last executing test programs: 7.144412899s ago: executing program 1 (id=1701): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb", 0x3}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x33565348, 0x4, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x2, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r8 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r7, 0x80000}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ip_tables_matches\x00') preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r10, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2005, 0xbfbe}) socket$nl_netfilter(0x10, 0x3, 0xc) 6.319176235s ago: executing program 3 (id=1702): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0x0, 0x839a}) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x400000008, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b0001000000"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.666142016s ago: executing program 1 (id=1711): unshare(0xe040400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) 4.624021569s ago: executing program 0 (id=1712): socket(0x1d, 0x2, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d", 0xc4e}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x11}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 4.596453941s ago: executing program 3 (id=1713): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/238, 0xee) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000002c0)="28d36689fb2134111f") syz_usb_connect(0x5, 0x0, 0x0, 0x0) 4.503472317s ago: executing program 2 (id=1714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x3, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80080000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.431980642s ago: executing program 1 (id=1715): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x40015b0b) syz_usb_disconnect(r0) 4.182370439s ago: executing program 2 (id=1716): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00012bbd7000fedbdf2530000000b97d8884006136002d713af0087f74dab0c2d4b680186d9458a3b1185f3b775986051447e9df7a332109395cc8a1e12b85c14814956b43fbcf29204132e555d5a00fe773c206418bbe38006cb2b00550f54128a1dae1089097442d5d998c64cc964bbdba0b8fead95f43f5a479a83c4df7549c004fd4dfee7895488e08ad6853804207632b9eb9e834b99ede0908ab4672d4afd600"/173], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000001300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x9891}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, 0x0, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}}, 0x0, 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r10, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 3.71608205s ago: executing program 2 (id=1718): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000300)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) close(r5) 3.539216402s ago: executing program 0 (id=1719): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x6e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r2) 3.384777913s ago: executing program 0 (id=1720): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28, 0x2000c000}}], 0x1, 0x88) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) 3.293911709s ago: executing program 0 (id=1721): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb", 0x3}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x33565348, 0x4, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x2, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r8 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r7, 0x80000}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ip_tables_matches\x00') preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r10, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2005, 0xbfbe}) socket$nl_netfilter(0x10, 0x3, 0xc) 2.707790948s ago: executing program 2 (id=1723): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0x0, 0x839a}) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x400000008, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b0001000000"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.274657068s ago: executing program 4 (id=1725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xa, 0x6, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x9, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xa, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x2, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x14, 0x2, 0x6, 0x10000, 0x2, 0x7ff, 0x100, 0x1ff, 0xb, 0x3, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0x40, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x6, 0x2, 0x400, 0x7d75, 0x1, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x47b6, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x1, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2.08617729s ago: executing program 4 (id=1726): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r0, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) 1.904146732s ago: executing program 3 (id=1727): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008b88040f80ee59acbc04130800480f0000005e29004218030018258000", 0x23}, {&(0x7f0000000140)="226dff01c8b8c92469fe932cdaf69a58c577ace435a00cef82d68e5d05c436bcbed706c07c2e7a07f9ce9c18fa3a5ed459e7426812f1c4f8b338c67aa2492be56ec3f54584baba3bcad242f03403505f92094d28eb8d4a2dac978dfabdda329d1b79630a74adf6b47e36c7f768ba115b49bec0f41e1c23c27a0961", 0x7b}, {0x0}], 0x3}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x6}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xb}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) 1.461073422s ago: executing program 3 (id=1728): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r0, &(0x7f0000002100), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x2f) openat$adsp1(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) unshare(0x40000000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x200) setsockopt$MRT_PIM(r0, 0x0, 0xcf, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) 1.260797296s ago: executing program 1 (id=1729): socket(0x1d, 0x2, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x40, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x11}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 949.939227ms ago: executing program 4 (id=1730): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x6e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r2) 853.144073ms ago: executing program 2 (id=1731): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28, 0x2000c000}}], 0x2, 0x88) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) 652.073127ms ago: executing program 4 (id=1732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 632.852948ms ago: executing program 2 (id=1733): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000300)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) close(r5) 481.515858ms ago: executing program 3 (id=1734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x2f, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x40054) 456.22122ms ago: executing program 0 (id=1735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x17efb}, @TCA_FLOW_MASK={0x8, 0x6, 0x8001}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 433.170651ms ago: executing program 4 (id=1736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000010) 276.011112ms ago: executing program 1 (id=1737): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket(0x10, 0x3, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xfff2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 162.636479ms ago: executing program 0 (id=1738): unshare(0xe040400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x7fffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) 110.826293ms ago: executing program 3 (id=1739): r0 = socket$inet(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r0, 0x0, 0x50, 0x0, &(0x7f0000000040)) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 69.364166ms ago: executing program 1 (id=1740): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x4, 0x6361, 0x5, 0xffffffff, 0x403}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffe, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x45004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xee19}], 0x1}, 0x0) 0s ago: executing program 4 (id=1741): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0x0, 0x839a}) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x400000008, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): cd.0: Device attached [ 343.445113][ T125] usb 37-1: new low-speed USB device number 10 using vhci_hcd [ 343.635614][ T26] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 343.644034][ T26] em28xx 1-1:0.0: board has no eeprom [ 343.955052][ T26] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 343.974875][ T7211] vhci_hcd: connection reset by peer [ 343.976967][ T26] em28xx 1-1:0.0: dvb set to bulk mode. [ 343.996026][ T4590] em28xx 1-1:0.0: Binding DVB extension [ 343.996780][ T9] vhci_hcd: stop threads [ 344.016476][ T26] usb 1-1: USB disconnect, device number 19 [ 344.030195][ T26] em28xx 1-1:0.0: Disconnecting em28xx [ 344.124353][ T9] vhci_hcd: release socket [ 344.335243][ T9] vhci_hcd: disconnect device [ 344.377888][ T7224] binder: 7219:7224 ioctl 4018620d 0 returned -22 [ 344.523505][ T4590] em28xx 1-1:0.0: Registering input extension [ 344.540256][ T26] em28xx 1-1:0.0: Closing input extension [ 344.592801][ T26] em28xx 1-1:0.0: Freeing device [ 344.796176][ T7233] netlink: 'syz.4.807': attribute type 21 has an invalid length. [ 344.809317][ T7233] netlink: 156 bytes leftover after parsing attributes in process `syz.4.807'. [ 345.035203][ T4318] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 345.252919][ T4318] usb 2-1: config 0 has too many interfaces: 66, using maximum allowed: 32 [ 345.274422][ T4318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.323132][ T4318] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 66 [ 345.398733][ T4318] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 345.422064][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 345.462712][ T4318] usb 2-1: Product: syz [ 345.500169][ T4318] usb 2-1: Manufacturer: syz [ 345.566528][ T4318] usb 2-1: config 0 descriptor?? [ 346.525973][ T7256] device syzkaller0 entered promiscuous mode [ 347.243193][ T7262] netlink: 'syz.4.815': attribute type 4 has an invalid length. [ 348.294146][ T7273] binder: 7272:7273 ioctl 4018620d 0 returned -22 [ 348.545202][ T26] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 348.675785][ T125] vhci_hcd: vhci_device speed not set [ 348.744924][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 348.753946][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 348.778265][ T26] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 348.790884][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.800952][ T26] usb 4-1: Product: syz [ 348.808290][ T26] usb 4-1: Manufacturer: syz [ 348.823240][ T26] usb 4-1: SerialNumber: syz [ 348.872025][ T26] usb 4-1: config 0 descriptor?? [ 348.943372][ T26] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 348.977770][ T26] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 349.535072][ T26] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 349.901503][ T4317] usb 2-1: USB disconnect, device number 8 [ 349.962520][ T26] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 349.984355][ T26] em28xx 4-1:0.0: board has no eeprom [ 350.305104][ T26] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 350.335445][ T26] em28xx 4-1:0.0: dvb set to bulk mode. [ 350.341702][ T125] em28xx 4-1:0.0: Binding DVB extension [ 350.385319][ T26] usb 4-1: USB disconnect, device number 17 [ 350.494005][ T26] em28xx 4-1:0.0: Disconnecting em28xx [ 350.618252][ T125] em28xx 4-1:0.0: Registering input extension [ 350.655595][ T26] em28xx 4-1:0.0: Closing input extension [ 350.687356][ T26] em28xx 4-1:0.0: Freeing device [ 351.234317][ T7302] netlink: 'syz.3.826': attribute type 21 has an invalid length. [ 351.307272][ T7302] netlink: 156 bytes leftover after parsing attributes in process `syz.3.826'. [ 351.952126][ T7309] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 352.083219][ T7309] team0: Port device batadv1 added [ 354.289999][ T7320] binder: 7319:7320 ioctl c0306201 0 returned -14 [ 354.604908][ T125] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 354.655001][ T26] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 354.773441][ T7335] binder: 7334:7335 ioctl c0306201 0 returned -14 [ 354.814912][ T125] usb 3-1: Using ep0 maxpacket: 8 [ 354.825336][ T125] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 354.840729][ T125] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.851584][ T125] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.862292][ T125] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.873686][ T125] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.887611][ T26] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 354.911282][ T26] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 354.970941][ T125] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 354.993921][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 355.001207][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.012237][ T26] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 355.046244][ T26] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 355.060235][ T26] usb 5-1: Product: syz [ 355.064554][ T26] usb 5-1: Manufacturer: syz [ 355.090164][ T26] usb 5-1: SerialNumber: syz [ 355.113640][ T26] usb 5-1: config 0 descriptor?? [ 355.145491][ T26] usb 5-1: selecting invalid altsetting 0 [ 355.288590][ T125] usb 3-1: usb_control_msg returned -32 [ 355.294279][ T125] usbtmc 3-1:16.0: can't read capabilities [ 355.388763][ T4317] usb 5-1: USB disconnect, device number 13 [ 355.518919][ T125] usb 3-1: USB disconnect, device number 11 [ 356.284980][ T4317] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 356.494952][ T4317] usb 1-1: Using ep0 maxpacket: 16 [ 356.514991][ T4317] usb 1-1: config 0 has no interfaces? [ 356.568231][ T4317] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 356.655493][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.695148][ T4317] usb 1-1: Product: syz [ 356.713666][ T4317] usb 1-1: Manufacturer: syz [ 356.735233][ T4317] usb 1-1: SerialNumber: syz [ 356.772483][ T4317] usb 1-1: config 0 descriptor?? [ 357.867502][ T7369] binder: 7368:7369 ioctl c0306201 0 returned -14 [ 358.642180][ T7382] binder: 7380:7382 ioctl c0306201 0 returned -14 [ 358.714465][ T7379] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 358.827451][ T7379] team0: Port device batadv1 added [ 359.122019][ T125] usb 1-1: USB disconnect, device number 20 [ 359.253410][ T7389] netlink: 48 bytes leftover after parsing attributes in process `syz.0.849'. [ 359.804907][ T4360] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 360.023809][ T4360] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 360.044594][ T4360] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 360.064963][ T26] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 360.086357][ T4360] usb 1-1: config 0 interface 0 has no altsetting 0 [ 360.143129][ T4360] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 360.222921][ T4360] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 360.243269][ T4360] usb 1-1: Product: syz [ 360.264947][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 360.273024][ T26] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 360.304756][ T4360] usb 1-1: Manufacturer: syz [ 360.338163][ T4360] usb 1-1: SerialNumber: syz [ 360.345001][ T26] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.355886][ T26] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.366760][ T4360] usb 1-1: config 0 descriptor?? [ 360.385229][ T4360] usb 1-1: selecting invalid altsetting 0 [ 360.406309][ T26] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.467597][ T26] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.569020][ T26] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 360.714707][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.885923][ T4360] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 