last executing test programs: 26.884404507s ago: executing program 4 (id=1031): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000006c0)={r6, 0x3, 0x6, @local}, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000dc0)="388ba770da93fd1a3ee15ea38a0697d02259057b8d2dac7e26b78fa9a3916297f8313f09bcd7061d32fd51e6261e2512ea759f45755ec05df8a5dfb62ec2f15bd719c17da4628b1b2f2dee7cb2e089f9ebb19bfa282765eb4f06a5be3d4cbcee3dd7e50ef31f4bd7cb7c8c9797c3810e7d6f2af380622795817d0938d68025979d0267fdb5ce13c5b52f4a2ccdbd815d6c3f32d383e2326835d7bbba1fceebbc33c4527f007732ec2bbf0947452ec138dac5c4862da1487114118613d41b8fc103eed5bc4dd9055ba74cba38", &(0x7f0000000ec0)="7a1b44af124c37685c7a780930efb403eb940d9074b2d1aff4356dcf89d0885654"}}, &(0x7f00000002c0)) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={r3, r7, r8}, 0xc) syz_pidfd_open(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) prlimit64(0x0, 0x7, 0x0, 0x0) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) 21.878118413s ago: executing program 4 (id=1040): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x60602, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f}}, 0x20) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x22402, 0x0) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000280)="060000e9cf6f9fd940fa8f4528", 0xd}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0x2, 0x4e22, 0x2, @local, 0x6}, {0xa, 0x0, 0x0, @mcast2, 0x1}}}, 0x4a) r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)}}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x5) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r9, 0x0, 0xfffffffffffffded, 0x1c0d) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) 19.428129677s ago: executing program 2 (id=1043): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="d80000001b00010025bd7000ffdbdf25fe800000000000000000000000000029000000000000000000000000000000004e20fff84e2400040a0080"], 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x8010) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000040)={'sit0\x00', {0x2, 0x0, @private}}) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000080), &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0xfffffffffffffe42) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x40, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40905}, 0x0) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x0, 0x4) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="18010000", @ANYRES16=r0, @ANYBLOB="04002abd7000fcdbdf252e00000008000300", @ANYRES32=r7, @ANYBLOB], 0x118}, 0x1, 0x0, 0x0, 0xc014}, 0xa884) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000300)={0x4000000, 0xffffb1c4, 0xfffff800}) ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r9) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r11 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in6=@remote, 0x0, 0x56, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x1002000000, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x33}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x4e22, r8, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x1be, &(0x7f0000000c00)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @val={@void, {0x8100, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0x1}, {0x9, 0x0, 0x1}, {0x3300, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xf719}, {0x7, 0x0, 0x1}], @ipv6=@tcp={0x9, 0x6, "9ba71f", 0x16c, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, {[@hopopts={0x3c, 0x1b, '\x00', [@pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0x3, 0x8, [0x4, 0x0]}}, @generic={0x1, 0xb6, "fbf0425b584bf5bd437067c4a8e710f032bbf9d63e3714368310d832f6d25ab48e8810fa945b8048951711c09c7688e718b37a562c8f7b1d246d26c40630e060a28fa4cd2ca8492b98e3d07a681dbeb717b694f180def10f0fd7a852c20d59fe6a44a13a0b71dcf56a36370c8bdc5c12e8e78382c03fac4e5acb3b47f58d2d6976743f24f96f7a077d3b1aa7055f30792b268cc582bbcb3155b0f208a025a600ac6f003e4ea5440350dc905186d599ad56b8b662a731"}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x3}]}, @hopopts={0xc, 0xb, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0xfd, 0x7, [0xffffffffffffffca, 0x8, 0x5, 0x88, 0x7, 0x36, 0x7]}}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}], {{0x4e23, 0x4e24, 