last executing test programs: 9m17.833798039s ago: executing program 0 (id=1945): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224000100000000090400"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xd3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="700000001e005f5b25bd7000fcdbdf250a01010100"/31], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x20004810) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbf8, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000013906c08e90f59db"], 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8200}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x40, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xf1ea, 0x39}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000084}, 0x8000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 9m12.092093977s ago: executing program 0 (id=1955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) write$FUSE_POLL(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x10201, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) statx(r4, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x10, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}], 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x2000000000000005}) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000280)={0x9e0000, 0x1000, 0x45f, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9b0972, 0x3dc3, '\x00', @p_u8=0x0}}) io_setup(0x5, &(0x7f0000000080)) 9m10.623507594s ago: executing program 0 (id=1960): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x1, 0x0, [{0x953138a8a709a5d7, 0x47, &(0x7f0000000600)=""/71}]}) 9m10.329725479s ago: executing program 0 (id=1961): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 9m9.090080946s ago: executing program 0 (id=1963): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') pread64(r5, &(0x7f0000000600)=""/4091, 0xffb, 0x12c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) syz_pidfd_open(r2, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0xdcc1629e84dd29d1) socket(0x2a, 0x80000, 0xe46b0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f00000010c0)) 9m7.139698587s ago: executing program 0 (id=1965): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 8m51.371968538s ago: executing program 32 (id=1965): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 13.872552794s ago: executing program 2 (id=3614): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000000)="a058b776e7315b35ac0005f527104cb204c99bf2fc326394941e82e7a2e8d883a5f71a8ef39a458e253b9657efb842a1ad35b878d6c892e77b76a0f3b703fea78f2dd6e9e16dc4fc66257228d0e3f53f2a8092d4bc1e035900b843d950ec760308bec03c21be314b7867a721df6458bb813b7319", 0x74}, {0x0, 0x20}, {0x0}], 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = socket$kcm(0x11, 0x2, 0x300) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRES16=r8, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x8907, 0x0) recvmsg$kcm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r11, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 10.648528467s ago: executing program 1 (id=3623): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 9.780831932s ago: executing program 1 (id=3625): r0 = syz_open_dev$video(0x0, 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x86e, {0xfffffffb, 0xbde, 0xb, 0x10000}}) 9.596801315s ago: executing program 5 (id=3626): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 9.275507754s ago: executing program 1 (id=3627): socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x3bd4, 0x0, &(0x7f0000000100), &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0xfbe5b7b28b1ed63c) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_ACT={0x58, 0x3, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x4, 0x9}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv4_deladdr={0x54, 0x15, 0x10, 0x70bd2b, 0x25dfdbfd, {0x2, 0x78, 0x42, 0xff, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x7, 0x2, 0x4, 0x5}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_FLAGS={0x8, 0x8, 0x287}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x35}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x5) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000000) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r3) 7.644442479s ago: executing program 1 (id=3632): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000180)='./file0\x00', 0xc15db06e676022ae, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100000000060000000b000000180100002020702500000000002020207b9a1be4a6e66aca6719d1e94e8082f8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060700000093000000000000b5030000000000008500000076000000b70000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r1, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cef", 0x5f, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newsa={0x194, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "00000000000000000100070000400000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) 7.468577603s ago: executing program 4 (id=3633): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r2, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = syz_io_uring_setup(0x1e1d, &(0x7f0000000200)={0x0, 0x400086fc, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48ed, 0x0, 0x2, 0x0, 0x0) 6.949024003s ago: executing program 2 (id=3634): syz_open_dev$loop(0x0, 0x75f, 0xa382) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1acf9bd7, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r3, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r3}}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x0, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x4}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff707900082402ff200126ff09058503"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 6.861205847s ago: executing program 4 (id=3635): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0xfffffffffffffeda, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa8a0a63cdec59080600"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 6.615123607s ago: executing program 5 (id=3636): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) syncfs(0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a", 0xa}], 0x1}, 0x44000) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10020) 6.575807797s ago: executing program 4 (id=3637): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) 6.544904336s ago: executing program 1 (id=3638): syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1acf9bd7, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r5, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r5}}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x0, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x4}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff707900082402ff200126ff09058503"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 6.46465459s ago: executing program 4 (id=3639): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.118938067s ago: executing program 4 (id=3640): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d7", 0x20}], 0x1) r1 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x3, 0x38a}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x40857ba, 0x0, 0xe, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0xffffffffffffffff, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x20000010001, 0x0, 0xd, 0x3, 0x100, 0x10000, 0x2, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.076674865s ago: executing program 3 (id=3641): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="020000000000000000d60ee5263200", @ANYRES32=0x0, @ANYRES32], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.872685309s ago: executing program 3 (id=3642): socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x3bd4, 0x0, &(0x7f0000000100), &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0xfbe5b7b28b1ed63c) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_ACT={0x58, 0x3, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x4, 0x9}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv4_deladdr={0x54, 0x15, 0x10, 0x70bd2b, 0x25dfdbfd, {0x2, 0x78, 0x42, 0xff, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x7, 0x2, 0x4, 0x5}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_FLAGS={0x8, 0x8, 0x287}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x35}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x5) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000000) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r3) 5.398504352s ago: executing program 2 (id=3643): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000240)=ANY=[@ANYBLOB="14df2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c087}, 0x4004104) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)={0xf8, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1000}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1fc000}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x28000}, @CTA_EXPECT_MASTER={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xd}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x4, 0x3, 0x1, 0x0, 0x2}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1a8db8483fdd9ba9}, 0x4800) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0xff, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x26, 0x19, 0x2c, 0x13, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x24, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) setns(r2, 0x20000) r4 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe", 0x3d) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x48) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) close(r7) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x1100000000f336, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000140)=0x800) write$evdev(r9, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) 4.500738674s ago: executing program 4 (id=3644): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000000)="a058b776e7315b35ac0005f527104cb204c99bf2fc326394941e82e7a2e8d883a5f71a8ef39a458e253b9657efb842a1ad35b878d6c892e77b76a0f3b703fea78f2dd6e9e16dc4fc66257228d0e3f53f2a8092d4bc1e035900b843d950ec760308bec03c21be314b7867a721df6458bb813b7319", 0x74}, {0x0, 0x20}, {0x0}], 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = socket$kcm(0x11, 0x2, 0x300) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRES16=r8, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x8907, 0x0) recvmsg$kcm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r11, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 4.158463135s ago: executing program 2 (id=3645): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r2, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = syz_io_uring_setup(0x1e1d, &(0x7f0000000200)={0x0, 0x400086fc, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48ed, 0x0, 0x2, 0x0, 0x0) 4.058576473s ago: executing program 3 (id=3646): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000006) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(r1, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002d40)=ANY=[@ANYBLOB="4c0000001200050926bd7000fddbdf254000000000000000fbffffffff000000090000000500000099dd000005000000fe1f000056ffff", @ANYRES32=0x0, @ANYBLOB="feffffff00101000ca060000010001"], 0xae}, 0x1, 0x0, 0x0, 0x22004014}, 0x800) 3.3727902s ago: executing program 2 (id=3647): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000100)="05", 0x1) write$char_usb(r1, &(0x7f0000000140)="f4e43c1c5f3cd28fd7ec76cf44f57d88de6e48ff34c27222c7713c967d8c6c959a872372866b7e3771a26678d8655fde6c64476c", 0x34) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 2.824252706s ago: executing program 3 (id=3648): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000180)='./file0\x00', 0xc15db06e676022ae, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100000000060000000b000000180100002020702500000000002020207b9a1be4a6e66aca6719d1e94e8082f8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060700000093000000000000b5030000000000008500000076000000b70000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r1, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cef", 0x5f, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newsa={0x194, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "00000000000000000100070000400000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) 1.928215248s ago: executing program 5 (id=3649): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) 1.648386217s ago: executing program 5 (id=3650): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0x0, r1, 0x1}}, 0x18) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec300059191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d25", 0xc0}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1.465322513s ago: executing program 5 (id=3651): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) 1.334752466s ago: executing program 3 (id=3652): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="020000000000000000d60ee5263200", @ANYRES32=0x0, @ANYRES32], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.141441298s ago: executing program 3 (id=3653): syz_open_dev$loop(0x0, 0x75f, 0xa382) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1acf9bd7, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r3, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r3}}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x0, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x4}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff707900082402ff200126ff09058503"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 80.468969ms ago: executing program 2 (id=3654): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d7", 0x20}], 0x1) r1 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x3, 0x38a}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x40857ba, 0x0, 0xe, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0xffffffffffffffff, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x20000010001, 0x0, 0xd, 0x3, 0x100, 0x10000, 0x2, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 28.226648ms ago: executing program 5 (id=3655): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000240)=ANY=[@ANYBLOB="14df2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c087}, 0x4004104) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)={0xf8, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1000}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1fc000}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x28000}, @CTA_EXPECT_MASTER={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xd}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x4, 0x3, 0x1, 0x0, 0x2}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1a8db8483fdd9ba9}, 0x4800) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0xff, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x26, 0x19, 0x2c, 0x13, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x24, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) setns(r2, 0x20000) r4 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe", 0x3d) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x48) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) close(r7) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x1100000000f336, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000140)=0x800) write$evdev(r9, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) 0s ago: executing program 1 (id=3656): socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x3bd4, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f0000000280)=0x1, 0x0, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0xfbe5b7b28b1ed63c) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_ACT={0x58, 0x3, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x4, 0x9}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv4_deladdr={0x54, 0x15, 0x10, 0x70bd2b, 0x25dfdbfd, {0x2, 0x78, 0x42, 0xff, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x7, 