361.019338][ T26] usb 4-1: usb_control_msg returned -32 [ 361.026105][ T26] usbtmc 4-1:16.0: can't read capabilities [ 361.100329][ T4360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.112428][ T4360] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 361.121747][ T4360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.208838][ T4360] usb 5-1: config 0 descriptor?? [ 361.231358][ T26] usb 1-1: USB disconnect, device number 21 [ 361.423380][ T4360] usbhid 5-1:0.0: can't add hid device: -71 [ 361.429994][ T4317] usb 4-1: USB disconnect, device number 18 [ 361.445835][ T4360] usbhid: probe of 5-1:0.0 failed with error -71 [ 361.490703][ T4360] usb 5-1: USB disconnect, device number 14 [ 361.559415][ T7411] binder: 7410:7411 ioctl c0306201 0 returned -14 [ 361.881042][ T7416] binder: 7415:7416 ioctl c0306201 0 returned -14 [ 361.985013][ T4360] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 362.175004][ T4360] usb 5-1: Using ep0 maxpacket: 32 [ 362.181979][ T4360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.207800][ T4360] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 362.217955][ T4360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.232802][ T4360] usb 5-1: config 0 descriptor?? [ 362.279286][ T4360] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 362.310595][ T4360] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 362.367151][ T7424] netlink: 48 bytes leftover after parsing attributes in process `syz.3.861'. [ 363.377931][ T7426] netlink: 'syz.2.860': attribute type 21 has an invalid length. [ 363.392785][ T7426] netlink: 156 bytes leftover after parsing attributes in process `syz.2.860'. [ 363.653289][ T14] usb 5-1: USB disconnect, device number 15 [ 363.679651][ T14] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 363.750297][ T7446] tipc: Enabling of bearer rejected, failed to enable media [ 364.395116][ T26] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 364.686380][ T26] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 364.714891][ T26] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 364.863303][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 364.922996][ T26] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 364.984384][ T26] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 365.005591][ T7466] binder: BINDER_SET_CONTEXT_MGR already set [ 365.035452][ T26] usb 5-1: Product: syz [ 365.052625][ T7466] binder: 7465:7466 ioctl 4018620d 200000000040 returned -16 [ 365.084429][ T26] usb 5-1: Manufacturer: syz [ 365.175543][ T26] usb 5-1: SerialNumber: syz [ 365.215659][ T26] usb 5-1: config 0 descriptor?? [ 365.338841][ T26] usb 5-1: selecting invalid altsetting 0 [ 365.539737][ T26] usb 5-1: USB disconnect, device number 16 [ 365.625062][ T4318] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 365.786022][ T7471] netlink: 48 bytes leftover after parsing attributes in process `syz.2.872'. [ 365.824928][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 365.832568][ T4318] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 365.855898][ T4318] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.878749][ T4318] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.904167][ T4318] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 365.941549][ T4318] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.025948][ T4318] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.078718][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.262008][ T7476] netlink: 'syz.2.873': attribute type 4 has an invalid length. [ 366.321947][ T4318] usb 4-1: usb_control_msg returned -32 [ 366.328634][ T4318] usbtmc 4-1:16.0: can't read capabilities [ 366.533075][ T14] usb 4-1: USB disconnect, device number 19 [ 366.781360][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'. [ 366.785210][ T4318] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 366.822061][ T7487] device team_slave_0 entered promiscuous mode [ 366.828959][ T7487] device team_slave_1 entered promiscuous mode [ 366.835431][ T7487] device batadv1 entered promiscuous mode [ 366.843038][ T7487] device batadv2 entered promiscuous mode [ 366.958036][ T7487] device macvtap1 entered promiscuous mode [ 366.964043][ T7487] device team0 entered promiscuous mode [ 366.987551][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.004959][ T4318] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 367.007310][ T7487] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 367.036361][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.076998][ T4318] usb 5-1: config 0 descriptor?? [ 367.221389][ T7489] tipc: Enabling of bearer rejected, failed to enable media [ 367.297782][ T4318] usbhid 5-1:0.0: can't add hid device: -71 [ 367.304007][ T4318] usbhid: probe of 5-1:0.0 failed with error -71 [ 367.313584][ T7492] binder: BINDER_SET_CONTEXT_MGR already set [ 367.349653][ T7492] binder: 7490:7492 ioctl 4018620d 200000000040 returned -16 [ 367.358730][ T4318] usb 5-1: USB disconnect, device number 17 [ 367.663316][ T7500] netlink: 36 bytes leftover after parsing attributes in process `syz.3.882'. [ 368.035688][ T4318] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 368.335029][ T4318] usb 5-1: Using ep0 maxpacket: 32 [ 368.342495][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.387066][ T4318] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 368.445173][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.513155][ T4318] usb 5-1: config 0 descriptor?? [ 368.534422][ T4318] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 368.584368][ T4318] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 368.854982][ T26] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 369.067426][ T26] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 369.126204][ T26] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 369.186130][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 369.272434][ T26] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 369.348175][ T26] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 369.414193][ T26] usb 1-1: Product: syz [ 369.448449][ T26] usb 1-1: Manufacturer: syz [ 369.456131][ T26] usb 1-1: SerialNumber: syz [ 369.511770][ T26] usb 1-1: config 0 descriptor?? [ 369.600589][ T26] usb 1-1: selecting invalid altsetting 0 [ 369.998891][ T4318] usb 5-1: USB disconnect, device number 18 [ 370.018034][ T4318] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 370.505025][ T4318] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 370.725036][ T4318] usb 5-1: Using ep0 maxpacket: 8 [ 370.733532][ T4318] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 370.774598][ T4318] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 370.824554][ T4318] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 370.835845][ T4318] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 370.848620][ T4318] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.882460][ T4318] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 370.950104][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.229449][ T4318] usb 5-1: usb_control_msg returned -32 [ 371.235723][ T4318] usbtmc 5-1:16.0: can't read capabilities [ 371.432895][ T4360] usb 5-1: USB disconnect, device number 19 [ 371.903691][ T26] usb 1-1: USB disconnect, device number 22 [ 372.400749][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.898'. [ 372.460221][ T7558] netlink: 'syz.0.897': attribute type 21 has an invalid length. [ 372.482669][ T7558] netlink: 156 bytes leftover after parsing attributes in process `syz.0.897'. [ 373.565393][ T4318] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 373.778373][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.815054][ T4318] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 373.838567][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.876024][ T4318] usb 4-1: config 0 descriptor?? [ 374.118931][ T4318] usbhid 4-1:0.0: can't add hid device: -71 [ 374.126778][ T4318] usbhid: probe of 4-1:0.0 failed with error -71 [ 374.194356][ T4318] usb 4-1: USB disconnect, device number 20 [ 374.714914][ T4318] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 374.895759][ T26] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 374.915545][ T4318] usb 4-1: Using ep0 maxpacket: 32 [ 374.926962][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.958499][ T4318] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 374.978374][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.010393][ T4318] usb 4-1: config 0 descriptor?? [ 375.026153][ T4318] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 375.055763][ T4318] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 375.085233][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 375.092647][ T26] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 375.122855][ T26] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 375.148432][ T26] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 375.162381][ T26] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 375.179731][ T26] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.223507][ T26] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 375.239520][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.485291][ T4318] usb 4-1: USB disconnect, device number 21 [ 375.502442][ T4318] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 375.510019][ T26] usb 1-1: usb_control_msg returned -32 [ 375.517522][ T26] usbtmc 1-1:16.0: can't read capabilities [ 375.760259][ T26] usb 1-1: USB disconnect, device number 23 [ 376.380794][ T7602] binder: BINDER_SET_CONTEXT_MGR already set [ 376.411567][ T7602] binder: 7601:7602 ioctl 4018620d 200000000040 returned -16 [ 376.462155][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 376.655492][ T7604] device team_slave_0 entered promiscuous mode [ 376.661976][ T7604] device team_slave_1 entered promiscuous mode [ 376.668361][ T7604] device batadv1 entered promiscuous mode [ 376.695175][ T7604] device macvtap1 entered promiscuous mode [ 376.709615][ T7604] device team0 entered promiscuous mode [ 376.760088][ T7604] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 376.793544][ T7610] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 376.800160][ T7610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 376.828916][ T7610] vhci_hcd vhci_hcd.0: Device attached [ 377.035087][ T7409] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 377.095070][ T26] usb 33-1: new low-speed USB device number 8 using vhci_hcd [ 377.225029][ T7409] usb 4-1: Using ep0 maxpacket: 32 [ 377.394080][ T7409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.424942][ T7409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.438813][ T7611] vhci_hcd: connection reset by peer [ 377.444663][ T7409] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 377.454331][ T7409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.462999][ T4327] vhci_hcd: stop threads [ 377.467876][ T4327] vhci_hcd: release socket [ 377.474224][ T4327] vhci_hcd: disconnect device [ 377.505839][ T7409] usb 4-1: config 0 descriptor?? [ 377.838855][ T7624] device syzkaller0 entered promiscuous mode [ 377.917757][ T7409] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 377.936856][ T7409] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 378.025391][ T7409] ft260 0003:0403:6030.0002: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 378.126362][ T7409] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 378.415210][ T4319] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 378.536143][ T7409] ft260 0003:0403:6030.0002: failed to retrieve status: -32 [ 378.548933][ T7409] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 378.625205][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.663896][ T4319] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 378.775224][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.781828][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.792238][ T7409] usb 4-1: USB disconnect, device number 22 [ 378.803233][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.818365][ T4319] usb 1-1: config 0 descriptor?? [ 379.031735][ T4319] usbhid 1-1:0.0: can't add hid device: -71 [ 379.039794][ T4319] usbhid: probe of 1-1:0.0 failed with error -71 [ 379.101773][ T7640] binder: BINDER_SET_CONTEXT_MGR already set [ 379.119076][ T4319] usb 1-1: USB disconnect, device number 24 [ 379.171901][ T7640] binder: 7639:7640 ioctl 4018620d 200000000040 returned -16 [ 379.400003][ T7636] fido_id[7636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 379.614955][ T4319] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 379.625197][ T4318] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 379.812506][ T7652] netlink: 'syz.2.930': attribute type 21 has an invalid length. [ 379.815169][ T4319] usb 1-1: Using ep0 maxpacket: 32 [ 379.835035][ T4318] usb 4-1: Using ep0 maxpacket: 16 [ 379.852976][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.876446][ T4319] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 379.887879][ T7652] netlink: 156 bytes leftover after parsing attributes in process `syz.2.930'. [ 379.918306][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.928241][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 379.956541][ T4319] usb 1-1: config 0 descriptor?? [ 379.982346][ T4319] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 380.029078][ T4319] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 380.231520][ T4318] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 380.257371][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.272864][ T4318] usb 4-1: Product: syz [ 380.318796][ T4318] usb 4-1: Manufacturer: syz [ 380.347622][ T4318] usb 4-1: SerialNumber: syz [ 380.496126][ T4319] usb 1-1: USB disconnect, device number 25 [ 380.513898][ T4319] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 380.535799][ T4318] usb 4-1: config 0 descriptor?? [ 380.599551][ T4318] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 380.631499][ T4318] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 381.189858][ T4318] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 381.230242][ T7662] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 381.236910][ T7662] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.266919][ T7662] vhci_hcd vhci_hcd.0: Device attached [ 381.275859][ T7666] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 381.282608][ T7666] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.332208][ T7666] vhci_hcd vhci_hcd.0: Device attached [ 381.466567][ T4322] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 381.533284][ T4322] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 381.622532][ T4318] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 381.649684][ T4318] em28xx 4-1:0.0: board has no eeprom [ 382.393439][ T7667] vhci_hcd: connection closed [ 382.393832][ T4506] vhci_hcd: stop threads [ 382.404945][ T4318] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 382.416655][ T7663] vhci_hcd: connection closed [ 382.423365][ T4318] em28xx 4-1:0.0: dvb set to bulk mode. [ 382.435413][ T7665] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 382.438624][ T4506] vhci_hcd: release socket [ 382.462483][ T4506] vhci_hcd: disconnect device [ 382.490498][ T4506] vhci_hcd: stop threads [ 382.495171][ T4318] usb 4-1: USB disconnect, device number 23 [ 382.506702][ T7673] fido_id[7673]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 382.542031][ T4506] vhci_hcd: release socket [ 382.553464][ T4318] em28xx 4-1:0.0: Disconnecting em28xx [ 382.572694][ T4506] vhci_hcd: disconnect device [ 382.585692][ T4322] em28xx 4-1:0.0: Binding DVB extension [ 382.644919][ T26] vhci_hcd: vhci_device speed not set [ 382.988880][ T4322] em28xx 4-1:0.0: Registering input extension [ 383.002815][ T4318] em28xx 4-1:0.0: Closing input extension [ 383.035008][ T14] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 383.069848][ T4318] em28xx 4-1:0.0: Freeing device [ 383.113976][ T7685] binder: BINDER_SET_CONTEXT_MGR already set [ 383.132443][ T7685] binder: 7683:7685 ioctl 4018620d 200000000040 returned -16 [ 383.150081][ T7685] binder: 7683:7685 ioctl c0306201 0 returned -14 [ 383.255137][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 383.265862][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 383.312138][ T14] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 383.370004][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.394922][ T14] usb 3-1: Product: syz [ 383.404957][ T14] usb 3-1: Manufacturer: syz [ 383.406214][ T4319] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 383.427627][ T14] usb 3-1: SerialNumber: syz [ 383.460735][ T14] usb 3-1: config 0 descriptor?? [ 383.479374][ T7688] netlink: 'syz.3.941': attribute type 21 has an invalid length. [ 383.502353][ T14] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 383.517460][ T14] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 383.527067][ T7688] netlink: 156 bytes leftover after parsing attributes in process `syz.3.941'. [ 383.635132][ T4319] usb 5-1: Using ep0 maxpacket: 32 [ 383.642554][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.681730][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.736160][ T4319] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 383.761344][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.809072][ T4319] usb 5-1: config 0 descriptor?? [ 384.103458][ T14] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 384.222940][ T4319] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 384.250719][ T4319] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 384.304686][ T4319] ft260 0003:0403:6030.0004: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 384.420544][ T4319] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 384.527596][ T14] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 384.558445][ T14] em28xx 3-1:0.0: board has no eeprom [ 384.823518][ T4319] ft260 0003:0403:6030.0004: failed to retrieve status: -32 [ 384.884931][ T14] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 384.939006][ T14] em28xx 3-1:0.0: dvb set to bulk mode. [ 384.994897][ T7686] em28xx 3-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 385.017232][ T4319] ft260 0003:0403:6030.0004: failed to reset I2C controller: -71 [ 385.071276][ T4319] usb 5-1: USB disconnect, device number 20 [ 385.299606][ T14] usb 3-1: USB disconnect, device number 12 [ 385.483831][ T14] em28xx 3-1:0.0: Disconnecting em28xx [ 385.515574][ T4323] em28xx 3-1:0.0: Binding DVB extension [ 385.696718][ T7702] fido_id[7702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 385.774441][ T4323] em28xx 3-1:0.0: Registering input extension [ 385.795673][ T14] em28xx 3-1:0.0: Closing input extension [ 385.822782][ T14] em28xx 3-1:0.0: Freeing device [ 387.198626][ T7725] binder: 7724:7725 ioctl c0306201 0 returned -14 [ 387.465363][ T7728] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 387.472086][ T7728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 387.525022][ T7731] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 387.531616][ T7731] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 387.597931][ T7728] vhci_hcd vhci_hcd.0: Device attached [ 387.635085][ T7731] vhci_hcd vhci_hcd.0: Device attached [ 387.874947][ T4319] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 388.332060][ T7732] vhci_hcd: connection closed [ 388.332646][ T11] vhci_hcd: stop threads [ 388.372345][ T11] vhci_hcd: release socket [ 388.377959][ T7729] vhci_hcd: connection reset by peer [ 388.380924][ T11] vhci_hcd: disconnect device [ 388.515467][ T11] vhci_hcd: stop threads [ 388.581611][ T11] vhci_hcd: release socket [ 388.667873][ T11] vhci_hcd: disconnect device [ 390.375241][ T26] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 390.605092][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 390.654078][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.966583][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.976746][ T26] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 390.986553][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.059759][ T26] usb 4-1: config 0 descriptor?? [ 391.105196][ T7768] binder: 7765:7768 ioctl c0306201 0 returned -14 [ 391.487187][ T26] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 391.555649][ T26] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 391.686540][ T26] ft260 0003:0403:6030.0005: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 391.825743][ T26] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 392.428474][ T26] ft260 0003:0403:6030.0005: failed to reset I2C controller: -71 [ 392.478847][ T26] usb 4-1: USB disconnect, device number 24 [ 392.770845][ T7784] fido_id[7784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 392.995046][ T4319] vhci_hcd: vhci_device speed not set [ 393.002525][ T7796] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 393.009281][ T7796] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 393.076672][ T7793] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 393.084064][ T7793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 393.096555][ T7793] vhci_hcd vhci_hcd.0: Device attached [ 393.102880][ T7796] vhci_hcd vhci_hcd.0: Device attached [ 393.337142][ T7803] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 393.343914][ T7803] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 393.474833][ T7803] vhci_hcd vhci_hcd.0: Device attached [ 393.824882][ T4319] usb 41-1: device descriptor read/64, error -110 [ 393.868701][ T7797] vhci_hcd: connection closed [ 393.869087][ T4509] vhci_hcd: stop threads [ 393.879313][ T7794] vhci_hcd: connection closed [ 393.904393][ T4509] vhci_hcd: release socket [ 393.914668][ T4509] vhci_hcd: disconnect device [ 393.930073][ T4509] vhci_hcd: stop threads [ 393.941335][ T4509] vhci_hcd: release socket [ 393.947605][ T4322] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 393.968506][ T4509] vhci_hcd: disconnect device [ 393.984114][ T7804] vhci_hcd: connection closed [ 393.984525][ T4509] vhci_hcd: stop threads [ 394.018872][ T4509] vhci_hcd: release socket [ 394.035403][ T4509] vhci_hcd: disconnect device [ 394.107616][ T4319] usb 41-1: new low-speed USB device number 7 using vhci_hcd [ 394.125440][ T4319] usb 41-1: enqueue for inactive port 0 [ 394.254966][ T4319] vhci_hcd: vhci_device speed not set [ 395.043523][ T7816] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 395.183292][ T7816] team0: Port device batadv1 added [ 396.975043][ T4323] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 397.185168][ T4323] usb 1-1: Using ep0 maxpacket: 32 [ 397.195268][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.255801][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.327537][ T4323] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 397.412788][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.449082][ T4323] usb 1-1: config 0 descriptor?? [ 397.586529][ T7847] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 397.593288][ T7847] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.615986][ T7847] vhci_hcd vhci_hcd.0: Device attached [ 398.191349][ T7848] vhci_hcd: connection reset by peer [ 398.197703][ T4517] vhci_hcd: stop threads [ 398.202266][ T4517] vhci_hcd: release socket [ 398.217578][ T4517] vhci_hcd: disconnect device [ 398.373227][ T4323] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 398.397709][ T4323] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 398.422595][ T4323] ft260 0003:0403:6030.0006: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 398.483221][ T7853] netlink: 'syz.2.985': attribute type 1 has an invalid length. [ 398.583206][ T4323] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 399.065099][ T4322] vhci_hcd: vhci_device speed not set [ 399.522959][ T4323] ft260 0003:0403:6030.0006: failed to reset I2C controller: -71 [ 399.604916][ T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 399.692623][ T4323] usb 1-1: USB disconnect, device number 26 [ 399.825055][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 399.832678][ T14] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 399.873506][ T7872] device syzkaller0 entered promiscuous mode [ 399.889804][ T14] usb 2-1: config 0 has no interface number 0 [ 399.940753][ T14] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 399.988946][ T14] usb 2-1: config 0 interface 49 altsetting 0 has an invalid endpoint with address 0x3E, skipping [ 400.041296][ T14] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 400.108250][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.158292][ T14] usb 2-1: Product: syz [ 400.205330][ T14] usb 2-1: Manufacturer: syz [ 400.210181][ T14] usb 2-1: SerialNumber: syz [ 400.234401][ T7873] fido_id[7873]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 400.262187][ T14] usb 2-1: config 0 descriptor?? [ 400.275379][ T7859] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 400.312126][ T7859] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 401.424422][ T7892] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 401.431194][ T7892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 401.555184][ T7892] vhci_hcd vhci_hcd.0: Device attached [ 402.178601][ T14] qmi_wwan: probe of 2-1:0.49 failed with error -22 [ 402.199634][ T7893] vhci_hcd: connection closed [ 402.200204][ T4517] vhci_hcd: stop threads [ 402.254977][ T4517] vhci_hcd: release socket [ 402.260296][ T14] usb 2-1: USB disconnect, device number 9 [ 402.276051][ T4517] vhci_hcd: disconnect device [ 402.608764][ T7890] netlink: 'syz.3.996': attribute type 21 has an invalid length. [ 402.616943][ T7890] netlink: 156 bytes leftover after parsing attributes in process `syz.3.996'. [ 402.864939][ T4319] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 403.054938][ T4319] usb 2-1: Using ep0 maxpacket: 32 [ 403.065192][ T4319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.128971][ T4319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.163774][ T4319] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 403.187000][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.240407][ T4319] usb 2-1: config 0 descriptor?? [ 403.497063][ T7921] device syzkaller0 entered promiscuous mode [ 403.662522][ T4319] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 403.691000][ T4319] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 403.881562][ T4319] ft260 0003:0403:6030.0007: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 403.907718][ T7926] binder: BINDER_SET_CONTEXT_MGR already set [ 403.921961][ T7926] binder: 7924:7926 ioctl 4018620d 200000000040 returned -16 [ 404.016319][ T4319] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 404.615481][ T4319] ft260 0003:0403:6030.0007: failed to reset I2C controller: -71 [ 404.662937][ T4319] usb 2-1: USB disconnect, device number 10 [ 404.938453][ T7941] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 404.945036][ T7941] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 404.978503][ T7941] vhci_hcd vhci_hcd.0: Device attached [ 405.152906][ T7937] fido_id[7937]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 405.245003][ T4318] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 405.664198][ T7942] vhci_hcd: connection reset by peer [ 405.670011][ T5282] vhci_hcd: stop threads [ 405.674500][ T5282] vhci_hcd: release socket [ 405.726707][ T5282] vhci_hcd: disconnect device [ 405.994933][ T4319] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 406.225183][ T4319] usb 2-1: Using ep0 maxpacket: 16 [ 406.236550][ T4319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 406.295019][ T7409] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 406.313378][ T4319] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 406.334333][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.355291][ T4319] usb 2-1: Product: syz [ 406.370845][ T4319] usb 2-1: Manufacturer: syz [ 406.380980][ T4319] usb 2-1: SerialNumber: syz [ 406.426621][ T4319] usb 2-1: config 0 descriptor?? [ 406.469232][ T4319] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 406.487150][ T7409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.503557][ T4319] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 406.520243][ T7409] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 406.544861][ T7409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.572512][ T7409] usb 1-1: config 0 descriptor?? [ 406.815314][ T7409] usbhid 1-1:0.0: can't add hid device: -71 [ 406.827572][ T7409] usbhid: probe of 1-1:0.0 failed with error -71 [ 406.883926][ T7409] usb 1-1: USB disconnect, device number 27 [ 407.092083][ T4319] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 407.512154][ T4319] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 407.525053][ T4319] em28xx 2-1:0.0: board has no eeprom [ 407.614983][ T4322] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 407.664362][ T7970] netlink: 'syz.2.1022': attribute type 21 has an invalid length. [ 407.694395][ T7970] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1022'. [ 407.814997][ T4322] usb 5-1: Using ep0 maxpacket: 32 [ 407.823980][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.845007][ T4319] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 407.855125][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.859220][ T4319] em28xx 2-1:0.0: dvb set to bulk mode. [ 407.886867][ T125] em28xx 2-1:0.0: Binding DVB extension [ 407.926594][ T4322] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 407.933224][ T4319] usb 2-1: USB disconnect, device number 11 [ 407.980420][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.007700][ T4319] em28xx 2-1:0.0: Disconnecting em28xx [ 408.022989][ T4322] usb 5-1: config 0 descriptor?? [ 408.162908][ T125] em28xx 2-1:0.0: Registering input extension [ 408.184118][ T4319] em28xx 2-1:0.0: Closing input extension [ 408.210241][ T4319] em28xx 2-1:0.0: Freeing device [ 408.447102][ T7988] tipc: New replicast peer: 255.255.255.255 [ 408.465703][ T4322] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 408.472639][ T4322] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 408.495106][ T7988] tipc: Enabled bearer , priority 10 [ 408.526290][ T4322] ft260 0003:0403:6030.0008: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 408.537712][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1028'. [ 408.578289][ T7989] tipc: Disabling bearer [ 408.663929][ T4322] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 408.826264][ T7995] binder: 7994:7995 ioctl c0306201 0 returned -14 [ 408.864500][ T4322] ft260 0003:0403:6030.0008: failed to retrieve system status [ 408.903439][ T4322] ft260: probe of 0003:0403:6030.0008 failed with error -32 [ 409.951474][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1036'. [ 410.345605][ T4318] vhci_hcd: vhci_device speed not set [ 410.447713][ T4319] usb 5-1: USB disconnect, device number 21 [ 411.614951][ T4318] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 411.825953][ T4318] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 411.865158][ T4318] usb 5-1: config 1 interface 0 has no altsetting 0 [ 411.890660][ T4318] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.926033][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.950566][ T4318] usb 5-1: Product: syz [ 411.964901][ T4318] usb 5-1: Manufacturer: syz [ 411.981106][ T4318] usb 5-1: SerialNumber: syz [ 412.004182][ T8034] binder: 8033:8034 ioctl c0306201 0 returned -14 [ 412.027434][ T8032] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 412.273982][ T4318] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 412.311233][ T4318] usb 5-1: USB disconnect, device number 22 [ 412.836726][ T8046] netlink: 'syz.2.1044': attribute type 10 has an invalid length. [ 413.183101][ T8046] device netdevsim0 entered promiscuous mode [ 413.204320][ T8046] team0: Port device netdevsim0 added [ 413.251554][ T8052] netlink: 'syz.2.1044': attribute type 10 has an invalid length. [ 413.350100][ T8052] device netdevsim0 left promiscuous mode [ 413.444904][ T4323] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 413.568691][ T8052] team0: Port device netdevsim0 removed [ 413.637993][ T8052] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 413.654882][ T4323] usb 5-1: Using ep0 maxpacket: 32 [ 413.667892][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.712006][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.742153][ T4323] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 413.780545][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.827909][ T4323] usb 5-1: config 0 descriptor?? [ 414.249613][ T4323] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 414.273607][ T4323] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 414.324571][ T4323] ft260 0003:0403:6030.0009: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 414.455849][ T4323] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 414.663703][ T4323] ft260 0003:0403:6030.0009: failed to retrieve system status [ 414.686833][ T4323] ft260: probe of 0003:0403:6030.0009 failed with error -32 [ 415.393182][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1052'. [ 415.578584][ T8068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.630430][ T8070] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 415.648752][ T8073] binder: 8072:8073 ioctl c0306201 0 returned -14 [ 415.685836][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 415.972795][ T8084] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 416.258370][ T4323] usb 5-1: USB disconnect, device number 23 [ 416.495005][ T4318] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 416.695035][ T4318] usb 3-1: Using ep0 maxpacket: 16 [ 416.717792][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 416.773291][ T4318] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 416.841719][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.892851][ T4318] usb 3-1: Product: syz [ 416.910216][ T4318] usb 3-1: Manufacturer: syz [ 416.947489][ T4318] usb 3-1: SerialNumber: syz [ 416.991740][ T4318] usb 3-1: config 0 descriptor?? [ 417.042047][ T4318] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 417.076014][ T4318] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 417.646069][ T4318] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 418.075847][ T4318] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 418.083899][ T4318] em28xx 3-1:0.0: board has no eeprom [ 418.425119][ T4318] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 418.474471][ T4318] em28xx 3-1:0.0: dvb set to bulk mode. [ 418.528086][ T8110] device syzkaller0 entered promiscuous mode [ 418.536214][ T4318] usb 3-1: USB disconnect, device number 13 [ 418.542533][ T4322] em28xx 3-1:0.0: Binding DVB extension [ 418.585667][ T4318] em28xx 3-1:0.0: Disconnecting em28xx [ 418.799774][ T4322] em28xx 3-1:0.0: Registering input extension [ 418.819110][ T4318] em28xx 3-1:0.0: Closing input extension [ 418.885428][ T4318] em28xx 3-1:0.0: Freeing device [ 419.746922][ T8138] device syzkaller0 entered promiscuous mode [ 422.504653][ T8194] device syzkaller0 entered promiscuous mode [ 422.736429][ T8179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.554315][ T8203] binder_alloc: 8201: pid 8201 spamming oneway? 2 buffers allocated for a total size of 5120 [ 423.618339][ T8205] binder: 8201:8205 ioctl c0306201 0 returned -14 [ 424.270603][ T8215] Bluetooth: MGMT ver 1.22 [ 424.864917][ T4322] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 425.056830][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.089723][ T4322] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 425.142680][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.189737][ T4322] usb 2-1: config 0 descriptor?? [ 425.424741][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.445435][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.498453][ T8241] device syzkaller0 entered promiscuous mode [ 425.659280][ T8244] binder_alloc: 8243: pid 8243 spamming oneway? 2 buffers allocated for a total size of 5120 [ 425.718145][ T4322] usbhid 2-1:0.0: can't add hid device: -71 [ 425.731380][ T4322] usbhid: probe of 2-1:0.0 failed with error -71 [ 425.746780][ T8244] binder: 8243:8244 ioctl c0306201 0 returned -14 [ 425.777868][ T4322] usb 2-1: USB disconnect, device number 12 [ 426.964529][ T8272] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 426.981773][ T8272] team0: Port device batadv2 added [ 427.924429][ T8282] binder_alloc: 8281: pid 8281 spamming oneway? 2 buffers allocated for a total size of 5120 [ 428.003694][ T8285] binder: 8281:8285 ioctl c0306201 0 returned -14 [ 428.239570][ T8290] Illegal XDP return value 4294967274 on prog (id 62) dev syz_tun, expect packet loss! [ 429.724200][ T8314] tipc: Enabled bearer , priority 0 [ 429.742905][ T8314] device syzkaller0 entered promiscuous mode [ 429.845600][ T8314] tipc: Resetting bearer [ 429.862014][ T8313] tipc: Resetting bearer [ 429.918950][ T8313] tipc: Disabling bearer [ 429.933318][ T8319] device syz_tun entered promiscuous mode [ 430.205368][ T8323] device syzkaller0 entered promiscuous mode [ 430.437062][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1138'. [ 431.515808][ T8348] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 431.641864][ T8348] team0: Port device batadv1 added [ 434.569540][ T8385] tipc: Cannot configure node identity twice [ 435.095496][ T4322] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 435.151699][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 435.284999][ T4322] usb 4-1: Using ep0 maxpacket: 16 [ 435.292528][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 435.327894][ T4322] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 435.352210][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.370532][ T4322] usb 4-1: Product: syz [ 435.390817][ T4322] usb 4-1: Manufacturer: syz [ 435.395938][ T4322] usb 4-1: SerialNumber: syz [ 435.415288][ T4322] usb 4-1: config 0 descriptor?? [ 435.436001][ T4322] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 435.464346][ T4322] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 435.565692][ T8407] netlink: 'syz.0.1155': attribute type 10 has an invalid length. [ 435.997747][ T8407] team0: Port device netdevsim0 added [ 436.038001][ T4322] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 436.457358][ T4322] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 436.486894][ T4322] em28xx 4-1:0.0: board has no eeprom [ 436.652554][ T8396] netlink: 'syz.0.1155': attribute type 10 has an invalid length. [ 436.814984][ T4322] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 436.836625][ T4322] em28xx 4-1:0.0: dvb set to bulk mode. [ 436.928906][ T4322] em28xx 4-1:0.0: Binding DVB extension [ 436.946028][ T4323] usb 4-1: USB disconnect, device number 25 [ 436.981998][ T4323] em28xx 4-1:0.0: Disconnecting em28xx [ 437.133251][ T8396] team0: Port device netdevsim0 removed [ 437.272818][ T8396] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 437.409413][ T4322] em28xx 4-1:0.0: Registering input extension [ 437.422474][ T4323] em28xx 4-1:0.0: Closing input extension [ 437.449828][ T4323] em28xx 4-1:0.0: Freeing device [ 437.546468][ T8428] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1164'. [ 437.679933][ T8430] binder_alloc: 8429: pid 8429 spamming oneway? 2 buffers allocated for a total size of 5120 [ 437.862940][ T8434] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 437.910788][ T8434] netlink: 'syz.2.1167': attribute type 10 has an invalid length. [ 437.936458][ T8434] device syz_tun entered promiscuous mode [ 438.005492][ T8434] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 438.152214][ T8434] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1167'. [ 439.501199][ T8466] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 439.512629][ T8466] device batadv2 entered promiscuous mode [ 439.525853][ T8466] team0: Port device batadv2 added [ 439.565209][ T125] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 439.655785][ T14] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 439.724925][ T125] usb 1-1: device descriptor read/64, error -71 [ 439.827850][ T8473] binder_alloc: 8472: pid 8472 spamming oneway? 2 buffers allocated for a total size of 5120 [ 439.854979][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 439.862876][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 439.890520][ T14] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 439.917229][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.938463][ T14] usb 3-1: Product: syz [ 439.964008][ T14] usb 3-1: Manufacturer: syz [ 439.978452][ T14] usb 3-1: SerialNumber: syz [ 439.992530][ T14] usb 3-1: config 0 descriptor?? [ 440.005133][ T125] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 440.018409][ T14] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 440.069261][ T14] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 440.174965][ T125] usb 1-1: device descriptor read/64, error -71 [ 440.186829][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.193281][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.335129][ T125] usb usb1-port1: attempt power cycle [ 440.618923][ T14] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 440.745086][ T125] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 440.806584][ T125] usb 1-1: device descriptor read/8, error -71 [ 441.033351][ T14] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 441.055035][ T14] em28xx 3-1:0.0: board has no eeprom [ 441.115078][ T125] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 441.166835][ T125] usb 1-1: device descriptor read/8, error -71 [ 441.285146][ T125] usb usb1-port1: unable to enumerate USB device [ 441.395049][ T14] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 441.404995][ T14] em28xx 3-1:0.0: dvb set to bulk mode. [ 441.462619][ T14] em28xx 3-1:0.0: Binding DVB extension [ 441.508987][ T4323] usb 3-1: USB disconnect, device number 14 [ 441.537652][ T4323] em28xx 3-1:0.0: Disconnecting em28xx [ 441.685834][ T14] em28xx 3-1:0.0: Registering input extension [ 441.698452][ T8500] binder: BINDER_SET_CONTEXT_MGR already set [ 441.705218][ T4323] em28xx 3-1:0.0: Closing input extension [ 441.732161][ T4323] em28xx 3-1:0.0: Freeing device [ 441.745079][ T8500] binder: 8499:8500 ioctl 4018620d 200000000040 returned -16 [ 441.981194][ T8506] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1191'. [ 442.352595][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1194'. [ 443.090776][ T8519] tipc: Enabled bearer , priority 0 [ 443.132712][ T8519] device syzkaller0 entered promiscuous mode [ 443.297031][ T8519] tipc: Resetting bearer [ 443.365114][ T8518] tipc: Resetting bearer [ 443.456340][ T8518] tipc: Disabling bearer [ 444.194964][ T4319] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 444.374894][ T125] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 444.395202][ T4319] usb 1-1: Using ep0 maxpacket: 16 [ 444.402451][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 444.426496][ T4319] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 444.438087][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.446715][ T4319] usb 1-1: Product: syz [ 444.450966][ T4319] usb 1-1: Manufacturer: syz [ 444.456091][ T4319] usb 1-1: SerialNumber: syz [ 444.464161][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.474000][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.487239][ T4319] usb 1-1: config 0 descriptor?? [ 444.496247][ T4319] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 444.506487][ T4319] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 444.555075][ T125] usb 3-1: device descriptor read/64, error -71 [ 444.609172][ T8524] batman_adv: batadv0: Interface deactivated: dummy0 [ 444.854896][ T125] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 445.014914][ T125] usb 3-1: device descriptor read/64, error -71 [ 445.116134][ T4319] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 445.135164][ T125] usb usb3-port1: attempt power cycle [ 445.214016][ T8524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.528713][ T4319] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 445.544911][ T4319] em28xx 1-1:0.0: board has no eeprom [ 445.565123][ T125] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 445.615786][ T125] usb 3-1: device descriptor read/8, error -71 [ 445.854963][ T4319] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 445.862971][ T4319] em28xx 1-1:0.0: dvb set to bulk mode. [ 445.872640][ T8524] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.881438][ T26] em28xx 1-1:0.0: Binding DVB extension [ 445.887234][ T8524] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.897056][ T8524] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.906150][ T125] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 445.910058][ T8524] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.967409][ T4319] usb 1-1: USB disconnect, device number 32 [ 445.976925][ T125] usb 3-1: device descriptor read/8, error -71 [ 445.995176][ T4319] em28xx 1-1:0.0: Disconnecting em28xx [ 446.079686][ T26] em28xx 1-1:0.0: Registering input extension [ 446.087190][ T4319] em28xx 1-1:0.0: Closing input extension [ 446.095939][ T125] usb usb3-port1: unable to enumerate USB device [ 446.107855][ T4319] em28xx 1-1:0.0: Freeing device [ 446.245005][ T8541] netlink: 'syz.1.1206': attribute type 13 has an invalid length. [ 446.266947][ T8541] netlink: 'syz.1.1206': attribute type 27 has an invalid length. [ 446.321933][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 447.164848][ T26] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 447.358001][ T26] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 447.376198][ T26] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 447.400758][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 447.424050][ T26] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 447.445594][ T26] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 447.462672][ T26] usb 2-1: Product: syz [ 447.471794][ T26] usb 2-1: Manufacturer: syz [ 447.482262][ T26] usb 2-1: SerialNumber: syz [ 447.503799][ T26] usb 2-1: config 0 descriptor?? [ 447.531874][ T26] usb 2-1: selecting invalid altsetting 0 [ 447.727132][ T26] usb 2-1: USB disconnect, device number 13 [ 447.791735][ T8582] device syzkaller1 entered promiscuous mode [ 448.225009][ T14] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 448.414920][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 448.422078][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 448.453069][ T14] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 448.492151][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.537624][ T14] usb 4-1: Product: syz [ 448.547787][ T14] usb 4-1: Manufacturer: syz [ 448.558619][ T14] usb 4-1: SerialNumber: syz [ 448.573303][ T14] usb 4-1: config 0 descriptor?? [ 448.592708][ T14] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 448.617352][ T14] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 449.142340][ T8606] netlink: 'syz.2.1224': attribute type 1 has an invalid length. [ 449.195026][ T14] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 449.608306][ T14] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 449.624092][ T14] em28xx 4-1:0.0: board has no eeprom [ 449.954964][ T14] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 449.966708][ T14] em28xx 4-1:0.0: dvb set to bulk mode. [ 449.979948][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1226'. [ 449.994279][ T14] em28xx 4-1:0.0: Binding DVB extension [ 450.050853][ T4318] usb 4-1: USB disconnect, device number 26 [ 450.066112][ T4318] em28xx 4-1:0.0: Disconnecting em28xx [ 450.387466][ T14] em28xx 4-1:0.0: Registering input extension [ 450.399750][ T4318] em28xx 4-1:0.0: Closing input extension [ 450.436101][ T4318] em28xx 4-1:0.0: Freeing device [ 450.459241][ T8617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1228'. [ 450.801973][ T8625] device bridge0 entered promiscuous mode [ 450.891651][ T8628] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 450.915108][ T8628] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 452.020579][ T8646] netlink: 'syz.0.1235': attribute type 1 has an invalid length. [ 452.294988][ T22] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 452.487628][ T22] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 452.506714][ T22] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 452.530688][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 452.546147][ T22] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 452.555948][ T22] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 452.564250][ T22] usb 4-1: Product: syz [ 452.568827][ T22] usb 4-1: Manufacturer: syz [ 452.573597][ T22] usb 4-1: SerialNumber: syz [ 452.581002][ T22] usb 4-1: config 0 descriptor?? [ 452.591970][ T22] usb 4-1: selecting invalid altsetting 0 [ 452.792612][ T125] usb 4-1: USB disconnect, device number 27 [ 453.555589][ T8693] netlink: 'syz.2.1250': attribute type 10 has an invalid length. [ 453.591386][ T8693] bond0: (slave netdevsim0): Releasing backup interface [ 453.634495][ T8693] device netdevsim0 entered promiscuous mode [ 453.647400][ T8693] team0: Port device netdevsim0 added [ 453.662758][ T8694] netlink: 'syz.2.1250': attribute type 10 has an invalid length. [ 453.699369][ T8694] device netdevsim0 left promiscuous mode [ 453.747338][ T8694] team0: Port device netdevsim0 removed [ 453.760045][ T8694] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 455.917574][ T8727] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 455.924193][ T8727] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 455.957866][ T8727] vhci_hcd vhci_hcd.0: Device attached [ 456.225021][ T4318] usb 41-1: new low-speed USB device number 8 using vhci_hcd [ 456.286599][ T14] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 456.391294][ T8728] vhci_hcd: connection reset by peer [ 456.398141][ T5282] vhci_hcd: stop threads [ 456.414871][ T5282] vhci_hcd: release socket [ 456.425234][ T5282] vhci_hcd: disconnect device [ 456.431210][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1268'. [ 456.495672][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 456.502191][ T14] usb 3-1: no configurations [ 456.509704][ T14] usb 3-1: can't read configurations, error -22 [ 456.604855][ T125] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 456.684975][ T14] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 456.806860][ T125] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 456.825053][ T125] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 456.861137][ T125] usb 1-1: config 0 interface 0 has no altsetting 0 [ 456.874945][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 456.881149][ T14] usb 3-1: no configurations [ 456.888424][ T125] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 456.910998][ T125] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 456.940850][ T125] usb 1-1: Product: syz [ 456.950753][ T125] usb 1-1: Manufacturer: syz [ 456.965825][ T125] usb 1-1: SerialNumber: syz [ 456.991670][ T125] usb 1-1: config 0 descriptor?? [ 456.996857][ T14] usb 3-1: can't read configurations, error -22 [ 456.999167][ T14] usb usb3-port1: attempt power cycle [ 457.051686][ T125] usb 1-1: selecting invalid altsetting 0 [ 457.060657][ T8748] tipc: Enabled bearer , priority 0 [ 457.081441][ T8748] device syzkaller0 entered promiscuous mode [ 457.154515][ T8749] netlink: 'syz.1.1269': attribute type 10 has an invalid length. [ 457.250792][ T125] usb 1-1: USB disconnect, device number 33 [ 457.425032][ T14] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 457.448639][ T8749] device netdevsim0 entered promiscuous mode [ 457.476680][ T8749] team0: Port device netdevsim0 added [ 457.485389][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 457.491402][ T14] usb 3-1: no configurations [ 457.497513][ T14] usb 3-1: can't read configurations, error -22 [ 457.515962][ T8746] netlink: 'syz.1.1269': attribute type 10 has an invalid length. [ 457.529298][ T8746] device netdevsim0 left promiscuous mode [ 457.622436][ T8746] team0: Port device netdevsim0 removed [ 457.638015][ T8746] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 457.650005][ T8751] tipc: Resetting bearer [ 457.656446][ T14] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 457.694511][ T8755] device syzkaller0 entered promiscuous mode [ 457.704653][ T8747] tipc: Resetting bearer [ 457.707630][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 457.737117][ T14] usb 3-1: no configurations [ 457.746580][ T14] usb 3-1: can't read configurations, error -22 [ 457.750191][ T8747] tipc: Disabling bearer [ 457.782973][ T14] usb usb3-port1: unable to enumerate USB device [ 461.038955][ T125] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 461.242156][ T125] usb 3-1: Using ep0 maxpacket: 16 [ 461.267590][ T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 461.295924][ T125] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 461.315161][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.323325][ T125] usb 3-1: Product: syz [ 461.327969][ T125] usb 3-1: Manufacturer: syz [ 461.333038][ T125] usb 3-1: SerialNumber: syz [ 461.356952][ T125] usb 3-1: config 0 descriptor?? [ 461.375148][ T125] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 461.385293][ T125] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 461.387045][ T4318] vhci_hcd: vhci_device speed not set [ 461.971587][ T125] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 462.075202][ T22] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 462.285411][ T22] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 462.304847][ T22] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 462.317482][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 462.328138][ T22] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 462.337506][ T22] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 462.346242][ T22] usb 2-1: Product: syz [ 462.350638][ T22] usb 2-1: Manufacturer: syz [ 462.356368][ T22] usb 2-1: SerialNumber: syz [ 462.374626][ T22] usb 2-1: config 0 descriptor?? [ 462.384412][ T125] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 462.393130][ T125] em28xx 3-1:0.0: board has no eeprom [ 462.403532][ T22] usb 2-1: selecting invalid altsetting 0 [ 462.620836][ T4318] usb 2-1: USB disconnect, device number 14 [ 462.684897][ T125] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 462.701955][ T125] em28xx 3-1:0.0: dvb set to bulk mode. [ 462.708578][ T22] em28xx 3-1:0.0: Binding DVB extension [ 462.750433][ T125] usb 3-1: USB disconnect, device number 23 [ 462.763935][ T125] em28xx 3-1:0.0: Disconnecting em28xx [ 462.812026][ T22] em28xx 3-1:0.0: Registering input extension [ 462.818865][ T125] em28xx 3-1:0.0: Closing input extension [ 462.838276][ T125] em28xx 3-1:0.0: Freeing device [ 464.618189][ T8792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 465.333367][ T8845] tipc: Enabled bearer , priority 0 [ 465.341156][ T8845] device syzkaller0 entered promiscuous mode [ 465.367691][ T125] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 465.381734][ T8845] tipc: Resetting bearer [ 465.398831][ T8844] tipc: Resetting bearer [ 465.442697][ T8844] tipc: Disabling bearer [ 465.534920][ T125] usb 5-1: device descriptor read/64, error -71 [ 465.825041][ T125] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 465.984885][ T14] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 465.994982][ T125] usb 5-1: device descriptor read/64, error -71 [ 466.115015][ T125] usb usb5-port1: attempt power cycle [ 466.201911][ T14] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 466.215057][ T14] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 466.226978][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 466.238937][ T14] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 466.252871][ T14] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 466.261411][ T14] usb 1-1: Product: syz [ 466.265791][ T14] usb 1-1: Manufacturer: syz [ 466.270625][ T14] usb 1-1: SerialNumber: syz [ 466.298643][ T14] usb 1-1: config 0 descriptor?? [ 466.309269][ T14] usb 1-1: selecting invalid altsetting 0 [ 466.366173][ T8862] netlink: 'syz.2.1306': attribute type 10 has an invalid length. [ 466.470280][ T8862] bond0: (slave netdevsim0): Releasing backup interface [ 466.544873][ T125] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 466.566479][ T14] usb 1-1: USB disconnect, device number 34 [ 466.584174][ T8862] device netdevsim0 entered promiscuous mode [ 466.595481][ T125] usb 5-1: device descriptor read/8, error -71 [ 466.624307][ T8862] team0: Port device netdevsim0 added [ 466.668988][ T8864] netlink: 'syz.2.1306': attribute type 10 has an invalid length. [ 466.753798][ T8864] device netdevsim0 left promiscuous mode [ 466.812401][ T8864] team0: Port device netdevsim0 removed [ 466.864895][ T125] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 466.913968][ T125] usb 5-1: device descriptor read/8, error -71 [ 466.940376][ T8864] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 466.986976][ T8874] device bridge_slave_1 left promiscuous mode [ 466.998667][ T8874] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.041312][ T8874] device bridge_slave_0 left promiscuous mode [ 467.055048][ T125] usb usb5-port1: unable to enumerate USB device [ 467.088869][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.066268][ T8911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.407748][ T8911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.491273][ T8922] netlink: 'syz.3.1326': attribute type 10 has an invalid length. [ 469.558838][ T8922] team0: Port device netdevsim0 added [ 469.592604][ T8919] netlink: 'syz.3.1326': attribute type 10 has an invalid length. [ 469.765070][ T8919] team0: Port device netdevsim0 removed [ 469.866042][ T8919] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 469.960818][ T8911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.194347][ T8911] bond0: (slave netdevsim0): Releasing backup interface [ 470.272998][ T8911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.507182][ T8911] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.545497][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 470.565008][ T4319] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 470.586461][ T8911] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.660440][ T8911] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.703344][ T8911] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.735009][ T4319] usb 2-1: device descriptor read/64, error -71 [ 471.004850][ T4319] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 471.164989][ T4319] usb 2-1: device descriptor read/64, error -71 [ 471.295510][ T4319] usb usb2-port1: attempt power cycle [ 471.594888][ T22] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 471.714932][ T4319] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 471.756172][ T4319] usb 2-1: device descriptor read/8, error -71 [ 471.786852][ T22] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 471.845435][ T22] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 471.906392][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 471.953896][ T22] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 471.980470][ T22] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 471.990849][ T22] usb 5-1: Product: syz [ 471.995641][ T22] usb 5-1: Manufacturer: syz [ 472.000586][ T22] usb 5-1: SerialNumber: syz [ 472.019056][ T22] usb 5-1: config 0 descriptor?? [ 472.034512][ T22] usb 5-1: selecting invalid altsetting 0 [ 472.040903][ T4319] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 472.087008][ T4319] usb 2-1: device descriptor read/8, error -71 [ 472.205237][ T4319] usb usb2-port1: unable to enumerate USB device [ 472.236405][ T14] usb 5-1: USB disconnect, device number 28 [ 473.010975][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1345'. [ 473.752337][ T8985] netlink: 'syz.1.1346': attribute type 21 has an invalid length. [ 473.775012][ T8985] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1346'. [ 474.675133][ T14] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 474.865020][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 474.877877][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.921658][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.935073][ T22] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 474.964004][ T14] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 475.010042][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.040006][ T14] usb 5-1: config 0 descriptor?? [ 475.145096][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 475.152794][ T22] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 475.182083][ T22] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 475.218875][ T22] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 475.250432][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.469789][ T14] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 475.502611][ T14] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 475.565961][ T14] ft260 0003:0403:6030.000A: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 475.664525][ T14] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 476.066104][ T14] ft260 0003:0403:6030.000A: failed to retrieve status: -32 [ 476.277933][ T9003] ft260 0003:0403:6030.000A: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 476.565138][ T22] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 476.687733][ T9003] ft260 0003:0403:6030.000A: failed to reset I2C controller: -108 [ 476.783456][ T22] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 476.804337][ T22] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 476.817270][ T22] usb 1-1: config 0 interface 0 has no altsetting 0 [ 476.834513][ T22] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 476.894833][ T22] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 476.945500][ T22] usb 1-1: Product: syz [ 476.949750][ T22] usb 1-1: Manufacturer: syz [ 476.954383][ T22] usb 1-1: SerialNumber: syz [ 477.007344][ T22] usb 1-1: config 0 descriptor?? [ 477.048087][ T22] usb 1-1: selecting invalid altsetting 0 [ 477.242761][ T4318] usb 1-1: USB disconnect, device number 35 [ 477.410493][ T9041] netlink: 'syz.1.1364': attribute type 21 has an invalid length. [ 477.423587][ T9041] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1364'. [ 477.518831][ T4319] usb 5-1: USB disconnect, device number 29 [ 477.639164][ T22] usb 3-1: USB disconnect, device number 24 [ 478.884849][ T4319] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 479.104976][ T4319] usb 4-1: Using ep0 maxpacket: 32 [ 479.119376][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.204969][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.243696][ T4319] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 479.294966][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.345398][ T4319] usb 4-1: config 0 descriptor?? [ 479.793910][ T4319] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 479.814993][ T4319] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 479.874229][ T4319] ft260 0003:0403:6030.000B: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 480.003716][ T4319] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 480.355103][ T4318] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 480.412100][ T4319] ft260 0003:0403:6030.000B: failed to retrieve status: -32 [ 480.564886][ T4318] usb 1-1: Using ep0 maxpacket: 8 [ 480.571942][ T4318] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 480.594519][ T4318] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 480.618880][ T4318] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 480.628533][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.669963][ T9073] ft260 0003:0403:6030.000B: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 480.798070][ T9096] netlink: 'syz.2.1385': attribute type 21 has an invalid length. [ 480.824639][ T9096] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1385'. [ 480.935197][ T9073] ft260 0003:0403:6030.000B: failed to reset I2C controller: -108 [ 481.494884][ T22] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 481.718931][ T22] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 481.752073][ T22] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 481.798148][ T4318] usb 4-1: USB disconnect, device number 28 [ 