" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1424.792988][T22489] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4048'. [ 1425.300082][T10505] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1425.465046][T10505] usb 2-1: config 0 has no interfaces? [ 1425.470249][T18929] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1425.487907][T10505] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1425.502711][T10505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.518637][T10505] usb 2-1: config 0 descriptor?? [ 1425.642348][T18929] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.660518][T18929] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1425.673964][T18929] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1425.683581][T18929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.705533][T18929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1425.769884][T10505] usb 2-1: USB disconnect, device number 9 [ 1425.782124][T18929] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1426.016910][T22509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.050233][T22509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.133976][T22509] pimreg: left allmulticast mode [ 1426.434317][T10505] usb 4-1: USB disconnect, device number 125 [ 1426.515835][T22518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4053'. [ 1428.049546][T22535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4057'. [ 1428.113794][T22536] fuse: Unknown parameter 'group_i00000000000000000000' [ 1428.545051][T22535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4057'. [ 1428.751232][T22535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4057'. [ 1429.378231][T22544] bond0: entered promiscuous mode [ 1429.383640][T22544] bond_slave_0: entered promiscuous mode [ 1429.389623][T22544] bond_slave_1: entered promiscuous mode [ 1429.398359][T22544] batadv0: entered promiscuous mode [ 1429.405725][T22544] debugfs: 'hsr1' already exists in 'hsr' [ 1429.414934][T22544] Cannot create hsr debugfs directory [ 1429.422323][T22544] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1429.433371][T22544] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1429.444139][T22544] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1429.458244][T22549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.475863][T18929] usb 3-1: USB disconnect, device number 8 [ 1429.938014][T22556] usb usb8: usbfs: process 22556 (syz.3.4063) did not claim interface 0 before use [ 1430.092878][T22501] delete_channel: no stack [ 1431.110183][T10526] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1431.301938][T10526] usb 2-1: config 0 has no interfaces? [ 1431.307531][T10526] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1431.317739][T10526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.334703][T10526] usb 2-1: config 0 descriptor?? [ 1431.557636][T10526] usb 2-1: USB disconnect, device number 10 [ 1431.600091][T10505] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1431.760195][T10505] usb 4-1: Using ep0 maxpacket: 8 [ 1431.767776][T10505] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1431.776909][T10505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1431.788150][T10505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1431.800038][T10505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1431.812369][T10505] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1431.830232][T10505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1431.839910][T10505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1431.852249][T10505] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1431.868209][T10505] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1431.881280][T10505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.889566][T10505] usb 4-1: Product: syz [ 1431.893834][T10505] usb 4-1: Manufacturer: syz [ 1431.898524][T10505] usb 4-1: SerialNumber: syz [ 1431.915508][T10505] usb 4-1: config 0 descriptor?? [ 1431.921620][T22573] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1431.929137][T22573] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1431.982617][T10505] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1432.932252][T22598] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1434.141653][T22617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4075'. [ 1434.402332][T10505] usb 4-1: USB disconnect, device number 126 [ 1434.754159][T22621] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1434.810267][T22621] only policy match revision 0 supported [ 1434.810288][T22621] unable to load match [ 1434.880904][T22621] syzkaller0: entered promiscuous mode [ 1434.895382][T22621] syzkaller0: entered allmulticast mode [ 