0x2, 0x4, 0x5}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_FLAGS={0x8, 0x8, 0x287}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x35}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x5) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000000) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r4) kernel console output (not intermixed with test programs): 44 bytes leftover after parsing attributes in process `syz.3.2793'. [ 1026.399589][T13963] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1026.529453][T13327] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1026.689592][T13327] usb 5-1: Using ep0 maxpacket: 32 [ 1026.698946][T13327] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1026.698980][T13327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.699001][T13327] usb 5-1: Product: syz [ 1026.699017][T13327] usb 5-1: Manufacturer: syz [ 1026.699033][T13327] usb 5-1: SerialNumber: syz [ 1026.723624][T13963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.723739][T13963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.723817][T13963] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1026.723928][T13963] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1026.723998][T13963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.763429][ T37] audit: type=1326 audit(1772813550.638:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17952 comm="syz.1.2799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ebe6dc799 code=0x0 [ 1026.871807][T13327] usb 5-1: config 0 descriptor?? [ 1026.924262][T13963] usb 3-1: config 0 descriptor?? [ 1027.434869][T13327] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 053 [ 1027.663729][T13963] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1027.717479][T17972] fuse: Unknown parameter '0x000000000000000d' [ 1028.989476][ T5880] usb 3-1: reset high-speed USB device number 56 using dummy_hcd [ 1029.249656][T13327] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1029.288305][T13963] usb 5-1: USB disconnect, device number 53 [ 1029.545657][T13327] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1029.545690][T13327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.545711][T13327] usb 4-1: Product: syz [ 1029.545726][T13327] usb 4-1: Manufacturer: syz [ 1029.545740][T13327] usb 4-1: SerialNumber: syz [ 1029.942249][ T5881] usb 3-1: USB disconnect, device number 56 [ 1030.017723][T13327] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1030.017790][T13327] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1030.226023][T13327] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1030.226068][T13327] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1030.229695][T13327] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1030.282139][T13327] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1030.306282][T13327] usb 4-1: USB disconnect, device number 65 [ 1031.065552][T13327] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1031.240696][T17998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2811'. [ 1031.240791][T17998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2811'. [ 1031.509759][T13327] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1031.510818][T13327] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1031.510856][T13327] usb 5-1: can't read configurations, error -71 [ 1031.969510][ T5925] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1032.142348][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.142384][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.142408][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1032.142453][ T5925] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1032.142477][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.146882][ T5925] usb 4-1: config 0 descriptor?? [ 1032.739376][ T37] audit: type=1326 audit(1772813556.608:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18015 comm="syz.4.2818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38a70fc799 code=0x0 [ 1032.999249][ T5925] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1033.827555][T18033] fuse: Unknown parameter '0x000000000000000e' [ 1034.691865][ T31] usb 4-1: USB disconnect, device number 66 [ 1035.279509][T18045] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2828'. [ 1036.159500][ T31] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1036.311700][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 1036.353860][ T31] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1036.353893][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.353913][ T31] usb 5-1: Product: syz [ 1036.353929][ T31] usb 5-1: Manufacturer: syz [ 1036.353944][ T31] usb 5-1: SerialNumber: syz [ 1036.406259][ T31] usb 5-1: config 0 descriptor?? [ 1036.651089][ T31] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 056 [ 1037.079431][ T31] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1037.243057][T18065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2836'. [ 1037.335210][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1037.336420][ T31] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1037.336457][ T31] usb 3-1: can't read configurations, error -71 [ 1038.579976][ T37] audit: type=1326 audit(1772813562.328:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18082 comm="syz.1.2842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ebe6dc799 code=0x0 [ 1039.170010][T13327] usb 5-1: USB disconnect, device number 56 [ 1039.952392][T18100] fuse: Unknown parameter '0x000000000000000e' [ 1040.413068][ T5925] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1040.584908][ T5925] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1040.584942][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.584963][ T5925] usb 4-1: Product: syz [ 1040.584978][ T5925] usb 4-1: Manufacturer: syz [ 1040.584994][ T5925] usb 4-1: SerialNumber: syz [ 1040.833484][ T5925] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1040.833527][ T5925] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1040.833543][ T5925] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1040.878787][ T5925] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1042.509547][ T5881] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1042.667134][ T5881] usb 6-1: config 0 has no interfaces? [ 1042.678842][ T5881] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1042.678865][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1042.678880][ T5881] usb 6-1: Product: syz [ 1042.678891][ T5881] usb 6-1: Manufacturer: syz [ 1042.726857][ T5881] usb 6-1: config 0 descriptor?? [ 1042.905396][ T5881] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1043.012596][ T5925] usb 6-1: USB disconnect, device number 19 [ 1043.055862][T18119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2851'. [ 1043.151809][ T31] usb 4-1: USB disconnect, device number 67 [ 1043.158598][ T5881] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1043.159506][ T5881] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1043.159540][ T5881] usb 5-1: can't read configurations, error -71 [ 1043.790181][ T5925] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1044.008645][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 1044.017984][ T5925] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1044.018448][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.018474][ T5925] usb 3-1: Product: syz [ 1044.018489][ T5925] usb 3-1: Manufacturer: syz [ 1044.018505][ T5925] usb 3-1: SerialNumber: syz [ 1044.073220][ T5925] usb 3-1: config 0 descriptor?? [ 1044.286510][ T5925] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 059 [ 1046.537871][T18161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2863'. [ 1046.537913][T18161] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2863'. [ 1046.571590][ T9] usb 3-1: USB disconnect, device number 59 [ 1047.045368][T18168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2866'. [ 1048.352640][T18183] netlink: 'syz.4.2872': attribute type 1 has an invalid length. [ 1048.775795][T18172] capability: warning: `syz.1.2868' uses deprecated v2 capabilities in a way that may be insecure [ 1049.005531][T18198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2876'. [ 1049.005573][T18198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2876'. [ 1049.265334][T18206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2879'. [ 1049.279473][ T31] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1049.449406][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 1049.468447][ T31] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1049.468480][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.468725][ T31] usb 6-1: Product: syz [ 1049.468742][ T31] usb 6-1: Manufacturer: syz [ 1049.468757][ T31] usb 6-1: SerialNumber: syz [ 1049.540818][ T31] usb 6-1: config 0 descriptor?? [ 1049.718734][T18211] can0: slcan on pty22. [ 1050.075369][ T31] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 020 [ 1050.829645][T18202] can0 (unregistered): slcan off pty22. [ 1051.054933][T18231] tipc: New replicast peer: 255.255.255.255 [ 1051.078972][T18231] tipc: Enabled bearer , priority 10 [ 1051.095597][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2883'. [ 1051.095619][T18231] tipc: Disabling bearer [ 1052.005068][ T9] usb 6-1: USB disconnect, device number 20 [ 1053.699586][T18266] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2891'. [ 1054.102220][T18273] tipc: Started in network mode [ 1054.102245][T18273] tipc: Node identity ac14140f, cluster identity 4711 [ 1054.102471][T18273] tipc: New replicast peer: 255.255.255.255 [ 1054.160129][T18273] tipc: Enabled bearer , priority 10 [ 1054.177423][T18275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2894'. [ 1054.177442][T18275] tipc: Disabling bearer [ 1054.438278][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.438353][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.592376][T18340] tipc: New replicast peer: 255.255.255.255 [ 1058.621699][T18340] tipc: Enabled bearer , priority 10 [ 1058.641186][T18340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2908'. [ 1058.641219][T18340] tipc: Disabling bearer [ 1059.728973][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2911'. [ 1060.019453][ T5925] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1060.169443][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 1060.173522][ T5925] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 1060.173551][ T5925] usb 4-1: config 0 has no interface number 0 [ 1060.173618][ T5925] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1060.173646][ T5925] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1060.176888][ T5925] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1060.176921][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.176943][ T5925] usb 4-1: Product: syz [ 1060.176959][ T5925] usb 4-1: Manufacturer: syz [ 1060.176975][ T5925] usb 4-1: SerialNumber: syz [ 1060.240834][ T5925] usb 4-1: config 0 descriptor?? [ 1060.244849][T18357] fuse: Unknown parameter 'grou00000000000000000000' [ 1061.463328][ T5925] usb 4-1: USB disconnect, device number 68 [ 1061.587290][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1061.640972][T18384] tipc: New replicast peer: 255.255.255.255 [ 1061.659420][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1061.704123][T18384] tipc: Enabled bearer , priority 10 [ 1061.758554][T18386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2921'. [ 1061.758582][T18386] tipc: Disabling bearer [ 1061.821012][ T9] usb 3-1: device descriptor read/64, error -71 [ 1062.129409][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1062.259422][ T9] usb 3-1: device descriptor read/64, error -71 [ 1062.393796][ T9] usb usb3-port1: attempt power cycle [ 1062.729631][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1062.750576][ T9] usb 3-1: device descriptor read/8, error -71 [ 1062.990124][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1063.010420][ T9] usb 3-1: device descriptor read/8, error -71 [ 1063.107903][T18394] fuse: Unknown parameter 'grou00000000000000000000' [ 1063.121616][ T9] usb usb3-port1: unable to enumerate USB device [ 1064.971402][ T37] audit: type=1326 audit(1772813588.848:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18410 comm="syz.5.2932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2da9fc799 code=0x0 [ 1065.738879][T18431] fuse: Unknown parameter 'group_i00000000000000000000' [ 1065.739424][ T5881] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1065.899823][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 1065.903571][ T5881] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.903596][ T5881] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1065.903622][ T5881] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1065.903639][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.966057][ T5881] usb 5-1: config 0 descriptor?? [ 1066.693241][ T5881] usbhid 5-1:0.0: can't add hid device: -71 [ 1066.693375][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1066.701361][ T5881] usb 5-1: USB disconnect, device number 59 [ 1067.369366][ T5881] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1067.499654][ T5881] usb 3-1: device descriptor read/64, error -71 [ 1067.749415][ T5881] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1067.909083][ T5881] usb 3-1: device descriptor read/64, error -71 [ 1068.030075][ T5881] usb usb3-port1: attempt power cycle [ 1068.434496][ T5881] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1068.474818][ T5881] usb 3-1: device descriptor read/8, error -71 [ 1068.709415][ T5881] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1068.748843][ T5881] usb 3-1: device descriptor read/8, error -71 [ 1068.751463][T18458] tipc: New replicast peer: 255.255.255.255 [ 1068.752182][T18458] tipc: Enabled bearer , priority 10 [ 1068.772577][T18458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2944'. [ 1068.772597][T18458] tipc: Disabling bearer [ 1068.850131][ T5881] usb usb3-port1: unable to enumerate USB device [ 1069.935695][T18470] fuse: Unknown parameter 'group_i00000000000000000000' [ 1071.049419][ T37] audit: type=1326 audit(1772813594.908:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18478 comm="syz.2.2953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52fcadc799 code=0x0 [ 1071.146781][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2952'. [ 1073.679549][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1073.819481][ T9] usb 2-1: device descriptor read/64, error -71 [ 1073.827343][T18517] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 1074.080895][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1074.239602][ T9] usb 2-1: device descriptor read/64, error -71 [ 1074.363957][ T9] usb usb2-port1: attempt power cycle [ 1074.523229][T13327] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1074.687106][T13327] usb 5-1: Using ep0 maxpacket: 32 [ 1074.697426][T13327] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.697485][T13327] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1074.697514][T13327] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1074.697541][T13327] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1074.720330][T13327] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1074.720365][T13327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.720424][T13327] usb 5-1: Product: syz [ 1074.720464][T13327] usb 5-1: Manufacturer: syz [ 1074.720532][T13327] usb 5-1: SerialNumber: syz [ 1074.728046][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1074.741685][ T9] usb 2-1: device descriptor read/8, error -71 [ 1074.813126][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1074.827416][T13327] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input52 [ 1074.979417][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1075.000647][ T9] usb 2-1: device