481.812411][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 481.892246][ T22] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 481.925555][ T22] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 481.933805][ T22] usb 2-1: Product: syz [ 481.955710][ T22] usb 2-1: Manufacturer: syz [ 481.960500][ T22] usb 2-1: SerialNumber: syz [ 481.967725][ T22] usb 2-1: config 0 descriptor?? [ 481.998005][ T22] usb 2-1: selecting invalid altsetting 0 [ 482.297053][ T4319] usb 2-1: USB disconnect, device number 19 [ 483.055245][ T4318] usb 1-1: USB disconnect, device number 36 [ 485.215049][ T4319] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 485.414971][ T4319] usb 5-1: Using ep0 maxpacket: 8 [ 485.422028][ T4319] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 485.454252][ T4319] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 485.519285][ T4319] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 485.557828][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.233034][ T9190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.363202][ T9204] device syzkaller0 entered promiscuous mode [ 487.404779][ T9204] net_ratelimit: 10 callbacks suppressed [ 487.404797][ T9204] 0: reclassify loop, rule prio 0, protocol 800 [ 487.929407][ T4319] usb 5-1: USB disconnect, device number 30 [ 488.525123][ T7871] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 488.715028][ T7871] usb 5-1: Using ep0 maxpacket: 16 [ 488.722324][ T7871] usb 5-1: config 0 has no interfaces? [ 488.743779][ T7871] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 488.781379][ T7871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.814901][ T7871] usb 5-1: Product: syz [ 488.837608][ T7871] usb 5-1: Manufacturer: syz [ 488.866732][ T7871] usb 5-1: SerialNumber: syz [ 488.929408][ T7871] usb 5-1: config 0 descriptor?? [ 489.307674][ T9246] device syzkaller0 entered promiscuous mode [ 489.605004][ T7871] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 489.664956][ T9255] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 489.683161][ T9255] device batadv3 entered promiscuous mode [ 489.700106][ T9255] team0: Port device batadv3 added [ 489.796321][ T7871] usb 2-1: Using ep0 maxpacket: 8 [ 489.803916][ T7871] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 489.818757][ T7871] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 489.829834][ T7871] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.830841][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1439'. [ 489.854174][ T7871] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 489.873994][ T7871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.925534][ T7871] usbtmc 2-1:16.0: bulk endpoints not found [ 491.155045][ T4319] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 491.315087][ T4319] usb 3-1: device descriptor read/64, error -71 [ 491.332508][ T4323] usb 5-1: USB disconnect, device number 31 [ 491.585154][ T4319] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 491.713843][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'. [ 491.747163][ T4319] usb 3-1: device descriptor read/64, error -71 [ 491.885312][ T4319] usb usb3-port1: attempt power cycle [ 492.138235][ T9290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.294976][ T4319] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 492.350757][ T4319] usb 3-1: device descriptor read/8, error -71 [ 492.357980][ T22] usb 2-1: USB disconnect, device number 20 [ 492.644900][ T4319] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 492.705694][ T4319] usb 3-1: device descriptor read/8, error -71 [ 492.825325][ T4319] usb usb3-port1: unable to enumerate USB device [ 492.953986][ T9323] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 493.048963][ T9323] team0: Port device batadv3 added [ 493.415861][ T9335] device syzkaller0 entered promiscuous mode [ 493.447603][ T9335] 0: reclassify loop, rule prio 0, protocol 700 [ 495.994932][ T4323] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 496.185334][ T4323] usb 5-1: Using ep0 maxpacket: 8 [ 496.196768][ T4323] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 496.234558][ T4323] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 496.265188][ T4323] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.314923][ T4323] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 496.374897][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.405258][ T4323] usbtmc 5-1:16.0: bulk endpoints not found [ 496.685569][ T9368] netlink: 'syz.3.1468': attribute type 21 has an invalid length. [ 496.706860][ T9368] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1468'. [ 498.680668][ T7871] usb 5-1: USB disconnect, device number 32 [ 498.903314][ T9431] netlink: 'syz.1.1484': attribute type 10 has an invalid length. [ 498.945201][ T9431] bond0: (slave netdevsim0): Releasing backup interface [ 499.042535][ T9431] device netdevsim0 entered promiscuous mode [ 499.051804][ T9431] team0: Port device netdevsim0 added [ 499.108052][ T9436] netlink: 'syz.1.1484': attribute type 10 has an invalid length. [ 499.259463][ T9436] device netdevsim0 left promiscuous mode [ 499.677294][ T9436] team0: Port device netdevsim0 removed [ 499.844598][ T9436] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 501.141728][ T9469] device syzkaller0 entered promiscuous mode [ 501.628601][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.635294][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.144933][ T7871] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 502.334922][ T7871] usb 2-1: Using ep0 maxpacket: 8 [ 502.346287][ T7871] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 502.380141][ T7871] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 502.426272][ T7871] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.513156][ T7871] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 502.523303][ T7871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.561150][ T7871] usbtmc 2-1:16.0: bulk endpoints not found [ 502.861677][ T9500] tipc: Enabled bearer , priority 0 [ 502.893162][ T9500] device syzkaller0 entered promiscuous mode [ 502.899872][ T7871] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 503.000832][ T9500] tipc: Resetting bearer [ 503.043172][ T9499] tipc: Resetting bearer [ 503.094884][ T7871] usb 5-1: Using ep0 maxpacket: 16 [ 503.118033][ T7871] usb 5-1: config 0 has no interfaces? [ 503.136138][ T9499] tipc: Disabling bearer [ 503.148213][ T7871] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 503.204886][ T7871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.235362][ T7871] usb 5-1: Product: syz [ 503.253184][ T7871] usb 5-1: Manufacturer: syz [ 503.259429][ T7871] usb 5-1: SerialNumber: syz [ 503.287283][ T7871] usb 5-1: config 0 descriptor?? [ 503.473821][ T9507] device syzkaller0 entered promiscuous mode [ 503.793496][ T9523] netlink: 'syz.3.1507': attribute type 10 has an invalid length. [ 503.907322][ T9523] bond0: (slave netdevsim0): Releasing backup interface [ 504.022703][ T9523] team0: Port device netdevsim0 added [ 504.064433][ T9530] netlink: 'syz.3.1507': attribute type 10 has an invalid length. [ 504.152360][ T9530] team0: Port device netdevsim0 removed [ 504.205896][ T9530] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 504.861378][ T26] usb 2-1: USB disconnect, device number 21 [ 505.139169][ T9549] netlink: 'syz.1.1514': attribute type 1 has an invalid length. [ 505.692524][ T14] usb 5-1: USB disconnect, device number 33 [ 505.993136][ T9570] device syzkaller0 entered promiscuous mode [ 507.428590][ T9602] tipc: Enabled bearer , priority 0 [ 507.452997][ T9602] device syzkaller0 entered promiscuous mode [ 507.578682][ T9601] tipc: Resetting bearer [ 507.655247][ T4318] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 507.664616][ T9601] tipc: Disabling bearer [ 507.865134][ T4318] usb 1-1: Using ep0 maxpacket: 8 [ 507.876982][ T4318] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 507.915620][ T4318] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 507.976021][ T4318] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.007317][ T4318] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 508.048251][ T4318] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 508.100307][ T4318] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 508.140751][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.204991][ T4318] usbtmc 1-1:16.0: bulk endpoints not found [ 508.263125][ T9618] netlink: 'syz.4.1526': attribute type 10 has an invalid length. [ 508.408277][ T9618] team0: Port device netdevsim0 added [ 508.441272][ T9627] device syzkaller0 entered promiscuous mode [ 508.563161][ T9631] netlink: 'syz.4.1526': attribute type 10 has an invalid length. [ 508.665834][ T9631] team0: Port device netdevsim0 removed [ 508.679753][ T9631] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 508.693295][ T9626] device syzkaller0 entered promiscuous mode [ 510.280407][ T4323] usb 1-1: USB disconnect, device number 37 [ 510.568387][ T9671] tipc: Enabled bearer , priority 0 [ 510.612434][ T9671] device syzkaller0 entered promiscuous mode [ 510.736707][ T9670] tipc: Resetting bearer [ 510.796510][ T9670] tipc: Disabling bearer [ 511.107618][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1542'. [ 511.545702][ T9694] device syzkaller0 entered promiscuous mode [ 511.715846][ T9706] tipc: Enabling of bearer rejected, failed to enable media [ 511.764428][ T9706] device syzkaller0 entered promiscuous mode [ 511.888666][ T9714] tipc: Enabled bearer , priority 0 [ 511.904875][ T4323] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 512.105463][ T4323] usb 1-1: Using ep0 maxpacket: 8 [ 512.115910][ T4323] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 512.134639][ T4323] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 512.151341][ T4323] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 512.171939][ T4323] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 512.191361][ T4323] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 512.224908][ T4323] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 512.251032][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.296944][ T4323] usbtmc 1-1:16.0: bulk endpoints not found [ 512.366136][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1555'. [ 512.416683][ T9733] fuse: Bad value for 'fd' [ 513.238139][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 514.450220][ T9766] device syzkaller0 entered promiscuous mode [ 514.541747][ T9768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1566'. [ 514.619114][ T22] usb 1-1: USB disconnect, device number 38 [ 514.815709][ T9768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.017761][ T9768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.187225][ T9768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.316221][ T9768] bond0: (slave netdevsim0): Releasing backup interface [ 515.359664][ T9768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.390417][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1572'. [ 515.634325][ T9768] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.685759][ T9768] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.750047][ T9768] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.772982][ T9768] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.124910][ T125] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 516.334923][ T125] usb 2-1: Using ep0 maxpacket: 16 [ 516.342400][ T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 516.378129][ T125] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 516.400419][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.421282][ T125] usb 2-1: Product: syz [ 516.432960][ T125] usb 2-1: Manufacturer: syz [ 516.448039][ T125] usb 2-1: SerialNumber: syz [ 516.464294][ T125] usb 2-1: config 0 descriptor?? [ 516.482163][ T125] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 516.493080][ T125] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 517.090147][ T125] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 517.425056][ T4323] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 517.503992][ T125] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 517.512339][ T125] em28xx 2-1:0.0: board has no eeprom [ 517.614997][ T4323] usb 1-1: Using ep0 maxpacket: 8 [ 517.622790][ T4323] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 517.642995][ T4323] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 517.675545][ T9821] netlink: 'syz.2.1579': attribute type 10 has an invalid length. [ 517.684395][ T4323] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 517.724558][ T4323] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 517.755539][ T4323] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 517.759127][ T9821] netlink: 'syz.2.1579': attribute type 10 has an invalid length. [ 517.795139][ T4323] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 517.804353][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.848406][ T4323] usbtmc 1-1:16.0: bulk endpoints not found [ 518.541108][ T9791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.595511][ T9797] em28xx 2-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 518.655102][ T125] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 518.663023][ T125] em28xx 2-1:0.0: dvb set to bulk mode. [ 518.695780][ T125] usb 2-1: USB disconnect, device number 22 [ 518.702693][ T125] em28xx 2-1:0.0: Disconnecting em28xx [ 518.762791][ T7409] em28xx 2-1:0.0: Binding DVB extension [ 518.829120][ T9828] tipc: Enabling of bearer rejected, failed to enable media [ 518.860964][ T9828] device syzkaller0 entered promiscuous mode [ 518.960130][ T7409] em28xx 2-1:0.0: Registering input extension [ 518.981481][ T125] em28xx 2-1:0.0: Closing input extension [ 519.008632][ T125] em28xx 2-1:0.0: Freeing device [ 519.561130][ T9839] netlink: 'syz.1.1585': attribute type 83 has an invalid length. [ 520.132426][ T4318] usb 1-1: USB disconnect, device number 39 [ 520.174264][ T9847] netlink: 'syz.1.1588': attribute type 1 has an invalid length. [ 520.364636][ T9854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1590'. [ 520.377997][ T9847] device bond1 entered promiscuous mode [ 520.385302][ T9847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 520.466276][ T9854] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.551474][ T9854] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.670584][ T9854] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.749700][ T9854] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.878308][ T9854] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.989379][ T9854] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.017500][ T9854] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.055009][ T4318] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 521.077258][ T9854] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.265108][ T4318] usb 2-1: Using ep0 maxpacket: 16 [ 521.276286][ T4318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.375060][ T4318] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.428438][ T4318] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 521.467723][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.497709][ T4318] usb 2-1: Product: syz [ 521.524918][ T4318] usb 2-1: Manufacturer: syz [ 521.529811][ T4318] usb 2-1: SerialNumber: syz [ 521.569356][ T4318] usb 2-1: config 0 descriptor?? [ 521.706337][ T9873] netlink: 'syz.2.1594': attribute type 10 has an invalid length. [ 521.742225][ T9873] netlink: 'syz.2.1594': attribute type 10 has an invalid length. [ 522.544963][ T4318] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 522.745111][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 522.752071][ T4318] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 522.785083][ T4318] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 522.825140][ T4318] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 522.871743][ T4318] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 522.905202][ T4318] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.979073][ T4318] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 