last executing test programs: 39m56.518680043s ago: executing program 0 (id=1): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000180)="0912f7b179d91aebdd36958c70", 0xd}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="ac2032d95fa30d76efd223848bb74a174682c1816c8d1e10209d95f1eec34f520023d0bc0f1f41aeb00a7cc375ff368441dc0f389683b198b0e7080f791292aad935fde5a325365277753f77c88f30318189f27edfa0e6f438b6ff486eddbde81087c7ca13369b6d3d8972fdde9de5560297f8", 0x73}, {&(0x7f0000000400)="fcea50680173131d5d451188b94e1cd1e64f3bbca06484be2509a5dbeed2631c2e256baea8b797b7220fc9fdeb513a986078e79cb96c5e09195f4f22c7b1d7805d1c0ae706582ee358416f31046d602805aeee7bd33eada48a61d413467290820fe82baab19fbe2b8547f0433a8a7139b8ad84cc3e8cc66745f8c98cd80bc77f35d96710ead4cbd59ff847b4eb33fd8a88f296e1715c3b0dbd5af99ac7ffcc6b8ed551bef240aec47ec135d167e7079b09a3b33e0215a9", 0xb7}, {&(0x7f0000000500)}, {&(0x7f0000000640)="5e4db21c69bfe929de9a26285a77f9228a8c404887a8c83811c670b0d074cce6b8cc438e4cd9caf25a6f7385d6e21b869deecde1eeb35409a43d677778d16efed00b496b168caf8b5cdfffebd01b8ec910ec35c536b2c04c96f56d42a92d926b6fde9f70f744a2f6c911b3b15962a0d68246506c9d0094073d11608b6ba79e3ac495b36b2d85", 0x86}], 0x9, &(0x7f00000007c0)=[{0xf8, 0x114, 0xffff, "4fb5095e1e0e4b4ee1d53343541bd86221f0636fc07f534576a79efb779b2bf5ba90c5a1c231fe2b37259f35e161047e38fd9faf626b1793fa6d5457b3b605a81644851919f3c5676ddc21aec2bcf7e41dfef1aee53f5b0c3725352bf10fbda8c845f71b67c4550f291c95248b8d4af3caae2783325e86699b39fef4f5f90d8fd9d3cb36fd1cf8f77e2a51a159e771a6eccc8f53de82f43832bb9f7b0e992feff55373a1bc281eeb78dfc26d694aa43623ef447b5f5fb7ee066983fc847a1500c5140159f85ab4715d2e3ea6af5aebe7970f251a5cb0a86efdfc11316a033b6b4f7b77facff5bbd5"}, {0xc8, 0x117, 0xffff0000, "4c99e29437f4d64175c19c1d6926ce841cf3da2ef9fb61dc3922458b13e852520dacfba429d811f62697be049eb2e97ca359e9970cddfe89846d75057819c5831fd4f2372e6257d4c97559e97c6050cf7e77d80a71d1f3293d76237f2d2b442047c053e12cd8f6106a84d85294b1f8e686626b2076debd7799b55cdeab33558205901fd753a72a6c21687c8d40cfc4ffe94946510ddf387e946cf8328f0c3b7a4b293406cbaff0f3083d040b919a49ba4bd4525e72d8"}, {0x80, 0x6, 0x4, "034ee23293b07d5ff0976f9407114a06aac9d3af74e4d11c9f681a70b49608827cf83ec007697538fb0ab9f94919eddb287ec731dcb67489cdfc99efb2f8275943c72e4163105a6e45519c142ac788f5cc1b4c4ba77600ef89de7a07db6a7c22247c97536a692db1b41cb6dbcb"}, {0x10, 0x102, 0x8}, {0x48, 0x117, 0xffffffcb, "6a3a25da76bf30434677db446e625f45d347a55ab61bbaef87f058793cd7194526bc27183d68f61a4f4211ff43efba22c7"}], 0x298}, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TCXONC(r1, 0x4b3a, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) 39m55.023934335s ago: executing program 0 (id=7): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 39m51.245601006s ago: executing program 0 (id=20): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 39m32.949463994s ago: executing program 32 (id=20): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 37m43.048251409s ago: executing program 5 (id=271): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000180)="0912f7b179d91aebdd36958c70", 0xd}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="ac2032d95fa30d76efd223848bb74a174682c1816c8d1e10209d95f1eec34f520023d0bc0f1f41aeb00a7cc375ff368441dc0f389683b198b0e7080f791292aad935fde5a325365277753f77c88f30318189f27edfa0e6f438b6ff486eddbde81087c7ca13369b6d3d8972fdde9de5560297f8", 0x73}, {&(0x7f0000000400)="fcea50680173131d5d451188b94e1cd1e64f3bbca06484be2509a5dbeed2631c2e256baea8b797b7220fc9fdeb513a986078e79cb96c5e09195f4f22c7b1d7805d1c0ae706582ee358416f31046d602805aeee7bd33eada48a61d413467290820fe82baab19fbe2b8547f0433a8a7139b8ad84cc3e8cc66745f8c98cd80bc77f35d96710ead4cbd59ff847b4eb33fd8a88f296e1715c3b0dbd5af99ac7ffcc6b8ed551bef240aec47ec135d167e7079b09a3b33e0215a9", 0xb7}, {&(0x7f0000000500)}, {&(0x7f0000000640)="5e4db21c69bfe929de9a26285a77f9228a8c404887a8c83811c670b0d074cce6b8cc438e4cd9caf25a6f7385d6e21b869deecde1eeb35409a43d677778d16efed00b496b168caf8b5cdfffebd01b8ec910ec35c536b2c04c96f56d42a92d926b6fde9f70f744a2f6c911b3b15962a0d68246506c9d0094073d11608b6ba79e3ac495b36b2d85", 0x86}], 0x9, &(0x7f00000007c0)=[{0xf8, 0x114, 0xffff, "4fb5095e1e0e4b4ee1d53343541bd86221f0636fc07f534576a79efb779b2bf5ba90c5a1c231fe2b37259f35e161047e38fd9faf626b1793fa6d5457b3b605a81644851919f3c5676ddc21aec2bcf7e41dfef1aee53f5b0c3725352bf10fbda8c845f71b67c4550f291c95248b8d4af3caae2783325e86699b39fef4f5f90d8fd9d3cb36fd1cf8f77e2a51a159e771a6eccc8f53de82f43832bb9f7b0e992feff55373a1bc281eeb78dfc26d694aa43623ef447b5f5fb7ee066983fc847a1500c5140159f85ab4715d2e3ea6af5aebe7970f251a5cb0a86efdfc11316a033b6b4f7b77facff5bbd5"}, {0xc8, 0x117, 0xffff0000, "4c99e29437f4d64175c19c1d6926ce841cf3da2ef9fb61dc3922458b13e852520dacfba429d811f62697be049eb2e97ca359e9970cddfe89846d75057819c5831fd4f2372e6257d4c97559e97c6050cf7e77d80a71d1f3293d76237f2d2b442047c053e12cd8f6106a84d85294b1f8e686626b2076debd7799b55cdeab33558205901fd753a72a6c21687c8d40cfc4ffe94946510ddf387e946cf8328f0c3b7a4b293406cbaff0f3083d040b919a49ba4bd4525e72d8"}, {0x70, 0x6, 0x4, "034ee23293b07d5ff0976f9407114a06aac9d3af74e4d11c9f681a70b49608827cf83ec007697538fb0ab9f94919eddb287ec731dcb67489cdfc99efb2f8275943c72e4163105a6e45519c142ac788f5cc1b4c4ba77600ef89de7a07db6a7c22"}, {0x10, 0x102, 0x8}, {0x48, 0x117, 0xffffffcb, "6a3a25da76bf30434677db446e625f45d347a55ab61bbaef87f058793cd7194526bc27183d68f61a4f4211ff43efba22c7e7"}], 0x288}, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TCXONC(r1, 0x4b3a, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) 37m41.70456922s ago: executing program 5 (id=272): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x240003, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000002b80), 0x80c80, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 37m40.157217014s ago: executing program 5 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x24}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) 37m38.961188317s ago: executing program 5 (id=277): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRESHEX=r0, @ANYBLOB="a23dd7f1593e992bc9a0f82e5ad56bf0167cb4a8688e1f09b8ba7a10ca3f02af44be9b8d04df84be834223e23981c98993bb28fbc4f95fbc285c4c25794d619910815b84a8af1565831b55192001303772cb0e98acccaf73fd3fc5120fe9251ae2546521d6daaf7d52eca395a91a65afc634b186ca4cc980c3374cbcd2811188158077df8e904df47967"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="9d7af2d2906bd22ad288424093a4b985", 0x10) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000840)={0x20, 0x16, 0xf, "cc63970e5c6720e95af8d0076b3828"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 37m36.076256797s ago: executing program 5 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) r4 = open(&(0x7f0000000340)='./file0\x00', 0x180501, 0x120) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x84, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x40a0}, 0x20004000) unshare(0x28000600) r7 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 37m32.470288091s ago: executing program 5 (id=289): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0xfff3, 0x2}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x895) r0 = syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x9, 0x1, 0x9}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x80}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x24}}, 0x20000050) sendfile(r5, r4, &(0x7f00000000c0)=0x8b, 0x3) fcntl$notify(r3, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x414801, 0x488) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1", 0x11}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="200b97000000970e70ceec1de062e97161a0ace37500ea454a7fb22d59686c318ffd022508bb"], 0x0}, 0x0) 37m16.734415596s ago: executing program 33 (id=289): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0xfff3, 0x2}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x895) r0 = syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x9, 0x1, 0x9}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x80}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x24}}, 0x20000050) sendfile(r5, r4, &(0x7f00000000c0)=0x8b, 0x3) fcntl$notify(r3, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x414801, 0x488) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1", 0x11}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="200b97000000970e70ceec1de062e97161a0ace37500ea454a7fb22d59686c318ffd022508bb"], 0x0}, 0x0) 34m39.823265578s ago: executing program 2 (id=630): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2c, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) r3 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) 34m33.822671768s ago: executing program 2 (id=644): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x4b, &(0x7f0000000080)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read$ptp(r2, &(0x7f00000004c0)=""/4096, 0x1000) 34m32.757845759s ago: executing program 2 (id=647): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 34m32.362546463s ago: executing program 2 (id=649): openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_POWER(r0, 0x12, 0x4, 0x0, &(0x7f0000000200)=0x3e) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433c4"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 34m28.405329064s ago: executing program 2 (id=654): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="28000000050605002cbdfcfffffff8f6380a5fdf251400c2a414006800fe800000000000000000007cf3330f2fb3f1c41e720d4b6480bc073552ce0f0fa53be1d42f9a7f2a9f535bd41955e3d332e87060c32b3f6a2ed705a12a6a5f8b689e84984f891723"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @clear_death={0x400c630f, 0x3}], 0xf26, 0x0, &(0x7f00000014c0)="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"}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0xc854) r6 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) sendmmsg$inet(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="dd8a5acd4817d8d1adb0a637df115f9bc8af7e137ffcb12d153b8e4aca54cb8069e388a92fe6b1d3998797ff80cd4ef4d0fa03a43012cd68759ca8922f239e095bdcb9ba3616192f8b58205b5f8736e5bda03ba9b9c8813cc37600002a5868c3cf", 0x61}, {&(0x7f0000000440)="586be182bdcbd16894c06f6ef7d5bd0bdcfecf0bb62a5f07f462c3bac63eacac9bea4f8170651e11a1e5c23c2c5fe7cfe53946bec6a3817f9c6c76e803670a60223080b2b2bb18c8", 0x48}, {&(0x7f0000000640)="5615dd7d4f587b7f415c62f3fd04906c0e0d687ffa6959ce52b9aecff9bf33c9cf390b600b79f124fc6631f7bcf0cb812b355fcb1bab05516b029823b82866043d8c858fb45a9b4fa88856727b3f829b28020b20f5332e03cd10d534891198535f2c2feee5d2dccc9bad8cd112dad1bfc89e081e96c7597774c2da5a6846a7cdba423cf026d9002857051b998e9e5527ab804d577b616917dfa8c77d9d9d661bc456acc71fae37bb679e256832cbb9e3a850d0c807465dc7be5415bdbcf0000fc221cd06c4ffa6dc95d1ff02e886", 0xce}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000840)="0644ccf4d065cb02a61998b01b674e80122bb2989b3999d2a8400679a7a519d19da9ea68d804373e6291f7ef20c4b2628a48950c2a2a48ebfb2b1dd00d93261e2031adc908b512bedc4ff085a6f91c455d9afe7ee10abf082357888b95380ed50fe865a0", 0x64}, {&(0x7f0000000580)="1ce709ae7eb4e18119f76b5963791ebf3a608a291b3679a302a480cf9966c51a8b7c6c33b9cf067a129c223c8ca66112", 0x30}, {&(0x7f00000008c0)="9607f12a9f14347ff3c293f252690d44cc589d6e517c360ac74d13fef47358f35e26584f7d", 0x25}], 0x4}}], 0x2, 0x20008811) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) 34m27.115814304s ago: executing program 2 (id=657): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000200)=0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$unix(r3, &(0x7f00000000c0), &(0x7f0000000000)=0x6e) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x24000080) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 34m9.35903213s ago: executing program 34 (id=657): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000200)=0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$unix(r3, &(0x7f00000000c0), &(0x7f0000000000)=0x6e) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x24000080) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 21.755210093s ago: executing program 3 (id=5665): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x2, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902", @ANYRESDEC, @ANYRES8], 0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000028000480240001800b0001007470726f7879000014000280080002400000080c080001400000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000050}, 0x24044010) 17.728577679s ago: executing program 4 (id=5674): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703667726574617000"], 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x2, 0x0, [{0x8, 0x5, 0x0, 0x0, @irqchip={0x81c, 0x4}}, {0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x6, 0x7f}}]}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) 14.980369018s ago: executing program 3 (id=5677): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000640)) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x40c81, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x6000, @fd_index=0x1, 0x0, 0x90d, 0x4, 0x1}) io_uring_enter(r1, 0x20a0, 0x20000000, 0x0, 0x0, 0x0) 12.231245432s ago: executing program 1 (id=5683): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x3fffffff]}}], 0xffc8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000001100)={"73a987f1fb2e6656be5e82faec6f746caa0ae07822a77ff502b5282a6ab067f9", 0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r2, &(0x7f0000000300)=[{0x0}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f0000000240)=""/173, 0xad}], 0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40101) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1a3) r5 = syz_io_uring_setup(0x238, &(0x7f00000003c0)={0x0, 0x59ef, 0x10100, 0x2, 0x2ce, 0x0, r4}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000380)) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000001d00)={0x2020}, 0x2020) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) 12.123141159s ago: executing program 4 (id=5684): socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x67f, 0x64, 0x0, 0x0) 10.853629925s ago: executing program 1 (id=5687): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e0000002000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 9.795277839s ago: executing program 1 (id=5688): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = io_uring_setup(0x69ae, &(0x7f0000000140)={0x0, 0x12fc, 0x0, 0x0, 0x36a}) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000240)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b14, 0x0) io_uring_enter(r3, 0x6972, 0xefd7, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1b35, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000400)={0x13, 0x1, 0x2, "18e889cb5bfb8276529323b392b837e339070000000000000000008000", 0x38416761}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f00000003c0)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e5782) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 8.348950959s ago: executing program 6 (id=5690): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0, @ANYBLOB="accb"], 0x44}, 0x1, 0x0, 0x0, 0x240448e0}, 0x0) 8.185419395s ago: executing program 6 (id=5691): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000080)={0x60, 0x5, 0x2, '#('}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.919623246s ago: executing program 4 (id=5692): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x3fffffff]}}], 0xffc8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) dup(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000080)=""/33, 0x21}], 0x3) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40101) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1a3) r4 = syz_io_uring_setup(0x238, &(0x7f00000003c0)={0x0, 0x59ef, 0x10100, 0x2, 0x2ce, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000380)) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000001d00)={0x2020}, 0x2020) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) 7.625483546s ago: executing program 7 (id=5693): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d20"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff08"], 0x6f4}}, 0x0) 7.480968713s ago: executing program 7 (id=5694): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000040, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2a000000400007012bbd700000000000017c0000040001800c00028005001780b0000000d31a8554928225ac036f2e22ba12b2dd4ed786ce0a9f977a3c90823f9d96bd4fd67c64e58aede0ac6a1819fb7ac1a1cfab413c1766972c2cddd27352bb1c6846839bd10fed0551f7c65feb2eb85cb2763b428bb315ba515895b1a85c612d6960364d5257dc816fa8a6dcdf5901cef48158753112a0a70290797ee340c015d5"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 7.454264518s ago: executing program 6 (id=5695): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000080)={0x60, 