last executing test programs: 14.275252867s ago: executing program 3 (id=2277): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) socket(0x0, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902"], 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808"], 0x0, 0x4}, 0x94) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070100f3ff83000058007a159385e582"], 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x4b4c, &(0x7f0000000080)) 13.423631339s ago: executing program 4 (id=2279): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 12.592531691s ago: executing program 0 (id=2281): landlock_create_ruleset(&(0x7f0000000040)={0x408, 0x3, 0x1}, 0x18, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x523042, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) setfsgid(0x0) 11.471141643s ago: executing program 1 (id=2282): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x1, 0x0, 0x0, r3}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x740, 0x120, 0x2f8, 0x440, 0x510, 0x2f8, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x7}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\xf4\xaa\\k[sC\xae\xd6\x98\x9bY\nI}\xd8\xcc9K\xd7Z+\\\xf8\xdb\x84\xee\xa9\f>\xe4\x81\x88\x90_\xd4\r\xb83\x9e\x13B3\xfe\xcf\xccm\xfdO2\xd7\xa0DD4\x1b*\xdd\xb6\xcf\xacr\xabF\f\xb5\x11Vkp\"\xb1\xa8\xf0\x8d\x00\x18}3utO\x1bQ0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007311320000000000166400000000010095007400000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pread64(r2, &(0x7f0000000400)=""/154, 0x9a, 0x51) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x288, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x24c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x2b0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$negate(0xd, 0x0, 0x8, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) 10.281724613s ago: executing program 4 (id=2285): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x20000000) socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 9.281045349s ago: executing program 1 (id=2287): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000006c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x3, '\x00', @p_u8=&(0x7f0000000280)=0x3}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_open_dev$usbfs(0x0, 0x75, 0x40082) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xf}}, 0xfffffff7, 0x200, 0x0, 0x126, 0xbc0}, &(0x7f0000000480)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) syz_open_dev$media(&(0x7f0000000240), 0x2, 0x60c580) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x4470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 9.11836141s ago: executing program 0 (id=2288): syz_io_uring_setup(0xd2, &(0x7f0000008e40)={0x0, 0xd77c, 0x1086, 0x1001003, 0x1eb}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x2a43, &(0x7f0000006680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x7, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="c03cba2d1f1f78de2c3ba843600c", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, r6, {0xf}, {0x0, 0x1}, {0x3, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x44) 8.386331494s ago: executing program 3 (id=2289): syz_usb_connect(0x2, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102", @ANYRESHEX=0x0], 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010003000000000004000000001d"], 0x24, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) fanotify_init(0x200, 0x0) socket(0x1a, 0x1, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket(0x2, 0x3, 0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r0, 0x0, 0x0, 0x4040008) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707b, 0x0, 0x0, 0x288}, 0x0, 0x0) unshare(0x6020400) lseek(0xffffffffffffffff, 0x6, 0x4) 8.266094818s ago: executing program 2 (id=2290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r6}) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x87, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f00000000c0)="001086d990c97237a45b6616e513b6f7b106000800000000", 0x18, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @loopback, 0xffffffff}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x15) 8.213284936s ago: executing program 1 (id=2291): socket(0x2, 0x2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40840}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) unlink(0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0xc0000080, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7.834488304s ago: executing program 4 (id=2292): setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) r0 = socket$netlink(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x2) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 6.558742362s ago: executing program 0 (id=2293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000000)={0x12f, &(0x7f0000000080)=[{}, {}, {}]}) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/37, 0x25}, {&(0x7f0000003a40)=""/4105, 0x1009}, {&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000480)=""/74, 0x4a}], 0x5}, 0x1801}], 0x1, 0x120, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r4, 0x40045731, &(0x7f0000000140)=0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1000}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000080)='./file0\x00', 0x104) read$FUSE(r8, 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, 0x0, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x21, 0xffffffff, 0x50339398, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6}}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x1, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x2c, 0x2, [@TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x9d8e}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ECN={0x8}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f00000000c0)) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 6.520367458s ago: executing program 4 (id=2294): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) socket(0x0, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902"], 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808"], 0x0, 0x4}, 0x94) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070100f3ff83000058007a159385e582"], 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x4b4c, &(0x7f0000000080)) 5.692870489s ago: executing program 1 (id=2295): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 5.665801123s ago: executing program 0 (id=2296): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x8080) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0), 0x0) syz_open_dev$ndb(0x0, 0x0, 0x10000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 5.017970048s ago: executing program 3 (id=2297): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) socket(0x10, 0x803, 0x0) socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x7, 0x40, 0x5}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.936011005s ago: executing program 4 (id=2298): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 4.7825315s ago: executing program 3 (id=2299): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) socket(0x0, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902"], 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808"], 0x0, 0x4}, 0x94) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070100f3ff83000058007a159385e582"], 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x4b4c, &(0x7f0000000080)) 4.553878688s ago: executing program 2 (id=2300): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x3000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010016008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x18000000000002a0, 0x78, 0x0, &(0x7f00000004c0)="b9ff03076044238cb89e14f0655847e0ffff00004000632f77fb0806143b0feafa8d0cac14140c07029f89052f87e577ca6a114b0000000000003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0053461119663906400f30c0600000000000059b6d3", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x299}, 0x28) r8 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "7cdc45495a9da7d2c62b3d7ca009649a82700cc9f4d3c5b71beb9a1ec606a458ce3de3128e638f7d57a382d6e19ac8e5e4162a5aa00532ac04e2e9fa60003b57", 0x2a}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x10000) r9 = syz_open_dev$vcsa(&(0x7f0000000040), 0x800000006, 0x48202) writev(r9, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) 3.57249229s ago: executing program 2 (id=2301): setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) r0 = socket$netlink(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x2) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 3.426962671s ago: executing program 0 (id=2302): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x20000000) socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 2.246573395s ago: executing program 2 (id=2303): syz_io_uring_setup(0xd2, &(0x7f0000008e40)={0x0, 0xd77c, 0x1086, 0x1001003, 0x1eb}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x2a43, &(0x7f0000006680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x7, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="c03cba2d1f1f78de2c3ba843600c", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, r6, {0xf}, {0x0, 0x1}, {0x3, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x44) 2.136266179s ago: executing program 1 (id=2304): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002200)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r10}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r9, 0x9}}, 0x10) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r11, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xf9, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x1, 0x80, 0x3e, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x10}, [@selector_unit={0xa, 0x24, 0x5, 0x4, 0x4, "8577dcb59f"}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x6, 0x4, [0x4, 0x7, 0x6, 0x8], 0x4}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x4, 0x5, "46a7506c"}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x0, 0xc2, "8a20fe26c9"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x5, 0x5, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0x1, 0x2, "73c464"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2, 0x3, 0x2, 0x4, "2521fe5e02"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x9, 0x3, {0x7, 0x25, 0x1, 0x83, 0x3, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xad, 0x81, 0x1001}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x0, 0xf, "", '='}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x4, 0x9, 0xfc, "132644", "1da8"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xff, 0x1, 0x40}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x80, 0x81, 'T'}, @as_header={0x7, 0x24, 0x1, 0x40, 0x5, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x8, 0x33, {0x7, 0x25, 0x1, 0x2, 0x5, 0x5}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x3, 0x5, 0x4, 0x8, 0x6}, 0x3f, &(0x7f0000000180)={0x5, 0xf, 0x3f, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xf0, 0x2, 0x1a}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "72b32935ab60371b29a4419fae4c1320"}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0xa, 0x0, 0x8, [0xff3f3f, 0xff3fcf, 0x0, 0x3fc0]}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x454}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) 1.761655425s ago: executing program 4 (id=2305): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x4000000004002, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x0, 0x36200}) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x10, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000d40), 0x0}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x10001) 1.676756422s ago: executing program 2 (id=2306): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f0000000080)='net/ip_tables_names\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r4, &(0x7f00000014c0)=[{&(0x7f0000000200)="561700", 0x3}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3dc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) write$binfmt_aout(r4, &(0x7f0000000880)={{0x108, 0x9c, 0x9, 0x1ab, 0xbb, 0x6, 0x353, 0x700}, "62c4e83f0fa8a048cb39c262f37c5a4e0a30d412f2295676023752c4cc6ba46ea49a6017c18c1feeeaac1d814c2899c540e1883555b399dd482a42a0710da6157e52f3127f794fd7bdffc32a152a552128c30781c0065cfc4895ca560a6780e168506088783571b8005e84098ab5802a29452ce8c4d2efc34a84ee00465ba532836602c50f57d1cbcd08cd6fddf9fd10edbf7a97e03f306e503e2d16ec574a215ed934a468fa84b7f192147a8d5455025fbe4115e52a5b2a8e27d7ac72c718cf2b4f1cea", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9e4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, 0x0, &(0x7f0000000640)='%+9llu \x00'}, 0x1c) pipe2$watch_queue(&(0x7f00000006c0), 0x80) write$sysctl(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) 1.522324087s ago: executing program 0 (id=2307): r0 = syz_usb_connect$hid(0x5, 0x8f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r6, 0x101, 0x70bd2b, 0x25dfdbfd, {{}, {0x0, 0x4107}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x68, r6, 0x800, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44000080}, 0x4010) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000040)={0x29d0, 0xb, 0x0, "edf5137ba3b3dd25df1750caa643b0813ba7601b069835e4a121cb5249a187e7", 0x47425247}) writev(r1, &(0x7f0000000540)=[{&(0x7f00000001c0)="2974a886c16ae636034e138a0a74dfb0d691e675ac90cc553ca273c6f5bdae131e4eb2c72871cd29c9e629a882a840158193c5", 0x33}, {&(0x7f00000002c0)="92b123ac7f90b9930a18e35145b0ebcfdfbe045180eb0d56a8e4f39355b0cb9e2094248afc733576f0871fcb160bfbdbe4c7d223618a07d7711098ac71c53ea7a5c53443c77da2ec1f6aa837adb8ccd2ccfff5817a5884d8754e2c5bb7ab9ac0b33eae374fb80bfcaf62186d7cdab642ed1dc82123c436b9568b0d9c2aa54925ee4735329a3931e61d0290ca583fd9444e143f2fe59e9a4f0641bf8b241f86abc26aeb3768c0d5", 0xa7}, {&(0x7f0000001440)="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", 0xffc}, {&(0x7f0000000200)="32e8c5c53402bc811cfac77998288162c0949cdc6f5a60f2d4b0b74928ce539e0183ff42f28b38720db35b3cbaa1595c7d510fb43df747ab50cf748793", 0x3d}, {&(0x7f0000000380)="d8292290e6031890af403fb0fc9686af075563f4e18c043ec2da3c4de72f3ecb0691a1655594c0413d53ebd7d40d7d426fcc02764b025e4cc4d24af4f4f516face27975f73917a9ac871a8b60b62f2e3b9ab65aac7ef73b5f444561a0e75d60156770ac8d349a2680d43d50509846bd28ad96b131e7421480a345cec5606cb8c443ea9219b10aeba04bfa2abb22ba76b08", 0x91}, {&(0x7f0000000480)="74b5d91e4b27c18db7682fe9dd38be3f30f7b5829b27cd6643b49f2efd54e7a3fa16db41d47b4d2d329128f83629e03e59b2765a2fdc82f3c1865670c29f4224a1ef3636813cc360cf22ee328d86cc75321926e369ce84fd62b2bd42bbe67bde3811a06b6f2d2e3ca2bff5a12b76f174c39580949b0f283a43a1a9bb9c962239e509c0a7d1a1a29baaadca7b5799ab0baa0d5a9fad466a00919414851c8a09d4f0584588d10b3ced38f5a5c0be14f4f5cf1ddaaa65016650fa208e9442a1", 0xbe}, {&(0x7f0000002440)}], 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r3) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r9, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x8005}, 0x0) fsopen(0x0, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.270673379s ago: executing program 1 (id=2308): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) socket(0x0, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902"], 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808"], 0x0, 0x4}, 0x94) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070100f3ff83000058007a159385e582"], 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x4b4c, &(0x7f0000000080)) 604.056718ms ago: executing program 3 (id=2309): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r1, 0xfffffffd}, &(0x7f0000000340)=0x8) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000005c0)={'tunl0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x80, 0x7, 0x9, 0x8c70, {{0x19, 0x4, 0x3, 0x1, 0x64, 0x67, 0x0, 0x1, 0x29, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0x71, 0x1, 0x5, [{@loopback, 0x12e}, {@loopback, 0x5f9}, {@multicast2, 0x3}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xffff}]}, @timestamp_prespec={0x44, 0x24, 0x6b, 0x3, 0x3, [{@private=0xa010100, 0xc3}, {@private=0xa010101}, {@broadcast, 0x56}, {@rand_addr=0x64010102, 0x8}]}]}}}}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x4, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) sendmsg$nl_route(r3, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c9c0}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0xc208ae62, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ppoll(&(0x7f00000000c0)=[{r4, 0x2004}], 0x1, 0x0, &(0x7f0000000140)={[0x555]}, 0x8) 0s ago: executing program 2 (id=2310): syz_io_uring_setup(0xd2, &(0x7f0000008e40)={0x0, 0xd77c, 0x1086, 0x1001003, 0x1eb}, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x2a43, &(0x7f0000006680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000000e06010100000000000000000700000605000100"], 0x6c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x7, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1803000000000000000000000000000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="c03cba2d1f1f78de2c3ba843600c", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000000d0a010e000000000000000001000000090001007379000000eaffff0800020073797a32000000005effada0298352c7e14f1a56c47bd15bf09a6de663272ef2c922b4bf4cd0a97bc2694fea08aad9f6ee708f7168d7e9c01e656365b7254a16e308f9e4735a13f1ab402d35179ae8929ca8ef9de0728d623e10bdefbd5a877ed48a8d86f51c97b5b007b8888c57e568abc262023fce5096da7d277e2c98039d9a368af123e0562f63d5538605708c96a6a96225c75c328ce219d7b1ec555629fdd10bfa2c721d66e4bb50b320164f5ec4fc"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, r6, {0xf}, {0x0, 