523.011669][ T9900] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 523.028543][ T9900] team0: Port device batadv2 added [ 523.037474][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.080591][ T4318] usbtmc 4-1:16.0: bulk endpoints not found [ 524.029947][ T26] usb 2-1: USB disconnect, device number 23 [ 524.665163][ T4318] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 524.856792][ T4318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.880527][ T4318] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 524.923449][ T4318] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 524.956013][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.992355][ T4318] usb 2-1: config 0 descriptor?? [ 525.015147][ T4318] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 525.092364][ T9922] device syzkaller0 entered promiscuous mode [ 525.218193][ T4317] usb 2-1: USB disconnect, device number 24 [ 525.282839][ T7409] usb 4-1: USB disconnect, device number 29 [ 525.824977][ T4317] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 526.045046][ T4317] usb 2-1: Using ep0 maxpacket: 32 [ 526.052522][ T4317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.093443][ T4317] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.149778][ T4317] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 526.197112][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.253611][ T4317] usb 2-1: config 0 descriptor?? [ 526.289186][ T4317] ldusb 2-1:0.0: Interrupt in endpoint not found [ 526.316340][ T4317] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 526.488967][ T4317] usb 2-1: USB disconnect, device number 25 [ 526.761072][ T9944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.978582][ T9944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.096967][ T9936] netlink: 'syz.3.1613': attribute type 21 has an invalid length. [ 527.166244][ T9936] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1613'. [ 527.372119][ T9944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.567792][ T9944] bond0: (slave netdevsim0): Releasing backup interface [ 527.665160][ T9944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.814961][ T7409] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 527.882231][ T9944] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.923347][ T9944] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.960266][ T9944] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.003212][ T9944] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.014943][ T7409] usb 1-1: Using ep0 maxpacket: 8 [ 528.022450][ T7409] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 528.052726][ T7409] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.100732][ T7409] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 528.180510][ T7409] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 528.212697][ T7409] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.303989][ T7409] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 528.334955][ T7409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.385347][ T7409] usbtmc 1-1:16.0: bulk endpoints not found [ 528.708701][ T9969] device syzkaller0 entered promiscuous mode [ 528.946932][ T9971] device syzkaller0 entered promiscuous mode [ 529.974979][ T7409] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 530.157122][ T7409] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.167828][ T7409] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.181264][ T7409] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 530.190751][ T7409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.210193][ T7409] usb 4-1: config 0 descriptor?? [ 530.221786][ T7409] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 530.424212][ T7409] usb 4-1: USB disconnect, device number 30 [ 530.506315][ T4320] usb 1-1: USB disconnect, device number 40 [ 530.714148][ T9984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.024842][ T7409] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 531.074926][ T4320] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 531.163086][ T9999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.214859][ T7409] usb 4-1: Using ep0 maxpacket: 32 [ 531.222339][ T7409] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.243564][ T7409] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.274915][ T7409] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 531.287287][ T4320] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 531.304803][ T7409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.313057][ T4320] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 531.336889][ T7409] usb 4-1: config 0 descriptor?? [ 531.345011][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.354077][ T7409] ldusb 4-1:0.0: Interrupt in endpoint not found [ 531.367349][ T9999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.380284][ T4320] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 531.395762][ T7409] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 531.412527][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 531.422834][ T4320] usb 1-1: Product: syz [ 531.427166][ T4320] usb 1-1: Manufacturer: syz [ 531.432060][ T4320] usb 1-1: SerialNumber: syz [ 531.450353][ T4320] usb 1-1: config 0 descriptor?? [ 531.472399][ T4320] usb 1-1: selecting invalid altsetting 0 [ 531.518098][ T9999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.568312][ T7409] usb 4-1: USB disconnect, device number 31 [ 531.627419][ T9999] bond0: (slave netdevsim0): Releasing backup interface [ 531.641216][ T9999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.681854][ T7871] usb 1-1: USB disconnect, device number 41 [ 531.799550][ T9999] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.825986][ T9999] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.835812][T10008] device syzkaller0 entered promiscuous mode [ 531.852394][ T9999] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.880142][ T9999] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.211771][T10016] device syzkaller0 entered promiscuous mode [ 532.425040][ T4317] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 532.615473][ T4317] usb 2-1: Using ep0 maxpacket: 8 [ 532.623034][ T4317] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 532.635044][ T4317] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 532.645497][ T4317] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 532.656091][ T4317] usb 2-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 532.667150][ T4317] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.693875][ T4317] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 532.713358][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.758508][ T4317] usbtmc 2-1:16.0: bulk endpoints not found [ 533.202568][T10037] bond0: (slave netdevsim0): Releasing backup interface [ 533.725193][ T125] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 533.946671][ T125] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 533.970515][ T125] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 534.006113][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.036596][ T125] usb 5-1: config 0 descriptor?? [ 534.061913][ T125] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 534.261253][ T125] usb 5-1: USB disconnect, device number 34 [ 534.360772][T10062] netlink: 'syz.2.1655': attribute type 10 has an invalid length. [ 534.834871][ T125] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 535.034932][ T125] usb 5-1: Using ep0 maxpacket: 32 [ 535.042930][ T125] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 535.098351][ T125] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 535.133676][ T4317] usb 2-1: USB disconnect, device number 26 [ 535.157092][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.210152][ T125] usb 5-1: config 0 descriptor?? [ 535.240792][ T125] ldusb 5-1:0.0: Interrupt in endpoint not found [ 535.272899][ T125] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 535.437258][ T4317] usb 5-1: USB disconnect, device number 35 [ 535.652752][T10072] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 535.660940][T10072] device batadv3 entered promiscuous mode [ 535.721493][T10072] team0: Port device batadv3 added [ 536.243936][T10079] tipc: Enabled bearer , priority 0 [ 536.309365][T10079] tipc: Resetting bearer [ 536.388123][T10078] tipc: Disabling bearer [ 536.670155][T10092] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.816497][T10092] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.914129][T10097] device syzkaller0 entered promiscuous mode [ 536.953005][T10092] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.014838][ T7409] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 537.050190][T10092] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.238245][ T7409] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 537.266685][ T7409] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 537.283335][T10092] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.361532][ T7409] usb 1-1: config 0 interface 0 has no altsetting 0 [ 537.385422][T10092] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.432388][T10092] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.443203][ T7409] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 537.460386][T10092] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.509913][ T7409] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 537.531107][ T7409] usb 1-1: Product: syz [ 537.535497][ T7409] usb 1-1: Manufacturer: syz [ 537.545048][ T7409] usb 1-1: SerialNumber: syz [ 537.552298][ T7409] usb 1-1: config 0 descriptor?? [ 537.563386][ T7409] usb 1-1: selecting invalid altsetting 0 [ 537.774142][ T7409] usb 1-1: USB disconnect, device number 42 [ 538.027832][T10108] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.094861][ T4320] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 538.189749][T10108] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.279457][T10108] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.294842][ T4320] usb 2-1: Using ep0 maxpacket: 8 [ 538.301886][ T4320] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 538.330623][ T4320] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.365516][ T4320] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 538.377723][ T4320] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 538.388125][ T4320] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 538.408324][ T4320] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.437474][ T4320] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 538.449596][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.474870][ T4320] usbtmc: probe of 2-1:16.0 failed with error -22 [ 538.477180][T10108] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.675772][T10108] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.703711][T10108] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.721249][T10108] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.738439][T10108] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.755145][ T4256] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 538.964547][ T4256] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 538.994445][ T4256] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 539.014316][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.043002][ T4256] usb 4-1: config 0 descriptor?? [ 539.067659][ T4256] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 539.271190][ T7409] usb 4-1: USB disconnect, device number 32 [ 539.371817][T10138] device syzkaller0 entered promiscuous mode [ 539.448875][T10135] netlink: 'syz.4.1672': attribute type 10 has an invalid length. [ 539.884883][ T7409] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 540.084974][ T7409] usb 4-1: Using ep0 maxpacket: 32 [ 540.092444][ T7409] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 540.137501][ T7409] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 540.170956][ T7409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.217047][ T7409] usb 4-1: config 0 descriptor?? [ 540.246432][ T7409] ldusb 4-1:0.0: Interrupt in endpoint not found [ 540.253858][ T7409] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 540.426788][ T7409] usb 4-1: USB disconnect, device number 33 [ 540.825412][ T7871] usb 2-1: USB disconnect, device number 27 [ 541.335041][ T7871] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 541.476681][T10163] device syzkaller0 entered promiscuous mode [ 541.526809][ T7871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.550337][ T7871] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 541.631396][ T7871] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 541.661454][ T7871] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 541.674919][ T7871] usb 1-1: Product: syz [ 541.679190][ T7871] usb 1-1: Manufacturer: syz [ 541.683841][ T7871] usb 1-1: SerialNumber: syz [ 541.717326][ T7871] usb 1-1: config 0 descriptor?? [ 541.983931][ T4319] usb 1-1: USB disconnect, device number 43 [ 542.700458][T10172] device syzkaller0 entered promiscuous mode [ 543.408885][T10187] netlink: 'syz.1.1690': attribute type 10 has an invalid length. [ 543.704983][ T4320] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 543.894946][ T4320] usb 5-1: Using ep0 maxpacket: 8 [ 543.902479][ T4320] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 543.922602][ T4320] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.947857][ T4320] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 543.986706][ T4320] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 544.013626][ T4320] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 544.039674][ T4320] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.101221][ T4320] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 544.135131][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.205413][ T4320] usbtmc: probe of 5-1:16.0 failed with error -22 [ 544.355018][ T4323] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 544.561829][ T4323] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 544.574908][ T4320] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 544.583291][ T4323] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 544.613998][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.656169][ T4323] usb 1-1: config 0 descriptor?? [ 544.686474][ T4323] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 544.774898][ T4320] usb 3-1: Using ep0 maxpacket: 16 [ 544.782350][ T4320] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.822962][ T4320] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 544.846804][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.866904][ T4323] usb 1-1: USB disconnect, device number 44 [ 544.894892][ T4320] usb 3-1: Product: syz [ 544.909610][ T4320] usb 3-1: Manufacturer: syz [ 544.919776][ T4320] usb 3-1: SerialNumber: syz [ 544.943814][ T4320] usb 3-1: config 0 descriptor?? [ 545.256702][T10209] tipc: Enabling of bearer rejected, already enabled [ 545.313924][T10209] tipc: Resetting bearer [ 545.435137][ T4323] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 545.615073][ T4323] usb 1-1: Using ep0 maxpacket: 32 [ 545.622578][ T4323] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 545.633815][ T4323] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 545.643352][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.661011][ T4323] usb 1-1: config 0 descriptor?? [ 545.674859][ T4323] ldusb 1-1:0.0: Interrupt in endpoint not found [ 545.682741][ T4323] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 545.871658][ T4317] usb 1-1: USB disconnect, device number 45 [ 546.438346][ T4317] usb 5-1: USB disconnect, device number 36 [ 546.664900][ T7409] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 546.681720][T10231] device syzkaller0 entered promiscuous mode [ 546.866507][ T7409] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.890248][ T7409] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 546.916730][ T7409] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 546.934962][ T7409] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 