0x5, 0x2, '#('}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.838330051s ago: executing program 4 (id=5696): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d20"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c210000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de1357713389"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.40875019s ago: executing program 4 (id=5697): socket$packet(0x11, 0x3, 0x300) r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4000009d, 0xbc9faef6, 0xc2}]}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x0, 0xffff}, {0x0, 0x6}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xf, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r9, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008104}, 0x20004004) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e28, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 5.842270722s ago: executing program 3 (id=5698): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e0000002000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 4.152852175s ago: executing program 3 (id=5699): socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x67f, 0x64, 0x0, 0x0) 4.026641152s ago: executing program 1 (id=5700): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000740)}], 0x1}], 0x1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) 4.014356928s ago: executing program 6 (id=5701): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0, @ANYBLOB="accb"], 0x44}, 0x1, 0x0, 0x0, 0x240448e0}, 0x0) 3.892661933s ago: executing program 1 (id=5702): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1a8}) 3.694790818s ago: executing program 6 (id=5703): socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400", 0xd, 0x0, &(0x7f0000000140), 0x14) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x67f, 0x64, 0x0, 0x0) 2.297194588s ago: executing program 7 (id=5704): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d20"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff08"], 0x6f4}}, 0x0) 1.836653514s ago: executing program 7 (id=5705): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000080)={0x60, 0x5, 0x2, '#('}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.129323682s ago: executing program 7 (id=5706): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)=""/242, 0xf2}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000240)=""/221, 0xdd}, {&(0x7f0000003a00)=""/4106, 0x100a}, {&(0x7f00000003c0)=""/188, 0xbc}], 0x5}, 0x22122) 1.104102677s ago: executing program 3 (id=5707): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d637ec39407436c4494f0d20"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c210000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de1357713389"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.026936267s ago: executing program 6 (id=5708): socket$packet(0x11, 0x3, 0x300) r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4000009d, 0xbc9faef6, 0xc2}]}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x0, 0xffff}, {0x0, 0x6}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xf, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r9, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008104}, 0x20004004) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e28, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 913.440941ms ago: executing program 7 (id=5709): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d04"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) 901.075874ms ago: executing program 4 (id=5710): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1a8}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) 788.643666ms ago: executing program 3 (id=5711): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000080)={0x60, 0x5, 0x2, '#('}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=5712): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x200040, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) kernel console output (not intermixed with test programs): usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2076.706189][ T808] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2076.710310][ T808] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2076.710335][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.710355][ T808] usb 5-1: Product: syz [ 2076.710369][ T808] usb 5-1: Manufacturer: syz [ 2076.710382][ T808] usb 5-1: SerialNumber: syz [ 2076.832803][ T808] usb 5-1: config 0 descriptor?? [ 2076.833940][T21301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2077.244542][T21301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2077.291941][ T808] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input26 [ 2078.187813][T14172] usb 5-1: USB disconnect, device number 67 [ 2078.187826][ C1] synaptics_usb 5-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 2079.515570][T21321] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 2079.538431][T21324] program syz.4.4409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2082.702875][T14172] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2082.947219][T14172] usb 4-1: Using ep0 maxpacket: 32 [ 2082.954945][T14172] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2082.954974][T14172] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2082.990969][T14172] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2082.990996][T14172] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2082.991015][T14172] usb 4-1: Product: syz [ 2082.991028][T14172] usb 4-1: Manufacturer: syz [ 2083.222803][T14172] hub 4-1:4.0: USB hub found [ 2083.550413][T14172] hub 4-1:4.0: 2 ports detected [ 2084.433568][T14172] usb 4-1: USB disconnect, device number 60 [ 2085.186056][T21363] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2085.281179][T21368] Bluetooth: hci0: unsupported parameter 255 [ 2085.281194][T21368] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2085.318772][T21369] program syz.3.4423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2085.539863][T21363] bond1 (unregistering): Released all slaves [ 2085.947288][ T808] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2086.067189][T11801] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 2086.107205][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 2086.110665][ T808] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2086.110683][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.110698][ T808] usb 4-1: Product: syz [ 2086.110707][ T808] usb 4-1: Manufacturer: syz [ 2086.110716][ T808] usb 4-1: SerialNumber: syz [ 2086.114374][ T808] usb 4-1: config 0 descriptor?? [ 2086.227780][T11801] usb 7-1: Using ep0 maxpacket: 16 [ 2086.232429][T11801] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2086.232450][T11801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.232464][T11801] usb 7-1: Product: syz [ 2086.232515][T11801] usb 7-1: Manufacturer: syz [ 2086.232526][T11801] usb 7-1: SerialNumber: syz [ 2086.277322][T11801] usb 7-1: config 0 descriptor?? [ 2086.539537][ T808] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2086.694978][T11801] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2086.712657][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2086.714029][ T808] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2086.714123][ T808] usb 4-1: media controller created [ 2086.744331][T11801] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2086.745824][T11801] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2086.745875][T11801] usb 7-1: media controller created [ 2086.831328][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2086.873222][T11801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2086.935005][ T808] zl10353_read_register: readreg error (reg=127, ret==0) [ 2086.935067][ T808] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2086.935139][ T808] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2086.963698][T11801] zl10353_read_register: readreg error (reg=127, ret==0) [ 2086.963747][T11801] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2086.963760][T11801] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2087.004800][T11801] usb 7-1: USB disconnect, device number 65 [ 2087.005372][ T808] usb 4-1: USB disconnect, device number 61 [ 2087.260382][ T808] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2087.284912][T11801] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2087.687538][T21397] program syz.6.4435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2087.858794][T21402] Bluetooth: hci0: unsupported parameter 255 [ 2087.858814][T21402] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2087.955042][T21406] program syz.7.4438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2087.967395][T14172] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2088.120509][T14172] usb 4-1: Using ep0 maxpacket: 32 [ 2088.122312][T14172] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2088.122343][T14172] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2088.125429][T14172] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2088.125454][T14172] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2088.125472][T14172] usb 4-1: Product: syz [ 2088.125483][T14172] usb 4-1: Manufacturer: syz [ 2088.209542][T21412] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4440'. [ 2088.209582][T21412] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4440'. [ 2088.212930][T14172] hub 4-1:4.0: USB hub found [ 2088.409903][T14172] hub 4-1:4.0: 2 ports detected [ 2088.527199][ T9] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 2088.679084][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 2088.684190][ T9] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2088.684208][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.684220][ T9] usb 7-1: Product: syz [ 2088.684229][ T9] usb 7-1: Manufacturer: syz [ 2088.684238][ T9] usb 7-1: SerialNumber: syz [ 2088.744762][ T9] usb 7-1: config 0 descriptor?? [ 2089.208108][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2089.237250][T14172] usb 4-1: USB disconnect, device number 62 [ 2089.265249][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2089.286014][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2089.286047][ T9] usb 7-1: media controller created [ 2089.359311][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2089.487725][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 2089.487767][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2089.487776][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2089.494906][ T9] usb 7-1: USB disconnect, device number 66 [ 2089.582155][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2089.831160][T21429] program syz.4.4447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2090.126110][T21436] program syz.6.4450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2090.146942][T21434] Bluetooth: hci0: unsupported parameter 255 [ 2090.146960][T21434] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2093.821877][T21463] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4459'. [ 2094.153550][T21465] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2094.377306][T14172] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 2094.764530][T14172] usb 7-1: Using ep0 maxpacket: 32 [ 2094.839325][T14172] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2094.839379][T14172] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2095.214579][T14172] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2095.214610][T14172] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2095.214629][T14172] usb 7-1: Product: syz [ 2095.214649][T14172] usb 7-1: Manufacturer: syz [ 2095.296543][T14172] hub 7-1:4.0: USB hub found [ 2095.547250][T14172] hub 7-1:4.0: 2 ports detected [ 2097.157919][T14172] usb 7-1: USB disconnect, device number 67 [ 2098.615222][T21499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4471'. [ 2098.799838][T21503] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2098.863407][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.863470][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2101.213679][T21535] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4484'. [ 2101.410987][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2101.497310][T21538] tipc: Started in network mode [ 2101.497338][T21538] tipc: Node identity 0e4f19671afe, cluster identity 4711 [ 2101.497512][T21538] tipc: Enabled bearer , priority 0 [ 2101.540086][T21544] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2101.554687][T21539] syzkaller0: entered promiscuous mode [ 2101.554709][T21539] syzkaller0: entered allmulticast mode [ 2101.567140][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 2101.584793][ T9] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2101.584820][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.584838][ T9] usb 5-1: Product: syz [ 2101.584851][ T9] usb 5-1: Manufacturer: syz [ 2101.584865][ T9] usb 5-1: SerialNumber: syz [ 2101.641807][ T9] usb 5-1: config 0 descriptor?? [ 2101.921580][T21531] tipc: Resetting bearer [ 2102.417010][ T9] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 2103.048600][T21531] tipc: Disabling bearer [ 2104.140783][T11801] tipc: Node number set to 347150695 [ 2104.243758][ T5882] usb 5-1: USB disconnect, device number 68 [ 2104.866462][T21582] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2104.991140][T21576] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2105.204381][T21576] bond2 (unregistering): Released all slaves [ 2105.535220][T21585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4498'. [ 2105.535253][T21585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4498'. [ 2105.986730][T21578] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2106.052734][T21578] bond1 (unregistering): Released all slaves [ 2107.685908][ T36] audit: type=1800 audit(1773819183.699:43): pid=21603 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4503" name="bus" dev="overlay" ino=1672 res=0 errno=0 [ 2108.727946][T21619] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2114.835464][T21665] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2115.717138][T11801] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2115.872905][T11801] usb 5-1: Using ep0 maxpacket: 32 [ 2115.946995][T11801] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2115.947036][T11801] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2115.982408][T11801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.293825][T11801] usb 5-1: config 0 descriptor?? [ 2116.324066][T11801] hub 5-1:0.0: bad descriptor, ignoring hub [ 2116.324102][T11801] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2116.356680][T11801] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2117.503992][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880696d4c00: rx timeout, send abort [ 2118.098140][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880696d4c00: abort rx timeout. Force session deactivation [ 2118.177861][T21699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4530'. [ 2118.351538][T21703] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4531'. [ 2119.131855][T11801] usb 5-1: USB disconnect, device number 69 [ 2120.929497][T21736] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4542'. [ 2122.172614][T21743] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4545'. [ 2122.174067][T21744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4541'. [ 2122.877762][T21758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4551'. [ 2122.877787][T21758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4551'. [ 2123.687180][T16196] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 2123.876235][T16196] usb 7-1: Using ep0 maxpacket: 32 [ 2123.897827][T16196] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2123.897868][T16196] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2123.897889][T16196] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2123.950405][T16196] usb 7-1: config 0 descriptor?? [ 2123.972627][T16196] hub 7-1:0.0: bad descriptor, ignoring hub [ 2123.972650][T16196] hub 7-1:0.0: probe with driver hub failed with error -5 [ 2123.999438][T16196] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2125.670279][T21782] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4557'. [ 2126.959568][T16957] usb 7-1: USB disconnect, device number 68 [ 2127.127250][T21793] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4561'. [ 2128.168660][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880406e5c00: rx timeout, send abort [ 