0x1}, {0x3, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x44) kernel console output (not intermixed with test programs): sconnect device [ 910.938591][T15164] vhci_hcd: connection reset by peer [ 910.953869][ T49] vhci_hcd: stop threads [ 910.958196][ T49] vhci_hcd: release socket [ 910.964466][ T49] vhci_hcd: disconnect device [ 910.972173][T15173] vhci_hcd: connection closed [ 910.975349][ T49] vhci_hcd: stop threads [ 911.067803][ T49] vhci_hcd: release socket [ 911.074623][ T49] vhci_hcd: disconnect device [ 911.081750][ T49] vhci_hcd: stop threads [ 911.087428][ T49] vhci_hcd: release socket [ 911.092223][ T49] vhci_hcd: disconnect device [ 911.100473][ T49] vhci_hcd: stop threads [ 911.106569][ T49] vhci_hcd: release socket [ 911.111518][ T49] vhci_hcd: disconnect device [ 911.138683][T15158] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.171437][T15158] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.203374][T15158] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.235940][T15158] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.547754][T15158] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 911.566679][T15158] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 911.580778][T15158] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 911.589931][T15158] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 911.993333][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 912.016231][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 912.085800][T11210] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 912.275385][T11210] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 912.283960][T11210] usb 3-1: config 0 has no interface number 0 [ 912.290125][T11210] usb 3-1: config 0 interface 29 has no altsetting 0 [ 912.309436][T11210] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 912.319856][T11210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.329712][T11210] usb 3-1: Product: syz [ 912.335983][T11210] usb 3-1: Manufacturer: syz [ 912.340730][T11210] usb 3-1: SerialNumber: syz [ 912.425364][T11210] usb 3-1: config 0 descriptor?? [ 912.516861][T15202] hsr0: entered promiscuous mode [ 912.523889][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1788'. [ 912.546855][T15202] hsr_slave_0: left promiscuous mode [ 912.567875][T15202] hsr_slave_1: left promiscuous mode [ 912.591497][T15202] hsr0 (unregistering): left promiscuous mode [ 912.654541][T11210] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v213 fw v7.0.0 (2 channels) [ 913.007157][T15206] netlink: 'syz.1.1789': attribute type 20 has an invalid length. [ 914.373481][T15215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1792'. [ 915.007358][T11210] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 915.036797][T11210] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 915.227831][T15227] netlink: 'syz.2.1793': attribute type 20 has an invalid length. [ 915.303799][T11210] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 915.334066][T11210] usb 3-1: USB disconnect, device number 85 [ 915.393204][ T980] vhci_hcd: vhci_device speed not set [ 915.505210][T15232] tipc: Started in network mode [ 915.510298][T15232] tipc: Node identity , cluster identity 4711 [ 915.522817][T15232] tipc: Failed to set node id, please configure manually [ 915.537655][T15232] tipc: Enabling of bearer rejected, failed to enable media [ 916.070807][T15244] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[15244] [ 916.730727][T11640] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 917.063676][ T5918] usb usb42-port1: attempt power cycle [ 917.744363][ T5918] usb usb42-port1: unable to enumerate USB device [ 919.816352][T11640] usb 1-1: unable to get BOS descriptor or descriptor too short [ 919.831389][T11640] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 919.895020][T11640] usb 1-1: can't read configurations, error -71 [ 920.526441][T15249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.664735][T15276] program syz.0.1802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 920.750250][T15277] netlink: 'syz.0.1802': attribute type 10 has an invalid length. [ 920.838390][T15276] syz.0.1802 (15276): drop_caches: 2 [ 920.852314][T15276] syz.0.1802 (15276): drop_caches: 2 [ 921.195309][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1803'. [ 921.290093][ T5918] IPVS: starting estimator thread 0... [ 921.362884][T15289] PKCS7: Unknown OID: [5] (bad) [ 921.393140][T15288] IPVS: using max 50 ests per chain, 120000 per kthread [ 921.416326][T15289] PKCS7: Only support pkcs7_signedData type [ 921.592310][T15296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.604895][T15296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.963860][T15302] netlink: 'syz.2.1809': attribute type 20 has an invalid length. [ 922.196397][T15299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 922.892414][T15309] syz.3.1811 (15309): drop_caches: 2 [ 922.944195][T15309] syz.3.1811 (15309): drop_caches: 2 [ 923.078576][T15316] No such timeout policy "syz1" [ 923.509225][T15310] sctp: [Deprecated]: syz.0.1810 (pid 15310) Use of int in maxseg socket option. [ 923.509225][T15310] Use struct sctp_assoc_value instead [ 923.603146][T15322] tipc: Enabling of bearer rejected, already enabled [ 925.453748][T15346] input: syz0 as /devices/virtual/input/input34 [ 926.667673][T15358] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 928.443566][ T30] audit: type=1326 audit(1751144597.219:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15369 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4f8e929 code=0x7ffc0000 [ 928.517732][ T30] audit: type=1326 audit(1751144597.219:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15369 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f16d4f8e929 code=0x7ffc0000 [ 928.550987][ T30] audit: type=1326 audit(1751144597.219:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15369 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4f8e929 code=0x7ffc0000 [ 928.575738][T11640] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 928.584726][ T30] audit: type=1326 audit(1751144597.219:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15369 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16d4f8e929 code=0x7ffc0000 [ 928.743095][ T5918] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 928.829366][T15380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1822'. [ 928.945101][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 928.960250][T11640] usb 5-1: config 0 has no interfaces? [ 929.034737][T11640] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 929.050604][ T30] audit: type=1326 audit(1751144597.219:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15369 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4f8e929 code=0x7ffc0000 [ 929.073508][T11640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.193062][T11640] usb 5-1: Product: syz [ 929.206663][T11640] usb 5-1: Manufacturer: syz [ 929.226795][T11640] usb 5-1: SerialNumber: syz [ 929.256145][ T30] audit: type=1326 audit(1751144597.219:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15369 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16d4f8e929 code=0x7ffc0000 [ 929.257480][T11640] usb 5-1: config 0 descriptor?? [ 929.394774][ T30] audit: type=1326 audit(1751144597.219:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15369 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4f8e929 code=0x7ffc0000 [ 929.430495][T15384] pim6reg: left allmulticast mode [ 929.502457][ T30] audit: type=1326 audit(1751144597.219:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15369 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16d4f8e929 code=0x7ffc0000 [ 929.542418][ T30] audit: type=1326 audit(1751144597.219:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15369 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d4f8e929 code=0x7ffc0000 [ 929.920152][ T30] audit: type=1326 audit(1751144597.219:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15369 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f16d4f8e929 code=0x7ffc0000 [ 931.059576][T15388] sch_fq: defrate 6 ignored. [ 931.143560][T11640] usb 5-1: USB disconnect, device number 71 [ 931.462868][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.469272][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.605124][T15402] tipc: Enabling of bearer rejected, failed to enable media [ 932.677561][ T5918] usb 1-1: unable to get BOS descriptor or descriptor too short [ 932.686657][ T5918] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 932.760623][ T5918] usb 1-1: can't read configurations, error -71 [ 932.960839][T15416] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1830'. [ 932.961278][T15416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1830'. [ 933.089795][T15420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.090215][T15420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.192884][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'. [ 933.707851][T15430] netlink: 'syz.4.1833': attribute type 21 has an invalid length. [ 933.718785][T15430] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1833'. [ 933.733312][T15430] netlink: 'syz.4.1833': attribute type 4 has an invalid length. [ 933.745331][T15430] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1833'. [ 934.515580][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1835'. [ 935.205639][T15445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.222482][T15445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.892998][T11210] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 936.107788][T11210] usb 1-1: config 0 has no interfaces? [ 936.119864][T11210] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 936.129496][T11210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.142169][T11210] usb 1-1: Product: syz [ 936.154870][T11210] usb 1-1: Manufacturer: syz [ 936.259150][T11210] usb 1-1: SerialNumber: syz [ 936.277356][T11210] usb 1-1: config 0 descriptor?? [ 937.166898][T15457] futex_wake_op: syz.2.1839 tries to shift op by 36; fix this program [ 938.087938][T15465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1841'. [ 938.343372][T15469] PKCS7: Unknown OID: [5] (bad) [ 938.348274][T15469] PKCS7: Only support pkcs7_signedData type [ 939.199353][T11640] usb 1-1: USB disconnect, device number 92 [ 939.711091][T15482] tipc: Started in network mode [ 939.723081][T15482] tipc: Node identity , cluster identity 4711 [ 939.729956][T15482] tipc: Failed to set node id, please configure manually [ 939.740290][T15484] netlink: 'syz.4.1845': attribute type 21 has an invalid length. [ 939.759959][T15484] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1845'. [ 940.331153][T15482] tipc: Enabling of bearer rejected, failed to enable media [ 940.498059][T15484] netlink: 'syz.4.1845': attribute type 4 has an invalid length. [ 940.523612][T15484] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1845'. [ 940.623116][T15487] lo: left promiscuous mode [ 940.655611][T15487] tunl0: left promiscuous mode [ 940.710367][T15487] gre0: left promiscuous mode [ 940.883396][T15487] gretap0: left promiscuous mode [ 941.200121][T15495] vivid-007: ================= START STATUS ================= [ 941.208278][T15495] vivid-007: Enable Output Cropping: true [ 941.215041][T15495] vivid-007: Enable Output Composing: true [ 941.222093][T15495] vivid-007: Enable Output Scaler: true [ 941.227816][T15495] vivid-007: Tx RGB Quantization Range: Automatic [ 941.234680][T15495] vivid-007: Transmit Mode: HDMI [ 941.239723][T15495] vivid-007: Hotplug Present: 0x00000000 [ 941.245742][T15495] vivid-007: RxSense Present: 0x00000000 [ 941.259016][T15495] vivid-007: EDID Present: 0x00000000 [ 941.264959][T15495] vivid-007: ================== END STATUS ================== [ 941.374963][T15487] erspan0: left promiscuous mode [ 941.449860][T15487] ip_vti0: left promiscuous mode [ 941.587324][T15487] ip6_vti0: left promiscuous mode [ 941.684871][T15487] sit0: left promiscuous mode [ 941.791751][T15487] ip6tnl0: left promiscuous mode [ 941.807886][T15498] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[15498] [ 941.855629][T15487] ip6gre0: left promiscuous mode [ 941.985352][T15487] ip6gretap0: left promiscuous mode [ 942.037365][T15487] bridge0: left promiscuous mode [ 942.071935][T15487] vcan0: left promiscuous mode [ 942.094732][T15487] bond0: left promiscuous mode [ 942.244879][T15487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.266727][T15487] nlmon0: left promiscuous mode [ 942.304572][T15487] caif0: left promiscuous mode [ 942.310687][T15487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 942.749799][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 945.142805][T11640] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 945.375170][T11640] usb 1-1: config 0 has no interfaces? [ 945.477102][T11640] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 945.519068][T11640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.531059][T11640] usb 1-1: Product: syz [ 945.536888][T15547] netlink: 'syz.2.1857': attribute type 21 has an invalid length. [ 945.544957][T15547] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1857'. [ 945.554410][T15547] netlink: 'syz.2.1857': attribute type 4 has an invalid length. [ 945.562198][T15547] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1857'. [ 945.602784][T11640] usb 1-1: Manufacturer: syz [ 945.607720][T11640] usb 1-1: SerialNumber: syz [ 945.681683][T11640] usb 1-1: config 0 descriptor?? [ 946.316771][T15553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.328415][T15553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.098453][T11640] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 948.162000][ T5918] usb 1-1: USB disconnect, device number 93 [ 948.290507][T11640] usb 3-1: config 0 has no interfaces? [ 948.303193][T11640] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 948.312460][T11640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.321453][T11640] usb 3-1: Product: syz [ 948.331364][T11640] usb 3-1: Manufacturer: syz [ 948.354318][T11640] usb 3-1: SerialNumber: syz [ 948.376565][T11640] usb 3-1: config 0 descriptor?? [ 948.787829][T15574] tipc: Enabling of bearer rejected, already enabled [ 949.833201][T11640] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 950.007058][T11640] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 950.023061][T11640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.031209][T11640] usb 4-1: Product: syz [ 950.042218][T11640] usb 4-1: Manufacturer: syz [ 950.049967][T15583] netlink: 'syz.1.1864': attribute type 21 has an invalid length. [ 950.051795][T11640] usb 4-1: SerialNumber: syz [ 950.063001][T15583] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1864'. [ 950.100348][T15583] netlink: 'syz.1.1864': attribute type 4 has an invalid length. [ 950.108343][ T980] usb 3-1: USB disconnect, device number 86 [ 950.108402][T15583] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1864'. [ 950.149001][T11640] usb 4-1: config 0 descriptor?? [ 950.447527][T11640] hso 4-1:0.0: Failed to find BULK IN ep [ 950.708473][T11640] usb-storage 4-1:0.0: USB Mass Storage device detected [ 950.715021][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'. [ 950.730579][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'. [ 950.875143][T11640] usb 4-1: USB disconnect, device number 92 [ 951.011019][T15593] PKCS7: Unknown OID: [5] (bad) [ 951.019402][T15593] PKCS7: Only support pkcs7_signedData type [ 952.370081][T15605] netlink: 'syz.2.1868': attribute type 1 has an invalid length. [ 952.845554][T15617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.937164][T15617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.602281][T15605] bond1: (slave dummy0): Releasing active interface [ 953.789108][T15605] batman_adv: batadv0: Adding interface: dummy0 [ 953.922786][T15605] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.954080][T15605] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 954.595109][T15631] netlink: 'syz.0.1873': attribute type 1 has an invalid length. [ 954.613842][T11640] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 954.799137][ T980] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 954.864473][T11640] usb 5-1: Using ep0 maxpacket: 16 [ 954.910600][T11640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.927475][T11640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.944020][T15633] bond3: entered promiscuous mode [ 954.949173][T15633] bond3: entered allmulticast mode [ 954.955372][T15633] 8021q: adding VLAN 0 to HW filter on device bond3 [ 954.998859][T15631] bridge4: entered promiscuous mode [ 955.005000][T15631] bridge4: entered allmulticast mode [ 955.013668][T15631] bond3: (slave bridge4): Enslaving as a backup interface with an up link [ 955.033316][T11147] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 955.069078][ T980] usb 3-1: config 0 has no interfaces? [ 955.152755][ T5918] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 955.216906][ T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 955.299657][T11640] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 955.358568][T11640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.366677][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 955.377965][ T5918] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 955.398906][ T980] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 955.421614][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.442769][T11640] usb 5-1: config 0 descriptor?? [ 955.452789][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.453134][ T980] usb 3-1: Product: syz [ 955.493939][ T980] usb 3-1: Manufacturer: syz [ 955.502459][ T980] usb 3-1: SerialNumber: syz [ 955.520415][ T5918] usb 4-1: Product: syz [ 955.542759][ T980] usb 3-1: config 0 descriptor?? [ 955.574562][T11640] usbhid 5-1:0.0: can't add hid device: -22 [ 955.593790][T11640] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 955.596954][ T5918] usb 4-1: Manufacturer: syz [ 955.644633][ T5918] usb 4-1: SerialNumber: syz [ 955.696889][ T5918] r8152-cfgselector 4-1: Unknown version 0x0000 [ 955.709289][ T5918] r8152-cfgselector 4-1: config 0 descriptor?? [ 955.959677][T15625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.969860][T15625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.999186][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 955.999201][ T30] audit: type=1326 audit(1751144624.799:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.3.1874" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb6b98e929 code=0x0 [ 956.033384][T15617] delete_channel: no stack [ 956.315688][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 956.328437][T15637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.470369][T15637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.800570][T15648] netlink: 'syz.0.1876': attribute type 21 has an invalid length. [ 956.810017][T15648] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1876'. [ 956.819547][T15648] netlink: 'syz.0.1876': attribute type 4 has an invalid length. [ 956.962840][T15648] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1876'. [ 957.545748][ T43] usb 5-1: USB disconnect, device number 72 [ 957.844499][ T24] usb 3-1: USB disconnect, device number 87 [ 957.929173][ T5918] r8152-cfgselector 4-1: Unknown version 0x0000 [ 957.936053][ T5918] r8152-cfgselector 4-1: bad CDC descriptors [ 957.996139][ T5918] r8152-cfgselector 4-1: USB disconnect, device number 93 [ 958.219802][T15663] libceph: resolve '4..' (ret=-3): failed [ 958.252108][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'. [ 958.296650][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'. [ 958.623309][T11640] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 959.066783][T11640] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 959.099609][T11640] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 959.158611][T11640] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 959.242012][T11640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.545194][T11640] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 960.037801][T15678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.048106][T15678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.085859][T15664] macsec1: entered promiscuous mode [ 960.091314][T15664] macsec0: entered promiscuous mode [ 960.097597][T15664] macsec1: entered allmulticast mode [ 960.103354][T15664] macsec0: entered allmulticast mode [ 960.134891][T15664] macsec0: left allmulticast mode [ 960.185465][T11640] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 960.416354][T15664] macsec0: left promiscuous mode [ 960.526891][T15681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.569876][T15681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.427569][T15690] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1884'. [ 963.469728][T15702] tipc: Enabling of bearer rejected, already enabled [ 963.932793][ T980] usb 4-1: USB disconnect, device number 94 [ 963.952299][T15711] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1889'. [ 963.962995][T11640] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 963.971391][T15661] delete_channel: no stack [ 964.004498][T15711] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.013642][T15711] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.022377][T15711] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.099454][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'. [ 964.113937][T15716] netlink: 'syz.1.1890': attribute type 21 has an invalid length. [ 964.125736][T15716] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1890'. [ 964.137660][T15716] netlink: 'syz.1.1890': attribute type 4 has an invalid length. [ 964.148050][T15716] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1890'. [ 964.154965][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'. [ 964.164705][T11640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.178048][T11640] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 964.187531][T11640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.217250][T11640] usb 5-1: config 0 descriptor?? [ 964.888866][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'. [ 965.279387][T15731] netlink: 'syz.1.1893': attribute type 20 has an invalid length. [ 965.722783][ T5918] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 965.873203][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 965.887050][ T5918] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 965.909961][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.937627][ T5918] usb 1-1: Product: syz [ 965.949537][ T5918] usb 1-1: Manufacturer: syz [ 965.969544][ T5918] usb 1-1: SerialNumber: syz [ 966.157733][ T5918] usb 1-1: config 0 descriptor?? [ 966.513586][ T5918] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 967.002920][T11640] usbhid 5-1:0.0: can't add hid device: -71 [ 967.061729][T11640] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 967.128022][T11640] usb 5-1: USB disconnect, device number 73 [ 967.630990][T15743] netlink: 'syz.4.1895': attribute type 1 has an invalid length. [ 967.834158][T15743] batman_adv: batadv0: Adding interface: dummy0 [ 967.842611][T15743] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.868280][ C0] vkms_vblank_simulate: vblank timer overrun [ 967.884755][T15743] batman_adv: batadv0: Interface activated: dummy0 [ 968.322944][T15751] tipc: Enabling of bearer rejected, failed to enable media [ 968.698173][T15764] PKCS7: Unknown OID: [5] (bad) [ 968.703444][T15764] PKCS7: Only support pkcs7_signedData type [ 968.983036][T11210] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 969.014028][T15769] PKCS7: Unknown OID: [5] (bad) [ 969.019108][T15769] PKCS7: Only support pkcs7_signedData type [ 969.169518][T11210] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 969.180347][T11210] usb 4-1: config 0 has no interface number 0 [ 969.188116][T11210] usb 4-1: config 0 interface 29 has no altsetting 0 [ 969.213253][T11210] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 969.222362][T11210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.234385][T11210] usb 4-1: Product: syz [ 969.238598][T11210] usb 4-1: Manufacturer: syz [ 969.245318][T11210] usb 4-1: SerialNumber: syz [ 969.250175][ T5918] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 969.264891][ T5918] usb 1-1: USB disconnect, device number 94 [ 969.324466][T11210] usb 4-1: config 0 descriptor?? [ 969.569738][T11210] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v213 fw v0.0.0 (2 channels) [ 970.115849][T15781] syz.4.1903 (15781): drop_caches: 2 [ 970.323328][ T980] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 970.412198][T15781] syz.4.1903 (15781): drop_caches: 2 [ 970.645378][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 970.655541][ T980] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 970.666079][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 970.906721][ T980] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 970.917640][ T980] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 970.933344][ T980] usb 1-1: Manufacturer: syz [ 970.946451][ T980] usb 1-1: config 0 descriptor?? [ 971.030876][ T980] smsusb:smsusb_probe: board id=9, interface number 0 [ 971.039782][ T980] smsusb:smsusb_probe: Device initialized with return code -19 [ 971.259891][T15790] vivid-000: ================= START STATUS ================= [ 971.318718][T15790] vivid-000: Test Pattern: 75% Colorbar [ 971.327208][T15790] vivid-000: Fill Percentage of Frame: 100 [ 971.382993][T15790] vivid-000: Horizontal Movement: No Movement [ 971.431401][T15790] vivid-000: Vertical Movement: No Movement [ 971.495599][T15790] vivid-000: OSD Text Mode: All [ 971.511643][T15790] vivid-000: Show Border: false [ 971.526206][T15790] vivid-000: Show Square: false [ 971.531275][T15790] vivid-000: Sensor Flipped Horizontally: false [ 971.538840][T15790] vivid-000: Sensor Flipped Vertically: false [ 971.665266][T15790] vivid-000: Insert SAV Code in Image: false [ 971.674995][T15800] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 971.681618][T15800] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 971.689086][T15797] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 971.695685][T15797] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 971.724421][T15800] vhci_hcd vhci_hcd.0: Device attached [ 971.727214][T15790] vivid-000: Insert EAV Code in Image: false [ 971.789238][T15800] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 971.832252][T15790] vivid-000: Insert Video Guard Band: false [ 971.833392][T15800] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(19) [ 971.844848][T15800] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 971.857564][T15790] vivid-000: Reduced Framerate: true [ 971.877247][T15790] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 971.888663][T15797] vhci_hcd vhci_hcd.0: Device attached [ 971.908576][T15790] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 971.941014][T15790] vivid-000: Enable Capture Cropping: true grabbed [ 971.954790][T15797] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 971.964195][ T980] usb 41-2: new low-speed USB device number 3 using vhci_hcd [ 971.969395][T15790] vivid-000: Enable Capture Composing: true grabbed [ 971.991460][T15800] vhci_hcd vhci_hcd.0: Device attached [ 972.006589][T15804] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(22) [ 972.013228][T15804] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 972.021688][T15790] vivid-000: Enable Capture Scaler: true grabbed [ 972.047416][T15790] vivid-000: Timestamp Source: End of Frame [ 972.066296][T15790] vivid-000: Colorspace: Rec. 709 [ 972.077369][T15797] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 972.094405][T15790] vivid-000: Transfer Function: Default [ 972.118839][T15790] vivid-000: Y'CbCr Encoding: Default [ 972.134522][T15790] vivid-000: HSV Encoding: Hue 0-179 [ 972.148169][T15790] vivid-000: Quantization: Default [ 972.162842][T15797] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 972.176072][T15790] vivid-000: Apply Alpha To Red Only: false [ 972.190982][T15790] vivid-000: Standard Aspect Ratio: 4x3 [ 972.192468][T15804] vhci_hcd vhci_hcd.0: Device attached [ 972.212948][T15790] vivid-000: DV Timings Signal Mode: Current DV Timings [ 972.256222][T15790] vivid-000: DV Timings: 640x480p59 inactive [ 972.274404][T15790] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 972.299120][T15790] vivid-000: Maximum EDID Blocks: 2 [ 972.316133][T15790] vivid-000: Limited RGB Range (16-235): true [ 972.371738][T11210] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 972.393892][T11210] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 972.402867][T15790] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 972.441385][T15805] vhci_hcd: connection closed [ 972.441457][T15807] vhci_hcd: connection closed [ 972.444600][T15798] vhci_hcd: connection closed [ 972.446383][T15801] vhci_hcd: connection reset by peer [ 972.452804][T15790] vivid-000: Power Present: [ 972.456009][ T59] vhci_hcd: stop threads [ 972.461862][T15790] 0x00000001 [ 972.490322][ T59] vhci_hcd: release socket [ 972.491408][T15790] tpg source WxH: 1280x720 (R'G'B) [ 972.506434][T11210] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 972.527676][T15790] tpg field: 1 [ 972.531273][T11210] usb 4-1: USB disconnect, device number 95 [ 972.557427][T15790] tpg crop: (0,0)/1280x720 [ 972.557442][ T59] vhci_hcd: disconnect device [ 972.567540][ T59] vhci_hcd: stop threads [ 972.587430][ T59] vhci_hcd: release socket [ 972.609486][T15815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1910'. [ 972.637694][ T59] vhci_hcd: disconnect device [ 972.644121][T15790] tpg compose: (0,0)/1280x720 [ 972.649861][T15790] tpg colorspace: 3 [ 972.661408][T15790] tpg transfer function: 0/2 [ 972.670264][ T59] vhci_hcd: stop threads [ 972.681419][ T59] vhci_hcd: release socket [ 972.687923][T15790] tpg quantization: 0/2 [ 972.705873][ T59] vhci_hcd: disconnect device [ 972.711041][T15790] tpg RGB range: 2/1 [ 972.726630][T15790] vivid-000: ================== END STATUS ================== [ 972.745206][ T59] vhci_hcd: stop threads [ 972.756673][ T59] vhci_hcd: release socket [ 972.776862][ T59] vhci_hcd: disconnect device [ 973.071442][T15823] tipc: Enabling of bearer rejected, already enabled [ 973.167286][T11210] usb 1-1: USB disconnect, device number 95 [ 973.486428][T15832] PKCS7: Unknown OID: [5] (bad) [ 973.491349][T15832] PKCS7: Only support pkcs7_signedData type [ 973.988675][T15838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.997976][T15838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.832030][T15846] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[15846] [ 974.891808][T11640] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 975.169874][T11640] usb 5-1: config 0 has no interfaces? [ 975.230965][T11640] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 975.299442][T11640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.348249][T11640] usb 5-1: Product: syz [ 975.357532][T11640] usb 5-1: Manufacturer: syz [ 975.362766][T11640] usb 5-1: SerialNumber: syz [ 975.457606][T11640] usb 5-1: config 0 descriptor?? [ 976.300480][T15858] netlink: 'syz.3.1919': attribute type 11 has an invalid length. [ 977.203049][ T980] vhci_hcd: vhci_device speed not set [ 977.213009][ T5918] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 977.342836][T11210] usb 5-1: USB disconnect, device number 74 [ 977.372932][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 977.398208][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 977.425116][ T5918] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 977.453565][ T5918] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 977.484472][T15864] SET target dimension over the limit! [ 977.502718][ T5918] usb 3-1: config 1 interface 0 has no altsetting 0 [ 977.683877][ T5918] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 977.732352][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.091062][T15882] xt_TPROXY: Can be used only with -p tcp or -p udp [ 978.213044][T15068] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 978.227141][ T5918] usb 3-1: Product: syz [ 978.377516][T15068] usb 4-1: config 0 has no interfaces? [ 978.390392][T15068] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 978.398964][ T5918] usb 3-1: Manufacturer: syz [ 978.422584][T15068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.425879][ T5918] usb 3-1: SerialNumber: syz [ 978.472719][T15068] usb 4-1: Product: syz [ 978.616172][T15068] usb 4-1: Manufacturer: syz [ 978.700523][T15068] usb 4-1: SerialNumber: syz [ 978.778102][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 978.787678][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 978.797208][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 978.806868][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 978.816526][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 978.846676][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 978.856277][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 979.257062][T15068] usb 4-1: config 0 descriptor?? [ 979.342317][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 979.352690][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 979.457649][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 980.363100][T15897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.372060][T15897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.576792][ T980] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 980.750875][ T980] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 980.775582][ T980] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 980.976157][ T980] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 981.262231][ T5918] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 981.294569][ T980] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 981.321953][ T5918] usb 3-1: USB disconnect, device number 88 [ 981.336660][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.689813][ T980] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 982.063294][ T5918] usb 4-1: USB disconnect, device number 96 [ 982.074570][ T980] usb 5-1: invalid MIDI out EP 0 [ 982.109991][T15895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.123375][T15895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.501455][ T980] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 982.577916][ T980] usb 5-1: USB disconnect, device number 75 [ 982.979689][T15068] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 983.373023][T15068] usb 4-1: device descriptor read/64, error -71 [ 