546.943558][ T7409] usb 4-1: Product: syz [ 546.953679][ T7409] usb 4-1: Manufacturer: syz [ 546.963789][ T7409] usb 4-1: SerialNumber: syz [ 546.990677][ T7409] usb 4-1: config 0 descriptor?? [ 547.215446][ T7409] usb 4-1: USB disconnect, device number 34 [ 547.409321][ T4320] usb 3-1: USB disconnect, device number 29 [ 547.529907][T10241] fuse: Bad value for 'group_id' [ 548.106086][T10261] device syzkaller0 entered promiscuous mode [ 548.345930][ T4320] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 548.410899][T10266] netlink: 'syz.2.1716': attribute type 1 has an invalid length. [ 548.419018][ T4323] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 548.499104][T10266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.547356][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.563127][T10269] bond2: (slave geneve2): making interface the new active one [ 548.573474][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.583952][ T4320] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 548.593300][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.603679][ T4320] usb 4-1: config 0 descriptor?? [ 548.612495][T10269] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 548.625661][ T4323] usb 2-1: Using ep0 maxpacket: 8 [ 548.646319][ T4323] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 548.669503][ T4323] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.700223][ T4323] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 548.720730][ T4323] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 548.741265][ T4323] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 548.773421][ T4323] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.804656][ T4323] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 548.824641][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.843115][ T4320] usbhid 4-1:0.0: can't add hid device: -71 [ 548.852505][ T4320] usbhid: probe of 4-1:0.0 failed with error -71 [ 548.863408][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 548.879685][ T4323] usbtmc: probe of 2-1:16.0 failed with error -22 [ 548.894119][ T4320] usb 4-1: USB disconnect, device number 35 [ 548.894302][T10272] tipc: Enabled bearer , priority 0 [ 548.993983][T10271] tipc: Resetting bearer [ 549.069672][T10270] tipc: Disabling bearer [ 549.465174][ T4320] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 549.664944][ T4320] usb 4-1: Using ep0 maxpacket: 32 [ 549.672532][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.693923][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.723098][ T4320] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 549.736062][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.766131][ T4320] usb 4-1: config 0 descriptor?? [ 549.786054][ T4320] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 549.834510][ T4320] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 549.984050][T10259] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 549.997318][ T4317] usb 4-1: USB disconnect, device number 36 [ 550.020993][ T4317] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 550.304897][ T4320] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 550.526574][ T4320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.543026][ T4320] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 550.586636][ T4320] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 550.656485][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 550.690673][T10306] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1727'. [ 550.701728][ T4320] usb 3-1: Product: syz [ 550.741752][ T4320] usb 3-1: Manufacturer: syz [ 550.746944][ T4320] usb 3-1: SerialNumber: syz [ 550.762721][ T4320] usb 3-1: config 0 descriptor?? [ 550.780959][T10306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.835688][T10306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.847371][T10306] bond0 (unregistering): Released all slaves [ 550.971377][ T4323] usb 3-1: USB disconnect, device number 30 [ 551.142389][ T14] usb 2-1: USB disconnect, device number 28 [ 552.311188][T10332] tipc: Enabling of bearer rejected, already enabled [ 552.569439][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 552.611960][T10338] device syzkaller0 entered promiscuous mode [ 552.622044][T10337] ================================================================== [ 552.630362][T10337] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x23a/0x240 [ 552.639372][T10337] Read of size 2 at addr ffff8880296c69fb by task syz.1.1740/10337 [ 552.647307][T10337] [ 552.649680][T10337] CPU: 0 PID: 10337 Comm: syz.1.1740 Not tainted syzkaller #0 [ 552.657213][T10337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 552.667362][T10337] Call Trace: [ 552.670698][T10337] [ 552.673721][T10337] dump_stack_lvl+0x188/0x24e [ 552.678465][T10337] ? __lock_acquire+0x7d10/0x7d10 [ 552.683648][T10337] ? show_regs_print_info+0x12/0x12 [ 552.688974][T10337] ? load_image+0x400/0x400 [ 552.693540][T10337] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 552.699070][T10337] ? __virt_addr_valid+0x188/0x540 [ 552.704385][T10337] ? __virt_addr_valid+0x465/0x540 [ 552.709567][T10337] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 552.715869][T10337] print_report+0xa8/0x210 [ 552.720431][T10337] kasan_report+0x10b/0x140 [ 552.725079][T10337] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 552.731398][T10337] ieee80211_monitor_select_queue+0x23a/0x240 [ 552.737524][T10337] ? ieee80211_activate_links_work+0x60/0x60 [ 552.743601][T10337] netdev_core_pick_tx+0x118/0x340 [ 552.748782][T10337] __dev_queue_xmit+0xb19/0x37c0 [ 552.753792][T10337] ? __dev_queue_xmit+0x26b/0x37c0 [ 552.759155][T10337] ? netdev_core_pick_tx+0x340/0x340 [ 552.764497][T10337] ? virtio_net_hdr_to_skb+0xac2/0x1290 [ 552.770102][T10337] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 552.776321][T10337] ? skb_copy_datagram_from_iter+0x5e0/0x690 [ 552.782470][T10337] packet_sendmsg+0x3bc3/0x4e60 [ 552.787403][T10337] ? __might_sleep+0xd0/0xd0 [ 552.792044][T10337] ? verify_lock_unused+0x140/0x140 [ 552.797408][T10337] ? aa_sk_perm+0x81f/0x950 [ 552.802054][T10337] ? packet_getsockopt+0x9a0/0x9a0 [ 552.807286][T10337] ? aa_sock_msg_perm+0x94/0x150 [ 552.812273][T10337] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 552.817612][T10337] ? security_socket_sendmsg+0x7c/0xa0 [ 552.823154][T10337] ? packet_getsockopt+0x9a0/0x9a0 [ 552.828328][T10337] ____sys_sendmsg+0x5be/0x970 [ 552.833162][T10337] ? __sys_sendmsg_sock+0x30/0x30 [ 552.838266][T10337] ? __import_iovec+0x315/0x500 [ 552.843201][T10337] ? import_iovec+0x6f/0xa0 [ 552.847765][T10337] ___sys_sendmsg+0x2a2/0x360 [ 552.852525][T10337] ? try_to_wake_up+0x67c/0x1080 [ 552.857646][T10337] ? __sys_sendmsg+0x290/0x290 [ 552.862605][T10337] __se_sys_sendmsg+0x1bb/0x2a0 [ 552.867696][T10337] ? __x64_sys_sendmsg+0x80/0x80 [ 552.872712][T10337] ? lockdep_hardirqs_on+0x94/0x140 [ 552.877991][T10337] do_syscall_64+0x4c/0xa0 [ 552.882567][T10337] ? clear_bhb_loop+0x60/0xb0 [ 552.887393][T10337] ? clear_bhb_loop+0x60/0xb0 [ 552.892230][T10337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.898224][T10337] RIP: 0033:0x7fc09479c819 [ 552.902699][T10337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.922458][T10337] RSP: 002b:00007fc0956ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.930949][T10337] RAX: ffffffffffffffda RBX: 00007fc094a15fa0 RCX: 00007fc09479c819 [ 552.939166][T10337] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 552.947193][T10337] RBP: 00007fc094832c91 R08: 0000000000000000 R09: 0000000000000000 [ 552.955315][T10337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.963448][T10337] R13: 00007fc094a16038 R14: 00007fc094a15fa0 R15: 00007ffca7ba4358 [ 552.971668][T10337] [ 552.974828][T10337] [ 552.977193][T10337] Allocated by task 3637: [ 552.981785][T10337] kasan_set_track+0x4b/0x70 [ 552.986564][T10337] __kasan_slab_alloc+0x6b/0x80 [ 552.991482][T10337] slab_post_alloc_hook+0x4b/0x480 [ 552.996649][T10337] kmem_cache_alloc+0x123/0x2f0 [ 553.001549][T10337] security_file_alloc+0x30/0x110 [ 553.006747][T10337] __alloc_file+0xc2/0x230 [ 553.011211][T10337] alloc_empty_file+0x90/0x180 [ 553.016195][T10337] path_openat+0x10f/0x2ee0 [ 553.020831][T10337] do_filp_open+0x1f1/0x430 [ 553.025387][T10337] do_sys_openat2+0x150/0x4b0 [ 553.030122][T10337] __x64_sys_openat+0x135/0x160 [ 553.035043][T10337] do_syscall_64+0x4c/0xa0 [ 553.039567][T10337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.045695][T10337] [ 553.048320][T10337] Freed by task 3637: [ 553.052337][T10337] kasan_set_track+0x4b/0x70 [ 553.057072][T10337] kasan_save_free_info+0x2d/0x50 [ 553.062144][T10337] ____kasan_slab_free+0x126/0x1e0 [ 553.067320][T10337] slab_free_freelist_hook+0x131/0x1a0 [ 553.072838][T10337] kmem_cache_free+0xf7/0x290 [ 553.077566][T10337] __fput+0x619/0x920 [ 553.081687][T10337] task_work_run+0x1d0/0x260 [ 553.086371][T10337] exit_to_user_mode_loop+0xe6/0x110 [ 553.091739][T10337] exit_to_user_mode_prepare+0xee/0x180 [ 553.097702][T10337] syscall_exit_to_user_mode+0x16/0x40 [ 553.103517][T10337] do_syscall_64+0x58/0xa0 [ 553.108231][T10337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.114199][T10337] [ 553.116671][T10337] The buggy address belongs to the object at ffff8880296c69a0 [ 553.116671][T10337] which belongs to the cache lsm_file_cache of size 80 [ 553.131483][T10337] The buggy address is located 11 bytes to the right of [ 553.131483][T10337] 80-byte region [ffff8880296c69a0, ffff8880296c69f0) [ 553.145188][T10337] [ 553.147578][T10337] The buggy address belongs to the physical page: [ 553.154052][T10337] page:ffffea0000a5b180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x296c6 [ 553.164272][T10337] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 553.171900][T10337] raw: 00fff00000000200 ffffea000075c840 dead000000000004 ffff888140009140 [ 553.180893][T10337] raw: 0000000000000000 0000000000240024 00000001ffffffff 0000000000000000 [ 553.189612][T10337] page dumped because: kasan: bad access detected [ 553.196090][T10337] page_owner tracks the page as allocated [ 553.201863][T10337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 3637, tgid 3637 (udevd), ts 31807581672, free_ts 31760631115 [ 553.219813][T10337] post_alloc_hook+0x173/0x1a0 [ 553.224729][T10337] get_page_from_freelist+0x1a1e/0x1ab0 [ 553.230348][T10337] __alloc_pages+0x1ec/0x4f0 [ 553.235122][T10337] alloc_slab_page+0x5d/0x160 [ 553.239948][T10337] new_slab+0x87/0x2c0 [ 553.244083][T10337] ___slab_alloc+0xbc6/0x1240 [ 553.248908][T10337] kmem_cache_alloc+0x1b7/0x2f0 [ 553.253843][T10337] security_file_alloc+0x30/0x110 [ 553.259022][T10337] __alloc_file+0xc2/0x230 [ 553.263526][T10337] alloc_empty_file+0x90/0x180 [ 553.268350][T10337] path_openat+0x10f/0x2ee0 [ 553.272907][T10337] do_filp_open+0x1f1/0x430 [ 553.277645][T10337] do_sys_openat2+0x150/0x4b0 [ 553.282593][T10337] __x64_sys_openat+0x135/0x160 [ 553.287510][T10337] do_syscall_64+0x4c/0xa0 [ 553.291989][T10337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.298032][T10337] page last free stack trace: [ 553.302775][T10337] free_unref_page_prepare+0x8b4/0x9a0 [ 553.308300][T10337] free_unref_page+0x2e/0x3f0 [ 553.313046][T10337] __unfreeze_partials+0x1a5/0x200 [ 553.318208][T10337] put_cpu_partial+0x17c/0x250 [ 553.323110][T10337] qlist_free_all+0x76/0xe0 [ 553.327747][T10337] kasan_quarantine_reduce+0x144/0x160 [ 553.333262][T10337] __kasan_slab_alloc+0x1e/0x80 [ 553.338173][T10337] slab_post_alloc_hook+0x4b/0x480 [ 553.343352][T10337] kmem_cache_alloc+0x123/0x2f0 [ 553.348261][T10337] security_file_alloc+0x30/0x110 [ 553.353351][T10337] __alloc_file+0xc2/0x230 [ 553.357823][T10337] alloc_empty_file+0x90/0x180 [ 553.362639][T10337] path_openat+0x10f/0x2ee0 [ 553.367204][T10337] do_filp_open+0x1f1/0x430 [ 553.371821][T10337] do_sys_openat2+0x150/0x4b0 [ 553.376558][T10337] __x64_sys_openat+0x135/0x160 [ 553.381510][T10337] [ 553.383869][T10337] Memory state around the buggy address: [ 553.389540][T10337] ffff8880296c6880: fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb [ 553.397676][T10337] ffff8880296c6900: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 553.405790][T10337] >ffff8880296c6980: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fc fc [ 553.413940][T10337] ^ [ 553.421992][T10337] ffff8880296c6a00: fc fc fa fb fb fb fb fb fb fb fb fb fc fc fc fc [ 553.430143][T10337] ffff8880296c6a80: fa fb fb fb fb fb fb fb fb fb fc fc fc fc fa fb [ 553.438366][T10337] ================================================================== [ 553.446799][T10337] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 553.454049][T10337] CPU: 0 PID: 10337 Comm: syz.1.1740 Not tainted syzkaller #0 [ 553.461653][T10337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 553.471761][T10337] Call Trace: [ 553.475076][T10337] [ 553.478050][T10337] dump_stack_lvl+0x188/0x24e [ 553.482875][T10337] ? memcpy+0x3c/0x60 [ 553.486952][T10337] ? show_regs_print_info+0x12/0x12 [ 553.492206][T10337] ? load_image+0x400/0x400 [ 553.496770][T10337] panic+0x2e5/0x730 [ 553.500733][T10337] ? asm_common_interrupt+0x22/0x40 [ 553.506086][T10337] ? bpf_jit_dump+0xd0/0xd0 [ 553.510725][T10337] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 553.516802][T10337] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 553.522845][T10337] ? _raw_spin_unlock+0x40/0x40 [ 553.528120][T10337] check_panic_on_warn+0x80/0xa0 [ 553.533104][T10337] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 553.539585][T10337] end_report+0x66/0x110 [ 553.543925][T10337] kasan_report+0x118/0x140 [ 553.548472][T10337] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 553.554949][T10337] ieee80211_monitor_select_queue+0x23a/0x240 [ 553.561263][T10337] ? ieee80211_activate_links_work+0x60/0x60 [ 553.567284][T10337] netdev_core_pick_tx+0x118/0x340 [ 553.572496][T10337] __dev_queue_xmit+0xb19/0x37c0 [ 553.577500][T10337] ? __dev_queue_xmit+0x26b/0x37c0 [ 553.582661][T10337] ? netdev_core_pick_tx+0x340/0x340 [ 553.588080][T10337] ? virtio_net_hdr_to_skb+0xac2/0x1290 [ 553.593801][T10337] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 553.600170][T10337] ? skb_copy_datagram_from_iter+0x5e0/0x690 [ 553.606220][T10337] packet_sendmsg+0x3bc3/0x4e60 [ 553.611279][T10337] ? __might_sleep+0xd0/0xd0 [ 553.615952][T10337] ? verify_lock_unused+0x140/0x140 [ 553.621290][T10337] ? aa_sk_perm+0x81f/0x950 [ 553.625929][T10337] ? packet_getsockopt+0x9a0/0x9a0 [ 553.631234][T10337] ? aa_sock_msg_perm+0x94/0x150 [ 553.636219][T10337] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 553.641563][T10337] ? security_socket_sendmsg+0x7c/0xa0 [ 553.647241][T10337] ? packet_getsockopt+0x9a0/0x9a0 [ 553.652387][T10337] ____sys_sendmsg+0x5be/0x970 [ 553.657187][T10337] ? __sys_sendmsg_sock+0x30/0x30 [ 553.662591][T10337] ? __import_iovec+0x315/0x500 [ 553.667470][T10337] ? import_iovec+0x6f/0xa0 [ 553.672034][T10337] ___sys_sendmsg+0x2a2/0x360 [ 553.676779][T10337] ? try_to_wake_up+0x67c/0x1080 [ 553.681760][T10337] ? __sys_sendmsg+0x290/0x290 [ 553.686570][T10337] __se_sys_sendmsg+0x1bb/0x2a0 [ 553.691558][T10337] ? __x64_sys_sendmsg+0x80/0x80 [ 553.696563][T10337] ? lockdep_hardirqs_on+0x94/0x140 [ 553.701826][T10337] do_syscall_64+0x4c/0xa0 [ 553.706282][T10337] ? clear_bhb_loop+0x60/0xb0 [ 553.711088][T10337] ? clear_bhb_loop+0x60/0xb0 [ 553.715818][T10337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.721908][T10337] RIP: 0033:0x7fc09479c819 [ 553.726375][T10337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.746804][T10337] RSP: 002b:00007fc0956ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.755518][T10337] RAX: ffffffffffffffda RBX: 00007fc094a15fa0 RCX: 00007fc09479c819 [ 553.763814][T10337] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 553.772074][T10337] RBP: 00007fc094832c91 R08: 0000000000000000 R09: 0000000000000000 [ 553.780111][T10337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.788280][T10337] R13: 00007fc094a16038 R14: 00007fc094a15fa0 R15: 00007ffca7ba4358 [ 553.796385][T10337] [ 553.800104][T10337] Kernel Offset: disabled [ 553.804478][T10337] Rebooting in 86400 seconds..