2128.668714][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880406e5c00: abort rx timeout. Force session deactivation [ 2128.787337][ T9] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 2128.967154][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 2128.969107][ T9] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2128.969133][ T9] usb 8-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2128.969150][ T9] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2128.969168][ T9] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2128.969185][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2128.974607][ T9] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2128.974632][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2128.974658][ T9] usb 8-1: Product: syz [ 2128.976986][ T9] usb 8-1: Manufacturer: syz [ 2128.977005][ T9] usb 8-1: SerialNumber: syz [ 2129.023678][ T9] usb 8-1: config 0 descriptor?? [ 2129.024848][T21800] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2129.473020][T21800] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2129.493258][ T9] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input27 [ 2130.344100][T21811] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4568'. [ 2130.632037][T16196] usb 8-1: USB disconnect, device number 60 [ 2130.808612][T21822] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 2130.987463][ T808] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2131.012426][T21820] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2131.053955][T21820] bond1 (unregistering): Released all slaves [ 2131.137267][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 2131.138781][ T808] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2131.138796][ T808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2131.140967][ T808] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2131.140984][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.140997][ T808] usb 4-1: Product: syz [ 2131.141006][ T808] usb 4-1: Manufacturer: syz [ 2131.141015][ T808] usb 4-1: SerialNumber: syz [ 2131.340939][T21827] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4574'. [ 2131.415563][ T808] usb 4-1: 0:2 : does not exist [ 2131.436592][ T808] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2131.618328][ T808] usb 4-1: USB disconnect, device number 63 [ 2131.688784][T21831] fuse: Bad value for 'fd' [ 2131.752575][T21788] udevd[21788]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2132.569302][T21837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4578'. [ 2132.569326][T21837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4578'. [ 2132.574645][T21837] team0: entered promiscuous mode [ 2132.574659][T21837] team_slave_0: entered promiscuous mode [ 2132.574800][T21837] team_slave_1: entered promiscuous mode [ 2132.576451][T21837] bond0: entered promiscuous mode [ 2132.576463][T21837] bond_slave_0: entered promiscuous mode [ 2132.576803][T21837] bond_slave_1: entered promiscuous mode [ 2132.577952][T21837] debugfs: 'hsr1' already exists in 'hsr' [ 2132.577970][T21837] Cannot create hsr debugfs directory [ 2132.578459][T21837] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 2133.074318][T21842] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.4580'. [ 2134.635558][T21857] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4585'. [ 2135.900090][T21867] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4589'. [ 2135.900115][T21867] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4589'. [ 2136.903143][T21877] program syz.3.4593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2137.782454][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b95d800: rx timeout, send abort [ 2138.065463][T21899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4599'. [ 2138.065487][T21899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4599'. [ 2138.158817][T21903] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2138.237183][ T808] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2138.282542][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b95d800: abort rx timeout. Force session deactivation [ 2138.456311][ T808] usb 5-1: Using ep0 maxpacket: 16 [ 2138.471599][ T808] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2138.471628][ T808] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2138.471660][ T808] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2138.471675][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.488914][ T808] usb 5-1: config 0 descriptor?? [ 2139.023686][ T808] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 2139.023720][ T808] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 2139.023746][ T808] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 2139.023770][ T808] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 2139.023795][ T808] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 2139.035295][ T808] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 2139.292208][ T808] usb 5-1: USB disconnect, device number 70 [ 2139.387282][T21909] fido_id[21909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2140.947362][T21921] program syz.4.4606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2141.287219][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2141.440831][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 2141.442799][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2141.442829][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2141.442866][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2141.442889][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.513393][ T9] usb 5-1: config 0 descriptor?? [ 2141.536619][ T9] hub 5-1:0.0: USB hub found [ 2142.106754][ T9] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2142.523524][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 2142.523640][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2142.558153][ T9] usb 5-1: USB disconnect, device number 71 [ 2143.057527][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2143.401979][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 2143.552538][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2143.552575][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2143.552617][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2143.552642][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2143.565050][ T9] usb 5-1: config 0 descriptor?? [ 2143.618693][ T9] hub 5-1:0.0: USB hub found [ 2143.790373][ T9] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2143.998367][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 2143.998481][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2144.018479][ T9] usb 5-1: USB disconnect, device number 72 [ 2145.167251][T21957] program syz.1.4617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2148.808788][T21983] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4624'. [ 2148.808812][T21983] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4624'. [ 2148.815023][T21983] team0: entered promiscuous mode [ 2148.815036][T21983] team_slave_0: entered promiscuous mode [ 2148.815178][T21983] team_slave_1: entered promiscuous mode [ 2148.816672][T21983] bond0: entered promiscuous mode [ 2148.816684][T21983] bond_slave_0: entered promiscuous mode [ 2148.816820][T21983] bond_slave_1: entered promiscuous mode [ 2148.817722][T21983] debugfs: 'hsr1' already exists in 'hsr' [ 2148.817738][T21983] Cannot create hsr debugfs directory [ 2148.818203][T21983] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 2148.931693][T21987] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4628'. [ 2149.341952][T21993] openvswitch: netlink: IPv4 tunnel dst address is zero [ 2151.150672][T22000] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2151.188437][T16069] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 2151.474996][T22000] bond1 (unregistering): Released all slaves [ 2151.778103][T16957] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 2151.943303][T16957] usb 8-1: Using ep0 maxpacket: 16 [ 2151.946253][T16957] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2151.946278][T16957] usb 8-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2151.946300][T16957] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2151.946328][T16957] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2151.946345][T16957] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2151.993751][T16957] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2151.993817][T16957] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2151.993863][T16957] usb 8-1: Product: syz [ 2151.993898][T16957] usb 8-1: Manufacturer: syz [ 2151.993935][T16957] usb 8-1: SerialNumber: syz [ 2152.052459][T16957] usb 8-1: config 0 descriptor?? [ 2152.053646][T22011] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2152.269008][T22011] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2152.274135][T16957] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input28 [ 2152.807023][ T9] usb 8-1: USB disconnect, device number 61 [ 2152.807228][ C1] synaptics_usb 8-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 2154.161250][T22033] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4642'. [ 2154.463781][T22039] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4645'. [ 2156.678338][T22064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4655'. [ 2156.678362][T22064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4655'. [ 2156.719802][ T68] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2156.720046][ T68] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2156.720099][ T68] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2156.720133][ T68] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2157.603738][T22076] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4659'. [ 2160.411694][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.411756][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.527336][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2162.657165][ T9] usb 5-1: device descriptor read/64, error -71 [ 2163.297957][ T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2163.657345][ T9] usb 5-1: device descriptor read/64, error -71 [ 2163.767954][ T9] usb usb5-port1: attempt power cycle [ 2163.923702][T22150] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4684'. [ 2164.187193][ T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2164.207756][ T9] usb 5-1: device descriptor read/8, error -71 [ 2164.805757][ T9] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2164.868180][ T9] usb 5-1: device descriptor read/8, error -71 [ 2164.978169][ T9] usb usb5-port1: unable to enumerate USB device [ 2166.826542][T22196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4700'. [ 2166.826557][T22196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4700'. [ 2166.855665][T18075] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2166.855687][T18075] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.957279][T16957] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 2169.136633][T16957] usb 8-1: device descriptor read/64, error -71 [ 2169.529741][T16957] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 2169.657709][T16957] usb 8-1: device descriptor read/64, error -71 [ 2169.777955][T16957] usb usb8-port1: attempt power cycle [ 2170.147534][T16957] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 2170.173724][T16957] usb 8-1: device descriptor read/8, error -71 [ 2170.431174][T16957] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 2170.483253][T16957] usb 8-1: device descriptor read/8, error -71 [ 2170.593919][T16957] usb usb8-port1: unable to enumerate USB device [ 2175.045773][T22287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4731'. [ 2175.045807][T22287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4731'. [ 2176.611931][T22323] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 2181.354813][T22375] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2182.067711][T22375] bond2 (unregistering): Released all slaves [ 2183.517147][ T5882] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 2183.727337][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 2183.732205][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2183.732240][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2183.732266][ T5882] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2183.732282][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2183.822220][ T5882] usb 7-1: config 0 descriptor?? [ 2183.832389][ T5882] hub 7-1:0.0: USB hub found [ 2184.247156][ T5882] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 2184.308300][ T5882] usbhid 7-1:0.0: can't add hid device: -71 [ 2184.308431][ T5882] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2184.362199][ T5882] usb 7-1: USB disconnect, device number 69 [ 2184.457563][T11801] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2184.647164][T11801] usb 5-1: Using ep0 maxpacket: 16 [ 2184.649340][T11801] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2184.649363][T11801] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2184.652297][T11801] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2184.652323][T11801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.652345][T11801] usb 5-1: Product: syz [ 2184.652358][T11801] usb 5-1: Manufacturer: syz [ 2184.652373][T11801] usb 5-1: SerialNumber: syz [ 2184.936492][T11801] usb 5-1: 0:2 : does not exist [ 2185.281484][T22448] program syz.6.4788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2186.452474][T11801] usb 5-1: USB disconnect, device number 77 [ 2186.558510][T22438] udevd[22438]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2187.933971][T22460] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 2188.985022][T22488] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4804'. [ 2188.985066][T22488] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4804'. [ 2192.411012][T22529] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 2192.503601][ T9] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 2192.540468][T22526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2192.681797][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 2192.683640][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2192.683668][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2192.683702][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2192.683716][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.703769][ T5882] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2192.751228][ T9] usb 8-1: config 0 descriptor?? [ 2192.755217][ T9] hub 8-1:0.0: USB hub found [ 2192.877675][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 2192.881161][ T5882] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2192.881189][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2192.881267][ T5882] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2192.881284][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.931193][ T5882] usb 5-1: config 0 descriptor?? [ 2193.162399][ T9] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 2193.209220][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 2193.209865][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2193.258317][ T9] usb 8-1: USB disconnect, device number 66 [ 2193.344205][T22557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4833'. [ 2193.344238][T22557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4833'. [ 2193.379417][ T5882] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0 [ 2193.379448][ T5882] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0 [ 2193.379473][ T5882] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0 [ 2193.379499][ T5882] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0 [ 2193.379532][ T5882] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0 [ 2193.433042][ T5882] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 2193.589665][T11801] usb 5-1: USB disconnect, device number 78 [ 2193.608862][T22560] fido_id[22560]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:1E71:2009.0009/report_descriptor': No such device [ 2194.178082][T22576] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2194.692116][T22576] bond1 (unregistering): Released all slaves [ 2195.037239][T11801] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 2195.227600][T11801] usb 8-1: Using ep0 maxpacket: 16 [ 2195.229927][T11801] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2195.229949][T11801] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2195.232288][T11801] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2195.232314][T11801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.232342][T11801] usb 