983.648907][T15068] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 983.803169][T15068] usb 4-1: device descriptor read/64, error -71 [ 983.953140][T15068] usb usb4-port1: attempt power cycle [ 984.312837][T15068] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 984.335898][T15068] usb 4-1: device descriptor read/8, error -71 [ 984.593276][T15068] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 984.626755][T15068] usb 4-1: device descriptor read/8, error -71 [ 984.753086][T15068] usb usb4-port1: unable to enumerate USB device [ 985.012527][T15925] netlink: 'syz.1.1934': attribute type 20 has an invalid length. [ 985.247802][T15931] netlink: 'syz.0.1935': attribute type 20 has an invalid length. [ 985.481784][T15934] kernel profiling enabled (shift: 17) [ 985.491340][T15934] netlink: 'syz.4.1932': attribute type 10 has an invalid length. [ 985.499481][T15934] __nla_validate_parse: 5 callbacks suppressed [ 985.499495][T15934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1932'. [ 985.516326][T15934] batman_adv: batadv0: Interface deactivated: dummy0 [ 985.523268][T15934] batman_adv: batadv0: Removing interface: dummy0 [ 985.532258][T15934] bridge0: port 3(dummy0) entered blocking state [ 985.539247][T15934] bridge0: port 3(dummy0) entered disabled state [ 985.549618][T15934] dummy0: entered allmulticast mode [ 985.557101][T15934] dummy0: entered promiscuous mode [ 985.563680][T15934] bridge0: port 3(dummy0) entered blocking state [ 985.570177][T15934] bridge0: port 3(dummy0) entered forwarding state [ 985.896287][T15938] netlink: 'syz.2.1936': attribute type 27 has an invalid length. [ 986.202079][T15938] bond0: left promiscuous mode [ 986.529467][T15938] wg1: left promiscuous mode [ 986.539542][T15938] wg1: left allmulticast mode [ 986.803960][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 986.814086][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 987.326705][T15938] veth1_macvtap: left allmulticast mode [ 987.333826][T15938] macsec0: left promiscuous mode [ 987.341737][T15938] macsec0: left allmulticast mode [ 987.415162][T15938] macvlan2: left promiscuous mode [ 987.463461][T15938] veth3: left promiscuous mode [ 987.470569][T15938] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.479816][T15938] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.577466][T15938] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.606330][T15938] bond3: left promiscuous mode [ 987.622545][T15938] ip6gre1: left promiscuous mode [ 987.676317][T15938] bridge2: left promiscuous mode [ 987.746737][T15942] bridge0: left promiscuous mode [ 987.758146][T15942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.769265][T15942] batman_adv: batadv0: Interface activated: dummy0 [ 987.864667][T15942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 988.515250][T15973] PKCS7: Unknown OID: [5] (bad) [ 988.520148][T15973] PKCS7: Only support pkcs7_signedData type [ 988.686950][T15969] PKCS7: Unknown OID: [5] (bad) [ 988.691867][T15969] PKCS7: Only support pkcs7_signedData type [ 988.733210][T11210] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 988.906553][T11210] usb 3-1: config 0 has no interfaces? [ 988.917884][T11210] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 988.932408][T11210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.952590][T11210] usb 3-1: Product: syz [ 988.966496][T11210] usb 3-1: Manufacturer: syz [ 989.012948][T11210] usb 3-1: SerialNumber: syz [ 989.138167][T11210] usb 3-1: config 0 descriptor?? [ 989.313236][ T5918] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 989.416575][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'. [ 989.617982][ T5918] usb 5-1: config 0 has no interfaces? [ 989.631112][ T5918] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 989.641100][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.655085][ T5918] usb 5-1: Product: syz [ 989.678156][ T5918] usb 5-1: Manufacturer: syz [ 989.686902][ T5918] usb 5-1: SerialNumber: syz [ 989.697377][ T5918] usb 5-1: config 0 descriptor?? [ 990.402540][T15993] netlink: 'syz.3.1947': attribute type 27 has an invalid length. [ 990.539193][T15993] batman_adv: batadv0: Interface deactivated: dummy0 [ 990.572404][T15993] vlan2: left allmulticast mode [ 990.577624][T15993] veth1: left allmulticast mode [ 990.669146][T15994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.684537][T15994] batman_adv: batadv0: Interface activated: dummy0 [ 990.700761][T15994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 990.949640][T15999] netlink: 'syz.1.1948': attribute type 20 has an invalid length. [ 991.481078][ T5918] usb 3-1: USB disconnect, device number 89 [ 991.736708][T16005] netlink: 'syz.2.1949': attribute type 20 has an invalid length. [ 992.469119][ T5918] usb 5-1: USB disconnect, device number 76 [ 992.923394][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.938753][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.060774][T16013] No such timeout policy "syz1" [ 993.131940][T16016] sctp: [Deprecated]: syz.3.1950 (pid 16016) Use of int in maxseg socket option. [ 993.131940][T16016] Use struct sctp_assoc_value instead [ 994.532759][ T5918] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 994.698857][ T5918] usb 3-1: config 0 has no interfaces? [ 994.710234][ T5918] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 994.722902][T16034] PKCS7: Unknown OID: [5] (bad) [ 994.727909][T16034] PKCS7: Only support pkcs7_signedData type [ 994.734368][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.742384][ T5918] usb 3-1: Product: syz [ 994.776459][ T5918] usb 3-1: Manufacturer: syz [ 994.808899][ T5918] usb 3-1: SerialNumber: syz [ 994.823849][ T5918] usb 3-1: config 0 descriptor?? [ 995.730636][T16046] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 998.037171][ T5918] usb 3-1: USB disconnect, device number 90 [ 998.532057][T16070] tipc: Enabling of bearer rejected, failed to enable media [ 998.739164][T15068] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 998.962748][ T5918] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 999.255277][T15068] usb 5-1: config 0 has no interfaces? [ 999.299238][ T5918] usb 3-1: config 0 has no interfaces? [ 999.310180][ T5918] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 999.319625][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.333484][ T5918] usb 3-1: Product: syz [ 999.337940][ T5918] usb 3-1: Manufacturer: syz [ 999.353159][ T5918] usb 3-1: SerialNumber: syz [ 999.362877][T15068] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 999.386585][T15068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.414473][T15068] usb 5-1: Product: syz [ 999.428984][T15068] usb 5-1: Manufacturer: syz [ 999.444545][T15068] usb 5-1: SerialNumber: syz [ 999.485487][T16078] netlink: 'syz.3.1963': attribute type 20 has an invalid length. [ 999.553216][T15068] usb 5-1: config 0 descriptor?? [ 999.584446][ T5918] usb 3-1: config 0 descriptor?? [ 1000.417649][T16093] Unknown options in mask 5 [ 1000.431093][T16093] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.1965'. [ 1001.058976][T15068] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1001.247334][T16103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.263740][T16103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.368615][T16103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.381386][T16103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.414509][T15068] usb 4-1: config 0 has no interfaces? [ 1001.466185][T15068] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1001.592503][T15068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.611854][T15068] usb 4-1: Product: syz [ 1001.620960][T15068] usb 4-1: Manufacturer: syz [ 1001.632689][T15068] usb 4-1: SerialNumber: syz [ 1001.651038][T15068] usb 4-1: config 0 descriptor?? [ 1001.869042][T15068] usb 5-1: USB disconnect, device number 77 [ 1002.280682][ T5918] usb 3-1: USB disconnect, device number 91 [ 1003.032763][T15068] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1003.142787][ T980] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1003.202794][T15068] usb 5-1: Using ep0 maxpacket: 8 [ 1003.289447][T15068] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 1003.697820][T15068] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64320, setting to 1024 [ 1003.718010][T15068] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1003.867542][T15068] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1003.904123][T15068] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1003.922155][T15068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.948453][ T980] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.958865][ T980] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1003.970453][T15068] usb 5-1: Product: syz [ 1003.978253][ T5918] usb 4-1: USB disconnect, device number 101 [ 1004.002032][T15068] usb 5-1: Manufacturer: syz [ 1004.113010][ T980] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1004.129653][T15068] usb 5-1: SerialNumber: syz [ 1004.151811][ T980] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1004.170454][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.179226][T16115] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1004.226273][T15068] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1004.357759][T15068] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 1004.374466][ T980] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1004.384324][T15068] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 1004.394155][ T980] usb 3-1: invalid MIDI out EP 0 [ 1004.598547][T15068] usb 5-1: USB disconnect, device number 78 [ 1004.635759][T16117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.698961][T16117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.714969][T16117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.736392][ T980] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1004.778168][T16117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.060394][T15068] usb 3-1: USB disconnect, device number 92 [ 1005.248650][T16130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.442204][T16130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.578156][T16130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.607566][T16130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.083900][T16135] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 1006.905895][T16145] netlink: 'syz.3.1976': attribute type 20 has an invalid length. [ 1008.002692][T11210] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1008.043128][T15068] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1008.183133][T11210] usb 1-1: config 0 has no interfaces? [ 1008.200049][T11210] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1008.243344][T15068] usb 3-1: config 0 has no interfaces? [ 1008.252425][T11210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.291781][T15068] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1008.320140][T11210] usb 1-1: Product: syz [ 1008.393796][T15068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.401885][T11210] usb 1-1: Manufacturer: syz [ 1008.410472][T11210] usb 1-1: SerialNumber: syz [ 1008.445018][T11210] usb 1-1: config 0 descriptor?? [ 1008.488161][T15068] usb 3-1: Product: syz [ 1008.531877][T15068] usb 3-1: Manufacturer: syz [ 1008.649989][T15068] usb 3-1: SerialNumber: syz [ 1008.670934][T15068] usb 3-1: config 0 descriptor?? [ 1008.803647][T16161] sctp: [Deprecated]: syz.4.1980 (pid 16161) Use of int in maxseg socket option. [ 1008.803647][T16161] Use struct sctp_assoc_value instead [ 1008.992729][T11210] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1009.206354][T16163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.232719][T16163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.482020][T16163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.703037][T16163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.886081][T11210] usb 4-1: config 0 has no interfaces? [ 1010.138379][T11210] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1010.147924][T11210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.157166][T11210] usb 4-1: Product: syz [ 1010.161760][T11210] usb 4-1: Manufacturer: syz [ 1010.168548][T11210] usb 4-1: SerialNumber: syz [ 1010.207670][T11210] usb 4-1: config 0 descriptor?? [ 1010.714562][T16174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.724506][T16174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.758529][T15068] usb 3-1: USB disconnect, device number 93 [ 1010.801400][T16174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.888689][T16174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.996246][T11210] usb 1-1: USB disconnect, device number 96 [ 1011.977825][T16189] netlink: 536 bytes leftover after parsing attributes in process `syz.4.1986'. [ 1011.989775][T16189] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1986'. [ 1012.328350][T11210] usb 4-1: USB disconnect, device number 102 [ 1012.542997][T16197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 1012.619314][T16197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 1012.965906][T16204] netlink: 'syz.4.1989': attribute type 20 has an invalid length. [ 1013.755588][T16219] netlink: 'syz.3.1993': attribute type 20 has an invalid length. [ 1013.942721][T16213] pim6reg: entered allmulticast mode [ 1013.959363][T16213] pim6reg: left allmulticast mode [ 1015.135957][T16230] syz.1.1995 (16230): drop_caches: 2 [ 1015.142116][T16230] syz.1.1995 (16230): drop_caches: 2 [ 1015.697196][T16237] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1997'. [ 1015.729876][ T30] audit: type=1326 audit(1751144684.519:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.2.1997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e49b8e929 code=0x0 [ 1015.751730][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.030228][T16249] netlink: 'syz.0.1998': attribute type 20 has an invalid length. [ 1016.050339][T16253] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.2000'. [ 1016.061418][T16253] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.2000'. [ 1016.368190][T11210] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1016.606107][T11210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.616905][T11210] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1016.735737][T11210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1016.847595][T11210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1017.171459][T11210] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1017.183287][T11210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1017.213446][T11210] usb 4-1: Product: syz [ 1017.219750][T11210] usb 4-1: Manufacturer: syz [ 1017.232512][T11210] usb 4-1: SerialNumber: syz [ 1017.257876][T11210] usb 4-1: config 0 descriptor?? [ 1017.294809][T11210] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 1017.355888][T11210] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1017.399577][T11210] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1018.000682][T16270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 1018.148677][T16255] delete_channel: no stack [ 1018.163002][T11210] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1018.339913][T16275] netlink: 'syz.2.2004': attribute type 4 has an invalid length. [ 1018.430695][T11210] usb 1-1: config 0 has no interfaces? [ 1018.445169][T11210] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1018.455657][T11210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.466750][T11210] usb 1-1: Product: syz [ 1018.586613][T11210] usb 1-1: Manufacturer: syz [ 1018.637273][T11210] usb 1-1: SerialNumber: syz [ 1018.651685][T11210] usb 1-1: config 0 descriptor?? [ 1019.289197][T15068] usb 4-1: USB disconnect, device number 103 [ 1019.348612][T16250] delete_channel: no stack [ 1020.042789][T15068] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1020.182858][T15068] usb 4-1: device descriptor read/64, error -71 [ 1020.246665][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2006'. [ 1020.258925][T16288] dummy0: left allmulticast mode [ 1020.264799][T16288] dummy0: left promiscuous mode [ 1020.270534][T16288] bridge0: port 3(dummy0) entered disabled state [ 1020.320057][T16288] bridge_slave_1: left allmulticast mode [ 1020.326446][T16288] bridge_slave_1: left promiscuous mode [ 1020.333331][T16288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.345440][T16288] bridge_slave_0: left allmulticast mode [ 1020.351300][T16288] bridge_slave_0: left promiscuous mode [ 1020.358134][T16288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.431731][T15068] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1020.742847][T15068] usb 4-1: device descriptor read/64, error -71 [ 1020.777331][T11640] usb 1-1: USB disconnect, device number 97 [ 1020.853012][T15068] usb usb4-port1: attempt power cycle [ 1021.203276][ T5918] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1021.208328][T15068] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1021.272171][T15068] usb 4-1: device descriptor read/8, error -71 [ 1021.372705][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 1021.379954][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.399918][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.440042][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1021.462892][ T5918] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1021.478769][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.488545][T16308] PKCS7: Unknown OID: [5] (bad) [ 1021.514857][T15068] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1021.523030][T16308] PKCS7: Only support pkcs7_signedData type [ 1021.543474][T15068] usb 4-1: device descriptor read/8, error -71 [ 1021.545131][ T5918] usb 1-1: config 0 descriptor?? [ 1022.004817][T11210] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1022.176885][T16294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.191026][T16294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.209414][ T5918] HID 045e:07da: Invalid code 65791 type 1 [ 1022.225564][ T5918] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0010/input/input35 [ 1022.238236][T11210] usb 5-1: config 0 has no interfaces? [ 1022.288540][T11210] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1022.299706][T11210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.308973][T15068] usb usb4-port1: unable to enumerate USB device [ 1022.312653][T11210] usb 5-1: Product: syz [ 1022.321073][T11210] usb 5-1: Manufacturer: syz [ 1022.337416][T11210] usb 5-1: SerialNumber: syz [ 1022.343311][ T5918] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1022.371123][T11210] usb 5-1: config 0 descriptor?? [ 1022.571556][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2008'. [ 1022.932400][T16326] syz.2.2013 (16326): drop_caches: 2 [ 1022.938607][T16326] syz.2.2013 (16326): drop_caches: 2 [ 1023.822864][T15068] usb 1-1: reset high-speed USB device number 98 using dummy_hcd [ 1024.335244][T16339] netlink: 'syz.0.2025': attribute type 21 has an invalid length. [ 1024.368283][T16338] Unknown options in mask 5 [ 1024.376922][T16338] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.2015'. [ 1024.386551][T16339] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2025'. [ 1024.392965][T16338] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.2015'. [ 1024.467520][ T5918] usb 5-1: USB disconnect, device number 79 [ 1024.777676][T11640] usb 1-1: USB disconnect, device number 98 [ 1024.838444][T16339] netlink: 'syz.0.2025': attribute type 4 has an invalid length. [ 1024.992818][T16339] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2025'. [ 1025.088429][ T30] audit: type=1326 audit(1751144693.879:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16341 comm="syz.4.2017" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8ca98e929 code=0x0 [ 1025.958354][T16350] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2016'. [ 1026.112965][T11640] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1026.595219][T11640] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1026.697853][T11640] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1026.753169][T11640] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1026.818099][T11640] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1026.884970][T11640] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1026.894228][T11640] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1026.906634][T11640] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1026.933332][T11640] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1026.942578][T11640] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1027.119964][T11640] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1027.128778][T11640] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1027.138645][T11640] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1027.150070][T11640] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1027.161247][T11640] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1027.173538][T11640] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1027.413216][T11640] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1027.446273][T11640] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1027.535494][T11640] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1027.560956][T11640] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1027.576900][T11640] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1027.607968][T11640] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1027.625683][T11640] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1028.282108][T11640] usb 5-1: unable to read config index 7 descriptor/start: -71 [ 1028.383870][T11640] usb 5-1: can't read configurations, error -71 [ 1028.790132][T16381] syz.0.2022 (16381): drop_caches: 2 [ 1028.801325][T16381] syz.0.2022 (16381): drop_caches: 2 [ 1029.394888][ T5918] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1029.768652][T16393] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2023'. [ 1029.822724][ T5918] usb 4-1: device descriptor read/64, error -71 [ 1030.072825][ T5918] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1030.610542][T16395] PKCS7: Unknown OID: [5] (bad) [ 1030.642841][ T5918] usb 4-1: device descriptor read/64, error -71 [ 1030.683066][T16395] PKCS7: Only support pkcs7_signedData type [ 1030.756834][ T5918] usb usb4-port1: attempt power cycle [ 1030.921276][ T43] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x7 [ 1030.951007][ T43] hid-generic 00A0:0008:0003.0011: item fetching failed at offset 14/15 [ 1030.963815][ T43] hid-generic 00A0:0008:0003.0011: probe with driver hid-generic failed with error -22 [ 1031.114763][ T5918] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1031.157932][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2029'. [ 1031.196259][ T5918] usb 4-1: device descriptor read/8, error -71 [ 1031.227666][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2029'. [ 1031.335246][T16414] syz.1.2030 (16414): drop_caches: 2 [ 1031.349204][T16414] syz.1.2030 (16414): drop_caches: 2 [ 1031.383352][T11640] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1031.492875][ T5918] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1031.514313][ T5918] usb 4-1: device descriptor read/8, error -71 [ 1031.626582][ T5918] usb usb4-port1: unable to enumerate USB device [ 1031.873288][T11640] usb 3-1: Using ep0 maxpacket: 32 [ 1031.911859][T11640] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1031.921257][T11640] usb 3-1: config 0 has no interface number 0 [ 1031.927576][T11640] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1032.093492][T11640] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1032.111759][T11640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.130418][T11640] usb 3-1: Product: syz [ 1032.140690][T11640] usb 3-1: Manufacturer: syz [ 1032.247987][T11640] usb 3-1: SerialNumber: syz [ 1032.266376][T16418] tipc: Can't bind to reserved service type 2 [ 1032.316015][T11640] usb 3-1: config 0 descriptor?? [ 1032.414823][T11640] smsc75xx v1.0.0 [ 1032.484457][T16424] netlink: 'syz.4.2031': attribute type 21 has an invalid length. [ 1032.492420][T16424] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2031'. [ 1032.502128][T16424] netlink: 'syz.4.2031': attribute type 4 has an invalid length. [ 1032.510309][T16424] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2031'. [ 1032.583058][ T5918] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1032.772975][ T5918] usb 4-1: device descriptor read/64, error -71 [ 1033.079731][ T5918] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1033.383163][ T5918] usb 4-1: device descriptor read/64, error -71 [ 1033.783370][ T5918] usb usb4-port1: attempt power cycle [ 1034.050978][T16441] netlink: 'syz.1.2036': attribute type 12 has an invalid length. [ 1034.232746][ T5918] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1034.383569][ T5918] usb 4-1: device descriptor read/8, error -71 [ 1034.622841][ T5918] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1034.651527][ T5918] usb 4-1: device descriptor read/8, error -71 [ 1034.849183][ T5918] usb usb4-port1: unable to enumerate USB device [ 1034.925538][ T30] audit: type=1326 audit(1751144703.729:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16444 comm="syz.1.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f878e929 code=0x7ffc0000 [ 1034.965383][ T30] audit: type=1326 audit(1751144703.759:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16444 comm="syz.1.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f89f878e929 code=0x7ffc0000 [ 1034.995708][ T30] audit: type=1326 audit(1751144703.759:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16444 comm="syz.1.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f878e929 code=0x7ffc0000 [ 1035.049047][ T30] audit: type=1326 audit(1751144703.759:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16444 comm="syz.1.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89f878e929 code=0x7ffc0000 [ 1035.203554][ T30] audit: type=1326 audit(1751144703.759:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16444 comm="syz.1.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f878e929 code=0x7ffc0000 [ 1035.228899][ T30] audit: type=1326 audit(1751144703.759:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16444 comm="syz.1.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f89f878e929 code=0x7ffc0000 [ 1035.634658][T16460] syz.3.2040 (16460): drop_caches: 2 [ 1035.640766][T16460] syz.3.2040 (16460): drop_caches: 2 [ 1035.877443][ T30] audit: type=1326 audit(1751144703.759:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16444 comm="syz.1.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f878e929 code=0x7ffc0000 [ 1035.988995][ T30] audit: type=1326 audit(1751144703.759:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16444 comm="syz.1.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f89f878e929 code=0x7ffc0000 [ 1036.257298][T16462] PKCS7: Unknown OID: [5] (bad) [ 1036.262372][T16462] PKCS7: Only support pkcs7_signedData type [ 1036.283137][ T30] audit: type=1326 audit(1751144703.759:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16444 comm="syz.1.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f878e929 code=0x7ffc0000 [ 1036.354662][ T30] audit: type=1326 audit(1751144703.759:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16444 comm="syz.1.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f89f878e929 code=0x7ffc0000 [ 1036.436844][T11640] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1036.460638][T11640] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1036.493989][T11640] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1036.505396][T11640] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1036.517336][T11640] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1036.562073][T11640] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1036.587626][T11640] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1036.606950][T11640] usb 3-1: USB disconnect, device number 94 [ 1036.975395][T16478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.986224][T16478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.016543][T16478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.029747][T16478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.052721][T15068] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1037.355674][T15068] usb 1-1: Using ep0 maxpacket: 32 [ 1037.717728][T15068] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1037.737872][T15068] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1037.823072][T15068] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.846646][T15068] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1037.890290][T15068] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1038.083869][T15068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.387549][T16489] syz.4.2046 (16489): drop_caches: 2 [ 1038.394439][T16489] syz.4.2046 (16489): drop_caches: 2 [ 1039.869782][T16493] bridge4: entered promiscuous mode [ 1039.999382][T16505] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.2050'. [ 1040.057606][T16505] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.2050'. [ 1040.386423][T16469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1040.409655][T15068] usb 1-1: USB disconnect, device number 99 [ 1041.099765][T15068] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1041.128345][T16522] PKCS7: Unknown OID: [5] (bad) [ 1041.134566][T16522] PKCS7: Only support pkcs7_signedData type [ 1041.346016][T15068] usb 1-1: config index 0 descriptor too short (expected 126, got 72) [ 1041.369999][T15068] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1041.380574][T15068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.411940][T15068] usb 1-1: Product: syz [ 1041.439739][T15068] usb 1-1: Manufacturer: syz [ 1041.444644][T15068] usb 1-1: SerialNumber: syz [ 1041.491644][T16528] syz.1.2055 (16528): drop_caches: 2 [ 1041.500467][T16528] syz.1.2055 (16528): drop_caches: 2 [ 1041.549134][T15068] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1041.568601][T11640] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1042.386355][T16520] sctp: [Deprecated]: syz.0.2053 (pid 16520) Use of int in maxseg socket option. [ 1042.386355][T16520] Use struct sctp_assoc_value instead [ 1042.583128][T15068] usb 1-1: USB disconnect, device number 100 [ 1043.053062][T11640] usb 1-1: Service connection timeout for: 257 [ 1043.062951][T11640] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1043.167779][T11640] ath9k_htc: Failed to initialize the device [ 1043.194944][T15068] usb 1-1: ath9k_htc: USB layer deinitialized [ 1043.219750][T16547] syz.4.2058 (16547): drop_caches: 2 [ 1043.226788][T16547] syz.4.2058 (16547): drop_caches: 2 [ 1043.485379][T16556] netlink: 'syz.1.2059': attribute type 21 has an invalid length. [ 1043.500998][T16556] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2059'. [ 1043.528552][T16556] netlink: 'syz.1.2059': attribute type 4 has an invalid length. [ 1043.536879][T16556] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2059'. [ 1043.873053][T11640] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1044.163642][T11640] usb 1-1: Using ep0 maxpacket: 16 [ 1044.450125][T11640] usb 1-1: no configurations [ 1044.460830][T11640] usb 1-1: can't read configurations, error -22 [ 1044.612198][T11640] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1044.702956][T16565] PKCS7: Unknown OID: [5] (bad) [ 1044.717314][T16565] PKCS7: Only support pkcs7_signedData type [ 1044.863058][T11640] usb 1-1: Using ep0 maxpacket: 16 [ 1044.871748][T11640] usb 1-1: no configurations [ 1044.876720][T11640] usb 1-1: can't read configurations, error -22 [ 1045.100183][T11640] usb usb1-port1: attempt power cycle [ 1045.193488][T15068] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1045.753071][T11640] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1045.796856][T11640] usb 1-1: Using ep0 maxpacket: 16 [ 1045.804716][T11640] usb 1-1: no configurations [ 1045.809395][T11640] usb 1-1: can't read configurations, error -22 [ 1045.942784][T11640] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1045.971512][T11640] usb 1-1: Using ep0 maxpacket: 16 [ 1045.993420][T15068] usb 4-1: config 0 has no interfaces? [ 1046.005986][T15068] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1046.033777][T11640] usb 1-1: no configurations [ 1046.038500][T11640] usb 1-1: can't read configurations, error -22 [ 1046.045631][T15068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.123521][T11640] usb usb1-port1: unable to enumerate USB device [ 1046.130020][T15068] usb 4-1: Product: syz [ 1046.191597][T15068] usb 4-1: Manufacturer: syz [ 1046.200914][T15068] usb 4-1: SerialNumber: syz [ 1046.210313][T15068] usb 4-1: config 0 descriptor?? [ 1046.513882][T16583] PKCS7: Unknown OID: [5] (bad) [ 1046.518972][T16583] PKCS7: Only support pkcs7_signedData type [ 1048.309266][ T43] usb 4-1: USB disconnect, device number 116 [ 1048.723017][T15068] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1048.894246][T15068] usb 3-1: config 0 has no interfaces? [ 1048.913150][T15068] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1048.924552][T15068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.955639][T15068] usb 3-1: Product: syz [ 1048.967958][T15068] usb 3-1: Manufacturer: syz [ 1048.989299][T15068] usb 3-1: SerialNumber: syz [ 1049.007540][T15068] usb 3-1: config 0 descriptor?? [ 1049.649897][T16626] syz.4.2073 (16626): drop_caches: 2 [ 1049.665795][T16626] syz.4.2073 (16626): drop_caches: 2 [ 1052.459167][T16656] PKCS7: Unknown OID: [5] (bad) [ 1052.476079][T16656] PKCS7: Only support pkcs7_signedData type [ 1052.543414][T11640] usb 3-1: USB disconnect, device number 95 [ 1052.805124][T16659] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1053.188405][T16667] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1054.042820][T11640] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1054.290753][T11640] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1054.302327][T11640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.324609][T11640] usb 3-1: Product: syz [ 1054.328866][T11640] usb 3-1: Manufacturer: syz [ 1054.336361][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.357122][T16680] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2084'. [ 1054.444441][T11640] usb 3-1: SerialNumber: syz [ 1054.471199][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.471327][T11640] usb 3-1: config 0 descriptor?? [ 1054.695925][T16681] syz.3.2085 (16681): drop_caches: 2 [ 1054.711890][T16681] syz.3.2085 (16681): drop_caches: 2 [ 1054.728366][T11640] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1055.182813][T11640] usb 3-1: USB disconnect, device number 96 [ 