descriptor read/8, error -71 [ 1075.110444][ T9] usb usb2-port1: unable to enumerate USB device [ 1076.573413][T13327] imon:send_packet: packet tx failed (-71) [ 1076.590476][T13327] imon 5-1:155.0: panel buttons/knobs setup failed [ 1076.590500][T13327] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1076.590514][T13327] (id 0x00) [ 1076.899458][T13327] rc_core: IR keymap rc-imon-pad not found [ 1076.899474][T13327] Registered IR keymap rc-empty [ 1076.899548][T13327] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1076.899562][T13327] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1076.899837][T13327] imon:send_packet: packet tx failed (-71) [ 1076.919683][T13327] imon 5-1:155.0: remote input dev register failed [ 1076.920112][T13327] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 1077.160506][T13327] imon 5-1:155.0: unable to initialize intf0, err 0 [ 1077.160529][T13327] imon:imon_probe: failed to initialize context! [ 1077.160543][T13327] imon 5-1:155.0: unable to register, err -19 [ 1077.247408][T13327] usb 5-1: USB disconnect, device number 60 [ 1078.169520][T13327] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1078.400540][T13327] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1078.400602][T13327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.400631][T13327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.400656][T13327] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1078.403700][T13327] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1078.403722][T13327] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1078.403737][T13327] usb 2-1: Manufacturer: syz [ 1078.441780][T13327] usb 2-1: config 0 descriptor?? [ 1078.858664][T13327] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 1078.911282][T13327] appleir 0003:05AC:8243.001C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1079.165443][ T9] usb 2-1: USB disconnect, device number 53 [ 1079.251641][T18582] fido_id[18582]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1080.089576][T18587] netlink: 'syz.1.2987': attribute type 1 has an invalid length. [ 1083.001329][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1083.149361][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1083.155344][ T9] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.155371][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1083.155396][ T9] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1083.155413][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.297170][ T9] usb 6-1: config 0 descriptor?? [ 1084.123890][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1084.124023][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1084.192613][ T9] usb 6-1: USB disconnect, device number 21 [ 1084.345190][T18647] netlink: 'syz.4.3006': attribute type 1 has an invalid length. [ 1085.771019][T18668] overlayfs: failed to resolve './file0': -2 [ 1086.202209][ T31] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1086.375661][T18679] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3017'. [ 1086.375761][ T31] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1086.375787][ T31] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 1086.375806][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1086.375855][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1086.382628][ T31] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1086.382660][ T31] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1086.382682][ T31] usb 4-1: Product: syz [ 1086.382721][ T31] usb 4-1: Manufacturer: syz [ 1086.510760][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 1086.510790][ T31] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1086.808792][ T5925] IPVS: starting estimator thread 0... [ 1086.839419][ T5880] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1086.864078][ T5881] usb 4-1: USB disconnect, device number 69 [ 1086.939650][T18685] IPVS: using max 11 ests per chain, 26400 per kthread [ 1087.009422][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 1087.030441][ T5880] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.030481][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1087.030517][ T5880] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1087.030542][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.065646][ T5880] usb 5-1: config 0 descriptor?? [ 1089.084013][ T5880] usbhid 5-1:0.0: can't add hid device: -71 [ 1089.084160][ T5880] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1089.121116][ T5880] usb 5-1: USB disconnect, device number 61 [ 1090.439497][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1090.590894][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1090.592835][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1090.592863][ T9] usb 2-1: config 0 has no interface number 0 [ 1090.646155][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1090.646189][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.646210][ T9] usb 2-1: Product: syz [ 1090.646227][ T9] usb 2-1: Manufacturer: syz [ 1090.646242][ T9] usb 2-1: SerialNumber: syz [ 1090.687562][ T9] usb 2-1: config 0 descriptor?? [ 1090.712856][ T9] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1090.712883][ T9] usb 2-1: selecting invalid altsetting 1 [ 1090.712898][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1090.720302][T18726] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3032'. [ 1090.764489][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1090.764879][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1090.764948][ T9] usb 2-1: media controller created [ 1090.813379][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1091.547633][ T9] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1091.547691][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1091.564889][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1091.905269][ T9] usb 2-1: USB disconnect, device number 54 [ 1092.156235][T18750] overlayfs: failed to resolve './file0': -2 [ 1093.493213][T18761] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3044'. [ 1093.782381][T18765] netlink: 'syz.5.3046': attribute type 1 has an invalid length. [ 1094.553541][ T5925] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1094.700725][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 1094.705361][ T5925] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1094.705382][ T5925] usb 6-1: config 0 has no interface number 0 [ 1094.708908][ T5925] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1094.708940][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.708962][ T5925] usb 6-1: Product: syz [ 1094.708978][ T5925] usb 6-1: Manufacturer: syz [ 1094.709000][ T5925] usb 6-1: SerialNumber: syz [ 1094.767315][ T5925] usb 6-1: config 0 descriptor?? [ 1094.791559][ T5925] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1094.791590][ T5925] usb 6-1: selecting invalid altsetting 1 [ 1094.791607][ T5925] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1094.797179][ T5925] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1094.797661][ T5925] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1094.797732][ T5925] usb 6-1: media controller created [ 1094.858017][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1095.579505][ T5925] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1095.579570][ T5925] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1095.583015][ T5925] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1095.727865][ T5925] usb 6-1: USB disconnect, device number 22 [ 1095.776702][T18797] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3057'. [ 1095.814139][T18799] capability: warning: `syz.2.3056' uses 32-bit capabilities (legacy support in use) [ 1096.855198][T18803] syz.4.3058 (18803) used greatest stack depth: 18152 bytes left [ 1097.367200][T18836] warning: `syz.5.3068' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1097.644517][T18841] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3070'. [ 1100.574140][T18876] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3083'. [ 1102.486798][T18900] pic_ioport_write: 79 callbacks suppressed [ 1102.486815][T18900] kvm: pic: level sensitive irq not supported [ 1102.486874][T18900] picdev_read: 79 callbacks suppressed [ 1102.486885][T18900] kvm: pic: non byte read [ 1103.487459][T18916] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3094'. [ 1105.848227][T18951] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1108.170003][T18981] tipc: Enabled bearer , priority 0 [ 1108.173424][T18981] syzkaller0: entered promiscuous mode [ 1108.173453][T18981] syzkaller0: entered allmulticast mode [ 1108.358236][T18981] tipc: Resetting bearer [ 1108.561092][T18980] tipc: Resetting bearer [ 1108.801399][T18980] tipc: Disabling bearer [ 1109.359899][T18996] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 1109.704088][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3126'. [ 1109.704200][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3126'. [ 1109.711408][T19007] kAFS: unable to lookup cell '' [ 1111.343277][T19030] fuse: Bad value for 'fd' [ 1111.950689][ T31] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1112.125658][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 1112.132089][ T31] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.165142][ T31] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1112.165165][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.165180][ T31] usb 2-1: Product: syz [ 1112.165190][ T31] usb 2-1: Manufacturer: syz [ 1112.165201][ T31] usb 2-1: SerialNumber: syz [ 1112.255273][ T31] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1112.255346][ T31] imon 2-1:155.0: unable to initialize intf0, err -19 [ 1112.255359][ T31] imon:imon_probe: failed to initialize context! [ 1112.255368][ T31] imon 2-1:155.0: unable to register, err -19 [ 1112.462658][ T31] usb 2-1: USB disconnect, device number 55 [ 1113.617370][T19066] fuse: Bad value for 'fd' [ 1114.180506][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1114.180573][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1114.184423][T19088] kAFS: unable to lookup cell '' [ 1115.644587][T19103] fuse: Invalid rootmode [ 1115.880173][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.880293][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.482652][T19111] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3160'. [ 1118.216016][T19129] fuse: Invalid rootmode [ 1118.242597][T19133] fuse: Bad value for 'rootmode' [ 1119.191562][ T5880] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1119.341025][T19159] overlayfs: failed to resolve './file0': -2 [ 1119.510963][T19165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3180'. [ 1119.511109][T19165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3180'. [ 1119.516762][T19165] kAFS: unable to lookup cell '' [ 1119.532925][ T5880] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1119.533066][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.533342][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.533368][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1119.537748][ T5880] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1119.537843][ T5880] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1119.537897][ T5880] usb 3-1: Manufacturer: syz [ 1119.749960][ T5880] usb 3-1: config 0 descriptor?? [ 1119.943642][T19169] fuse: Invalid rootmode [ 1120.137780][T19173] fuse: Bad value for 'fd' [ 1120.192931][ T5880] appleir 0003:05AC:8243.001D: unknown main item tag 0x0 [ 1120.219305][ T5880] appleir 0003:05AC:8243.001D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1122.323995][T13327] usb 3-1: USB disconnect, device number 68 [ 1122.882891][ T5881] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1123.030948][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 1123.035086][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.035121][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.035164][ T5881] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1123.035189][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.044872][ T5881] usb 3-1: config 0 descriptor?? [ 1123.111594][ T5881] hub 3-1:0.0: USB hub found [ 1123.205858][T19204] fuse: Unknown parameter 'use00000000000000000000' [ 1123.269447][ T5881] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1123.700474][ T5880] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1123.755292][ T5881] hid-generic 0003:046D:C31C.001E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1123.869918][ T5880] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1123.869949][ T5880] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 1123.869969][ T5880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1123.870015][ T5880] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1123.877897][ T5880] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1123.877920][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1123.877935][ T5880] usb 5-1: Product: syz [ 1123.877946][ T5880] usb 5-1: Manufacturer: syz [ 1123.980093][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 1123.980141][ T5880] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1124.011678][T13963] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1124.162925][T13963] usb 6-1: Using ep0 maxpacket: 32 [ 1124.164723][T13963] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.164776][T13963] usb 6-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1124.167191][T13963] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1124.167218][T13963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.167244][T13963] usb 6-1: Product: syz [ 1124.167255][T13963] usb 6-1: Manufacturer: syz [ 1124.167266][T13963] usb 6-1: SerialNumber: syz [ 1124.246515][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3200'. [ 1124.330367][T13963] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1124.330466][T13963] imon 6-1:155.0: unable to initialize intf0, err -19 [ 1124.330484][T13963] imon:imon_probe: failed to initialize context! [ 1124.330497][T13963] imon 6-1:155.0: unable to register, err -19 [ 1124.356133][ T5807] usb 5-1: USB disconnect, device number 62 [ 1124.473110][T13963] usb 6-1: USB disconnect, device number 23 [ 1124.688220][T19230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3203'. [ 1124.688254][T19230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3203'. [ 1124.690487][T19221] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1124.722736][T19230] kAFS: unable to lookup cell '' [ 1124.846596][T19221] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1124.846633][T19221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.846652][T19221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.846668][T19221] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1124.847687][T19221] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1124.847709][T19221] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1124.847724][T19221] usb 2-1: Manufacturer: syz [ 1124.867993][T19221] usb 2-1: config 0 descriptor?? [ 1125.262874][T19234] overlayfs: failed to resolve './file0': -2 [ 1125.321457][T19221] appleir 0003:05AC:8243.001F: unknown main item tag 0x0 [ 1125.348446][T19236] fuse: Bad value for 'rootmode' [ 1126.334297][T19248] tipc: Started in network mode [ 1126.334322][T19248] tipc: Node identity ac14140f, cluster identity 4711 [ 1126.334563][T19248] tipc: New replicast peer: 255.255.255.255 [ 1126.374476][T19248] tipc: Enabled bearer , priority 10 [ 1126.375923][T19248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3208'. [ 1126.375942][T19248] tipc: Disabling bearer [ 1127.296688][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3212'. [ 1127.880091][T13963] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1128.032135][T13963] usb 4-1: Using ep0 maxpacket: 32 [ 1128.034867][T13963] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.034905][T13963] usb 