8-1: Product: syz [ 2195.232355][T11801] usb 8-1: Manufacturer: syz [ 2195.232369][T11801] usb 8-1: SerialNumber: syz [ 2195.459912][T11801] usb 8-1: 0:2 : does not exist [ 2195.667138][T11801] usb 8-1: USB disconnect, device number 67 [ 2195.811517][T22553] udevd[22553]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2196.926599][T22620] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 2199.969401][T22640] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2200.131768][T22640] bond1 (unregistering): Released all slaves [ 2200.252962][T22652] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 2200.820581][T22669] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.4880'. [ 2204.376533][T22707] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.4892'. [ 2204.411023][T22711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4895'. [ 2204.411046][T22711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4895'. [ 2204.505003][T22713] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 2205.637226][T22739] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.4908'. [ 2207.856389][T22779] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2210.658997][T22823] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2210.933020][T22831] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2211.427228][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2211.637227][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 2211.651827][ T9] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2211.651927][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2211.652035][ T9] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2211.652070][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.712827][ T9] usb 5-1: config 0 descriptor?? [ 2212.169270][ T9] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 2212.169305][ T9] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 2212.169331][ T9] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 2212.169356][ T9] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 2212.169380][ T9] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 2212.227348][ T9] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 2212.654602][ T9] usb 5-1: USB disconnect, device number 79 [ 2212.815098][T22848] fido_id[22848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2218.796604][T22936] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4986'. [ 2219.197148][T20226] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2219.380349][T20226] usb 5-1: Using ep0 maxpacket: 32 [ 2219.385969][T20226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2219.386002][T20226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2219.386055][T20226] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2219.386090][T20226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.738451][T20226] usb 5-1: config 0 descriptor?? [ 2219.952832][T20226] hub 5-1:0.0: USB hub found [ 2220.201497][T20226] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2220.615945][T20226] usbhid 5-1:0.0: can't add hid device: -71 [ 2220.616070][T20226] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2220.668138][T20226] usb 5-1: USB disconnect, device number 80 [ 2221.333479][T23000] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5014'. [ 2221.750842][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.750890][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.807985][T23009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5017'. [ 2221.808011][T23009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5017'. [ 2222.159303][T23022] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 2224.031409][T23033] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.5027'. [ 2224.297395][T23038] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2226.089234][T23058] netlink: 212396 bytes leftover after parsing attributes in process `syz.4.5038'. [ 2228.677474][ T5882] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 2228.835994][ T5882] usb 8-1: Using ep0 maxpacket: 32 [ 2228.846531][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2228.846563][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2228.846601][ T5882] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2228.846625][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.889859][ T5882] usb 8-1: config 0 descriptor?? [ 2228.933447][ T5882] hub 8-1:0.0: USB hub found [ 2229.175426][T23112] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2229.204691][ T5882] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2230.029359][ T5882] hid-generic 0003:046D:C31C.000B: unknown main item tag 0x0 [ 2230.111567][ T5882] hid-generic 0003:046D:C31C.000B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.7-1/input0 [ 2230.150078][T23124] netlink: 212396 bytes leftover after parsing attributes in process `syz.4.5063'. [ 2230.287485][T16957] usb 8-1: USB disconnect, device number 68 [ 2230.419824][T23126] fido_id[23126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2234.446476][T20226] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 2234.607154][T20226] usb 8-1: Using ep0 maxpacket: 32 [ 2234.608868][T20226] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2234.608888][T20226] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2234.610532][T20226] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2234.610549][T20226] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2234.610563][T20226] usb 8-1: Product: syz [ 2234.610572][T20226] usb 8-1: Manufacturer: syz [ 2234.644727][T20226] hub 8-1:4.0: USB hub found [ 2234.784628][T16957] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 2234.819729][T23166] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 2234.819729][T23166] program syz.7.5081 not setting count and/or reply_len properly [ 2234.824079][T20226] hub 8-1:4.0: 2 ports detected [ 2234.937250][T16957] usb 7-1: Using ep0 maxpacket: 16 [ 2234.938947][T16957] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2234.938962][T16957] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2234.941033][T16957] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2234.941050][T16957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.941063][T16957] usb 7-1: Product: syz [ 2234.941073][T16957] usb 7-1: Manufacturer: syz [ 2234.941089][T16957] usb 7-1: SerialNumber: syz [ 2235.222947][T16957] usb 7-1: 0:2 : does not exist [ 2235.223381][T16957] usb 7-1: unit 11 not found! [ 2235.402876][T16957] usb 7-1: USB disconnect, device number 70 [ 2235.476013][T23127] udevd[23127]: setting mode of /dev/bus/usb/007/070 to 020664 failed: No such file or directory [ 2235.476652][T23127] udevd[23127]: setting owner of /dev/bus/usb/007/070 to uid=0, gid=0 failed: No such file or directory [ 2235.576418][T23127] udevd[23127]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2236.042722][T16957] hub 8-1:4.0: hub_ext_port_status failed (err = -71) [ 2236.045107][T20226] usb 8-1: USB disconnect, device number 69 [ 2237.269683][T23219] syzkaller0: entered promiscuous mode [ 2237.269709][T23219] syzkaller0: entered allmulticast mode [ 2239.179932][T23220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2240.097165][T20226] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 2240.257769][T20226] usb 7-1: Using ep0 maxpacket: 16 [ 2240.259626][T20226] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2240.259649][T20226] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2240.262019][T20226] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2240.262045][T20226] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.262092][T20226] usb 7-1: Product: syz [ 2240.262107][T20226] usb 7-1: Manufacturer: syz [ 2240.262127][T20226] usb 7-1: SerialNumber: syz [ 2240.567816][T20226] usb 7-1: 0:2 : does not exist [ 2240.567895][T20226] usb 7-1: unit 11 not found! [ 2240.752425][T20226] usb 7-1: USB disconnect, device number 71 [ 2240.878960][T23238] udevd[23238]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2241.752234][T23285] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.5124'. [ 2242.089632][T23297] trusted_key: encrypted_key: insufficient parameters specified [ 2243.331946][T19953] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2243.355589][T19953] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2243.362126][T19953] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2243.377296][T19953] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2243.380005][T19953] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2243.563651][T23317] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.5136'. [ 2244.827213][T11801] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 2244.987278][T11801] usb 8-1: Using ep0 maxpacket: 16 [ 2244.991300][T11801] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2244.991330][T11801] usb 8-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2244.991355][T11801] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2244.991382][T11801] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2244.991417][T11801] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2245.057386][T11801] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2245.057414][T11801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2245.057441][T11801] usb 8-1: Product: syz [ 2245.057455][T11801] usb 8-1: Manufacturer: syz [ 2245.057469][T11801] usb 8-1: SerialNumber: syz [ 2245.062756][T11801] usb 8-1: config 0 descriptor?? [ 2245.064843][T23329] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2245.157303][ T9] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 2245.224970][T23338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2245.269637][T23313] chnl_net:caif_netlink_parms(): no params data found [ 2245.308906][T23329] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2245.327110][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 2245.332565][ T9] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2245.332592][ T9] usb 7-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2245.332620][ T9] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2245.332647][ T9] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2245.332677][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2245.379225][ T9] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2245.379302][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2245.379360][ T9] usb 7-1: Product: syz [ 2245.379387][ T9] usb 7-1: Manufacturer: syz [ 2245.379427][ T9] usb 7-1: SerialNumber: syz [ 2245.445139][T11801] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input29 [ 2245.507163][T16069] Bluetooth: hci5: command tx timeout [ 2245.527288][ T9] usb 7-1: config 0 descriptor?? [ 2245.528339][T23333] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2245.800770][T23333] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2245.833679][ T9] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input30 [ 2246.106480][T11801] usb 8-1: USB disconnect, device number 70 [ 2246.297579][ T9] usb 7-1: USB disconnect, device number 72 [ 2246.298695][ C1] synaptics_usb 7-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 2246.499602][T23313] bridge0: port 1(bridge_slave_0) entered blocking state [ 2246.499852][T23313] bridge0: port 1(bridge_slave_0) entered disabled state [ 2246.499989][T23313] bridge_slave_0: entered allmulticast mode [ 2246.501650][T23313] bridge_slave_0: entered promiscuous mode [ 2246.510886][T23313] bridge0: port 2(bridge_slave_1) entered blocking state [ 2246.511140][T23313] bridge0: port 2(bridge_slave_1) entered disabled state [ 2246.511614][T23313] bridge_slave_1: entered allmulticast mode [ 2246.557970][T23313] bridge_slave_1: entered promiscuous mode [ 2246.649536][T23313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2246.653550][T23313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2246.851441][T23313] team0: Port device team_slave_0 added [ 2246.888644][T23313] team0: Port device team_slave_1 added [ 2247.005460][T23313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2247.005479][T23313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2247.005525][T23313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2247.016128][T23313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2247.016165][T23313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2247.016233][T23313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2247.097369][ T9] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 2247.259023][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 2247.264352][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2247.264380][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2247.264419][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2247.264435][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.371742][ T9] usb 8-1: config 0 descriptor?? [ 2247.382156][ T9] hub 8-1:0.0: USB hub found [ 2247.403909][T23359] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2247.577085][T16069] Bluetooth: hci5: command tx timeout [ 2247.615935][ T9] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 2247.668091][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 2247.668176][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2247.695666][ T9] usb 8-1: USB disconnect, device number 71 [ 2247.848507][T23313] hsr_slave_0: entered promiscuous mode [ 2247.854235][T23313] hsr_slave_1: entered promiscuous mode [ 2247.855215][T23313] debugfs: 'hsr0' already exists in 'hsr' [ 2247.855231][T23313] Cannot create hsr debugfs directory [ 2248.771097][T23369] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.5150'. [ 2249.201711][T23313] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2249.297115][T11801] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 2249.479419][T11801] usb 8-1: Using ep0 maxpacket: 16 [ 2249.483950][T11801] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2249.483979][T11801] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2249.484008][T11801] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2249.484029][T11801] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2249.638731][T11801] usb 8-1: config 0 descriptor?? [ 2249.667210][T16069] Bluetooth: hci5: command tx timeout [ 2249.726826][T23313] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2250.811876][T11801] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 2250.811911][T11801] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 2250.811937][T11801] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 2250.811962][T11801] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 2250.811988][T11801] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 2250.818812][T11801] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 2250.893876][T23313] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.017259][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2251.021021][T11801] usb 8-1: USB disconnect, device number 72 [ 2251.115438][T23392] fido_id[23392]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2251.187158][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 2251.190485][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2251.190505][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2251.190530][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2251.190545][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.204282][ T9] usb 5-1: config 0 descriptor?? [ 2251.248918][ T9] hub 5-1:0.0: USB hub found [ 2251.417753][ T9] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2251.570574][T23313] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.737395][T16069] Bluetooth: hci5: command tx timeout [ 2251.763337][T23398] syzkaller0: entered promiscuous mode [ 2251.763360][T23398] syzkaller0: entered allmulticast mode [ 2251.828111][T23403] loop2: detected capacity change from 0 to 7 [ 2251.840537][ T9] hid-generic 0003:046D:C31C.000D: unknown main item tag 0x0 [ 2251.863610][T23403] Dev loop2: unable to read RDB block 7 [ 2251.863641][T23403] loop2: AHDI p1 p2 p3 [ 2251.863666][T23403] loop2: partition table partially beyond EOD, truncated [ 2251.863928][T23403] loop2: p1 start 1818582900 is beyond EOD, truncated [ 2251.863949][T23403] loop2: p3 start 335544320 is beyond EOD, truncated [ 2252.048742][ T9] hid-generic 0003:046D:C31C.000D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 2252.090513][ T9] usb 5-1: USB disconnect, device number 81 [ 2252.192245][T23406] fido_id[23406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2252.446691][T23408] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.5161'. [ 