1435.282787][T22632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.335952][T22632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.392402][T22633] netlink: 'syz.2.4078': attribute type 2 has an invalid length. [ 1435.422598][T22632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4079'. [ 1435.468078][T22633] !: entered promiscuous mode [ 1435.519522][T22633] netlink: 'syz.2.4078': attribute type 2 has an invalid length. [ 1435.534195][T22633] !: left promiscuous mode [ 1436.137051][T22645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.179888][T22645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.230169][T22645] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1436.266778][T22645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4082'. [ 1436.300974][T22645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4082'. [ 1436.481728][T22646] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4081'. [ 1437.016050][T22659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.081347][T22659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.473307][T22679] block device autoloading is deprecated and will be removed. [ 1438.847271][T22683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4090'. [ 1438.986450][T22683] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1439.078339][T22684] ip6gre2: entered allmulticast mode [ 1439.108739][T22684] ip6gre2: entered promiscuous mode [ 1439.123792][T22684] team0: Device ip6gre2 is of different type [ 1439.132779][T22687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.143817][T22687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.450163][T10505] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1439.601959][T10505] usb 1-1: config 0 has no interfaces? [ 1439.607878][T10505] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1439.618714][T10505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.630781][T10505] usb 1-1: config 0 descriptor?? [ 1439.770168][T20406] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1439.847508][T18929] usb 1-1: USB disconnect, device number 112 [ 1439.920314][T20406] usb 2-1: Using ep0 maxpacket: 8 [ 1439.927224][T20406] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1439.942240][T20406] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1439.957700][T20406] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1439.974045][T20406] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1439.990121][T20406] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1440.010169][T20406] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1440.028425][T20406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.152373][T22705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.215371][T22705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.265515][T20406] usb 2-1: usb_control_msg returned -32 [ 1440.285377][T20406] usbtmc 2-1:16.0: can't read capabilities [ 1440.540205][T20406] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1440.643896][T22716] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1440.666627][T22716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1440.695301][T22716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1440.803923][T20406] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1440.823130][T20406] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1440.839301][T20406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.864013][T20406] usb 3-1: config 0 descriptor?? [ 1441.407391][T20406] waltop 0003:172F:0037.0026: collection stack underflow [ 1441.419422][T20406] waltop 0003:172F:0037.0026: item 0 1 0 12 parsing failed [ 1441.429669][T20406] waltop 0003:172F:0037.0026: probe with driver waltop failed with error -22 [ 1441.798121][T22710] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 1441.808565][T22725] tipc: Enabling of bearer rejected, already enabled [ 1442.140242][T10526] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 1442.311864][T10526] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1442.324115][T10526] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1442.339203][T10526] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1442.355902][T10526] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1442.365711][T10526] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1442.376018][T10526] usb 1-1: Product: syz [ 1442.381727][T10526] usb 1-1: Manufacturer: syz [ 1442.387765][T10526] usb 1-1: SerialNumber: syz [ 1442.402590][T10526] usb 1-1: config 0 descriptor?? [ 1442.415022][T10526] usb 1-1: selecting invalid altsetting 0 [ 1442.480209][T18929] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 1442.575163][T10526] usb 2-1: USB disconnect, device number 11 [ 1442.633241][T18929] usb 4-1: not running at top speed; connect to a high speed hub [ 1442.644999][T18929] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1442.655403][T18929] usb 