4-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1128.037859][T13963] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1128.037881][T13963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.037896][T13963] usb 4-1: Product: syz [ 1128.037906][T13963] usb 4-1: Manufacturer: syz [ 1128.037917][T13963] usb 4-1: SerialNumber: syz [ 1128.139606][ T5881] usb 3-1: USB disconnect, device number 69 [ 1128.158142][T13963] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1128.158209][T13963] imon 4-1:155.0: unable to initialize intf0, err -19 [ 1128.158221][T13963] imon:imon_probe: failed to initialize context! [ 1128.158229][T13963] imon 4-1:155.0: unable to register, err -19 [ 1128.250158][T19221] appleir 0003:05AC:8243.001F: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1128.357612][T19221] usb 2-1: USB disconnect, device number 56 [ 1128.383048][ T5880] usb 4-1: USB disconnect, device number 70 [ 1128.538375][T19266] fuse: Bad value for 'rootmode' [ 1128.752067][T19267] fido_id[19267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1129.279373][T19221] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1129.691510][T19221] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1129.691575][T19221] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1129.691660][T19221] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.691750][T19221] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1129.691835][T19221] usb 6-1: config 1 has no interface number 0 [ 1129.692245][T19221] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1129.692333][T19221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.961872][T19221] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1129.976983][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3220'. [ 1129.977260][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3220'. [ 1129.983992][T19284] kAFS: unable to lookup cell '' [ 1130.140631][T19221] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 1130.140945][T19221] snd_usb_pod 6-1:1.1: invalid control EP [ 1130.140956][T19221] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 1130.142110][T19221] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1130.142677][T19221] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1130.481666][T13327] usb 6-1: USB disconnect, device number 24 [ 1131.822196][T19304] overlayfs: failed to resolve './file0': -2 [ 1132.919096][T19313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3230'. [ 1133.276373][T19318] fuse: Unknown parameter 'user_i00000000000000000000' [ 1133.479537][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1133.729055][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1133.729091][ T9] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 1133.729112][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1133.729165][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1133.742992][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1133.743029][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1133.743052][ T9] usb 2-1: Product: syz [ 1133.743067][ T9] usb 2-1: Manufacturer: syz [ 1133.853988][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1133.854035][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1134.156251][ T5880] usb 2-1: USB disconnect, device number 57 [ 1134.981231][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'. [ 1134.981276][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'. [ 1134.983588][T19344] kAFS: unable to lookup cell '' [ 1135.406722][T19349] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3240'. [ 1135.406955][T19349] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3240'. [ 1135.406973][T19349] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3240'. [ 1135.449385][T19221] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1135.676686][T19221] usb 6-1: Using ep0 maxpacket: 32 [ 1135.680228][T19221] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.680401][T19221] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1135.680484][T19221] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1135.680549][T19221] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1135.726514][T19221] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1135.726618][T19221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.726671][T19221] usb 6-1: Product: syz [ 1135.726713][T19221] usb 6-1: Manufacturer: syz [ 1135.726764][T19221] usb 6-1: SerialNumber: syz [ 1135.914502][T19221] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1135.914573][T19221] imon 6-1:155.0: unable to initialize intf0, err -19 [ 1135.914586][T19221] imon:imon_probe: failed to initialize context! [ 1135.914595][T19221] imon 6-1:155.0: unable to register, err -19 [ 1136.160616][ T9] usb 6-1: USB disconnect, device number 25 [ 1136.952088][T16206] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1136.990905][T16206] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1137.019569][T16206] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1137.045128][T16206] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1137.046288][T16206] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1137.086295][T19359] fuse: Unknown parameter 'user_i00000000000000000000' [ 1138.046442][T19372] overlayfs: failed to resolve './file0': -2 [ 1138.105992][ T5793] syz_tun (unregistering): left promiscuous mode [ 1138.355725][ T5925] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1138.529383][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 1138.588546][ T5925] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1138.588582][ T5925] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1138.588619][ T5925] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1138.588639][ T5925] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1138.588658][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1138.607359][ T5925] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1138.607452][ T5925] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1138.607522][ T5925] usb 2-1: Product: syz [ 1138.607571][ T5925] usb 2-1: Manufacturer: syz [ 1138.607613][ T5925] usb 2-1: SerialNumber: syz [ 1138.661281][ T5925] usb 2-1: config 0 descriptor?? [ 1138.781172][ T5925] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1138.820807][ T5925] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1139.069544][ T61] Bluetooth: hci5: command tx timeout [ 1139.214813][ T5880] usb 2-1: USB disconnect, device number 58 [ 1139.234812][T19375] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1139.254708][ T5880] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1139.279445][T19379] ldusb: No device or device unplugged -19 [ 1139.894854][ T43] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.384972][T19392] fuse: Unknown parameter 'user_i00000000000000000000' [ 1140.541351][ T43] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.047903][ T43] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.065906][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'. [ 1141.065936][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'. [ 1141.150555][ T61] Bluetooth: hci5: command tx timeout [ 1141.676658][ T43] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.765955][T19356] chnl_net:caif_netlink_parms(): no params data found [ 1141.819428][ T5925] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1141.969384][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 1141.976973][ T5925] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1141.977021][ T5925] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1141.977064][ T5925] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1141.977093][ T5925] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1141.977122][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1142.070704][ T5925] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1142.070737][ T5925] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1142.070760][ T5925] usb 6-1: Product: syz [ 1142.070775][ T5925] usb 6-1: Manufacturer: syz [ 1142.070791][ T5925] usb 6-1: SerialNumber: syz [ 1142.136932][T19356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.137069][T19356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.137269][T19356] bridge_slave_0: entered allmulticast mode [ 1142.162357][ T5925] usb 6-1: config 0 descriptor?? [ 1142.166713][T19356] bridge_slave_0: entered promiscuous mode [ 1142.190199][ T5925] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1142.193230][T19356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.195050][T19356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.195416][T19356] bridge_slave_1: entered allmulticast mode [ 1142.239867][ T5925] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1142.245661][T19356] bridge_slave_1: entered promiscuous mode [ 1142.852302][T19356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.122271][T19356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.240043][ T61] Bluetooth: hci5: command tx timeout [ 1143.441085][ T37] audit: type=1326 audit(1772813667.268:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19422 comm="syz.2.3268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52fcadc799 code=0x0 [ 1143.577247][ T43] bridge_slave_1: left allmulticast mode [ 1143.577278][ T43] bridge_slave_1: left promiscuous mode [ 1143.577535][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.753804][ T43] bridge_slave_0: left allmulticast mode [ 1143.753836][ T43] bridge_slave_0: left promiscuous mode [ 1143.774713][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.309461][ T61] Bluetooth: hci5: command tx timeout [ 1145.616393][ T43] ip6gretap0 (unregistering): left promiscuous mode [ 1146.356494][T19437] fuse: Unknown parameter 'user_id00000000000000000000' [ 1146.410133][ T43] gretap0 (unregistering): left promiscuous mode [ 1146.632133][ T43] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1146.941810][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.022717][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.086748][ T43] bond0 (unregistering): Released all slaves [ 1147.175374][ T43] bond1 (unregistering): Released all slaves [ 1147.285782][T19356] team0: Port device team_slave_0 added [ 1147.430671][T19356] team0: Port device team_slave_1 added [ 1147.469620][T19417] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1147.826389][ T43] @„;: left promiscuous mode [ 1147.952860][ T9] usb 6-1: USB disconnect, device number 26 [ 1147.966020][ T9] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1148.180285][T19356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.180300][T19356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.180321][T19356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.286118][T19356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.286133][T19356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.286155][T19356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.381457][ T43] tipc: Left network mode [ 1148.646700][T19356] hsr_slave_0: entered promiscuous mode [ 1148.649076][T19356] hsr_slave_1: entered promiscuous mode [ 1148.671351][T19356] debugfs: 'hsr0' already exists in 'hsr' [ 1148.671383][T19356] Cannot create hsr debugfs directory [ 1151.651727][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 1151.651806][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 1153.843765][ T43] hsr_slave_0: left promiscuous mode [ 1153.869635][T13963] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1153.875434][ T43] hsr_slave_1: left promiscuous mode [ 1153.878706][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.878747][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.923495][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.923517][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.991166][ T43] veth1_macvtap: left promiscuous mode [ 1153.991256][ T43] veth0_macvtap: left promiscuous mode [ 1153.991426][ T43] veth1_vlan: left promiscuous mode [ 1153.991543][ T43] veth0_vlan: left promiscuous mode [ 1154.030360][T13963] usb 2-1: Using ep0 maxpacket: 32 [ 1154.034698][T13963] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1154.034744][T13963] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1154.034790][T13963] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1154.034812][T13963] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1154.034832][T13963] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1154.037625][T13963] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1154.037654][T13963] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1154.037682][T13963] usb 2-1: Product: syz [ 1154.037694][T13963] usb 2-1: Manufacturer: syz [ 1154.037705][T13963] usb 2-1: SerialNumber: syz [ 1154.147906][T13963] usb 2-1: config 0 descriptor?? [ 1154.170025][T13963] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1154.204488][T13963] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1154.974235][T19507] overlayfs: failed to resolve './file0': -2 [ 1157.432701][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1157.550954][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1159.480716][T19502] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1159.622233][T13963] usb 2-1: USB disconnect, device number 59 [ 1159.636101][T13963] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1160.333745][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3294'. [ 1160.333867][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3294'. [ 1160.761928][ T43] IPVS: stop unused estimator thread 0... [ 1161.652914][T19356] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1161.741226][T19356] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1161.884721][T19356] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1161.932498][T19356] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1162.339406][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1162.494498][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.494569][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1162.494595][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.588663][ T9] usb 5-1: config 0 descriptor?? [ 1162.655591][T19356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.728057][T19356] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.774488][ T7627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.778194][ T7627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.871170][ T7627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.871467][ T7627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.950480][T19572] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3297'. [ 1163.059595][ T9] usb 5-1: USB disconnect, device number 63 [ 1163.589717][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1163.756597][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.756911][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1163.756973][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.867190][ T9] usb 5-1: config 0 descriptor?? [ 1165.933329][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3299'. [ 1166.097876][ T5925] usb 5-1: USB disconnect, device number 64 [ 1166.410304][T19592] overlayfs: failed to resolve './file0': -2 [ 1167.609038][T19356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.264937][T19356] veth0_vlan: entered promiscuous mode [ 1168.400352][T19356] veth1_vlan: entered promiscuous mode [ 1168.620880][T19356] veth0_macvtap: entered promiscuous mode [ 1168.628856][T19356] veth1_macvtap: entered promiscuous mode [ 1168.705524][T19356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1168.757145][T19356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.852596][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.852966][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.853008][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.853047][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.625502][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.625526][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.893230][ T8624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.899454][ T8624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.220350][T19646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'. [ 1170.600167][T19651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3313'. [ 1170.782926][T19658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3312'. [ 1171.019392][ T5925] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1171.079376][ T5881] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1171.189464][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 1171.191610][ T5925] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 1171.191630][ T5925] usb 4-1: config 0 has no interface number 0 [ 1171.191662][ T5925] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1171.191681][ T5925] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1171.194295][ T5925] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1171.194316][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.194331][ T5925] usb 4-1: Product: syz [ 1171.194341][ T5925] usb 4-1: Manufacturer: syz [ 1171.194353][ T5925] usb 4-1: SerialNumber: syz [ 1171.198232][ T5925] usb 4-1: config 0 descriptor?? [ 1171.230403][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 1171.359511][ T5881] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 1171.359544][ T5881] usb 3-1: config 0 has no interface number 0 [ 1171.359612][ T5881] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1171.359642][ T5881] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1171.419571][ T5881] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1171.419603][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.419624][ T5881] usb 3-1: Product: syz [ 1171.419639][ T5881] usb 3-1: Manufacturer: syz [ 1171.419654][ T5881] usb 3-1: SerialNumber: syz [ 1171.468118][ T5881] usb 3-1: config 0 descriptor?? [ 1172.528994][ T5925] usb 4-1: USB disconnect, device number 71 [ 1172.644323][T19445] udevd[19445]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1172.961922][T16206] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1172.984511][T16206] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1172.987949][T16206] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1173.011719][T16206] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1173.015143][T16206] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1173.653870][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3322'. [ 1174.042667][ T5881] usb 3-1: USB disconnect, device number 70 [ 1174.203324][T19445] udevd[19445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1174.337152][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3325'. [ 1174.337258][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3325'. [ 1174.385368][T19710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3326'. [ 1174.433980][T19708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3327'. [ 1174.729361][ T5880] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1174.879370][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 1174.881818][ T5880] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 1174.881838][ T5880] usb 4-1: config 0 has no interface number 0 [ 1174.881883][ T5880] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1174.881903][ T5880] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1174.884754][ T5880] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1174.884776][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.884791][ T5880] usb 4-1: Product: syz [ 1174.884801][ T5880] usb 4-1: Manufacturer: syz [ 1174.884812][ T5880] usb 4-1: SerialNumber: syz [ 1174.902850][ T5880] usb 4-1: config 0 descriptor?? [ 1175.159912][ T61] Bluetooth: hci2: command tx timeout [ 1176.237630][ T8624] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.460611][ T5880] usb 4-1: USB disconnect, device number 72 [ 1176.534745][T19445] udevd[19445]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1176.827901][ T8624] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.075777][T19674] chnl_net:caif_netlink_parms(): no params data found [ 1177.239429][ T61] Bluetooth: hci2: command tx timeout [ 1177.340080][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.340159][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.408246][ T8624] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.852524][ T8624] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.158729][T19674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.158925][T19674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.159116][T19674] bridge_slave_0: entered allmulticast mode [ 1178.173181][T19674] bridge_slave_0: entered promiscuous mode [ 1178.185947][T19674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.186577][T19674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.187282][T19674] bridge_slave_1: entered allmulticast mode [ 1178.196435][T19674] bridge_slave_1: entered promiscuous mode [ 1178.374215][T19674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.481068][T19674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.746615][T19674] team0: Port device team_slave_0 added [ 1178.798343][T19674] team0: Port device team_slave_1 added [ 1179.064842][T19674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.064861][T19674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.064892][T19674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.120113][T19674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.123759][T19674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.123862][T19674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.189449][ T5881] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1179.262579][ T8624] bridge_slave_1: left allmulticast mode [ 1179.262611][ T8624] bridge_slave_1: left promiscuous mode [ 1179.262858][ T8624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.309641][ T61] Bluetooth: hci2: command tx timeout [ 1179.342638][ T5881] usb 6-1: device descriptor read/64, error -71 [ 1179.359030][ T8624] bridge_slave_0: left allmulticast mode [ 1179.359054][ T8624] bridge_slave_0: left promiscuous mode [ 1179.371615][ T8624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.579380][ T5881] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1179.779326][ T5881] usb 6-1: device descriptor read/64, error -71 [ 1179.889729][ T5881] usb usb6-port1: attempt power cycle [ 1180.229323][ T5881] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1180.250606][ T5881] usb 6-1: device descriptor read/8, error -71 [ 1180.489351][ T5881] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1180.519777][ T5881] usb 6-1: device descriptor read/8, error -71 [ 1180.629881][ T5881] usb usb6-port1: unable to enumerate USB device [ 1180.700388][ T8624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.790442][ T8624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.834782][ T8624] bond0 (unregistering): Released all slaves [ 1181.215709][ T8624] tipc: Left network mode [ 1181.291709][T19674] hsr_slave_0: entered promiscuous mode [ 1181.293695][T19674] hsr_slave_1: entered promiscuous mode [ 1181.294641][T19674] debugfs: 'hsr0' already exists in 'hsr' [ 1181.294666][T19674] Cannot create hsr debugfs directory [ 1181.389654][ T61] Bluetooth: hci2: command tx timeout [ 1182.885417][T19809] can0: slcan on pty24. [ 1183.032076][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 1183.032108][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 1183.749483][T19800] can0 (unregistered): slcan off pty24. [ 1185.519478][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1185.652095][ T9] usb 2-1: device descriptor read/64, error -71 [ 1185.892244][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1186.072194][ T9] usb 2-1: device descriptor read/64, error -71 [ 1186.198069][ T9] usb usb2-port1: attempt power cycle [ 1186.551563][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1186.571574][ T9] usb 2-1: device descriptor read/8, error -71 [ 1186.809428][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1186.837880][ T9] usb 2-1: device descriptor read/8, error -71 [ 1186.939967][ T9] usb usb2-port1: unable to enumerate USB device [ 1186.999648][T19862] geneve1: entered allmulticast mode [ 1187.440830][T19876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3372'. [ 1187.769438][T13327] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1187.919516][T13327] usb 3-1: Using ep0 maxpacket: 32 [ 1187.925898][T13327] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 1187.925921][T13327] usb 3-1: config 0 has no interface number 0 [ 1187.925953][T13327] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1187.925972][T13327] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1187.929007][T13327] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1187.929028][T13327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.929043][T13327] usb 3-1: Product: syz [ 1187.929054][T13327] usb 3-1: Manufacturer: syz [ 1187.929064][T13327] usb 3-1: SerialNumber: syz [ 1187.966828][T13327] usb 3-1: config 0 descriptor?? [ 1188.050529][T19882] can0: slcan on pty30. [ 1188.821760][T19674] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1189.380096][T19674] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1190.355067][T19871] can0 (unregistered): slcan off pty30. [ 1190.576713][T13327] usb 3-1: USB disconnect, device number 71 [ 1190.684763][T19445] udevd[19445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1190.724303][T19674] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1190.941380][T19674] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1191.286303][ T8624] hsr_slave_0: left promiscuous mode [ 1191.339517][ T8624] hsr_slave_1: left promiscuous mode [ 1191.342036][ T8624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1191.342058][ T8624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1191.393944][ T8624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1191.393966][ T8624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1191.539617][ T8624] veth1_macvtap: left promiscuous mode [ 1191.539723][ T8624] veth0_macvtap: left promiscuous mode [ 1191.539913][ T8624] veth1_vlan: left promiscuous mode [ 1191.540032][ T8624] veth0_vlan: left promiscuous mode [ 1192.396626][T19923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3387'. [ 1192.396650][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3387'. [ 1193.251677][ T8624] team0 (unregistering): Port device team_slave_1 removed [ 1193.312353][ T8624] team0 (unregistering): Port device team_slave_0 removed [ 1193.806747][T19912] geneve1: entered allmulticast mode [ 1194.143396][T19945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3389'. [ 1194.268246][T19674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.368004][T19674] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.410259][ T485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.410373][ T485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.441429][ T485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.460982][ T485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.482571][ T5880] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1194.629397][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 1194.632213][ T5880] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 1194.632239][ T5880] usb 6-1: config 0 has no interface number 0 [ 1194.632286][ T5880] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1194.632322][ T5880] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1194.635948][ T5880] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1194.635977][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.635999][ T5880] usb 6-1: Product: syz [ 1194.636015][ T5880] usb 6-1: Manufacturer: syz [ 1194.636030][ T5880] usb 6-1: SerialNumber: syz [ 1194.648130][ T5880] usb 6-1: config 0 descriptor?? [ 1194.832707][T19957] can0: slcan on pty26. [ 1195.672158][T19949] can0 (unregistered): slcan off pty26. [ 1197.042585][T19674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.836823][ T5880] usb 6-1: USB disconnect, device number 31 [ 1198.003649][T19445] udevd[19445]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1198.986729][T19998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3400'. [ 1198.986755][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3400'. [ 1199.035228][T19674] veth0_vlan: entered promiscuous mode [ 1199.097197][T19674] veth1_vlan: entered promiscuous mode [ 1199.264179][T19674] veth0_macvtap: entered promiscuous mode [ 1199.310187][T19674] veth1_macvtap: entered promiscuous mode [ 1199.371473][T20001] fuse: Bad value for 'fd' [ 1199.447127][T19674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.484736][T19674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.551135][T15689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.551635][T15689] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.558103][T15689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.588525][T15689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.897352][T20012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3405'. [ 1200.290657][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1200.391052][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.391076][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.440422][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1200.456045][ T9] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 1200.456074][ T9] usb 6-1: config 0 has no interface number 0 [ 1200.456121][ T9] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1200.456150][ T9] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1200.506614][ T9] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1200.506647][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.506668][ T9] usb 6-1: Product: syz [ 1200.506683][ T9] usb 6-1: Manufacturer: syz [ 1200.506698][ T9] usb 6-1: SerialNumber: syz [ 1200.556531][ T9] usb 6-1: config 0 descriptor?? [ 1200.838624][T15689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.838656][T15689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.706891][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3411'. [ 1201.706935][T20029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3411'. [ 1202.487168][T20032] geneve1: entered allmulticast mode [ 1203.061329][ T9] usb 6-1: USB disconnect, device number 32 [ 1203.119426][T16206] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1203.125162][T16206] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1203.130661][T16206] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1203.182208][T16206] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1203.184361][T16206] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1203.235585][T19445] udevd[19445]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1204.922895][T20077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3425'. [ 1205.219368][ T5880] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1205.239338][T16206] Bluetooth: hci1: command tx timeout [ 1205.379461][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 1205.406442][ T5880] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 1205.406476][ T5880] usb 2-1: config 0 has no interface number 0 [ 1205.406526][ T5880] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1205.406625][ T5880] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1205.455944][ T5880] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1205.455978][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.455999][ T5880] usb 2-1: Product: syz [ 1205.456014][ T5880] usb 2-1: Manufacturer: syz [ 1205.456029][ T5880] usb 2-1: SerialNumber: syz [ 1205.510216][ T5880] usb 2-1: config 0 descriptor?? [ 