1055.527189][T16689] netlink: 'syz.4.2086': attribute type 21 has an invalid length. [ 1055.546643][T16689] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2086'. [ 1055.556381][T16689] netlink: 'syz.4.2086': attribute type 4 has an invalid length. [ 1055.637017][T16689] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2086'. [ 1055.744572][ T30] audit: type=1326 audit(1751144724.549:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16691 comm="syz.2.2087" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e49b8e929 code=0x0 [ 1056.340093][T16701] netlink: 'syz.1.2088': attribute type 20 has an invalid length. [ 1056.614333][T16712] netlink: 'syz.3.2091': attribute type 13 has an invalid length. [ 1057.097553][T16712] batman_adv: batadv0: Interface deactivated: dummy0 [ 1058.014572][T16728] PKCS7: Unknown OID: [5] (bad) [ 1058.032337][T16728] PKCS7: Only support pkcs7_signedData type [ 1059.133496][T16745] netlink: 'syz.2.2097': attribute type 21 has an invalid length. [ 1059.141664][T16745] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2097'. [ 1059.191778][T16745] netlink: 'syz.2.2097': attribute type 4 has an invalid length. [ 1059.202424][T16745] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2097'. [ 1059.665371][T16757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.674800][T16757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.912449][T16762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.221110][T16765] syz.4.2101 (16765): drop_caches: 2 [ 1060.260489][T16765] syz.4.2101 (16765): drop_caches: 2 [ 1060.834916][T16767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 1061.647744][T16783] tipc: Enabling of bearer rejected, failed to enable media [ 1061.813418][ T43] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1062.312867][T11640] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1062.615374][T11640] usb 5-1: config 0 has no interfaces? [ 1062.626016][T11640] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1062.641368][T11640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.685427][T11640] usb 5-1: Product: syz [ 1062.702351][T11640] usb 5-1: Manufacturer: syz [ 1062.717583][T11640] usb 5-1: SerialNumber: syz [ 1062.744058][ T43] usb 1-1: config 0 has no interfaces? [ 1062.772321][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1062.794101][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.805793][T11640] usb 5-1: config 0 descriptor?? [ 1062.845686][ T43] usb 1-1: Product: syz [ 1062.863131][ T43] usb 1-1: Manufacturer: syz [ 1062.879419][ T43] usb 1-1: SerialNumber: syz [ 1062.911444][ T43] usb 1-1: config 0 descriptor?? [ 1063.084043][T16785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.093680][T16785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.488171][ T980] usb 1-1: USB disconnect, device number 105 [ 1064.722719][T11640] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1064.781540][ T980] usb 5-1: USB disconnect, device number 82 [ 1064.885662][T11640] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.899530][T11640] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1064.920074][T16797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1064.985091][T11640] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1065.022276][T11640] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.049252][T11640] usb 3-1: config 0 descriptor?? [ 1065.067434][T11640] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1065.075437][T11640] dvb-usb: bulk message failed: -22 (3/0) [ 1065.115086][T11640] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1065.150435][T16806] netlink: 'syz.0.2110': attribute type 21 has an invalid length. [ 1065.162351][T16806] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2110'. [ 1065.206306][T11640] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1065.215968][T16806] netlink: 'syz.0.2110': attribute type 4 has an invalid length. [ 1065.225296][T11640] usb 3-1: media controller created [ 1065.264197][T11640] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1065.276617][T16792] dvb-usb: bulk message failed: -22 (2/0) [ 1065.623334][T16806] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2110'. [ 1065.642097][T11640] dvb-usb: bulk message failed: -22 (6/0) [ 1065.655721][T11640] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1065.670143][T11640] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 1065.864845][T11640] dvb-usb: schedule remote query interval to 150 msecs. [ 1065.939746][T11640] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1066.169989][T11640] dvb-usb: bulk message failed: -22 (1/0) [ 1066.352221][T11640] dvb-usb: error while querying for an remote control event. [ 1066.512762][T11640] dvb-usb: bulk message failed: -22 (1/0) [ 1066.518612][T11640] dvb-usb: error while querying for an remote control event. [ 1066.607901][T16822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.617444][T16822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.638332][T16822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.647854][T16822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.796631][T16823] pim6reg: entered allmulticast mode [ 1066.813754][T16823] pim6reg: left allmulticast mode [ 1067.063134][ T43] usb 3-1: USB disconnect, device number 97 [ 1067.283282][ T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1067.986488][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2115'. [ 1069.148543][T16848] syz.0.2116 (16848): drop_caches: 2 [ 1069.178485][T16848] syz.0.2116 (16848): drop_caches: 2 [ 1070.651891][T16854] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.2119'. [ 1070.683204][T16854] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.2119'. [ 1071.602677][T11640] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1071.702522][T16875] netlink: 'syz.2.2122': attribute type 21 has an invalid length. [ 1071.710747][T16875] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2122'. [ 1071.722182][T16875] netlink: 'syz.2.2122': attribute type 4 has an invalid length. [ 1071.752530][T16875] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2122'. [ 1071.946829][T11640] usb 1-1: config 0 has no interfaces? [ 1072.114092][T16877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2123'. [ 1072.133688][T16877] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1072.164827][T11640] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1072.177840][T11640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.198759][T11640] usb 1-1: Product: syz [ 1072.214745][T11640] usb 1-1: Manufacturer: syz [ 1072.219387][T11640] usb 1-1: SerialNumber: syz [ 1072.235841][T11640] usb 1-1: config 0 descriptor?? [ 1072.891034][T16885] PKCS7: Unknown OID: [5] (bad) [ 1072.899445][T16885] PKCS7: Only support pkcs7_signedData type [ 1073.073161][T16887] PKCS7: Unknown OID: [5] (bad) [ 1073.078210][T16887] PKCS7: Only support pkcs7_signedData type [ 1073.646992][T16902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.663317][T16902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.679343][T16902] program syz.1.2127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1074.154346][ T980] usb 1-1: USB disconnect, device number 106 [ 1075.861151][T16927] syz.3.2131 (16927): drop_caches: 2 [ 1075.874000][T16927] syz.3.2131 (16927): drop_caches: 2 [ 1077.089985][T16931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2132'. [ 1077.225277][T16935] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.2133'. [ 1077.255984][T16935] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.2133'. [ 1078.932972][ T980] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1079.042864][ T43] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1079.174072][ T980] usb 4-1: config 0 has no interfaces? [ 1079.295452][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.312657][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1079.356654][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1079.394339][ T980] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1079.444083][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1079.468110][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.497722][ T980] usb 4-1: Product: syz [ 1079.514215][ T980] usb 4-1: Manufacturer: syz [ 1079.518825][ T980] usb 4-1: SerialNumber: syz [ 1079.553784][ T980] usb 4-1: config 0 descriptor?? [ 1079.603626][ T43] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1079.615988][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1079.642792][ T43] usb 3-1: Product: syz [ 1079.653065][ T43] usb 3-1: Manufacturer: syz [ 1079.672720][ T43] usb 3-1: SerialNumber: syz [ 1079.698750][ T43] usb 3-1: config 0 descriptor?? [ 1079.781550][ T43] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 1079.792728][ T43] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 1079.814767][T16966] TCP: TCP_TX_DELAY enabled [ 1079.845716][ T43] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1080.083141][T16971] PKCS7: Unknown OID: [5] (bad) [ 1080.090050][T16971] PKCS7: Only support pkcs7_signedData type [ 1080.577584][T16978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1081.631834][ T980] usb 4-1: USB disconnect, device number 117 [ 1081.962448][T16990] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1082.053017][T16992] syz.3.2143 (16992): drop_caches: 2 [ 1082.070230][T16992] syz.3.2143 (16992): drop_caches: 2 [ 1082.263708][T16994] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2144'. [ 1082.279629][T16994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'. [ 1082.351834][T16994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'. [ 1082.813000][ T980] usb 3-1: USB disconnect, device number 98 [ 1082.853974][T16960] delete_channel: no stack [ 1083.042422][T17003] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.2147'. [ 1083.243102][T17003] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.2147'. [ 1084.614870][ T30] audit: type=1326 audit(1751144753.409:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ca98e929 code=0x7ffc0000 [ 1084.685092][T17021] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.2150'. [ 1084.730317][T17021] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.2150'. [ 1084.741355][T17025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2151'. [ 1084.768434][ T30] audit: type=1326 audit(1751144753.409:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ca98e929 code=0x7ffc0000 [ 1084.796725][T17027] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2148'. [ 1084.804005][ T30] audit: type=1326 audit(1751144753.409:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fe8ca98e929 code=0x7ffc0000 [ 1085.751988][ T30] audit: type=1326 audit(1751144753.409:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ca98e929 code=0x7ffc0000 [ 1085.779739][ T30] audit: type=1326 audit(1751144753.409:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ca98e929 code=0x7ffc0000 [ 1085.802944][ T30] audit: type=1326 audit(1751144753.409:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8ca98e929 code=0x7ffc0000 [ 1085.832756][ T30] audit: type=1326 audit(1751144753.409:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ca98e929 code=0x7ffc0000 [ 1085.859175][ T30] audit: type=1326 audit(1751144753.409:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe8ca98e929 code=0x7ffc0000 [ 1085.881421][ C1] vkms_vblank_simulate: vblank timer overrun [ 1085.888332][ T30] audit: type=1326 audit(1751144753.409:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ca98e929 code=0x7ffc0000 [ 1085.984825][ T30] audit: type=1326 audit(1751144753.409:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17016 comm="syz.4.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe8ca98e929 code=0x7ffc0000 [ 1086.676379][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2153'. [ 1087.406751][T17053] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2156'. [ 1088.672393][T17068] syz.1.2158 (17068): drop_caches: 2 [ 1088.693164][ T43] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1088.722547][T17068] syz.1.2158 (17068): drop_caches: 2 [ 1088.856070][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.868406][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1088.957079][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1089.282106][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1089.450641][ T43] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1089.467106][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1089.531120][ T43] usb 1-1: Product: syz [ 1089.558258][ T43] usb 1-1: Manufacturer: syz [ 1089.614789][ T43] usb 1-1: SerialNumber: syz [ 1090.011989][ T43] usb 1-1: config 0 descriptor?? [ 1090.187129][ T43] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 1090.416489][ T43] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 1090.704876][ T43] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1090.960357][T17083] netlink: 'syz.4.2160': attribute type 10 has an invalid length. [ 1090.982236][T17083] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2160'. [ 1091.006084][T17083] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1091.909279][T17092] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 1092.122311][T17092] loop8: detected capacity change from 0 to 7 [ 1092.132086][T17092] Dev loop8: unable to read RDB block 7 [ 1092.139779][T17092] loop8: unable to read partition table [ 1092.148621][T17092] loop8: partition table beyond EOD, truncated [ 1092.161611][T17092] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1093.544176][ T43] usb 1-1: USB disconnect, device number 107 [ 1093.633325][T17063] delete_channel: no stack [ 1094.062805][ T980] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1094.273296][ T980] usb 5-1: config 0 has no interfaces? [ 1094.351954][ T980] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1094.392086][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.497883][ T980] usb 5-1: Product: syz [ 1094.502110][ T980] usb 5-1: Manufacturer: syz [ 1094.515384][T17121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2168'. [ 1094.538400][ T980] usb 5-1: SerialNumber: syz [ 1094.553292][T11640] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1094.574907][ T980] usb 5-1: config 0 descriptor?? [ 1094.801310][T17107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2165'. [ 1094.842057][T11640] usb 3-1: Using ep0 maxpacket: 8 [ 1094.935250][T11640] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.956138][T17107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.967972][T17107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.064854][T11640] usb 3-1: config 0 has no interfaces? [ 1095.146099][T11640] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1095.237910][T11640] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.437922][T11640] usb 3-1: config 0 descriptor?? [ 1096.534760][T17137] vivid-000: disconnect [ 1096.812229][T17125] vivid-000: reconnect [ 1096.849150][T17138] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1096.899230][T17138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1097.255810][ T43] usb 5-1: USB disconnect, device number 83 [ 1097.644653][T17143] syz.4.2172 (17143): drop_caches: 2 [ 1097.668787][T17143] syz.4.2172 (17143): drop_caches: 2 [ 1097.723249][T11640] usb 3-1: USB disconnect, device number 99 [ 1098.514472][T17153] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1098.521031][T17153] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1098.625370][T17153] vhci_hcd vhci_hcd.0: Device attached [ 1098.951655][ T43] vhci_hcd: vhci_device speed not set [ 1098.984152][T17162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.024485][ T43] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 1099.127654][T17154] vhci_hcd: connection reset by peer [ 1099.133781][ T12] vhci_hcd: stop threads [ 1099.138048][ T12] vhci_hcd: release socket [ 1099.142547][ T12] vhci_hcd: disconnect device [ 1099.189533][T17162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.887454][T17177] netlink: 'syz.2.2178': attribute type 12 has an invalid length. [ 1101.582892][T11640] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1102.342665][ T5918] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1102.474812][T11640] usb 1-1: config 0 has no interfaces? [ 1102.516608][T11640] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1102.619748][ T5918] usb 3-1: config 0 has no interfaces? [ 1102.637046][ T5918] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1102.651428][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.666504][T11640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.700270][ T5918] usb 3-1: Product: syz [ 1102.701087][T17190] netlink: 'syz.1.2182': attribute type 3 has an invalid length. [ 1102.720631][T11640] usb 1-1: Product: syz [ 1102.730774][T11640] usb 1-1: Manufacturer: syz [ 1102.732308][ T5918] usb 3-1: Manufacturer: syz [ 1102.740346][T11640] usb 1-1: SerialNumber: syz [ 1102.755360][ T5918] usb 3-1: SerialNumber: syz [ 1102.774208][ T5918] usb 3-1: config 0 descriptor?? [ 1103.043535][T11640] usb 1-1: config 0 descriptor?? [ 1104.079703][T17209] syz.1.2185 (17209): drop_caches: 2 [ 1104.086100][T17209] syz.1.2185 (17209): drop_caches: 2 [ 1104.163055][ T43] vhci_hcd: vhci_device speed not set [ 1105.126779][T11640] usb 1-1: USB disconnect, device number 108 [ 1105.352868][ T980] usb 3-1: USB disconnect, device number 100 [ 