2252.589010][T23313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2252.650523][T23313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2252.718982][T23313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2252.753357][T23313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2252.977228][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2253.063486][T23313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2253.099854][T23313] 8021q: adding VLAN 0 to HW filter on device team0 [ 2253.128697][T18530] bridge0: port 1(bridge_slave_0) entered blocking state [ 2253.128778][T18530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2253.137442][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 2253.148894][ T9] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2253.148971][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2253.149063][ T9] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2253.149127][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.163331][T18530] bridge0: port 2(bridge_slave_1) entered blocking state [ 2253.163604][T18530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2253.220267][ T9] usb 5-1: config 0 descriptor?? [ 2253.680460][ T9] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 2253.680521][ T9] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 2253.680549][ T9] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 2253.680576][ T9] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 2253.719171][ T9] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 2253.940242][ T808] usb 5-1: USB disconnect, device number 82 [ 2254.026311][T23428] fido_id[23428]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 2255.392602][T23440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5169'. [ 2255.392641][T23440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5169'. [ 2255.906458][T23313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2256.102013][T23313] veth0_vlan: entered promiscuous mode [ 2256.135492][T23313] veth1_vlan: entered promiscuous mode [ 2256.274730][T23313] veth0_macvtap: entered promiscuous mode [ 2256.310671][T23450] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5172'. [ 2256.326844][T23313] veth1_macvtap: entered promiscuous mode [ 2256.358658][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2256.390815][T23313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2256.394038][T23313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2256.485651][ T1420] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2256.490000][ T1420] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2256.491179][ T1420] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2256.491744][ T1420] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2256.510136][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 2256.514314][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2256.514340][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2256.514359][ T9] usb 5-1: Product: syz [ 2256.514373][ T9] usb 5-1: Manufacturer: syz [ 2256.514386][ T9] usb 5-1: SerialNumber: syz [ 2256.538104][ T9] usb 5-1: config 0 descriptor?? [ 2256.746079][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2256.867200][ T808] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 2257.026461][ T808] usb 7-1: Using ep0 maxpacket: 8 [ 2257.039945][ T808] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2257.039972][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2257.039992][ T808] usb 7-1: Product: syz [ 2257.040006][ T808] usb 7-1: Manufacturer: syz [ 2257.040020][ T808] usb 7-1: SerialNumber: syz [ 2257.087178][T23457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5175'. [ 2257.093990][ T808] usb 7-1: config 0 descriptor?? [ 2257.339618][ T808] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2257.511978][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2257.511994][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2258.014674][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2258.040446][ T9] usb 5-1: USB disconnect, device number 83 [ 2258.065426][T23238] udevd[23238]: setting owner of /dev/bus/usb/005/083 to uid=0, gid=0 failed: No such file or directory [ 2258.139509][T19211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2258.139530][T19211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2258.561660][ T808] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2258.566196][ T808] usb 7-1: USB disconnect, device number 73 [ 2258.737416][T11801] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2258.887131][T11801] usb 4-1: Using ep0 maxpacket: 16 [ 2258.890676][T11801] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2258.890736][T11801] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2258.895503][T11801] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2258.895531][T11801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2258.895553][T11801] usb 4-1: Product: syz [ 2258.895568][T11801] usb 4-1: Manufacturer: syz [ 2258.895584][T11801] usb 4-1: SerialNumber: syz [ 2259.155221][T23473] trusted_key: encrypted_key: insufficient parameters specified [ 2259.234945][T11801] usb 4-1: 0:2 : does not exist [ 2259.235034][T11801] usb 4-1: unit 6 not found! [ 2259.827544][T23478] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.5182'. [ 2260.107324][T11801] usb 4-1: USB disconnect, device number 64 [ 2261.410105][T23238] udevd[23238]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2262.067240][ T9] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 2262.427258][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 2262.443839][ T9] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2262.443872][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2262.443906][ T9] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2262.443923][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.488499][ T9] usb 8-1: config 0 descriptor?? [ 2263.313763][ T9] hid_parser_main: 1 callbacks suppressed [ 2263.313860][ T9] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 2263.313895][ T9] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 2263.313925][ T9] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 2263.313954][ T9] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 2263.313982][ T9] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 2263.375283][ T9] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 2263.707884][ T9] usb 8-1: USB disconnect, device number 73 [ 2263.785578][T23508] fido_id[23508]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 2264.067158][ T5882] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2264.093222][T23518] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5194'. [ 2264.259458][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 2264.260907][ T5882] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2264.260927][ T5882] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2264.260949][ T5882] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2264.260964][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2264.271006][ T5882] usb 4-1: config 0 descriptor?? [ 2264.709369][ T5882] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 2264.709395][ T5882] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 2264.709414][ T5882] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 2264.709432][ T5882] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 2264.709450][ T5882] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 2264.739689][ T5882] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 2265.070244][ T5882] usb 4-1: USB disconnect, device number 65 [ 2265.287359][T23532] tipc: Enabling of bearer rejected, failed to enable media [ 2265.290724][T23529] fido_id[23529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2265.299347][T23532] syzkaller0: entered promiscuous mode [ 2265.299403][T23532] syzkaller0: entered allmulticast mode [ 2268.538344][T23569] fuse: Unknown parameter 'grou00000000000000000000' [ 2269.328806][T20226] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2269.867104][T20226] usb 5-1: Using ep0 maxpacket: 32 [ 2269.889973][T20226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2269.889995][T20226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2269.890020][T20226] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2269.890035][T20226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.908824][T20226] usb 5-1: config 0 descriptor?? [ 2269.969972][T20226] hub 5-1:0.0: USB hub found [ 2270.165453][T23565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2270.165787][T23565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2270.369343][T20226] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 2270.377733][ T808] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 2270.418279][T20226] usbhid 5-1:0.0: can't add hid device: -71 [ 2270.418352][T20226] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2270.460070][T20226] usb 5-1: USB disconnect, device number 84 [ 2270.537160][ T808] usb 8-1: Using ep0 maxpacket: 16 [ 2270.539980][ T808] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2270.540021][ T808] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2270.540051][ T808] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2270.540074][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2270.591563][ T808] usb 8-1: config 0 descriptor?? [ 2271.143190][ T808] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 2271.143216][ T808] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 2271.143235][ T808] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 2271.143253][ T808] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 2271.143271][ T808] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 2271.466170][ T808] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 2272.302730][ T808] usb 8-1: USB disconnect, device number 74 [ 2272.480765][T23592] fido_id[23592]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2273.647121][ T5882] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 2273.837135][ T5882] usb 8-1: Using ep0 maxpacket: 32 [ 2273.839344][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2273.839371][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2273.839410][ T5882] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2273.839425][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.844665][ T5882] usb 8-1: config 0 descriptor?? [ 2273.908744][ T5882] hub 8-1:0.0: USB hub found [ 2274.060797][T23608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2274.061277][T23608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2274.311513][ T5882] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 2274.408762][ T5882] usbhid 8-1:0.0: can't add hid device: -71 [ 2274.408878][ T5882] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2274.478078][ T5882] usb 8-1: USB disconnect, device number 75 [ 2274.649836][T23615] syzkaller0: entered promiscuous mode [ 2274.649863][T23615] syzkaller0: entered allmulticast mode [ 2278.122986][T23636] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5230'. [ 2279.446334][T23647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5233'. [ 2280.028214][T11801] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 2280.267124][T11801] usb 7-1: Using ep0 maxpacket: 32 [ 2280.272811][T11801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2280.272843][T11801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2280.272882][T11801] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2280.272906][T11801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2280.337332][T11801] usb 7-1: config 0 descriptor?? [ 2280.340814][T11801] hub 7-1:0.0: USB hub found [ 2280.558849][T23660] fuse: Unknown parameter 'group_i00000000000000000000' [ 2280.753746][T11801] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 2280.787295][T11801] usbhid 7-1:0.0: can't add hid device: -71 [ 2280.787411][T11801] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2280.827926][T11801] usb 7-1: USB disconnect, device number 74 [ 2281.487893][T11801] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 2281.718002][T11801] usb 7-1: Using ep0 maxpacket: 32 [ 2281.784105][T23672] tipc: Enabling of bearer rejected, failed to enable media [ 2281.784964][T23672] syzkaller0: entered promiscuous mode [ 2281.784986][T23672] syzkaller0: entered allmulticast mode [ 2281.813533][T11801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2281.813566][T11801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2281.813605][T11801] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2281.813629][T11801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.816808][T11801] usb 7-1: config 0 descriptor?? [ 2281.827206][ T5882] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 2281.872624][T11801] hub 7-1:0.0: USB hub found [ 2282.007199][ T5882] usb 8-1: Using ep0 maxpacket: 8 [ 2282.013184][ T5882] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2282.013223][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.013242][ T5882] usb 8-1: Product: syz [ 2282.013255][ T5882] usb 8-1: Manufacturer: syz [ 2282.013269][ T5882] usb 8-1: SerialNumber: syz [ 2282.052891][T11801] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2282.073832][ T5882] usb 8-1: config 0 descriptor?? [ 2282.255079][T11801] usbhid 7-1:0.0: can't add hid device: -71 [ 2282.255254][T11801] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2282.299252][T11801] usb 7-1: USB disconnect, device number 75 [ 2282.355039][ T5882] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2283.497828][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.497904][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.794056][ T5882] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2284.809181][ T5882] usb 8-1: USB disconnect, device number 76 [ 2284.829477][T23700] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2285.823171][T23712] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2286.058358][T16196] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2286.247118][T16196] usb 4-1: Using ep0 maxpacket: 16 [ 2286.256566][T16196] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2286.256592][T16196] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2286.256615][T16196] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2286.256641][T16196] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2286.256658][T16196] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2286.325536][T16196] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2286.325555][T16196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.325567][T16196] usb 4-1: Product: syz [ 2286.325577][T16196] usb 4-1: Manufacturer: syz [ 2286.325586][T16196] usb 4-1: SerialNumber: syz [ 2286.350661][T16196] usb 4-1: config 0 descriptor?? [ 2286.365174][T23713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2286.594767][T23713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2286.626716][T16196] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input31 [ 2287.136006][T11801] usb 4-1: USB disconnect, device number 66 [ 2287.136074][ C1] synaptics_usb 4-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 2290.593939][T23740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5261'. [ 2291.244804][ T36] audit: type=1326 audit(1773819367.219:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23744 comm="syz.1.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162b6ec799 code=0x7ffc0000 [ 2291.244887][ T36] audit: type=1326 audit(1773819367.219:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23744 comm="syz.1.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f162b6ec799 code=0x7ffc0000 [ 2291.244924][ T36] audit: type=1326 audit(1773819367.229:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23744 comm="syz.1.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162b6ec799 code=0x7ffc0000 [ 2291.244962][ T36] audit: type=1326 audit(1773819367.229:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23744 comm="syz.1.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f162b6ec799 code=0x7ffc0000 [ 2291.254890][ T36] audit: type=1326 audit(1773819367.229:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23744 comm="syz.1.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162b6ec799 code=0x7ffc0000 [ 2291.254936][ T36] audit: type=1326 audit(1773819367.229:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23744 comm="syz.1.