1206.232973][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.570183][T20096] tipc: Started in network mode [ 1206.570228][T20096] tipc: Node identity 56b9d46f1a74, cluster identity 4711 [ 1206.570424][T20096] tipc: Enabled bearer , priority 0 [ 1206.649987][T20097] syzkaller0: entered promiscuous mode [ 1206.650019][T20097] syzkaller0: entered allmulticast mode [ 1207.072469][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.172968][T20093] tipc: Resetting bearer [ 1207.220779][T20090] tipc: Resetting bearer [ 1207.311901][T16206] Bluetooth: hci1: command tx timeout [ 1207.331402][T20090] tipc: Disabling bearer [ 1207.535941][T20038] chnl_net:caif_netlink_parms(): no params data found [ 1207.882987][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.045404][ T5880] usb 2-1: USB disconnect, device number 64 [ 1208.277892][T19445] udevd[19445]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1208.643207][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.018088][T20121] fuse: Unknown parameter '0x000000000000000d' [ 1209.396600][T16206] Bluetooth: hci1: command tx timeout [ 1210.092901][T20038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.093026][T20038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.093217][T20038] bridge_slave_0: entered allmulticast mode [ 1210.104465][T20038] bridge_slave_0: entered promiscuous mode [ 1210.439362][ T5925] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1210.592424][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 1210.598088][ T5925] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1210.598123][ T5925] usb 5-1: config 0 has no interface number 0 [ 1210.629158][ T5925] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1210.629350][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.629372][ T5925] usb 5-1: Product: syz [ 1210.629393][ T5925] usb 5-1: Manufacturer: syz [ 1210.629404][ T5925] usb 5-1: SerialNumber: syz [ 1210.635230][ T5925] usb 5-1: config 0 descriptor?? [ 1210.713750][ T5925] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1210.713772][ T5925] usb 5-1: selecting invalid altsetting 1 [ 1210.713784][ T5925] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1210.753052][ T5925] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1210.753370][ T5925] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1210.753421][ T5925] usb 5-1: media controller created [ 1210.796504][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1211.469321][T16206] Bluetooth: hci1: command tx timeout [ 1212.119639][ T5925] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1212.119705][ T5925] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1212.140437][T20134] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1212.745747][ T5925] usb 5-1: USB disconnect, device number 65 [ 1213.297669][T20171] fuse: Unknown parameter '0x000000000000000c' [ 1213.607796][T20174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3456'. [ 1213.772733][T20170] slcan: can't register candev [ 1220.133270][T20038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.133396][T20038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.133610][T20038] bridge_slave_1: entered allmulticast mode [ 1220.135538][T20038] bridge_slave_1: entered promiscuous mode [ 1220.676295][T20038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.720469][T20038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1221.050362][T20189] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3460'. [ 1221.143074][T20038] team0: Port device team_slave_0 added [ 1221.162804][T20038] team0: Port device team_slave_1 added [ 1221.731578][ T5807] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1221.770592][ T13] bridge_slave_1: left allmulticast mode [ 1221.770614][ T13] bridge_slave_1: left promiscuous mode [ 1221.770792][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.899064][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 1221.941651][ T5807] usb 2-1: config 0 has no interfaces? [ 1221.943089][ T5807] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1221.943120][ T5807] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1221.943141][ T5807] usb 2-1: Manufacturer: syz [ 1221.948939][ T5807] usb 2-1: config 0 descriptor?? [ 1222.070506][ T13] bridge_slave_0: left allmulticast mode [ 1222.070530][ T13] bridge_slave_0: left promiscuous mode [ 1222.070732][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.153636][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3468'. [ 1225.199969][T20233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3469'. [ 1225.211622][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.290298][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.331757][ T13] bond0 (unregistering): Released all slaves [ 1225.439462][ T5881] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1225.449774][T20038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.449826][T20038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.449901][T20038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.574145][T20038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.574166][T20038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.574195][T20038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.604481][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 1225.607602][ T5881] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 1225.607624][ T5881] usb 6-1: config 0 has no interface number 0 [ 1225.607673][ T5881] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1225.607693][ T5881] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1225.614575][ T5881] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1225.614674][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.614731][ T5881] usb 6-1: Product: syz [ 1225.614766][ T5881] usb 6-1: Manufacturer: syz [ 1225.614807][ T5881] usb 6-1: SerialNumber: syz [ 1225.731279][ T5881] usb 6-1: config 0 descriptor?? [ 1226.610057][T20239] tipc: Enabled bearer , priority 0 [ 1227.094625][T20239] tipc: Resetting bearer [ 1227.129520][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1227.139002][T20038] hsr_slave_0: entered promiscuous mode [ 1227.143857][T20038] hsr_slave_1: entered promiscuous mode [ 1227.283294][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1227.286295][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1227.286323][ T9] usb 4-1: config 0 has no interface number 0 [ 1227.310432][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1227.310465][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.310487][ T9] usb 4-1: Product: syz [ 1227.310503][ T9] usb 4-1: Manufacturer: syz [ 1227.310583][ T9] usb 4-1: SerialNumber: syz [ 1227.328361][ T9] usb 4-1: config 0 descriptor?? [ 1227.365123][ T9] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1227.365154][ T9] usb 4-1: selecting invalid altsetting 1 [ 1227.365172][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1227.398065][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1227.398439][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1227.398495][ T9] usb 4-1: media controller created [ 1227.445507][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1227.599914][T20240] syzkaller0: entered promiscuous mode [ 1227.600004][T20240] syzkaller0: entered allmulticast mode [ 1227.652141][T20236] tipc: Resetting bearer [ 1227.803734][T20236] tipc: Disabling bearer [ 1228.087793][ T5807] tipc: Node number set to 1288557679 [ 1228.514748][ T9] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1228.514825][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1228.530106][T20244] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1228.739841][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3474'. [ 1228.739931][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3474'. [ 1228.742890][T20253] kAFS: unable to lookup cell '' [ 1228.838714][ T5881] usb 6-1: USB disconnect, device number 33 [ 1228.904654][T20177] udevd[20177]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1228.959527][ T13] hsr_slave_0: left promiscuous mode [ 1228.999765][ T13] hsr_slave_1: left promiscuous mode [ 1229.000726][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1229.000753][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1229.060466][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1229.060488][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1229.507563][ T9] usb 4-1: USB disconnect, device number 73 [ 1229.676924][ T13] veth1_macvtap: left promiscuous mode [ 1229.677031][ T13] veth0_macvtap: left promiscuous mode [ 1229.677276][ T13] veth1_vlan: left promiscuous mode [ 1229.678837][ T13] veth0_vlan: left promiscuous mode [ 1231.379614][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3480'. [ 1231.453648][ T37] audit: type=1326 audit(1772813755.328:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20272 comm="syz.5.3481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2da9fc799 code=0x0 [ 1232.216307][ T5881] usb 2-1: USB disconnect, device number 65 [ 1232.431550][ T5880] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1232.633038][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 1232.635414][ T5880] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1232.635455][ T5880] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1232.635493][ T5880] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1232.635518][ T5880] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1232.635545][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1232.638522][ T5880] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1232.638552][ T5880] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1232.638573][ T5880] usb 5-1: Product: syz [ 1232.638587][ T5880] usb 5-1: Manufacturer: syz [ 1232.638601][ T5880] usb 5-1: SerialNumber: syz [ 1232.911512][ T5880] usb 5-1: config 0 descriptor?? [ 1232.942477][ T5880] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1232.997008][ T5880] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1233.369419][ T5881] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1233.488302][T20281] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1233.494138][T20296] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1233.509858][ T5925] usb 5-1: USB disconnect, device number 66 [ 1233.509952][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 1233.519344][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 1233.523922][ T5881] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1233.523984][ T5881] usb 2-1: config 0 has no interface number 0 [ 1233.550306][ T5925] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1233.597663][ T5881] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1233.597703][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.597724][ T5881] usb 2-1: Product: syz [ 1233.597738][ T5881] usb 2-1: Manufacturer: syz [ 1233.597752][ T5881] usb 2-1: SerialNumber: syz [ 1233.667650][ T5881] usb 2-1: config 0 descriptor?? [ 1233.704143][ T5881] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1233.704174][ T5881] usb 2-1: selecting invalid altsetting 1 [ 1233.704191][ T5881] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1233.750857][ T5881] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1233.751260][ T5881] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1233.751335][ T5881] usb 2-1: media controller created [ 1234.062223][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1234.989689][T20294] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1235.022818][ T5881] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1235.022878][ T5881] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1235.485703][T20319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3489'. [ 1235.485771][T20319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3489'. [ 1235.489416][T20319] kAFS: unable to lookup cell '' [ 1235.741533][ T5881] usb 2-1: USB disconnect, device number 66 [ 1237.659320][ T5881] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1237.858259][ T5881] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1237.858291][ T5881] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 1237.858312][ T5881] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1237.858363][ T5881] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1237.954027][ T5881] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1237.954063][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1237.954084][ T5881] usb 2-1: Product: syz [ 1237.954102][ T5881] usb 2-1: Manufacturer: syz [ 1238.145678][ T5881] cdc_wdm 2-1:1.0: skipping garbage [ 1238.145712][ T5881] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1238.216381][T20038] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1238.273854][T20038] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1238.403924][T20038] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1238.469435][ T9] usb 2-1: USB disconnect, device number 67 [ 1238.496136][T20038] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1238.757874][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.757958][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.826079][T20038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.863434][T20038] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.901275][ T7619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.901372][ T7619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.903082][ T7619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.903170][ T7619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.929383][ T5881] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1239.189502][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 1239.197042][ T5881] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1239.197082][ T5881] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1239.197115][ T5881] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1239.197138][ T5881] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1239.197161][ T5881] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1239.272103][ T5881] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1239.272133][ T5881] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1239.272149][ T5881] usb 6-1: Product: syz [ 1239.272160][ T5881] usb 6-1: Manufacturer: syz [ 1239.272170][ T5881] usb 6-1: SerialNumber: syz [ 1239.351816][ T5881] usb 6-1: config 0 descriptor?? [ 1239.395771][ T5881] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1239.430004][ T5881] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1239.739542][ T5880] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1239.893846][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 1239.900859][ T5880] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1239.900889][ T5880] usb 2-1: config 0 has no interface number 0 [ 1239.945665][ T5880] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1239.945693][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.946533][ T5880] usb 2-1: Product: syz [ 1239.946551][ T5880] usb 2-1: Manufacturer: syz [ 1239.946573][ T5880] usb 2-1: SerialNumber: syz [ 1240.008144][T20360] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1240.025943][T13327] usb 6-1: USB disconnect, device number 34 [ 1240.026146][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 1240.026647][T20377] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 1240.241993][T13327] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1240.243013][ T5880] usb 2-1: config 0 descriptor?? [ 1240.305758][ T5880] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1240.305851][ T5880] usb 2-1: selecting invalid altsetting 1 [ 1240.305869][ T5880] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1240.805412][ T5880] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1240.807910][ T5880] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1240.808217][ T5880] usb 2-1: media controller