1105.572976][T11640] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1105.725878][T11640] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1105.746839][T11640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.774339][T11640] usb 1-1: Product: syz [ 1105.831482][T11640] usb 1-1: Manufacturer: syz [ 1105.836620][ T980] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1105.848937][T11640] usb 1-1: SerialNumber: syz [ 1105.892134][T11640] usb 1-1: config 0 descriptor?? [ 1106.056638][ T980] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.129332][ T980] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1106.154191][T11640] hso 1-1:0.0: Failed to find BULK IN ep [ 1106.230045][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.255524][T17236] netlink: 'syz.3.2190': attribute type 20 has an invalid length. [ 1106.719498][T11640] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1106.846886][ T980] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1107.004655][T11640] usb 1-1: USB disconnect, device number 109 [ 1107.072523][ T980] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1107.158906][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1107.158922][ T30] audit: type=1800 audit(1751144775.949:778): pid=17223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2188" name="dmabuf" dev="dmabuf" ino=7 res=0 errno=0 [ 1107.945114][ T980] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1108.108566][T17251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2192'. [ 1108.384856][ T980] usb 5-1: config 0 has no interfaces? [ 1108.393165][ T980] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1108.404724][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.428458][ T980] usb 5-1: Product: syz [ 1108.437376][ T980] usb 5-1: Manufacturer: syz [ 1108.449576][ T980] usb 5-1: SerialNumber: syz [ 1108.465269][ T980] usb 5-1: config 0 descriptor?? [ 1108.900207][T17260] tipc: Started in network mode [ 1108.905300][T17260] tipc: Node identity , cluster identity 4711 [ 1108.911756][T17260] tipc: Failed to set node id, please configure manually [ 1108.921449][T17260] tipc: Enabling of bearer rejected, failed to enable media [ 1108.954457][ T980] usb 3-1: USB disconnect, device number 101 [ 1109.573115][ T43] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1109.747888][ T43] usb 3-1: config 0 has no interfaces? [ 1109.759401][ T43] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1109.779601][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.890142][ T43] usb 3-1: Product: syz [ 1109.898004][ T43] usb 3-1: Manufacturer: syz [ 1109.907458][ T43] usb 3-1: SerialNumber: syz [ 1110.093001][ T43] usb 3-1: config 0 descriptor?? [ 1110.134382][ T980] usb 5-1: USB disconnect, device number 84 [ 1110.524531][T17279] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1110.531186][T17279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1110.555313][T17279] vhci_hcd vhci_hcd.0: Device attached [ 1110.591988][T17279] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 1110.598646][T17279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1110.610715][T17279] vhci_hcd vhci_hcd.0: Device attached [ 1110.686954][T17279] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1110.753170][T17285] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 1110.759832][T17285] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1110.792969][ T980] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 1111.068374][T17285] vhci_hcd vhci_hcd.0: Device attached [ 1111.099188][T17279] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(20) [ 1111.105837][T17279] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1111.226357][T17279] vhci_hcd vhci_hcd.0: Device attached [ 1111.263768][T17279] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1111.290123][T17279] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(26) [ 1111.296748][T17279] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1111.306802][T17279] vhci_hcd vhci_hcd.0: Device attached [ 1111.327086][T17279] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1111.372452][T17279] vhci_hcd vhci_hcd.0: port 0 already used [ 1111.419169][T17296] syz.1.2200 (17296): drop_caches: 2 [ 1111.428321][T17296] syz.1.2200 (17296): drop_caches: 2 [ 1111.449631][T17285] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(16) [ 1111.456293][T17285] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1111.480178][T17285] vhci_hcd vhci_hcd.0: Device attached [ 1111.511391][T17299] vhci_hcd: connection closed [ 1111.511795][ T12] vhci_hcd: stop threads [ 1111.533473][T17292] vhci_hcd: connection closed [ 1111.534602][T17280] vhci_hcd: connection reset by peer [ 1111.538917][T17297] vhci_hcd: connection closed [ 1111.539317][T17283] vhci_hcd: connection closed [ 1111.549505][T17286] vhci_hcd: connection closed [ 1111.568706][ T12] vhci_hcd: release socket [ 1111.580767][ T12] vhci_hcd: disconnect device [ 1111.791832][ T12] vhci_hcd: stop threads [ 1111.827961][ T12] vhci_hcd: release socket [ 1111.870866][ T12] vhci_hcd: disconnect device [ 1111.891532][ T12] vhci_hcd: stop threads [ 1111.941770][ T12] vhci_hcd: release socket [ 1111.961562][ T12] vhci_hcd: disconnect device [ 1112.005828][ T12] vhci_hcd: stop threads [ 1112.020305][ T12] vhci_hcd: release socket [ 1112.038378][ T12] vhci_hcd: disconnect device [ 1112.075899][ T12] vhci_hcd: stop threads [ 1112.110117][ T12] vhci_hcd: release socket [ 1112.135460][ T12] vhci_hcd: disconnect device [ 1112.459186][ T12] vhci_hcd: stop threads [ 1112.509941][ T12] vhci_hcd: release socket [ 1112.519017][ T12] vhci_hcd: disconnect device [ 1113.089334][T11210] usb 3-1: USB disconnect, device number 102 [ 1113.263399][T17322] netlink: 'syz.0.2204': attribute type 21 has an invalid length. [ 1113.281824][T17322] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2204'. [ 1113.305534][T17322] netlink: 'syz.0.2204': attribute type 4 has an invalid length. [ 1113.318075][T17322] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2204'. [ 1113.504749][T17317] netlink: 'syz.4.2203': attribute type 20 has an invalid length. [ 1113.652964][T11210] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1114.074164][T11210] usb 3-1: config 0 has no interfaces? [ 1114.093874][T11210] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1114.118877][T11210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.148351][T11210] usb 3-1: Product: syz [ 1114.168797][T17341] tipc: Enabling of bearer rejected, failed to enable media [ 1114.193519][T15068] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1114.285383][T17342] netlink: 'syz.4.2209': attribute type 12 has an invalid length. [ 1114.319453][T11210] usb 3-1: Manufacturer: syz [ 1114.331829][T11210] usb 3-1: SerialNumber: syz [ 1114.697359][T11210] usb 3-1: config 0 descriptor?? [ 1114.710352][T15068] usb 1-1: config 0 has no interfaces? [ 1114.711052][T17346] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.2210'. [ 1114.726276][T17346] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.2210'. [ 1114.791305][T15068] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1114.860266][T15068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.911181][T15068] usb 1-1: Product: syz [ 1114.929548][T15068] usb 1-1: Manufacturer: syz [ 1114.958989][T15068] usb 1-1: SerialNumber: syz [ 1114.976068][T15068] usb 1-1: config 0 descriptor?? [ 1115.205691][T17348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.262470][T17348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.638908][T17355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.648214][T17355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.784399][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.791150][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.164435][ T980] vhci_hcd: vhci_device speed not set [ 1116.336187][T17363] sctp: [Deprecated]: syz.3.2213 (pid 17363) Use of int in maxseg socket option. [ 1116.336187][T17363] Use struct sctp_assoc_value instead [ 1116.962810][ T5918] usb 3-1: USB disconnect, device number 103 [ 1117.312227][T17370] tipc: Enabling of bearer rejected, already enabled [ 1117.529794][ T43] usb usb34-port1: attempt power cycle [ 1117.573864][T17374] netlink: 'syz.4.2215': attribute type 12 has an invalid length. [ 1118.183176][ T5918] usb 1-1: USB disconnect, device number 110 [ 1118.241684][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2216'. [ 1118.251588][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2216'. [ 1118.803459][ T43] usb usb34-port1: unable to enumerate USB device [ 1120.241109][T17397] syz.0.2220 (17397): drop_caches: 2 [ 1120.247697][T17397] syz.0.2220 (17397): drop_caches: 2 [ 1120.334324][ T43] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1120.417950][T17401] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[17401] [ 1120.738607][ T43] usb 5-1: config 0 has no interfaces? [ 1120.758987][ T43] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1120.768728][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.794691][ T43] usb 5-1: Product: syz [ 1120.809289][ T43] usb 5-1: Manufacturer: syz [ 1120.832652][ T43] usb 5-1: SerialNumber: syz [ 1120.857888][ T43] usb 5-1: config 0 descriptor?? [ 1121.134303][T17396] pimreg: entered allmulticast mode [ 1121.146976][T17396] pimreg: left allmulticast mode [ 1122.132858][ T43] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1122.282971][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1122.291524][ T43] usb 1-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 1122.300823][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.350333][ T43] usb 1-1: Product: syz [ 1122.592401][ T43] usb 1-1: Manufacturer: syz [ 1122.602497][ T43] usb 1-1: SerialNumber: syz [ 1122.674085][ T43] usb 1-1: config 0 descriptor?? [ 1122.676186][ T980] usb 5-1: USB disconnect, device number 85 [ 1123.004325][ T43] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 1123.038049][ T43] usb 1-1: USB disconnect, device number 111 [ 1123.702700][ T980] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1123.944060][ T980] usb 5-1: config 0 has no interfaces? [ 1123.958707][ T980] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1123.968019][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.044549][ T980] usb 5-1: Product: syz [ 1124.048762][ T980] usb 5-1: Manufacturer: syz [ 1124.055443][ T980] usb 5-1: SerialNumber: syz [ 1124.067365][ T980] usb 5-1: config 0 descriptor?? [ 1124.360899][T17445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1124.376224][T17445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.385258][T17445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.444763][T17445] vlan2: entered promiscuous mode [ 1124.453880][T17445] bond0: (slave vlan2): Opening slave failed [ 1124.578247][T17450] PKCS7: Unknown OID: [5] (bad) [ 1124.583304][T17450] PKCS7: Only support pkcs7_signedData type [ 1125.269445][T17453] vivid-000: disconnect [ 1125.654249][T17448] vivid-000: reconnect [ 1126.365355][ T43] usb 5-1: USB disconnect, device number 86 [ 1126.718310][T17468] netlink: 'syz.3.2237': attribute type 21 has an invalid length. [ 1126.728591][T17468] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2237'. [ 1126.747307][T17468] netlink: 'syz.3.2237': attribute type 4 has an invalid length. [ 1126.755552][T17468] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2237'. [ 1126.782794][ T43] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1126.964800][ T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1127.072823][ T43] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1127.084108][ T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1127.094872][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.418982][T17460] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1127.454852][ T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1129.595563][ T43] usb 5-1: USB disconnect, device number 87 [ 1130.124410][T17501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.217121][T17501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.722716][ T980] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1130.934076][T17514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.949951][T17514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.068309][ T980] usb 4-1: config 0 has no interfaces? [ 1131.081325][ T980] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1131.141428][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.164755][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 1131.200796][ T980] usb 4-1: Product: syz [ 1131.237951][ T980] usb 4-1: Manufacturer: syz [ 1131.267784][ T980] usb 4-1: SerialNumber: syz [ 1131.397529][ T980] usb 4-1: config 0 descriptor?? [ 1133.992737][ T43] usb 4-1: USB disconnect, device number 118 [ 1134.162730][ T980] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1134.613077][ T980] usb 5-1: config 0 has no interfaces? [ 1134.628443][ T980] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1134.735350][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.752438][ T980] usb 5-1: Product: syz [ 1134.782646][ T980] usb 5-1: Manufacturer: syz [ 1134.882537][ T980] usb 5-1: SerialNumber: syz [ 1135.143835][ T980] usb 5-1: config 0 descriptor?? [ 1135.350811][T17548] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[17548] [ 1136.116629][ T43] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1136.368355][ T43] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1136.422401][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.532952][ T43] usb 3-1: Product: syz [ 1136.593051][ T43] usb 3-1: Manufacturer: syz [ 1136.601460][ T43] usb 3-1: SerialNumber: syz [ 1136.617720][ T43] usb 3-1: config 0 descriptor?? [ 1136.830639][ T43] hso 3-1:0.0: Failed to find BULK IN ep [ 1136.839158][ T43] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1137.035635][ T43] usb 3-1: USB disconnect, device number 104 [ 1137.324994][T17570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2258'. [ 1137.380951][T17572] xt_hashlimit: size too large, truncated to 1048576 [ 1137.502226][ T43] usb 5-1: USB disconnect, device number 88 [ 1137.525677][T17570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2258'. [ 1137.644385][T17570] netlink: 492 bytes leftover after parsing attributes in process `syz.0.2258'. [ 1137.707515][T17583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2262'. [ 1137.721363][T17583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2262'. [ 1137.788383][T17586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.797471][T17586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.962653][ T5918] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1137.984180][T17588] netlink: 'syz.4.2260': attribute type 12 has an invalid length. [ 1138.682801][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 1138.701307][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.732623][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.752663][ T5918] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1138.802897][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.833327][ T5918] usb 1-1: config 0 descriptor?? [ 1139.326759][ T5918] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 1139.692956][ T980] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1139.713557][T15068] usb 1-1: USB disconnect, device number 112 [ 1139.959783][ T980] usb 5-1: config 0 has no interfaces? [ 1140.083956][ T980] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1140.122643][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.168576][ T980] usb 5-1: Product: syz [ 1140.182864][ T980] usb 5-1: Manufacturer: syz [ 1140.194121][ T980] usb 5-1: SerialNumber: syz [ 1140.296111][ T980] usb 5-1: config 0 descriptor?? [ 1140.588097][T17603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.606697][T17603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.255866][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2266'. [ 1141.317740][T17613] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.373457][T17617] vlan0: entered promiscuous mode [ 1141.380892][T17617] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1141.778580][T17624] pim6reg: entered allmulticast mode [ 1141.788991][T17624] pim6reg: left allmulticast mode [ 1142.085271][T17629] netlink: 'syz.1.2269': attribute type 12 has an invalid length. [ 1142.390984][ T980] usb 5-1: USB disconnect, device number 89 [ 1143.273197][ T980] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1143.723177][ T980] usb 5-1: config 0 has no interfaces? [ 1143.744745][ T980] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1143.759389][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.782298][ T980] usb 5-1: Product: syz [ 1143.799844][ T980] usb 5-1: Manufacturer: syz [ 1143.814741][ T980] usb 5-1: SerialNumber: syz [ 1143.850351][ T980] usb 5-1: config 0 descriptor?? [ 1144.338114][T17642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2272'. [ 1144.347228][T17642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2272'. [ 1144.682668][T17647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2274'. [ 1145.143913][T17659] netlink: 'syz.2.2275': attribute type 12 has an invalid length. [ 1145.612626][ T5918] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1145.710488][ T980] usb 5-1: USB disconnect, device number 90 [ 1145.805993][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2279'. [ 1145.895693][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 