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162b6ec799 code=0x7ffc0000 [ 2291.254970][ T36] audit: type=1326 audit(1773819367.229:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23744 comm="syz.1.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f162b6ec799 code=0x7ffc0000 [ 2291.255000][ T36] audit: type=1326 audit(1773819367.229:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23744 comm="syz.1.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162b6ec799 code=0x7ffc0000 [ 2291.255031][ T36] audit: type=1326 audit(1773819367.229:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23744 comm="syz.1.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f162b6ec799 code=0x7ffc0000 [ 2291.255337][ T36] audit: type=1326 audit(1773819367.229:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23744 comm="syz.1.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162b6ec799 code=0x7ffc0000 [ 2293.515168][T23760] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2293.967157][ T9] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 2294.128529][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 2294.195034][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2294.195064][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2294.195102][ T9] usb 8-1: Product: syz [ 2294.195117][ T9] usb 8-1: Manufacturer: syz [ 2294.195132][ T9] usb 8-1: SerialNumber: syz [ 2294.242629][ T9] usb 8-1: config 0 descriptor?? [ 2294.499296][ T9] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2295.117113][ T808] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2295.307536][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 2295.702591][ T808] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2295.702622][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2295.738548][ T808] usb 5-1: config 0 descriptor?? [ 2296.012739][ T808] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 2296.285310][ T9] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2296.289306][ T9] usb 8-1: USB disconnect, device number 77 [ 2296.333424][ T808] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2296.333535][ T808] dib0700: firmware download failed at 7 with -22 [ 2296.369660][ T808] usb 5-1: USB disconnect, device number 85 [ 2297.057087][T22540] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 2297.285196][T22540] usb 7-1: config 0 has no interfaces? [ 2297.348666][T22540] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2297.348688][T22540] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2297.348702][T22540] usb 7-1: Product: syz [ 2297.348712][T22540] usb 7-1: Manufacturer: syz [ 2297.348723][T22540] usb 7-1: SerialNumber: syz [ 2297.406671][T22540] usb 7-1: config 0 descriptor?? [ 2297.669250][T23786] loop2: detected capacity change from 0 to 7 [ 2297.915378][T23786] Dev loop2: unable to read RDB block 7 [ 2297.915426][T23786] loop2: unable to read partition table [ 2297.915581][T23786] loop2: partition table beyond EOD, truncated [ 2297.927247][T23786] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 2300.714549][T23808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5280'. [ 2300.714571][T23808] bond0: option arp_all_targets: invalid value (52140) [ 2303.167186][ T9] usb 7-1: USB disconnect, device number 76 [ 2304.243645][ T9] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 2304.443222][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 2304.476779][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2304.476810][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2304.476909][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2304.476931][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2304.589312][ T9] usb 8-1: config 0 descriptor?? [ 2304.621968][ T9] hub 8-1:0.0: USB hub found [ 2304.820820][ T9] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2305.091118][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 2305.091135][ T36] audit: type=1326 audit(1773819381.099:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23839 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d0dbec799 code=0x7ffc0000 [ 2305.091202][ T36] audit: type=1326 audit(1773819381.099:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23839 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d0dbec799 code=0x7ffc0000 [ 2305.091245][ T36] audit: type=1326 audit(1773819381.099:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23839 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7d0dbec799 code=0x7ffc0000 [ 2305.091285][ T36] audit: type=1326 audit(1773819381.099:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23839 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d0dbec799 code=0x7ffc0000 [ 2305.091327][ T36] audit: type=1326 audit(1773819381.109:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23839 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7d0dbec799 code=0x7ffc0000 [ 2305.091356][ T36] audit: type=1326 audit(1773819381.109:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23839 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d0dbec799 code=0x7ffc0000 [ 2305.091405][ T36] audit: type=1326 audit(1773819381.109:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23839 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d0dbec799 code=0x7ffc0000 [ 2305.091446][ T36] audit: type=1326 audit(1773819381.109:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23839 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d0dbec799 code=0x7ffc0000 [ 2305.091504][ T36] audit: type=1326 audit(1773819381.109:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23839 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d0dbec799 code=0x7ffc0000 [ 2305.091533][ T36] audit: type=1326 audit(1773819381.129:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23839 comm="syz.4.5292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7d0dbec799 code=0x7ffc0000 [ 2305.259242][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 2305.259350][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2305.300552][ T9] usb 8-1: USB disconnect, device number 78 [ 2306.019812][ T9] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 2306.187135][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 2306.189141][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2306.189161][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2306.189185][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2306.189201][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2306.193795][ T9] usb 8-1: config 0 descriptor?? [ 2306.277676][ T9] hub 8-1:0.0: USB hub found [ 2306.400460][ T9] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2306.606588][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 2306.606701][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2306.722780][ T9] usb 8-1: USB disconnect, device number 79 [ 2310.529028][T23875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5299'. [ 2310.737138][T16957] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2310.913768][T16957] usb 4-1: config 0 has no interfaces? [ 2310.916933][T16957] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2310.917107][T16957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.917129][T16957] usb 4-1: Product: syz [ 2310.917143][T16957] usb 4-1: Manufacturer: syz [ 2310.917157][T16957] usb 4-1: SerialNumber: syz [ 2310.927969][T16957] usb 4-1: config 0 descriptor?? [ 2313.275902][T16957] usb 4-1: USB disconnect, device number 67 [ 2313.712175][T23900] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2313.801335][T23900] bond1 (unregistering): Released all slaves [ 2313.917216][T16957] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2314.195294][T16957] usb 4-1: Using ep0 maxpacket: 16 [ 2314.221636][T16957] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2314.221666][T16957] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2314.221697][T16957] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2314.221716][T16957] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2314.221737][T16957] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2314.224226][T16957] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2314.224252][T16957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2314.224278][T16957] usb 4-1: Product: syz [ 2314.224289][T16957] usb 4-1: Manufacturer: syz [ 2314.224299][T16957] usb 4-1: SerialNumber: syz [ 2314.238641][T16957] usb 4-1: config 0 descriptor?? [ 2314.239519][T23904] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2314.475407][T23904] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2314.537684][T16957] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input32 [ 2315.357632][T22540] usb 4-1: USB disconnect, device number 68 [ 2316.468452][T22540] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2316.637188][T22540] usb 4-1: Using ep0 maxpacket: 32 [ 2316.638570][T22540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2316.638590][T22540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2316.638615][T22540] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2316.638629][T22540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.642808][T22540] usb 4-1: config 0 descriptor?? [ 2316.716920][T22540] hub 4-1:0.0: USB hub found [ 2316.853486][T22540] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2317.091364][T23920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5312'. [ 2317.275518][T22540] hid-generic 0003:046D:C31C.0012: unknown main item tag 0x0 [ 2317.327414][T22540] hid-generic 0003:046D:C31C.0012: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 2317.906818][T22540] usb 4-1: USB disconnect, device number 69 [ 2319.307128][T22540] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2320.601374][T23951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5320'. [ 2323.597101][T22540] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 2323.747087][T22540] usb 7-1: Using ep0 maxpacket: 16 [ 2323.755518][T22540] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2323.755543][T22540] usb 7-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2323.755566][T22540] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2323.755600][T22540] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2323.755618][T22540] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2323.883699][T22540] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2323.883727][T22540] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.883740][T22540] usb 7-1: Product: syz [ 2323.883750][T22540] usb 7-1: Manufacturer: syz [ 2323.883760][T22540] usb 7-1: SerialNumber: syz [ 2323.888202][T22540] usb 7-1: config 0 descriptor?? [ 2323.948721][T23969] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2324.391134][T23969] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2324.581117][T22540] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input33 [ 2325.283508][ T808] usb 7-1: USB disconnect, device number 77 [ 2325.997168][T22540] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2326.174045][T22540] usb 5-1: config 0 has no interfaces? [ 2326.179492][T22540] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2326.179518][T22540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2326.179536][T22540] usb 5-1: Product: syz [ 2326.179550][T22540] usb 5-1: Manufacturer: syz [ 2326.179564][T22540] usb 5-1: SerialNumber: syz [ 2326.224396][T22540] usb 5-1: config 0 descriptor?? [ 2326.987146][T20226] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 2327.089515][T23999] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5333'. [ 2327.089550][T23999] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5333'. [ 2327.147290][T20226] usb 7-1: Using ep0 maxpacket: 32 [ 2327.153636][T20226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2327.153666][T20226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2327.153702][T20226] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2327.153725][T20226] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2327.239121][T20226] usb 7-1: config 0 descriptor?? [ 2327.244075][T20226] hub 7-1:0.0: USB hub found [ 2328.414025][T20226] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2328.825175][T20226] hid-generic 0003:046D:C31C.0013: unknown main item tag 0x0 [ 2329.091764][T20226] hid-generic 0003:046D:C31C.0013: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 2329.761785][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5337'. [ 2329.827487][T20226] usb 7-1: USB disconnect, device number 78 [ 2330.059457][T24016] fido_id[24016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 2331.348973][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5344'. [ 2332.596572][ T9] usb 5-1: USB disconnect, device number 86 [ 2337.087182][ T9] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 2337.320328][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5352'. [ 2337.320348][T24084] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 2337.708134][ T9] usb 7-1: config 0 has no interfaces? [ 2337.711066][ T9] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2337.711085][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.711099][ T9] usb 7-1: Product: syz [ 2337.711108][ T9] usb 7-1: Manufacturer: syz [ 2337.711118][ T9] usb 7-1: SerialNumber: syz [ 2337.779218][ T9] usb 7-1: config 0 descriptor?? [ 2338.648694][T24100] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2341.947095][ T808] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 2342.097083][ T808] usb 8-1: Using ep0 maxpacket: 16 [ 2342.098545][ T808] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2342.098566][ T808] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2342.098587][ T808] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2342.098602][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2342.162757][ T808] usb 8-1: config 0 descriptor?? [ 2342.187086][T20226] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2342.299645][ T9] usb 7-1: USB disconnect, device number 79 [ 2342.337102][T20226] usb 5-1: Using ep0 maxpacket: 32 [ 2342.339350][T20226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2342.339372][T20226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2342.339431][T20226] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2342.339579][T20226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2342.410910][T20226] usb 5-1: config 0 descriptor?? [ 2342.451121][T20226] hub 5-1:0.0: USB hub found [ 2342.664394][T24115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2342.678987][T24115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2342.744912][ T808] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 2342.744946][ T808] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 2342.744972][ T808] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 2342.744997][ T808] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 2342.745222][ T808] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 2342.843299][ T808] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 2342.916265][T20226] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 2342.963743][T20226] usbhid 5-1:0.0: can't add hid device: -71 [ 2342.963849][T20226] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2342.967110][ T9] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 2343.004697][ T808] usb 8-1: USB disconnect, device number 80 [ 2343.013983][T20226] usb 5-1: USB disconnect, device number 87 [ 2343.086564][T24123] fido_id[24123]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2343.127090][ T9] usb 7-1: device descriptor read/64, error -71 [ 2343.387076][ T9] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 2343.518601][ T9] usb 7-1: device descriptor read/64, error -71 [ 2343.586555][T22540] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 2343.629656][ T9] usb usb7-port1: attempt power cycle [ 2343.750583][T22540] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2343.750616][T22540] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2343.752070][T22540] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2343.752131][T22540] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2343.754120][T22540] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2343.754165][T22540] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2343.767085][ T5882] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2343.840176][T22540] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 2343.840195][T22540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.840209][T22540] usb 4-1: Product: syz [ 2343.840220][T22540] usb 4-1: Manufacturer: syz [ 2343.840230][T22540] usb 4-1: SerialNumber: syz [ 