created [ 1241.181475][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1241.425839][T20038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.560297][T20367] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1241.604710][ T5880] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1241.604768][ T5880] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1242.257075][ T5880] usb 2-1: USB disconnect, device number 68 [ 1242.258015][T20038] veth0_vlan: entered promiscuous mode [ 1242.431808][T20038] veth1_vlan: entered promiscuous mode [ 1242.970288][T20038] veth0_macvtap: entered promiscuous mode [ 1243.001083][T20038] veth1_macvtap: entered promiscuous mode [ 1243.103399][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3508'. [ 1243.103669][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3508'. [ 1243.115837][T20422] kAFS: unable to lookup cell '' [ 1243.228037][T20038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1243.274644][T20038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.317662][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.317843][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.317873][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.317900][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.589497][ T5881] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1243.781911][ T5881] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1243.781944][ T5881] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 1243.781963][ T5881] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1243.782013][ T5881] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1243.785111][ T5881] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1243.785142][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1243.785163][ T5881] usb 2-1: Product: syz [ 1243.785178][ T5881] usb 2-1: Manufacturer: syz [ 1243.911593][ T5881] cdc_wdm 2-1:1.0: skipping garbage [ 1243.911634][ T5881] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1244.271685][T13327] usb 2-1: USB disconnect, device number 69 [ 1244.391820][ T7627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.391838][ T7627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.717598][ T7627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.717620][ T7627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.189712][T20441] tipc: New replicast peer: 255.255.255.255 [ 1245.190223][T20441] tipc: Enabled bearer , priority 10 [ 1246.293330][T20459] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3514'. [ 1246.592521][ T5939] tipc: Node number set to 2886997007 [ 1246.618646][ T5850] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1246.806491][ T5850] usb 3-1: Using ep0 maxpacket: 32 [ 1246.808317][ T5850] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1246.808348][ T5850] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1246.808376][ T5850] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1246.808396][ T5850] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1246.808416][ T5850] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1246.826596][ T5850] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1246.826681][ T5850] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1246.826743][ T5850] usb 3-1: Product: syz [ 1246.826783][ T5850] usb 3-1: Manufacturer: syz [ 1246.826819][ T5850] usb 3-1: SerialNumber: syz [ 1247.110105][ T5850] usb 3-1: config 0 descriptor?? [ 1247.114168][ T5850] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1247.243719][ T5850] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1247.945353][T20460] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1247.954372][T20472] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1247.956495][T13327] usb 3-1: USB disconnect, device number 72 [ 1247.956607][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 1248.104018][T13327] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1249.982696][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1250.002253][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1250.005233][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1250.025549][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1250.028227][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1250.659706][ T5791] syz_tun (unregistering): left promiscuous mode [ 1251.539435][ T5850] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1251.697029][ T5850] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1251.697062][ T5850] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 1251.697084][ T5850] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1251.697136][ T5850] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1251.699142][ T5850] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1251.699271][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1251.699294][ T5850] usb 4-1: Product: syz [ 1251.699310][ T5850] usb 4-1: Manufacturer: syz [ 1251.804707][T20475] chnl_net:caif_netlink_parms(): no params data found [ 1251.836804][ T5850] cdc_wdm 4-1:1.0: skipping garbage [ 1251.836851][ T5850] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1252.067320][T20475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.067753][T20475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.067998][T20475] bridge_slave_0: entered allmulticast mode [ 1252.093278][T20475] bridge_slave_0: entered promiscuous mode [ 1252.105817][T20475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.106034][T20475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.106320][T20475] bridge_slave_1: entered allmulticast mode [ 1252.109531][T16206] Bluetooth: hci3: command tx timeout [ 1252.159924][T20475] bridge_slave_1: entered promiscuous mode [ 1252.161278][ T5850] usb 4-1: USB disconnect, device number 74 [ 1252.984745][T20475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.014549][T20475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.079924][T20475] team0: Port device team_slave_0 added [ 1253.083735][T20475] team0: Port device team_slave_1 added [ 1253.143664][T20475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.143682][T20475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.143712][T20475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.198835][T20475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.198853][T20475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.198884][T20475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.376656][T20475] hsr_slave_0: entered promiscuous mode [ 1253.378090][T20475] hsr_slave_1: entered promiscuous mode [ 1253.379087][T20475] debugfs: 'hsr0' already exists in 'hsr' [ 1253.379114][T20475] Cannot create hsr debugfs directory [ 1253.444508][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3526'. [ 1253.444694][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3526'. [ 1253.455092][T20512] kAFS: unable to lookup cell '' [ 1253.668880][T20523] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3528'. [ 1254.189364][ T61] Bluetooth: hci3: command tx timeout [ 1256.199352][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 1256.269412][ T61] Bluetooth: hci3: command tx timeout [ 1256.588924][T20475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.091449][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3532'. [ 1257.363836][T20475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.731317][ T5807] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1257.849087][T20475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.910887][ T5807] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1257.910923][ T5807] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 1257.910941][ T5807] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1257.910994][ T5807] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1258.155086][ T5807] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1258.155110][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1258.155158][ T5807] usb 6-1: Product: syz [ 1258.155173][ T5807] usb 6-1: Manufacturer: syz [ 1258.225410][ T5807] cdc_wdm 6-1:1.0: skipping garbage [ 1258.225441][ T5807] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1258.368188][T16206] Bluetooth: hci3: command tx timeout [ 1258.543553][T20475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.616179][ T5939] usb 6-1: USB disconnect, device number 35 [ 1259.174498][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3539'. [ 1259.174736][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3539'. [ 1259.342494][T20559] kAFS: unable to lookup cell '' [ 1259.567418][T20475] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1259.656454][T20475] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1259.836356][T20475] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1259.906332][T20475] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1260.587043][T20475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1260.691561][T20475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.771976][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.772136][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.888043][ T8624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.888222][ T8624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.337062][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 1261.621131][T20580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3543'. [ 1262.789485][ T5880] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1262.919864][ T5880] usb 5-1: device descriptor read/64, error -71 [ 1263.159411][ T5880] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1263.181061][T20475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.299396][ T5880] usb 5-1: device descriptor read/64, error -71 [ 1263.410057][ T5880] usb usb5-port1: attempt power cycle [ 1263.770814][ T5880] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1263.790276][ T5880] usb 5-1: device descriptor read/8, error -71 [ 1263.978956][T20475] veth0_vlan: entered promiscuous mode [ 1264.023500][T20475] veth1_vlan: entered promiscuous mode [ 1264.039845][ T5880] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1264.061172][ T5880] usb 5-1: device descriptor read/8, error -71 [ 1264.181169][ T5880] usb usb5-port1: unable to enumerate USB device [ 1264.239550][T20475] veth0_macvtap: entered promiscuous mode [ 1264.262909][T20475] veth1_macvtap: entered promiscuous mode [ 1264.346352][T20475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.414789][T20475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.460822][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.461113][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.461158][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.461197][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.222758][T15688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.222777][T15688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.379436][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.379461][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.049435][ T5880] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1266.078979][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3554'. [ 1266.207852][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 1266.221103][ T5880] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1266.221138][ T5880] usb 5-1: config 0 has no interface number 0 [ 1266.252932][ T5880] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1266.252958][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.252974][ T5880] usb 5-1: Product: syz [ 1266.252985][ T5880] usb 5-1: Manufacturer: syz [ 1266.252996][ T5880] usb 5-1: SerialNumber: syz [ 1266.353411][ T5880] usb 5-1: config 0 descriptor?? [ 1266.404598][ T5880] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1266.404630][ T5880] usb 5-1: selecting invalid altsetting 1 [ 1266.404647][ T5880] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1266.459037][ T5880] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1266.460482][ T5880] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1266.460575][ T5880] usb 5-1: media controller created [ 1266.559963][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 1266.560010][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 1266.568564][T20625] kAFS: unable to lookup cell '' [ 1266.825696][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1267.751410][T20615] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1267.786054][ T5880] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1267.786130][ T5880] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1268.438544][ T5880] usb 5-1: USB disconnect, device number 71 [ 1269.040695][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3560'. [ 1271.769480][T13963] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1271.929424][T13963] usb 6-1: Using ep0 maxpacket: 32 [ 1271.932601][T13963] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1271.932631][T13963] usb 6-1: config 0 has no interface number 0 [ 1271.937741][T13963] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1271.937774][T13963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.937795][T13963] usb 6-1: Product: syz [ 1271.937811][T13963] usb 6-1: Manufacturer: syz [ 1271.937827][T13963] usb 6-1: SerialNumber: syz [ 1272.048682][T13963] usb 6-1: config 0 descriptor?? [ 1272.084103][T13963] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1272.084127][T13963] usb 6-1: selecting invalid altsetting 1 [ 1272.084138][T13963] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1272.131225][T13963] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1272.131557][T13963] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1272.131637][T13963] usb 6-1: media controller created [ 1272.234072][T13963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1273.194014][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1273.194061][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1273.198474][T20704] kAFS: unable to lookup cell '' [ 1273.312542][T20684] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1273.329844][T13963] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1273.329903][T13963] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1273.987415][T13963] usb 6-1: USB disconnect, device number 36 [ 1274.478708][T20712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3579'. [ 1274.963732][T20720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3581'. [ 1276.548295][T20748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3590'. [ 1276.688294][T20751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3591'. [ 1276.879377][ T5939] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1277.039447][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 1277.079533][ T5939] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 1277.079577][ T5939] usb 3-1: config 0 has no interface number 0 [ 1277.079629][ T5939] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1277.079649][ T5939] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1277.087514][ T5939] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1277.087556][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.087577][ T5939] usb 3-1: Product: syz [ 1277.087593][ T5939] usb 3-1: Manufacturer: syz [ 1277.087607][ T5939] usb 3-1: SerialNumber: syz [ 1277.191925][ T5939] usb 3-1: config 0 descriptor?? [ 1278.960736][T20769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3595'. [ 1279.736448][ T5939] usb 3-1: USB disconnect, device number 73 [ 1279.862849][T20177] udevd[20177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1281.570983][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3600'. [ 1281.571059][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3600'. [ 1281.573989][T20786] kAFS: unable to lookup cell '' [ 1282.005993][T20792] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3604'. [ 