0x41424344, r8, 0x1, 0x0, 0x7, 0x80, 0x5e1a, 0x0, 0x7, {[@mss={0x2, 0x4, 0x2c80}, @sack_perm={0x4, 0x2}, @nop]}}}}}}}}}, &(0x7f00000000c0)={0x0, 0x4, [0xd8a, 0xa7c, 0xa85, 0xe3b]}) 17.351522278s ago: executing program 2 (id=1047): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xf, "8aad0c012bec97971d7eb6081cfaf1"}, &(0x7f0000000080)=0x17) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r8, &(0x7f0000000040)=""/74, 0x4a) mknodat(r8, &(0x7f0000000000)='./file0\x00', 0x10, 0x7e) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, 0x0}, 0xee) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x5, 0x10000, 0x8}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)) 15.361663036s ago: executing program 4 (id=1049): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000e86dd6012000800303a00fe8000400000000000000000000000bbfe8000000000000000000000000000aa0802907800000000600008100000000000000000000000000000ffff00000000fc0200"/102], 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f0000000600)="3e13d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d2a43eba0b67b516bdc4a8b51a75bfd611b2d7ae6a21d056c2c5116a416987e082a8f5d67aa4a8e5a4526a76b0204dc55ea62cd300da54026d943a0b16aa0d43c809e0ed6e56163fdab317afd0d34d614367e549eed5aaa86dbe646fc0000000000000000000000009f4bce6cbc92b594d81e2ad9971b00468e826021bc0d74f363eb05abb4fc498eb7adfa01e94e64eb19a9ddd7fe7bf509542ebba62ac886217ec23d7c3dd18f7b59b59e82853747d004a77ab0568626fd93290673eaea5991ff845ebc7e4756999bfdd95368ba3edb6900c59c1607264dc977cf00e5c3a44158013fa8f85d75ee2d5346db18671fc439446a16cba014337897631957f86648458a1959bb7c5984c25af6481cc8e35055fc077bda357fe0728e27152116ac2423e3611dfa581f8cbb6bc5866d38bb7d9ef2322b8358fcf17fe749e9072c303bf6191681af2386c4f50a2efbd0afb185b122cccefcd84d34190e0f40671f44a97ae9fd186dbf8bbc473334654e0a7773f122edbc202d12ff0000000000000000000000000000a56aab46829087da307e7b4f65fdc9e322002532", 0x1db, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fff, 0xf3}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0x3, 0x0, 0x0) creat(0x0, 0xd4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 14.691946092s ago: executing program 0 (id=1050): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setpriority(0x1, 0x0, 0xc671) pipe2(0x0, 0x0) socket(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x100, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x4}, 0x400}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x2ad41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x8000fffe, 0x1, 'queue0\x00', 0x6}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffffffff, 0x21a028b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffff7}}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x11, 0xa419, 0x32314d54, 0x3, 0x0, [{0x5, 0xb8}, {0x8, 0x4b0c}, {0x9, 0x401}, {0x401, 0x66}, {0x3d27, 0x4}, {0xf534, 0xa}, {0x7e, 0x2}, {0x8801, 0x6}], 0x21, 0xa5, 0x8, 0x2}}) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 13.748205397s ago: executing program 3 (id=1051): socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="080107"], 0x38) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000040)=0x2eb4, 0x2000007ff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x8260c480, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11894000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\b') madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0xfc, 0x6, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x81, 0x7, 0x1, 0x0, "3f8981b1809bb70ae2bbfe6b820d0ee50dad8e116e111cbf7fb1aaaed8f638accff13e0444777d0c6a4db98f61a0a1e82c18735f9d1c76eed4efe7717509592a3c52eda007f25228c32ab4712ff7645cf2fe59565459d7e1064bfbe36b71a3cee9f22756f69d3b8d26cea0b0926ca619319d8004ccc800f99c8ea6e36e"}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xa, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1a}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x124}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000f609010203000000000001000010"], 0x14}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000280), 0x40000000, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 13.250320306s ago: executing program 2 (id=1052): waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x1ffc, @loopback, 