4-1: config 1 has no interface number 1 [ 1442.665527][T22727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.676589][T18929] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1442.707760][T18929] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1442.718557][T18929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.728220][T18929] usb 4-1: Product: syz [ 1442.734543][T22727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.742926][T18929] usb 4-1: Manufacturer: syz [ 1442.748630][T18929] usb 4-1: SerialNumber: syz [ 1442.787807][T19586] usb 1-1: USB disconnect, device number 113 [ 1443.012112][T18929] usb 4-1: failed to enable PITCH for EP 0x82 [ 1443.062072][T18929] usb 4-1: USB disconnect, device number 127 [ 1443.140663][T20641] udevd[20641]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1443.234388][T20406] usb 3-1: USB disconnect, device number 9 [ 1443.950899][T22749] bridge0: entered allmulticast mode [ 1443.974993][T22749] bridge_slave_1: left allmulticast mode [ 1443.992268][T22749] bridge_slave_1: left promiscuous mode [ 1444.007252][T22749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.036577][T22749] bridge_slave_0: left allmulticast mode [ 1444.063640][T22749] bridge_slave_0: left promiscuous mode [ 1444.086420][T22749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.810465][T19586] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1444.972386][T19586] usb 1-1: config 0 has no interfaces? [ 1444.979838][T19586] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1444.989288][T19586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.011372][T19586] usb 1-1: config 0 descriptor?? [ 1445.240021][T20406] usb 1-1: USB disconnect, device number 114 [ 1446.140119][T19586] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1446.294934][T19586] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1446.308089][T19586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.321413][T19586] usb 1-1: Product: syz [ 1446.325647][T19586] usb 1-1: Manufacturer: syz [ 1446.331929][T19586] usb 1-1: SerialNumber: syz [ 1446.344169][T19586] usb 1-1: config 0 descriptor?? [ 1446.505506][T22785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.543484][T22785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.713748][T19586] usb 1-1: USB disconnect, device number 115 [ 1447.860092][T20406] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1448.030074][T20406] usb 3-1: Using ep0 maxpacket: 16 [ 1448.038668][T20406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.055226][T20406] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1448.069648][T20406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.087961][T20406] usb 3-1: config 0 descriptor?? [ 1448.737964][T18929] usb 3-1: USB disconnect, device number 10 [ 1449.481244][T18929] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1449.646009][T18929] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.656924][T18929] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1449.673804][T18929] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1449.683116][T18929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.719217][T18929] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1449.777710][T18929] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1449.870178][T20406] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1450.033780][T20406] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1450.048974][T20406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.061626][T20406] usb 3-1: Product: syz [ 1450.065859][T20406] usb 3-1: Manufacturer: syz [ 1450.071791][T20406] usb 3-1: SerialNumber: syz [ 1450.088181][T20406] usb 3-1: config 0 descriptor?? [ 1450.368096][T20406] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1452.080171][T10505] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1452.242375][T10505] usb 4-1: config 0 has no interfaces? [ 1452.248141][T10505] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1452.258158][T10505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.268473][T10505] usb 4-1: config 0 descriptor?? [ 1452.413336][T20406] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1452.430822][T20406] usb 3-1: USB disconnect, device number 11 [ 1452.504352][T10505] usb 4-1: USB disconnect, device number 2 [ 1452.555867][T18929] usb 1-1: USB disconnect, device number 116 [ 1452.597942][T22816] delete_channel: no stack [ 1453.265041][T22869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4134'. [ 1453.710159][T18929] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1453.891831][T18929] usb 4-1: config 0 has no interfaces? [ 1453.910236][T18929] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1453.919484][T18929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.929833][T18929] usb 