1282.027338][T20792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3604'. [ 1282.559449][ T5850] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1282.749799][ T5850] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1282.749825][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.749840][ T5850] usb 6-1: Product: syz [ 1282.749851][ T5850] usb 6-1: Manufacturer: syz [ 1282.749861][ T5850] usb 6-1: SerialNumber: syz [ 1283.317515][ T5850] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1283.317568][ T5850] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1283.419575][T13963] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1283.561979][ T5850] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1283.562031][ T5850] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1283.562592][ T5850] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1283.614381][T13963] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1283.614413][T13963] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 1283.614433][T13963] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1283.614484][T13963] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1283.663105][T13963] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1283.663137][T13963] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1283.663158][T13963] usb 5-1: Product: syz [ 1283.663173][T13963] usb 5-1: Manufacturer: syz [ 1283.700753][ T5850] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1283.720712][T13963] cdc_wdm 5-1:1.0: skipping garbage [ 1283.720755][T13963] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1283.755836][ T5850] usb 6-1: USB disconnect, device number 37 [ 1283.849237][T20810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3610'. [ 1283.993966][T13327] usb 5-1: USB disconnect, device number 72 [ 1284.149361][ T5939] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1284.299403][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 1284.342231][ T5939] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 1284.342254][ T5939] usb 4-1: config 0 has no interface number 0 [ 1284.342287][ T5939] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1284.342306][ T5939] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1284.477306][ T5939] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1284.477330][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.477345][ T5939] usb 4-1: Product: syz [ 1284.477355][ T5939] usb 4-1: Manufacturer: syz [ 1284.477366][ T5939] usb 4-1: SerialNumber: syz [ 1284.545653][ T5939] usb 4-1: config 0 descriptor?? [ 1286.089423][T13327] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1286.239348][T13327] usb 5-1: Using ep0 maxpacket: 32 [ 1286.245509][T13327] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1286.245538][T13327] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.245557][T13327] usb 5-1: config 0 has no interfaces? [ 1286.288881][T13327] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1286.288974][T13327] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1286.288991][T13327] usb 5-1: Product: syz [ 1286.289002][T13327] usb 5-1: Manufacturer: syz [ 1286.289013][T13327] usb 5-1: SerialNumber: syz [ 1286.376331][T13327] usb 5-1: config 0 descriptor?? [ 1286.595353][ T5880] usb 5-1: USB disconnect, device number 73 [ 1286.863229][ T5939] usb 4-1: USB disconnect, device number 75 [ 1286.912413][T20177] udevd[20177]: setting mode of /dev/bus/usb/004/075 to 020664 failed: No such file or directory [ 1286.912624][T20177] udevd[20177]: setting owner of /dev/bus/usb/004/075 to uid=0, gid=0 failed: No such file or directory [ 1286.993823][T20177] udevd[20177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1287.912299][ T5880] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1288.069340][ T5880] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1288.069373][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.069394][ T5880] usb 5-1: Product: syz [ 1288.069409][ T5880] usb 5-1: Manufacturer: syz [ 1288.069425][ T5880] usb 5-1: SerialNumber: syz [ 1288.548534][ T5880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1288.548607][ T5880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1288.895322][ T5880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1288.895370][ T5880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1288.896000][ T5880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1288.989467][ T5880] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1289.057165][ T5880] usb 5-1: USB disconnect, device number 74 [ 1289.499324][ T5880] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1289.731588][ T5880] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1289.731611][ T5880] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 1289.731625][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1289.731659][ T5880] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1289.733349][ T5880] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1289.733389][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1289.733403][ T5880] usb 2-1: Product: syz [ 1289.733414][ T5880] usb 2-1: Manufacturer: syz [ 1289.797911][ T5880] cdc_wdm 2-1:1.0: skipping garbage [ 1289.797956][ T5880] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1290.100674][ T5880] usb 2-1: USB disconnect, device number 70 [ 1291.069504][ T5939] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1291.259582][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 1291.263284][ T5939] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1291.263315][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.263335][ T5939] usb 4-1: config 0 has no interfaces? [ 1291.294988][ T5939] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1291.295074][ T5939] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1291.295131][ T5939] usb 4-1: Product: syz [ 1291.295174][ T5939] usb 4-1: Manufacturer: syz [ 1291.295217][ T5939] usb 4-1: SerialNumber: syz [ 1291.361511][ T5939] usb 4-1: config 0 descriptor?? [ 1291.593863][ T5807] usb 4-1: USB disconnect, device number 76 [ 1291.832431][T13327] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1291.955569][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3639'. [ 1291.989296][T13327] usb 3-1: Using ep0 maxpacket: 32 [ 1291.993190][T13327] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 1291.993223][T13327] usb 3-1: config 0 has no interface number 0 [ 1291.993270][T13327] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1291.993299][T13327] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1291.996919][T13327] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1291.996954][T13327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.996976][T13327] usb 3-1: Product: syz [ 1291.996991][T13327] usb 3-1: Manufacturer: syz [ 1291.997006][T13327] usb 3-1: SerialNumber: syz [ 1292.011267][T13327] usb 3-1: config 0 descriptor?? [ 1292.524831][T20895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3638'. [ 1292.889371][T13963] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1292.939340][ T5807] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1293.042131][T13963] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1293.042163][T13963] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 1293.042183][T13963] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1293.042246][T13963] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1293.044701][T13963] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1293.044732][T13963] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1293.044754][T13963] usb 4-1: Product: syz [ 1293.044780][T13963] usb 4-1: Manufacturer: syz [ 1293.144305][T13963] cdc_wdm 4-1:1.0: skipping garbage [ 1293.144350][T13963] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1293.209427][ T5807] usb 2-1: Using ep0 maxpacket: 32 [ 1293.212846][ T5807] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 1293.212876][ T5807] usb 2-1: config 0 has no interface number 0 [ 1293.212948][ T5807] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1293.212976][ T5807] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1293.216153][ T5807] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1293.216177][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.216192][ T5807] usb 2-1: Product: syz [ 1293.216203][ T5807] usb 2-1: Manufacturer: syz [ 1293.216214][ T5807] usb 2-1: SerialNumber: syz [ 1293.340273][ T5807] usb 2-1: config 0 descriptor?? [ 1293.506518][ T5939] usb 4-1: USB disconnect, device number 77 [ 1293.755632][T13327] usb 3-1: USB disconnect, device number 74 [ 1294.058250][T20177] udevd[20177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1295.386201][ T5807] usb 2-1: USB disconnect, device number 71 [ 1295.422810][T20176] udevd[20176]: setting owner of /dev/bus/usb/002/071 to uid=0, gid=0 failed: No such file or directory [ 1295.523675][T20177] udevd[20177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1295.739384][T13327] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1295.912331][T13327] usb 3-1: Using ep0 maxpacket: 32 [ 1295.914205][T13327] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1295.914236][T13327] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1295.914265][T13327] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1295.914285][T13327] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1295.914305][T13327] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1295.917893][T13327] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1295.917916][T13327] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1295.917931][T13327] usb 3-1: Product: syz [ 1295.917942][T13327] usb 3-1: Manufacturer: syz [ 1295.917952][T13327] usb 3-1: SerialNumber: syz [ 1296.061618][T13327] usb 3-1: config 0 descriptor?? [ 1296.097323][T13327] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1296.163635][T13327] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1296.444711][ T5880] usb 3-1: USB disconnect, device number 75 [ 1296.444734][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 1296.455983][T20923] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1296.456477][T20927] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 1296.493611][ T5880] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1297.161484][T16206] Bluetooth: hci2: command 0x0406 tx timeout [ 1297.749302][ T5807] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1297.899339][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 1297.938131][ T5807] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 1297.938160][ T5807] usb 4-1: config 0 has no interface number 0 [ 1297.938206][ T5807] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1297.938235][ T5807] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1297.943485][ T5807] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1297.943510][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.943525][ T5807] usb 4-1: Product: syz [ 1297.943536][ T5807] usb 4-1: Manufacturer: syz [ 1297.943546][ T5807] usb 4-1: SerialNumber: syz [ 1298.026690][ T5807] usb 4-1: config 0 descriptor?? [ 1298.749340][T13327] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1298.904567][ T5807] ================================================================== [ 1298.904663][ T5807] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1298.904795][ T5807] Read of size 8 at addr ffffc9000fe1e008 by task kworker/1:3/5807 [ 1298.904813][ T5807] [ 1298.904851][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1298.904882][ T5807] Tainted: [L]=SOFTLOCKUP [ 1298.904891][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1298.904907][ T5807] Workqueue: usb_hub_wq hub_event [ 1298.904995][ T5807] Call Trace: [ 1298.905007][ T5807] [ 1298.905018][ T5807] dump_stack_lvl+0xe8/0x150 [ 1298.905108][ T5807] print_report+0xba/0x230 [ 1298.905142][ T5807] ? __list_add_valid_or_report+0x4e/0x130 [ 1298.905199][ T5807] kasan_report+0x117/0x150 [ 1298.905322][ T5807] ? __list_add_valid_or_report+0x4e/0x130 [ 1298.905362][ T5807] __list_add_valid_or_report+0x4e/0x130 [ 1298.905400][ T5807] kcov_remote_stop+0x457/0x680 [ 1298.905439][ T5807] hub_event+0x49d8/0x4f60 [ 1298.905471][ T5807] ? __lock_acquire+0x6b5/0x2cf0 [ 1298.905525][ T5807] ? __pfx_hub_event+0x10/0x10 [ 1298.905561][ T5807] ? process_scheduled_works+0xa25/0x1830 [ 1298.905592][ T5807] ? process_scheduled_works+0xa25/0x1830 [ 1298.905624][ T5807] process_scheduled_works+0xb02/0x1830 [ 1298.905670][ T5807] ? __pfx_process_scheduled_works+0x10/0x10 [ 1298.905704][ T5807] ? assign_work+0x3d5/0x5e0 [ 1298.905735][ T5807] worker_thread+0xa50/0xfc0 [ 1298.905781][ T5807] kthread+0x388/0x470 [ 1298.905803][ T5807] ? __pfx_worker_thread+0x10/0x10 [ 1298.905832][ T5807] ? __pfx_kthread+0x10/0x10 [ 1298.905853][ T5807] ret_from_fork+0x51e/0xb90 [ 1298.905900][ T5807] ? __pfx_ret_from_fork+0x10/0x10 [ 1298.905930][ T5807] ? __switch_to+0xc7d/0x1450 [ 1298.906053][ T5807] ? __pfx_kthread+0x10/0x10 [ 1298.906077][ T5807] ret_from_fork_asm+0x1a/0x30 [ 1298.906106][ T5807] [ 1298.906142][ T5807] [ 1298.906148][ T5807] The buggy address belongs to a vmalloc virtual mapping [ 1298.906190][ T5807] Memory state around the buggy address: [ 1298.906237][ T5807] ffffc9000fe1df00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1298.906253][ T5807] ffffc9000fe1df80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1298.906269][ T5807] >ffffc9000fe1e000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1298.906281][ T5807] ^ [ 1298.906292][ T5807] ffffc9000fe1e080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1298.906306][ T5807] ffffc9000fe1e100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1298.906319][ T5807] ================================================================== [ 1298.906342][ T5807] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1298.906362][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1298.906392][ T5807] Tainted: [L]=SOFTLOCKUP [ 1298.906401][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1298.906415][ T5807] Workqueue: usb_hub_wq hub_event [ 1298.906448][ T5807] Call Trace: [ 1298.906457][ T5807] [ 1298.906465][ T5807] vpanic+0x56c/0xa60 [ 1298.906500][ T5807] ? __pfx_vpanic+0x10/0x10 [ 1298.906539][ T5807] panic+0xc5/0xd0 [ 1298.906569][ T5807] ? __pfx_panic+0x10/0x10 [ 1298.906617][ T5807] ? __list_add_valid_or_report+0x4e/0x130 [ 1298.906653][ T5807] ? rcu_is_watching+0x15/0xb0 [ 1298.906689][ T5807] ? __list_add_valid_or_report+0x4e/0x130 [ 1298.906724][ T5807] check_panic_on_warn+0x89/0xb0 [ 1298.906762][ T5807] ? __list_add_valid_or_report+0x4e/0x130 [ 1298.906796][ T5807] end_report+0x73/0x180 [ 1298.906830][ T5807] ? __list_add_valid_or_report+0x4e/0x130 [ 1298.906866][ T5807] kasan_report+0x128/0x150 [ 1298.906900][ T5807] ? __list_add_valid_or_report+0x4e/0x130 [ 1298.906940][ T5807] __list_add_valid_or_report+0x4e/0x130 [ 1298.906978][ T5807] kcov_remote_stop+0x457/0x680 [ 1298.907009][ T5807] hub_event+0x49d8/0x4f60 [ 1298.907039][ T5807] ? __lock_acquire+0x6b5/0x2cf0 [ 1298.907088][ T5807] ? __pfx_hub_event+0x10/0x10 [ 1298.907155][ T5807] ? process_scheduled_works+0xa25/0x1830 [ 1298.907187][ T5807] ? process_scheduled_works+0xa25/0x1830 [ 1298.907219][ T5807] process_scheduled_works+0xb02/0x1830 [ 1298.907272][ T5807] ? __pfx_process_scheduled_works+0x10/0x10 [ 1298.907307][ T5807] ? assign_work+0x3d5/0x5e0 [ 1298.907339][ T5807] worker_thread+0xa50/0xfc0 [ 1298.907384][ T5807] kthread+0x388/0x470 [ 1298.907406][ T5807] ? __pfx_worker_thread+0x10/0x10 [ 1298.907437][ T5807] ? __pfx_kthread+0x10/0x10 [ 1298.907459][ T5807] ret_from_fork+0x51e/0xb90 [ 1298.907493][ T5807] ? __pfx_ret_from_fork+0x10/0x10 [ 1298.907522][ T5807] ? __switch_to+0xc7d/0x1450 [ 1298.907550][ T5807] ? __pfx_kthread+0x10/0x10 [ 1298.907574][ T5807] ret_from_fork_asm+0x1a/0x30 [ 1298.907604][ T5807] [ 1298.908209][ T5807] Kernel Offset: disabled