2343.846441][T22540] usb 4-1: config 0 descriptor?? [ 2343.891112][T22540] ti_usb_3410_5052 4-1:0.0: required endpoints missing [ 2343.917152][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 2343.921686][ T5882] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2343.921710][ T5882] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2343.921734][ T5882] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2343.921759][ T5882] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2343.921868][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2343.925066][ T5882] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2343.925091][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.925110][ T5882] usb 5-1: Product: syz [ 2343.925124][ T5882] usb 5-1: Manufacturer: syz [ 2343.925138][ T5882] usb 5-1: SerialNumber: syz [ 2343.977557][ T9] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 2344.024700][ T9] usb 7-1: device descriptor read/8, error -71 [ 2344.053032][ T5882] usb 5-1: config 0 descriptor?? [ 2344.053735][T24140] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2344.264646][ T808] usb 4-1: USB disconnect, device number 71 [ 2344.268766][ T9] usb 7-1: new full-speed USB device number 83 using dummy_hcd [ 2344.293998][ T9] usb 7-1: device descriptor read/8, error -71 [ 2344.340903][T24140] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2344.358531][ T5882] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 2344.403537][ T9] usb usb7-port1: unable to enumerate USB device [ 2344.555913][T24151] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2344.623169][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.623235][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.811465][ T808] usb 5-1: USB disconnect, device number 88 [ 2344.811495][ C0] synaptics_usb 5-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 2345.978678][T24165] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2346.561702][T24164] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2348.537103][ T808] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 2348.717053][ T808] usb 8-1: Using ep0 maxpacket: 32 [ 2348.719297][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2348.719334][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2348.719373][ T808] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2348.719396][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2348.733206][ T808] usb 8-1: config 0 descriptor?? [ 2348.872671][ T808] hub 8-1:0.0: USB hub found [ 2349.115346][ T808] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2349.167176][T11801] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2349.339638][T11801] usb 5-1: Using ep0 maxpacket: 32 [ 2349.343263][T11801] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2349.343329][T11801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2349.397954][T11801] usb 5-1: config 0 descriptor?? [ 2349.466329][ T808] hid-generic 0003:046D:C31C.0015: unknown main item tag 0x0 [ 2349.502253][ T808] hid-generic 0003:046D:C31C.0015: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.7-1/input0 [ 2349.620772][T11801] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 2349.621910][T11801] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2349.621950][T11801] dib0700: firmware download failed at 7 with -22 [ 2349.827673][ T9] usb 5-1: USB disconnect, device number 89 [ 2350.497581][T24189] usb 8-1: reset high-speed USB device number 81 using dummy_hcd [ 2350.690772][ T5882] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2350.761152][T24189] usb 8-1: device firmware changed [ 2350.787741][ T808] usb 8-1: USB disconnect, device number 81 [ 2350.857267][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 2350.859086][ T5882] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2350.859111][ T5882] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2350.859135][ T5882] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2350.859159][ T5882] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2350.859185][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2350.861288][ T5882] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2350.861312][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2350.861331][ T5882] usb 5-1: Product: syz [ 2350.861345][ T5882] usb 5-1: Manufacturer: syz [ 2350.861359][ T5882] usb 5-1: SerialNumber: syz [ 2350.968933][ T5882] usb 5-1: config 0 descriptor?? [ 2350.970002][T24204] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2350.987133][ T808] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 2351.137037][ T808] usb 8-1: Using ep0 maxpacket: 32 [ 2351.138984][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2351.139013][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2351.139049][ T808] usb 8-1: New USB device found, idVendor=046d, idProduct=2377, bcdDevice= 0.00 [ 2351.139071][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2351.143984][ T808] usb 8-1: config 0 descriptor?? [ 2351.156898][ T808] hub 8-1:0.0: USB hub found [ 2351.310489][T24204] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2351.367922][ T5882] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 2351.904286][ T808] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 2351.921564][ T808] usbhid 8-1:0.0: can't add hid device: -71 [ 2351.921684][ T808] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2351.970909][ T9] usb 5-1: USB disconnect, device number 90 [ 2351.988268][ T808] usb 8-1: USB disconnect, device number 82 [ 2352.399668][ T5882] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 2352.557063][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 2352.650824][ T5882] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2352.650858][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2352.680270][ T5882] usb 7-1: config 0 descriptor?? [ 2352.704377][T24223] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5395'. [ 2352.704412][T24223] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5395'. [ 2353.531608][ T5882] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 2353.558068][ T5882] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2353.558113][ T5882] dib0700: firmware download failed at 7 with -22 [ 2353.587709][ T5882] usb 7-1: USB disconnect, device number 84 [ 2353.700939][T24232] fuse: Bad value for 'rootmode' [ 2354.204661][T24235] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2354.348366][T24238] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2354.787108][ T5882] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 2354.974657][ T5882] usb 8-1: Using ep0 maxpacket: 32 [ 2354.985792][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2354.985812][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2354.985836][ T5882] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2354.985851][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2354.997942][ T5882] usb 8-1: config 0 descriptor?? [ 2355.059902][ T5882] hub 8-1:0.0: USB hub found [ 2355.223344][T24241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2355.226808][T24241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2355.449754][ T5882] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 2355.453826][ T5882] usbhid 8-1:0.0: can't add hid device: -71 [ 2355.453937][ T5882] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2355.527179][ T5882] usb 8-1: USB disconnect, device number 83 [ 2358.798561][T24267] fuse: Bad value for 'rootmode' [ 2360.161998][T24277] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2362.905033][T24303] fuse: Bad value for 'rootmode' [ 2365.222315][T24321] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.5428'. [ 2365.889166][T24336] fuse: Unknown parameter 'use00000000000000000000' [ 2366.852622][T24347] openvswitch: netlink: Flow key attr not present in new flow. [ 2367.180227][T19953] Bluetooth: hci5: command 0x0406 tx timeout [ 2368.761485][T24361] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.5439'. [ 2370.313398][T24375] fuse: Unknown parameter 'use00000000000000000000' [ 2372.263276][T24402] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.5450'. [ 2372.399087][T24405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2374.298223][T24414] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2374.722910][T24421] fuse: Unknown parameter 'use00000000000000000000' [ 2375.622369][T24429] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2375.910476][T24435] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2377.600859][T24448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5463'. [ 2379.977513][T24467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5468'. [ 2380.853115][T24484] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 2382.740238][T24493] fuse: Unknown parameter 'user_i00000000000000000000' [ 2383.535490][T24498] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5476'. [ 2385.018018][T24515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5481'. [ 2388.349328][T24541] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5488'. [ 2389.091981][T24543] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5489'. [ 2390.219203][T24558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2392.763009][T24581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5499'. [ 2393.684603][T24583] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5500'. [ 2394.239320][T24589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2395.319419][T24605] netlink: 'syz.1.5507': attribute type 12 has an invalid length. [ 2395.319433][T24605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5507'. [ 2395.457150][T11801] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2395.637018][T11801] usb 5-1: Using ep0 maxpacket: 16 [ 2395.639412][T11801] usb 5-1: config index 0 descriptor too short (expected 14385, got 18) [ 2395.639434][T11801] usb 5-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 2395.639453][T11801] usb 5-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 2395.639466][T11801] usb 5-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 2395.642378][T11801] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2395.642405][T11801] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2395.642419][T11801] usb 5-1: Product: syz [ 2395.642429][T11801] usb 5-1: Manufacturer: syz [ 2395.642439][T11801] usb 5-1: SerialNumber: syz [ 2398.237197][T24617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5511'. [ 2398.237261][T24617] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5511'. [ 2400.817050][T11801] usb 5-1: USB disconnect, device number 91 [ 2403.190509][T24656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2404.150034][T24660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2406.062575][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.062645][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2408.754228][T24688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2409.194581][T24693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2410.348108][T24701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5535'. [ 2411.205560][T24712] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.5538'. [ 2411.298724][T24714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2411.853779][T24719] warning: `syz.6.5540' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 2416.108407][T24750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2418.279279][T24754] netlink: 'syz.3.5550': attribute type 72 has an invalid length. [ 2418.669986][ T808] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 2418.867721][ T808] usb 8-1: Using ep0 maxpacket: 8 [ 2418.908157][ T808] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2418.908241][ T808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2418.908318][ T808] usb 8-1: Product: syz [ 2418.908390][ T808] usb 8-1: Manufacturer: syz [ 2418.908464][ T808] usb 8-1: SerialNumber: syz [ 2419.278219][ T808] usb 8-1: config 0 descriptor?? [ 2419.513065][ T808] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2420.719016][ T808] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2421.677080][ T5882] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2421.812397][T22540] usb 8-1: USB disconnect, device number 84 [ 2421.837093][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 2421.860418][ T5882] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2421.860445][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2421.860465][ T5882] usb 5-1: Product: syz [ 2421.860479][ T5882] usb 5-1: Manufacturer: syz [ 2421.860492][ T5882] usb 5-1: SerialNumber: syz [ 2421.880159][ T5882] usb 5-1: config 0 descriptor?? [ 2422.104591][ T5882] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2424.260531][ T5882] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2424.262820][ T5882] usb 5-1: USB disconnect, device number 92 [ 2425.127044][T11801] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 2425.160337][T24824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2425.321742][T11801] usb 7-1: Using ep0 maxpacket: 16 [ 2425.340409][T11801] usb 7-1: config index 0 descriptor too short (expected 14385, got 18) [ 2425.340434][T11801] usb 7-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 2425.340454][T11801] usb 7-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 2425.340473][T11801] usb 7-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 2425.713698][T11801] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2425.713730][T11801] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2425.713751][T11801] usb 7-1: Product: syz [ 2425.713765][T11801] usb 7-1: Manufacturer: syz [ 2425.713779][T11801] usb 7-1: SerialNumber: syz [ 2426.891130][T20226] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2427.057008][T20226] usb 5-1: Using ep0 maxpacket: 8 [ 2427.083323][T20226] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2427.083905][T20226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2427.083931][T20226] usb 5-1: Product: syz [ 2427.083941][T20226] usb 5-1: Manufacturer: syz [ 2427.083988][T20226] usb 5-1: SerialNumber: syz [ 2427.202900][T20226] usb 5-1: config 0 descriptor?? [ 2427.480196][T20226] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2428.090271][T24840] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5573'. [ 2429.221575][T20226] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2429.586104][T24852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5576'. [ 2429.586128][T24852] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5576'. [ 2430.414251][ T5882] usb 5-1: USB disconnect, device number 93 [ 2430.930542][ T5882] usb 7-1: USB disconnect, device number 85 [ 2432.827159][T20226] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2433.121621][T20226] usb 5-1: Using ep0 maxpacket: 8 [ 2433.132400][T20226] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2433.132456][T20226] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2433.132480][T20226] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2433.132504][T20226] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2433.132529][T20226] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2433.132580][T20226] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2433.132603][T20226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2433.839218][T20226] usb 5-1: GET_CAPABILITIES returned 0 [ 2433.839264][T20226] usbtmc 5-1:16.0: can't read capabilities [ 2434.261609][T24879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2434.262499][T24879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2438.077711][ T5882] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 2439.240493][ T5882] usb 8-1: config 0 has no interfaces? [ 2439.245476][ T5882] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2439.245495][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2439.245508][ T5882] usb 8-1: Product: syz [ 2439.245518][ T5882] usb 8-1: Manufacturer: syz [ 2439.245527][ T5882] usb 8-1: SerialNumber: syz [ 2439.290434][T22540] usb 5-1: USB disconnect, device number 94 [ 2439.365974][ T5882] usb 8-1: config 0 descriptor?? [ 2441.142449][T20226] usb 8-1: USB disconnect, device number 85 [ 2444.077127][ T9] usb 7-1: new full-speed USB device number 86 using dummy_hcd [ 2444.180650][T11801] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2444.247616][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2444.247642][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2444.247661][ T9] usb 7-1: config 1 has no interface number 0 [ 2444.247701][ T9] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2444.247719][ T9] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2444.247736][ T9] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2444.247775][ T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2444.247790][ T9] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2444.250699][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2444.250719][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.250733][ T9] usb 7-1: Product: syz [ 2444.250742][ T9] usb 7-1: Manufacturer: syz [ 2444.250752][ T9] usb 7-1: SerialNumber: syz [ 2444.368099][T24966] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2444.447040][T11801] usb 4-1: Using ep0 maxpacket: 8 [ 2444.454404][T11801] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2444.454430][T11801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.454450][T11801] usb 4-1: Product: syz [ 2444.454465][T11801] usb 4-1: Manufacturer: syz [ 2444.454479][T11801] usb 4-1: SerialNumber: syz [ 2444.521203][T11801] usb 4-1: config 0 descriptor?? [ 2444.733658][T11801] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2445.838064][T24966] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2446.119956][ T9] cdc_ncm 7-1:1.1: bind() failure [ 2446.248719][T11801] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2446.278994][T24982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2446.388764][ T9] usb 7-1: USB disconnect, device number 86 [ 2447.387068][T11801] usb 4-1: USB disconnect, device number 72 [ 2447.654192][T24996] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2448.587063][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2448.778480][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 2448.786172][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2448.786220][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2448.786235][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2448.786251][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2448.786266][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2448.786293][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2448.786308][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2449.088972][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 2449.089004][ T9] usbtmc 4-1:16.0: can't read capabilities [ 2449.299556][T25002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2449.300064][T25002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2453.336783][ T9] usb 4-1: USB disconnect, device number 73 [ 2453.547153][T22540] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2453.697027][T22540] usb 5-1: Using ep0 maxpacket: 8 [ 2453.703028][T22540] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2453.703055][T22540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2453.703075][T22540] usb 5-1: Product: syz [ 2453.703091][T22540] usb 5-1: Manufacturer: syz [ 2453.703101][T22540] usb 5-1: SerialNumber: syz [ 2453.776651][T22540] usb 5-1: config 0 descriptor?? [ 2454.157079][T22540] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2455.276124][T22540] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2456.864918][T20226] usb 5-1: USB disconnect, device number 95 [ 2457.170495][T25047] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2457.309698][T25051] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5630'. [ 2458.508585][T25060] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5633'. [ 2460.567070][ T5882] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2460.717196][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 2460.742861][ T5882] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2460.742888][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2460.742909][ T5882] usb 4-1: Product: syz [ 2460.742925][ T5882] usb 4-1: Manufacturer: syz [ 2460.742935][ T5882] usb 4-1: SerialNumber: syz [ 2460.746134][ T5882] usb 4-1: config 0 descriptor?? [ 2460.831541][T25087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5639'. [ 2460.962253][ T5882] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2461.295821][T25091] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.5641'. [ 2462.020587][ T5882] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2462.047060][ T808] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 2462.217022][ T808] usb 7-1: Using ep0 maxpacket: 8 [ 2462.228333][ T808] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 2462.228460][ T808] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2462.228522][ T808] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2462.228584][ T808] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2462.228657][ T808] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2462.228754][ T808] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2462.228798][ T808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2462.483715][ T808] usb 7-1: GET_CAPABILITIES returned 0 [ 2462.483764][ T808] usbtmc 7-1:16.0: can't read capabilities [ 2462.518762][T25105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2462.976361][T25095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2463.206699][T25095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2463.695064][T22540] usb 4-1: USB disconnect, device number 74 [ 2465.707068][T20226] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 2465.735765][T22540] usb 7-1: USB disconnect, device number 87 [ 2465.865921][T20226] usb 8-1: device descriptor read/64, error -71 [ 2466.107220][T20226] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 2466.247907][T20226] usb 8-1: device descriptor read/64, error -71 [ 2466.368175][T20226] usb usb8-port1: attempt power cycle [ 2466.757188][T20226] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 2466.779148][T20226] usb 8-1: device descriptor read/8, error -71 [ 2467.027420][T20226] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 2467.059317][T20226] usb 8-1: device descriptor read/8, error -71 [ 2467.168830][T20226] usb usb8-port1: unable to enumerate USB device [ 2467.674267][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.697011][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2469.762242][T25153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5658'. [ 2470.767061][T22540] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 2470.877766][T25167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2470.927104][T22540] usb 8-1: Using ep0 maxpacket: 8 [ 2470.929493][T22540] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2470.929517][T22540] usb 8-1: config 0 has no interface number 0 [ 2470.929545][T22540] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2470.929572][T22540] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2470.929587][T22540] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2470.933446][T22540] usb 8-1: config 0 descriptor?? [ 2471.038813][T22540] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2471.173172][T22540] usb 8-1: USB disconnect, device number 90 [ 2472.984170][T22540] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2473.147040][T22540] usb 4-1: Using ep0 maxpacket: 16 [ 2473.150771][T22540] usb 4-1: config index 0 descriptor too short (expected 14385, got 18) [ 2473.150796][T22540] usb 4-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 2473.150816][T22540] usb 4-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 2473.150835][T22540] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 2473.158528][T22540] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2473.158556][T22540] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2473.158578][T22540] usb 4-1: Product: syz [ 2473.158593][T22540] usb 4-1: Manufacturer: syz [ 2473.158608][T22540] usb 4-1: SerialNumber: syz [ 2474.068647][T25184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5667'. [ 2474.068712][T25184] bond0: option arp_validate: invalid value (52140) [ 2476.559573][T25209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5674'. [ 2476.559596][T25209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5674'. [ 2476.607038][ T5882] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 2476.732851][T25209] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 2476.756981][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 2476.760231][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2476.760259][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2476.760284][ T5882] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2476.760298][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2476.816195][ T5882] usb 7-1: config 0 descriptor?? [ 2476.844148][ T5882] hub 7-1:0.0: USB hub found [ 2477.111192][ T5882] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2477.524381][ T5882] hid-generic 0003:046D:C31C.0016: unknown main item tag 0x0 [ 2477.654281][ T5882] hid-generic 0003:046D:C31C.0016: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 2478.401909][T22540] usb 4-1: USB disconnect, device number 75 [ 2478.461858][ T808] usb 7-1: USB disconnect, device number 88 [ 2478.522779][T25214] fido_id[25214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 2480.321581][T25224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5678'. [ 2480.321604][T25224] bond0: option arp_validate: invalid value (52140) [ 2481.640597][T25239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5683'. [ 2482.835714][T25252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2485.513351][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5690'. [ 2485.513373][T25267] bond0: option arp_validate: invalid value (52140) [ 2486.029402][T25272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5692'. [ 2486.917046][T11801] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 2487.048219][T11801] usb 7-1: device descriptor read/64, error -71 [ 2487.287037][T11801] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 2487.417205][T11801] usb 7-1: device descriptor read/64, error -71 [ 2487.536627][T11801] usb usb7-port1: attempt power cycle [ 2487.887164][T11801] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 2487.916020][T11801] usb 7-1: device descriptor read/8, error -71 [ 2488.217136][T11801] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 2488.376085][T11801] usb 7-1: device descriptor read/8, error -71 [ 2488.477644][T11801] usb usb7-port1: unable to enumerate USB device [ 2489.989223][T25305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5701'. [ 2489.989253][T25305] bond0: option arp_validate: invalid value (52140) [ 2493.326176][ T5882] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 2493.387074][T22540] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2493.490467][ T5882] usb 8-1: Using ep0 maxpacket: 32 [ 2493.493254][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2493.493286][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2493.493348][ T5882] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2493.493365][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2493.527318][T22540] usb 4-1: device descriptor read/64, error -71 [ 2493.552597][ T5882] usb 8-1: config 0 descriptor?? [ 2493.564971][ T5882] hub 8-1:0.0: USB hub found [ 2493.807106][T22540] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2493.838045][ T5882] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2493.851303][T24804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2493.851345][T24804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2493.937591][T22540] usb 4-1: device descriptor read/64, error -71 [ 2494.047385][T22540] usb usb4-port1: attempt power cycle [ 2494.256314][ T5882] hid-generic 0003:046D:C31C.0017: unknown main item tag 0x0 [ 2494.414468][ T5882] hid-generic 0003:046D:C31C.0017: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.7-1/input0 [ 2494.417153][T22540] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2494.439645][T22540] usb 4-1: device descriptor read/8, error -71 [ 2494.463576][ T5882] ================================================================== [ 2494.463638][ T5882] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 2494.463716][ T5882] Read of size 8 at addr ffffc900214ef008 by task kworker/0:5/5882 [ 2494.463729][ T5882] [ 2494.463760][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2494.463781][ T5882] Tainted: [L]=SOFTLOCKUP [ 2494.463787][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2494.463796][ T5882] Workqueue: usb_hub_wq hub_event [ 2494.463826][ T5882] Call Trace: [ 2494.463832][ T5882] [ 2494.463838][ T5882] dump_stack_lvl+0xe8/0x150 [ 2494.463864][ T5882] print_report+0xba/0x230 [ 2494.463890][ T5882] ? __list_add_valid_or_report+0x4e/0x130 [ 2494.463919][ T5882] kasan_report+0x117/0x150 [ 2494.463940][ T5882] ? __list_add_valid_or_report+0x4e/0x130 [ 2494.463987][ T5882] __list_add_valid_or_report+0x4e/0x130 [ 2494.464011][ T5882] kcov_remote_stop+0x457/0x680 [ 2494.464041][ T5882] hub_event+0x49d8/0x4f60 [ 2494.464060][ T5882] ? __update_load_avg_cfs_rq+0x6f6/0xc10 [ 2494.464116][ T5882] ? __pfx_hub_event+0x10/0x10 [ 2494.464135][ T5882] ? process_scheduled_works+0xa8d/0x18c0 [ 2494.464155][ T5882] ? process_scheduled_works+0xa8d/0x18c0 [ 2494.464175][ T5882] process_scheduled_works+0xb6e/0x18c0 [ 2494.464206][ T5882] ? __pfx_process_scheduled_works+0x10/0x10 [ 2494.464229][ T5882] ? assign_work+0x3d5/0x5e0 [ 2494.464250][ T5882] worker_thread+0xa53/0xfc0 [ 2494.464279][ T5882] kthread+0x388/0x470 [ 2494.464294][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 2494.464332][ T5882] ? __pfx_kthread+0x10/0x10 [ 2494.464348][ T5882] ret_from_fork+0x51e/0xb90 [ 2494.464372][ T5882] ? __pfx_ret_from_fork+0x10/0x10 [ 2494.464393][ T5882] ? __switch_to+0xc7d/0x1450 [ 2494.464424][ T5882] ? __pfx_kthread+0x10/0x10 [ 2494.464440][ T5882] ret_from_fork_asm+0x1a/0x30 [ 2494.464473][ T5882] [ 2494.464479][ T5882] [ 2494.464482][ T5882] The buggy address belongs to a vmalloc virtual mapping [ 2494.464520][ T5882] Memory state around the buggy address: [ 2494.464529][ T5882] ffffc900214eef00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2494.464540][ T5882] ffffc900214eef80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2494.464574][ T5882] >ffffc900214ef000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2494.464583][ T5882] ^ [ 2494.464591][ T5882] ffffc900214ef080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2494.464601][ T5882] ffffc900214ef100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2494.464609][ T5882] ================================================================== [ 2494.464640][ T5882] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2494.464655][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2494.464680][ T5882] Tainted: [L]=SOFTLOCKUP [ 2494.464687][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2494.464697][ T5882] Workqueue: usb_hub_wq hub_event [ 2494.464727][ T5882] Call Trace: [ 2494.464733][ T5882] [ 2494.464738][ T5882] vpanic+0x56c/0xa60 [ 2494.464765][ T5882] ? __pfx_vpanic+0x10/0x10 [ 2494.464787][ T5882] ? __pfx___schedule+0x10/0x10 [ 2494.464840][ T5882] panic+0xc5/0xd0 [ 2494.464867][ T5882] ? __pfx_panic+0x10/0x10 [ 2494.464894][ T5882] ? preempt_schedule_thunk+0x16/0x30 [ 2494.464923][ T5882] ? __list_add_valid_or_report+0x4e/0x130 [ 2494.464940][ T5882] check_panic_on_warn+0x89/0xb0 [ 2494.464963][ T5882] ? __list_add_valid_or_report+0x4e/0x130 [ 2494.465006][ T5882] end_report+0x73/0x180 [ 2494.465028][ T5882] ? __list_add_valid_or_report+0x4e/0x130 [ 2494.465051][ T5882] kasan_report+0x128/0x150 [ 2494.465072][ T5882] ? __list_add_valid_or_report+0x4e/0x130 [ 2494.465102][ T5882] __list_add_valid_or_report+0x4e/0x130 [ 2494.465131][ T5882] kcov_remote_stop+0x457/0x680 [ 2494.465161][ T5882] hub_event+0x49d8/0x4f60 [ 2494.465183][ T5882] ? __update_load_avg_cfs_rq+0x6f6/0xc10 [ 2494.465247][ T5882] ? __pfx_hub_event+0x10/0x10 [ 2494.465267][ T5882] ? process_scheduled_works+0xa8d/0x18c0 [ 2494.465289][ T5882] ? process_scheduled_works+0xa8d/0x18c0 [ 2494.465310][ T5882] process_scheduled_works+0xb6e/0x18c0 [ 2494.465343][ T5882] ? __pfx_process_scheduled_works+0x10/0x10 [ 2494.465367][ T5882] ? assign_work+0x3d5/0x5e0 [ 2494.465389][ T5882] worker_thread+0xa53/0xfc0 [ 2494.465423][ T5882] kthread+0x388/0x470 [ 2494.465451][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 2494.465471][ T5882] ? __pfx_kthread+0x10/0x10 [ 2494.465486][ T5882] ret_from_fork+0x51e/0xb90 [ 2494.465507][ T5882] ? __pfx_ret_from_fork+0x10/0x10 [ 2494.465527][ T5882] ? __switch_to+0xc7d/0x1450 [ 2494.465544][ T5882] ? __pfx_kthread+0x10/0x10 [ 2494.465560][ T5882] ret_from_fork_asm+0x1a/0x30 [ 2494.465579][ T5882] [ 2494.466088][ T5882] Kernel Offset: disabled