4-1: config 0 descriptor?? [ 1454.181630][T14761] usb 4-1: USB disconnect, device number 3 [ 1454.724836][ T30] audit: type=1326 audit(1770684786.590:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22894 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1454.750138][ T30] audit: type=1326 audit(1770684786.590:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22894 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1454.772768][ T30] audit: type=1326 audit(1770684786.590:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22894 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1454.796510][ T30] audit: type=1326 audit(1770684786.590:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22894 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1454.829498][ T30] audit: type=1326 audit(1770684786.590:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22894 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1454.852075][ T30] audit: type=1326 audit(1770684786.590:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22894 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1454.907114][ T30] audit: type=1326 audit(1770684786.590:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22894 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1454.930717][ T30] audit: type=1326 audit(1770684786.590:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22894 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1454.961408][ T30] audit: type=1326 audit(1770684786.590:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22894 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1454.990861][ T30] audit: type=1326 audit(1770684786.590:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22894 comm="syz.1.4141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1455.742849][T22890] pim6reg: entered allmulticast mode [ 1455.863112][T22889] pim6reg: left allmulticast mode [ 1456.170138][T14761] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1456.302630][T22918] netlink: 'syz.3.4144': attribute type 2 has an invalid length. [ 1456.332512][T14761] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1456.342722][T14761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1456.356889][T14761] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1456.366665][T14761] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1456.376404][T14761] usb 2-1: Manufacturer: syz [ 1456.389530][T14761] usb 2-1: config 0 descriptor?? [ 1456.408366][T22920] netlink: 'syz.3.4144': attribute type 2 has an invalid length. [ 1456.500116][T14761] rc_core: IR keymap rc-hauppauge not found [ 1456.506048][T14761] Registered IR keymap rc-empty [ 1456.515189][T14761] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1456.527738][T22918] !: entered promiscuous mode [ 1456.543269][T14761] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input63 [ 1456.595846][T22920] !: left promiscuous mode [ 1456.626451][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 1456.690397][T22922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.725585][T22922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.081805][ T31] INFO: task kworker/0:7:10515 blocked for more than 143 seconds. [ 1457.099054][ T31] Tainted: G L syzkaller #0 [ 1457.106075][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1457.115520][ T31] task:kworker/0:7 state:D stack:20512 pid:10515 tgid:10515 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1457.128257][ T31] Workqueue: usb_hub_wq hub_event [ 1457.133852][ T31] Call Trace: [ 1457.137251][ T31] [ 1457.140721][ T31] __schedule+0x1522/0x51d0 [ 1457.145358][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 1457.152568][ T31] ? __pfx___schedule+0x10/0x10 [ 1457.157567][ T31] ? schedule+0x90/0x360 [ 1457.162694][ T31] schedule+0x164/0x360 [ 1457.168463][ T31] schedule_preempt_disabled+0x13/0x30 [ 1457.175202][ T31] __mutex_lock+0x7fe/0x1300 [ 1457.179954][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1457.186064][ T31] ? hub_event+0x21a2/0x4f30 [ 1457.194589][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1457.202458][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1457.211554][ T31] hub_event+0x21a2/0x4f30 [ 1457.216532][ T31] ? __pfx_hub_event+0x10/0x10 [ 1457.222427][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1457.229050][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1457.237971][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 1457.245619][ T31] process_scheduled_works+0xaec/0x17a0 [ 1457.252371][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1457.262505][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1457.271738][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1457.280424][ T31] ? schedule+0x90/0x360 [ 1457.286047][ T31] worker_thread+0xda6/0x1360 [ 1457.292047][ T31] kthread+0x726/0x8b0 [ 1457.296176][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1457.305085][ T31] ? __pfx_kthread+0x10/0x10 [ 1457.310817][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1457.317412][ T31] ? __pfx_kthread+0x10/0x10 [ 1457.323533][ T31] ret_from_fork+0x51b/0xa40 [ 1457.328822][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1457.334703][ T31] ? __switch_to+0xc82/0x1410 [ 1457.341237][ T31] ? __pfx_kthread+0x10/0x10 [ 1457.346647][ T31] ret_from_fork_asm+0x1a/0x30 [ 1457.353419][ T31] [ 1457.357107][ T31] [ 1457.357107][ T31] Showing all locks held in the system: [ 1457.366143][ T31] 1 lock held by khungtaskd/31: [ 1457.371645][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1457.383365][ T31] 2 locks held by getty/5589: [ 1457.389404][ T31] #0: ffff8880349dc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1457.399953][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1457.411084][ T31] 3 locks held by kworker/1:3/10503: [ 1457.417075][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1457.429327][ T31] #1: ffffc9001b837bc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1457.443648][ T31] #2: ffff888030602240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 1457.454620][ T31] 3 locks held by kworker/1:9/10505: [ 1457.462318][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1457.474734][ T31] #1: ffffc9001ad2fbc0 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1457.494039][ T31] #2: ffffffff8fd25528 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 1457.505983][ T31] 5 locks held by kworker/0:7/10515: [ 1457.512625][ T31] #0: ffff888020e88d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1457.524942][ T31] #1: ffffc9001a81fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1457.539345][ T31] #2: ffff888028f74198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1457.549213][ T31] #3: ffff888028f77518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1457.560104][ T31] #4: ffff888028e94968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1457.573259][ T31] 3 locks held by kworker/1:1/14761: [ 1457.579844][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1457.598622][ T31] #1: ffffc9001a79fbc0 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1457.616335][ T31] #2: ffffffff8fd25528 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 1457.628983][ T31] 5 locks held by kworker/1:2/16036: [ 1457.635848][ T31] #0: ffff888020e88d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1457.649823][ T31] #1: ffffc9001a7afbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1457.667660][ T31] #2: ffff888029102198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1457.679187][ T31] #3: ffff888029106518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1457.690579][ T31] #4: ffff888028e94968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1457.702179][ T31] 3 locks held by kworker/0:1/18929: [ 1457.709298][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1457.722428][ T31] #1: ffffc9001b78fbc0 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1457.740138][ T31] #2: ffffffff8fd25528 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 1457.750455][ T31] 3 locks held by kworker/0:2/19586: [ 1457.756610][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1457.772737][ T31] #1: ffffc900045dfbc0 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1457.789611][ T31] #2: ffffffff8fd25528 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 1457.800861][ T31] 3 locks held by kworker/1:0/20406: [ 1457.806320][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1457.817676][ T31] #1: ffffc9001d8afbc0 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1457.833563][ T31] #2: ffffffff8fd25528 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 1457.845894][ T31] 3 locks held by kworker/1:4/21269: [ 1457.854892][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1457.869753][ T31] #1: ffffc9000b6dfbc0 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1457.886603][ T31] #2: ffffffff8fd25528 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 1457.898564][ T31] 2 locks held by syz.4.4136/22876: [ 1457.907841][ T31] 3 locks held by syz.3.4144/22920: [ 1457.913699][ T31] #0: ffffffff8fa1a770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1457.922048][ T31] #1: ffffffff8fd25528 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_cmd_del+0x82/0x370 [ 1457.931173][ T31] #2: ffffffff8e560b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1457.946169][ T31] 3 locks held by syz.1.4143/22912: [ 1457.951521][ T31] #0: ffff88807a81ccc8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1457.965081][ T31] #1: ffff88805a080260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_release+0x77d/0xcc0 [ 1457.980149][ T31] #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1457.991179][ T31] [ 1457.993525][ T31] ============================================= [ 1457.993525][ T31] [ 1458.005468][ T31] NMI backtrace for cpu 0 [ 1458.005490][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1458.005513][ T31] Tainted: [L]=SOFTLOCKUP [ 1458.005519][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1458.005525][ T31] Call Trace: [ 1458.005529][ T31] [ 1458.005534][ T31] dump_stack_lvl+0xe8/0x150 [ 1458.005551][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1458.005566][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1458.005585][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1458.005609][ T31] sys_info+0x135/0x170 [ 1458.005627][ T31] watchdog+0xf90/0xfe0 [ 1458.005649][ T31] ? watchdog+0x209/0xfe0 [ 1458.005671][ T31] kthread+0x726/0x8b0 [ 1458.005684][ T31] ? __pfx_watchdog+0x10/0x10 [ 1458.005693][ T31] ? __pfx_kthread+0x10/0x10 [ 1458.005705][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1458.005713][ T31] ? __pfx_kthread+0x10/0x10 [ 1458.005724][ T31] ret_from_fork+0x51b/0xa40 [ 1458.005737][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1458.005751][ T31] ? __switch_to+0xc82/0x1410 [ 1458.005776][ T31] ? __pfx_kthread+0x10/0x10 [ 1458.005794][ T31] ret_from_fork_asm+0x1a/0x30 [ 1458.005824][ T31] [ 1458.005828][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1458.131641][ C1] NMI backtrace for cpu 1 [ 1458.131662][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1458.131685][ C1] Tainted: [L]=SOFTLOCKUP [ 1458.131692][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1458.131703][ C1] RIP: 0010:lockdep_hardirqs_off+0x30/0xd0 [ 1458.131726][ C1] Code: 53 83 3d 42 32 58 04 00 0f 84 84 00 00 00 48 89 fb 65 8b 05 a2 af 5b 07 a9 00 00 f0 00 74 5c 83 3d 84 13 67 0e 00 75 09 9c 58 00 02 00 00 75 6a 65 8b 05 8a f1 5b 07 85 c0 74 56 65 4c 8b 35 [ 1458.131741][ C1] RSP: 0000:ffffc900001d7cd0 EFLAGS: 00000046 [ 1458.131756][ C1] RAX: 0000000000000046 RBX: ffffffff81871b93 RCX: 0000000000000046 [ 1458.131767][ C1] RDX: 0000000000000000 RSI: ffffffff8dd2e945 RDI: ffffffff8c073b00 [ 1458.131778][ C1] RBP: 0000000080000000 R08: ffff88801d29db80 R09: 0000000000000002 [ 1458.131789][ C1] R10: 0000000000000002 R11: ffffffff81871b80 R12: ffff88801d29db98 [ 1458.131800][ C1] R13: ffff88801d29f338 R14: 1ffff11003a53e67 R15: ffffffff81913e6d [ 1458.131813][ C1] FS: 0000000000000000(0000) GS:ffff8881257f3000(0000) knlGS:0000000000000000 [ 1458.131826][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1458.131837][ C1] CR2: 0000000030e14ff8 CR3: 000000006ac7c000 CR4: 00000000003526f0 [ 1458.131851][ C1] Call Trace: [ 1458.131859][ C1] [ 1458.131866][ C1] ? run_ksoftirqd+0x13/0x60 [ 1458.131885][ C1] trace_hardirqs_off+0x12/0x40 [ 1458.131901][ C1] run_ksoftirqd+0x13/0x60 [ 1458.131917][ C1] smpboot_thread_fn+0x541/0xa50 [ 1458.131934][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1458.131953][ C1] kthread+0x726/0x8b0 [ 1458.131971][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1458.131987][ C1] ? __pfx_kthread+0x10/0x10 [ 1458.132005][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1458.132020][ C1] ? __pfx_kthread+0x10/0x10 [ 1458.132037][ C1] ret_from_fork+0x51b/0xa40 [ 1458.132053][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1458.132066][ C1] ? __switch_to+0xc82/0x1410 [ 1458.132089][ C1] ? __pfx_kthread+0x10/0x10 [ 1458.132106][ C1] ret_from_fork_asm+0x1a/0x30 [ 1458.132133][ C1] [ 1458.417301][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1458.424195][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1458.434867][ T31] Tainted: [L]=SOFTLOCKUP [ 1458.439228][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1458.449281][ T31] Call Trace: [ 1458.452562][ T31] [ 1458.455498][ T31] vpanic+0x1e0/0x670 [ 1458.459492][ T31] panic+0xc5/0xd0 [ 1458.463209][ T31] ? __pfx_panic+0x10/0x10 [ 1458.467624][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1458.473028][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1458.479206][ T31] watchdog+0xfda/0xfe0 [ 1458.483384][ T31] ? watchdog+0x209/0xfe0 [ 1458.487726][ T31] kthread+0x726/0x8b0 [ 1458.491783][ T31] ? __pfx_watchdog+0x10/0x10 [ 1458.496453][ T31] ? __pfx_kthread+0x10/0x10 [ 1458.501049][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1458.506237][ T31] ? __pfx_kthread+0x10/0x10 [ 1458.510818][ T31] ret_from_fork+0x51b/0xa40 [ 1458.515409][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1458.520522][ T31] ? __switch_to+0xc82/0x1410 [ 1458.525196][ T31] ? __pfx_kthread+0x10/0x10 [ 1458.529802][ T31] ret_from_fork_asm+0x1a/0x30 [ 1458.534580][ T31] [ 1458.537966][ T31] Kernel Offset: disabled [ 1458.542289][ T31] Rebooting in 86400 seconds..