1145.932104][ T5918] usb 4-1: config 0 has no interfaces? [ 1145.937672][ T5918] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1145.958759][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.069214][ T5918] usb 4-1: config 0 descriptor?? [ 1146.314668][T17654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.383955][T17654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.222692][ T980] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1147.677689][ T980] usb 1-1: config 0 has no interfaces? [ 1148.005103][T17689] tipc: Enabling of bearer rejected, already enabled [ 1148.018670][ T980] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1148.048131][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.085764][ T980] usb 1-1: Product: syz [ 1148.101645][ T980] usb 1-1: Manufacturer: syz [ 1148.124651][ T980] usb 1-1: SerialNumber: syz [ 1148.180786][ T980] usb 1-1: config 0 descriptor?? [ 1148.451999][T17681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.472038][T17681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.819920][ T980] usb 4-1: USB disconnect, device number 119 [ 1149.770441][T17708] netlink: 'syz.2.2286': attribute type 21 has an invalid length. [ 1149.792958][T17708] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2286'. [ 1149.802119][T17708] netlink: 'syz.2.2286': attribute type 4 has an invalid length. [ 1149.810238][T17708] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2286'. [ 1149.961622][ T5918] usb 1-1: USB disconnect, device number 113 [ 1150.613949][T17713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'. [ 1151.117474][ T980] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 1151.158734][T17728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.434446][ T980] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1151.452748][ T980] usb 4-1: config 0 has no interface number 0 [ 1151.474455][ T980] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1151.486028][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.494843][ T980] usb 4-1: Product: syz [ 1151.499148][ T980] usb 4-1: Manufacturer: syz [ 1151.506333][ T980] usb 4-1: SerialNumber: syz [ 1151.525694][ T980] usb 4-1: config 0 descriptor?? [ 1151.625928][T17734] netlink: 'syz.4.2292': attribute type 12 has an invalid length. [ 1153.024508][T15068] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1153.242748][T15068] usb 5-1: Using ep0 maxpacket: 16 [ 1153.253182][T15068] usb 5-1: config 0 has no interfaces? [ 1153.258833][T15068] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1153.270330][T15068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.306569][T15068] usb 5-1: config 0 descriptor?? [ 1153.526500][T17742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.546758][T17742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.578840][T15068] usb 5-1: USB disconnect, device number 91 [ 1154.131580][ T980] hub 4-1:0.132: bad descriptor, ignoring hub [ 1154.166720][ T980] hub 4-1:0.132: probe with driver hub failed with error -5 [ 1154.220727][ T980] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input39 [ 1154.319994][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'. [ 1154.663133][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2298'. [ 1154.951085][T17777] netlink: 'syz.2.2300': attribute type 21 has an invalid length. [ 1154.959387][T17777] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2300'. [ 1155.000829][ T980] usb 4-1: USB disconnect, device number 120 [ 1155.084769][T17777] netlink: 'syz.2.2300': attribute type 4 has an invalid length. [ 1155.106294][T17777] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2300'. [ 1155.462660][ T980] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1155.703509][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 1156.233412][ T980] usb 4-1: config 0 has no interfaces? [ 1156.239042][ T980] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1156.249695][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.266025][ T980] usb 4-1: config 0 descriptor?? [ 1156.360262][T17784] netlink: 'syz.2.2301': attribute type 12 has an invalid length. [ 1156.550248][T17764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.559593][T17764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.904244][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'. [ 1157.141626][T17792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.154620][T17792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.754811][T17803] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 1157.772445][T17803] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1157.922904][ T5918] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1158.112898][ T980] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1158.173982][T17809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.184115][T17809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.194523][T17809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.203828][T17809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.250225][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 1158.259846][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.288371][T15068] usb 4-1: USB disconnect, device number 121 [ 1158.353723][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.465073][ T980] usb 5-1: config 0 has no interfaces? [ 1158.513551][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1158.534526][ T980] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1158.578581][ T5918] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1158.581727][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.622980][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.651477][ T980] usb 5-1: Product: syz [ 1158.661668][ T980] usb 5-1: Manufacturer: syz [ 1158.668665][ T980] usb 5-1: SerialNumber: syz [ 1158.687248][ T980] usb 5-1: config 0 descriptor?? [ 1158.776754][ T5918] usb 1-1: config 0 descriptor?? [ 1159.190411][T17818] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2310'. [ 1159.209608][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2310'. [ 1159.236762][ T5918] sony 0003:054C:0268.0013: unknown main item tag 0x0 [ 1159.257198][ T5918] sony 0003:054C:0268.0013: unknown main item tag 0x0 [ 1159.273021][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2310'. [ 1159.359406][ T5918] sony 0003:054C:0268.0013: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0 [ 1159.426134][ T5918] sony 0003:054C:0268.0013: failed to claim input [ 1159.508530][T17819] ================================================================== [ 1159.516629][T17819] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 1159.524903][T17819] Read of size 2 at addr ffff888141f71fc0 by task fido_id/17819 [ 1159.532540][T17819] [ 1159.534905][T17819] CPU: 0 UID: 0 PID: 17819 Comm: fido_id Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 1159.534928][T17819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1159.534946][T17819] Call Trace: [ 1159.534954][T17819] [ 1159.534963][T17819] dump_stack_lvl+0x189/0x250 [ 1159.534993][T17819] ? rcu_is_watching+0x15/0xb0 [ 1159.535018][T17819] ? __kasan_check_byte+0x12/0x40 [ 1159.535038][T17819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1159.535062][T17819] ? rcu_is_watching+0x15/0xb0 [ 1159.535088][T17819] ? lock_release+0x4b/0x3e0 [ 1159.535111][T17819] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1159.535134][T17819] ? __virt_addr_valid+0x1c8/0x5c0 [ 1159.535153][T17819] ? __virt_addr_valid+0x4a5/0x5c0 [ 1159.535172][T17819] print_report+0xd2/0x2b0 [ 1159.535196][T17819] ? report_descriptor_read+0xb5/0x100 [ 1159.535215][T17819] kasan_report+0x118/0x150 [ 1159.535235][T17819] ? report_descriptor_read+0xb5/0x100 [ 1159.535258][T17819] kasan_check_range+0x2b0/0x2c0 [ 1159.535276][T17819] ? report_descriptor_read+0xb5/0x100 [ 1159.535295][T17819] __asan_memcpy+0x29/0x70 [ 1159.535319][T17819] report_descriptor_read+0xb5/0x100 [ 1159.535338][T17819] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 1159.535356][T17819] kernfs_fop_read_iter+0x3fb/0x640 [ 1159.535382][T17819] vfs_read+0x4d0/0x980 [ 1159.535410][T17819] ? __pfx_vfs_read+0x10/0x10 [ 1159.535435][T17819] ? do_sys_openat2+0x154/0x1c0 [ 1159.535455][T17819] ? kmem_cache_free+0x18f/0x400 [ 1159.535479][T17819] ksys_read+0x145/0x250 [ 1159.535504][T17819] ? __pfx_ksys_read+0x10/0x10 [ 1159.535526][T17819] ? rcu_is_watching+0x15/0xb0 [ 1159.535552][T17819] ? do_syscall_64+0xbe/0x3b0 [ 1159.535578][T17819] do_syscall_64+0xfa/0x3b0 [ 1159.535601][T17819] ? lockdep_hardirqs_on+0x9c/0x150 [ 1159.535623][T17819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.535640][T17819] ? clear_bhb_loop+0x60/0xb0 [ 1159.535659][T17819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.535681][T17819] RIP: 0033:0x7f6514aa7407 [ 1159.535701][T17819] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1159.535718][T17819] RSP: 002b:00007ffd4ad0e890 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1159.535738][T17819] RAX: ffffffffffffffda RBX: 00007f651521f880 RCX: 00007f6514aa7407 [ 1159.535752][T17819] RDX: 0000000000001000 RSI: 00007ffd4ad0e8e0 RDI: 0000000000000004 [ 1159.535765][T17819] RBP: 0000559137fa1730 R08: 0000000000000000 R09: 0000000000000000 [ 1159.535777][T17819] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559137fa0930 [ 1159.535789][T17819] R13: 00007ffd4ad0e8e0 R14: 0000000000000004 R15: 00005590fb12f4d8 [ 1159.535809][T17819] [ 1159.535816][T17819] [ 1159.799350][T17819] Allocated by task 5918: [ 1159.803670][T17819] kasan_save_track+0x3e/0x80 [ 1159.808345][T17819] __kasan_kmalloc+0x93/0xb0 [ 1159.812928][T17819] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 1159.819329][T17819] kmemdup_noprof+0x2b/0x70 [ 1159.823835][T17819] hid_open_report+0x208/0xee0 [ 1159.828592][T17819] sony_probe+0x19c/0x5f0 [ 1159.832908][T17819] hid_device_probe+0x3a0/0x710 [ 1159.837917][T17819] really_probe+0x26d/0x9a0 [ 1159.842421][T17819] __driver_probe_device+0x18c/0x2f0 [ 1159.847691][T17819] driver_probe_device+0x4f/0x430 [ 1159.852709][T17819] __device_attach_driver+0x2ce/0x530 [ 1159.858077][T17819] bus_for_each_drv+0x24e/0x2e0 [ 1159.862925][T17819] __device_attach+0x2b8/0x400 [ 1159.867679][T17819] bus_probe_device+0x185/0x260 [ 1159.872521][T17819] device_add+0x7b6/0xb50 [ 1159.876850][T17819] hid_add_device+0x398/0x540 [ 1159.881515][T17819] usbhid_probe+0xe13/0x12a0 [ 1159.886093][T17819] usb_probe_interface+0x641/0xbc0 [ 1159.891199][T17819] really_probe+0x26d/0x9a0 [ 1159.895702][T17819] __driver_probe_device+0x18c/0x2f0 [ 1159.900983][T17819] driver_probe_device+0x4f/0x430 [ 1159.906000][T17819] __device_attach_driver+0x2ce/0x530 [ 1159.911363][T17819] bus_for_each_drv+0x24e/0x2e0 [ 1159.916208][T17819] __device_attach+0x2b8/0x400 [ 1159.920969][T17819] bus_probe_device+0x185/0x260 [ 1159.925812][T17819] device_add+0x7b6/0xb50 [ 1159.930132][T17819] usb_set_configuration+0x1a87/0x20e0 [ 1159.935586][T17819] usb_generic_driver_probe+0x8d/0x150 [ 1159.941044][T17819] usb_probe_device+0x1c4/0x390 [ 1159.945890][T17819] really_probe+0x26d/0x9a0 [ 1159.950384][T17819] __driver_probe_device+0x18c/0x2f0 [ 1159.955658][T17819] driver_probe_device+0x4f/0x430 [ 1159.960672][T17819] __device_attach_driver+0x2ce/0x530 [ 1159.966045][T17819] bus_for_each_drv+0x24e/0x2e0 [ 1159.970898][T17819] __device_attach+0x2b8/0x400 [ 1159.975650][T17819] bus_probe_device+0x185/0x260 [ 1159.980494][T17819] device_add+0x7b6/0xb50 [ 1159.984836][T17819] usb_new_device+0xa39/0x16c0 [ 1159.989598][T17819] hub_event+0x2941/0x4a00 [ 1159.994010][T17819] process_scheduled_works+0xae1/0x17b0 [ 1159.999549][T17819] worker_thread+0x8a0/0xda0 [ 1160.004147][T17819] kthread+0x70e/0x8a0 [ 1160.008477][T17819] ret_from_fork+0x3fc/0x770 [ 1160.013058][T17819] ret_from_fork_asm+0x1a/0x30 [ 1160.017811][T17819] [ 1160.020138][T17819] The buggy address belongs to the object at ffff888141f71fc0 [ 1160.020138][T17819] which belongs to the cache kmalloc-8 of size 8 [ 1160.033836][T17819] The buggy address is located 0 bytes inside of [ 1160.033836][T17819] freed 8-byte region [ffff888141f71fc0, ffff888141f71fc8) [ 1160.047275][T17819] [ 1160.049585][T17819] The buggy address belongs to the physical page: [ 1160.055981][T17819] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x141f71 [ 1160.064820][T17819] anon flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 1160.072453][T17819] page_type: f5(slab) [ 1160.076436][T17819] raw: 057ff00000000000 ffff88801a441500 0000000000000000 dead000000000001 [ 1160.085098][T17819] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 1160.093665][T17819] page dumped because: kasan: bad access detected [ 1160.100071][T17819] page_owner tracks the page as allocated [ 1160.105774][T17819] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 6893775855, free_ts 0 [ 1160.123305][T17819] post_alloc_hook+0x240/0x2a0 [ 1160.128062][T17819] get_page_from_freelist+0x21e4/0x22c0 [ 1160.133603][T17819] __alloc_frozen_pages_noprof+0x181/0x370 [ 1160.139402][T17819] alloc_pages_mpol+0x232/0x4a0 [ 1160.144241][T17819] allocate_slab+0x8a/0x3b0 [ 1160.148737][T17819] ___slab_alloc+0xbfc/0x1480 [ 1160.153405][T17819] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 1160.159809][T17819] kstrdup+0x42/0x100 [ 1160.163782][T17819] __kernfs_new_node+0x9c/0x7e0 [ 1160.168623][T17819] kernfs_new_node+0x102/0x210 [ 1160.173376][T17819] kernfs_create_dir_ns+0x44/0x130 [ 1160.178477][T17819] sysfs_create_dir_ns+0x123/0x280 [ 1160.183586][T17819] kobject_add_internal+0x59f/0xb40 [ 1160.188801][T17819] kobject_add+0x155/0x220 [ 1160.193211][T17819] device_add+0x408/0xb50 [ 1160.197530][T17819] device_create+0x25b/0x2f0 [ 1160.202105][T17819] page_owner free stack trace missing [ 1160.207504][T17819] [ 1160.209904][T17819] Memory state around the buggy address: [ 1160.215525][T17819] ffff888141f71e80: 06 fc fc fc 05 fc fc fc 06 fc fc fc 05 fc fc fc [ 1160.223574][T17819] ffff888141f71f00: 05 fc fc fc 05 fc fc fc 07 fc fc fc 05 fc fc fc [ 1160.231619][T17819] >ffff888141f71f80: 05 fc fc fc 05 fc fc fc fb fc fc fc fa fc fc fc [ 1160.239661][T17819] ^ [ 1160.245801][T17819] ffff888141f72000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1160.253850][T17819] ffff888141f72080: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 [ 1160.261895][T17819] ================================================================== [ 1160.308496][ T5918] usb 1-1: USB disconnect, device number 114 [ 1160.355666][T17819] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1160.362898][T17819] CPU: 1 UID: 0 PID: 17819 Comm: fido_id Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 1160.374711][T17819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1160.384840][T17819] Call Trace: [ 1160.388115][T17819] [ 1160.391047][T17819] dump_stack_lvl+0x99/0x250 [ 1160.395641][T17819] ? __asan_memcpy+0x40/0x70 [ 1160.400227][T17819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1160.405424][T17819] ? __pfx__printk+0x10/0x10 [ 1160.410008][T17819] panic+0x2db/0x790 [ 1160.413898][T17819] ? __pfx_preempt_schedule+0x10/0x10 [ 1160.419265][T17819] ? __pfx_panic+0x10/0x10 [ 1160.423679][T17819] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1160.429566][T17819] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1160.435886][T17819] ? report_descriptor_read+0xb5/0x100 [ 1160.441420][T17819] check_panic_on_warn+0x89/0xb0 [ 1160.446349][T17819] ? report_descriptor_read+0xb5/0x100 [ 1160.451796][T17819] end_report+0x78/0x160 [ 1160.456038][T17819] kasan_report+0x129/0x150 [ 1160.460532][T17819] ? report_descriptor_read+0xb5/0x100 [ 1160.466001][T17819] kasan_check_range+0x2b0/0x2c0 [ 1160.470950][T17819] ? report_descriptor_read+0xb5/0x100 [ 1160.476421][T17819] __asan_memcpy+0x29/0x70 [ 1160.480841][T17819] report_descriptor_read+0xb5/0x100 [ 1160.486123][T17819] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 1160.491578][T17819] kernfs_fop_read_iter+0x3fb/0x640 [ 1160.496792][T17819] vfs_read+0x4d0/0x980 [ 1160.500964][T17819] ? __pfx_vfs_read+0x10/0x10 [ 1160.505637][T17819] ? do_sys_openat2+0x154/0x1c0 [ 1160.510490][T17819] ? kmem_cache_free+0x18f/0x400 [ 1160.515421][T17819] ksys_read+0x145/0x250 [ 1160.519660][T17819] ? __pfx_ksys_read+0x10/0x10 [ 1160.524419][T17819] ? rcu_is_watching+0x15/0xb0 [ 1160.529183][T17819] ? do_syscall_64+0xbe/0x3b0 [ 1160.533857][T17819] do_syscall_64+0xfa/0x3b0 [ 1160.538361][T17819] ? lockdep_hardirqs_on+0x9c/0x150 [ 1160.543561][T17819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.549619][T17819] ? clear_bhb_loop+0x60/0xb0 [ 1160.554287][T17819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.560174][T17819] RIP: 0033:0x7f6514aa7407 [ 1160.564589][T17819] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1160.584286][T17819] RSP: 002b:00007ffd4ad0e890 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1160.592714][T17819] RAX: ffffffffffffffda RBX: 00007f651521f880 RCX: 00007f6514aa7407 [ 1160.600779][T17819] RDX: 0000000000001000 RSI: 00007ffd4ad0e8e0 RDI: 0000000000000004 [ 1160.608750][T17819] RBP: 0000559137fa1730 R08: 0000000000000000 R09: 0000000000000000 [ 1160.616728][T17819] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559137fa0930 [ 1160.624693][T17819] R13: 00007ffd4ad0e8e0 R14: 0000000000000004 R15: 00005590fb12f4d8 [ 1160.632668][T17819] [ 1160.635949][T17819] Kernel Offset: disabled [ 1160.640270][T17819] Rebooting in 86400 seconds..