0x7fffe}, 0x1c) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f6164000e000280080004400000005608000340000000b9080001400000000a08000240000000040900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 11.833388131s ago: executing program 1 (id=1053): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_score_adj\x00') r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) socketpair(0x2c, 0x6, 0x200, &(0x7f0000000000)={0x0, 0x0}) r9 = socket(0x2, 0x3, 0xff) connect$inet(r9, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) write$binfmt_elf32(r9, &(0x7f0000000000)=ANY=[], 0x14) close(r7) recvmsg$unix(r8, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, &(0x7f0000001880)}, 0x40) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r11 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) write$dsp(r11, &(0x7f0000000000)="81", 0x1) close(r11) 10.515966158s ago: executing program 4 (id=1054): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a3000000000f8030000090a010400000000000000000000000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021bc030980200002801c000180080001400000000008000140000000000800014000000000b80002800c00018008000140000000002c000180080001400000000008000140000000000800014000000000080001400000000008000140000000004c0001800800014000000000080001400000000008000140000000000800014000000000080001400000000008000140000000000800014000000000080001400000000008000140000000000c0001800800014000000000240001800800014000000000080001400000000008000140000000000800014000000000080001"], 0x440}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) io_setup(0x7, &(0x7f0000000280)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x11) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b0000000f5ffffff"], 0x0, 0x0, 0x0}) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='7', 0x1, 0x4}]) 10.368383801s ago: executing program 3 (id=1055): pipe(0x0) socket$netlink(0x10, 0x3, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xa3d9, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$sock(r1, &(0x7f0000001240)={&(0x7f0000000640)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f0000001140)=[{&(0x7f00000006c0)="e16a1116098c1116dca2cfb5aaaf3337d41cfb7528ee78e4d91ca8f9fc36f15afc45bc143038045667872de5face045f443f19ae5d94b6699b01bc45b4b2503335d70b2a92e003506b04967f62d88506", 0x50}, {&(0x7f0000000740)="3cd085e83246dedd46200bde4216d1f10f4ea6bcd62ae264", 0x18}, {&(0x7f0000000840)="9647178c9684", 0x6}, {&(0x7f0000000f00)="fcce", 0x2}, {&(0x7f0000000f40)}, {&(0x7f0000001080)="a070e71caa802ec924af3af191d947f0584719831c4ea3e55e7b95e8052ba0780db2cc7934f4bd24b70e725f5cffb61743317545228a42023589a6e84c6c70d09ff622a3978af2301abe89f4a2cec72df195daa77ccdcd6a7bae8725e64ebfd88bd916cdcf0ba92845e3445d2d74f70054750b6b25a228d66d9e1e7c5cf86d381cbba8d5b21053fb", 0x88}], 0x6, &(0x7f0000001180)=[@timestamping={{0x10, 0x1, 0x25, 0x6}}, @timestamping={{0x10, 0x1, 0x25, 0xfffffffc}}, @timestamping={{0x10, 0x1, 0x25, 0x15000}}, @txtime={{0x14, 0x1, 0x3d, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0x9}}, @mark={{0x10, 0x1, 0x24, 0xfffffffd}}, @mark={{0x10, 0x1, 0x24, 0x2}}, @mark={{0x10, 0x1, 0x24, 0x51c68bf5}}], 0x88}, 0x4000000) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x800}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000bc0)={0x28, 0x2, 0x0, {0x3, 0x5, 0x5d}}, 0x28) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}, {0x8, 0x0, 0x401}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0xa, 0x6, 0xfffb, 0x4}}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x44054) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x8000) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wlan1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a45321, &(0x7f0000000580)={{0xe0, 0x3}, 'port1\x00', 0x21, 0x20400, 0x8, 0x8, 0xffffff7f, 0xb085, 0x2, 0x0, 0x6, 0x96}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x51c, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x578) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.750146601s ago: executing program 0 (id=1056): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(0x0, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@updsa={0x148, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5a, 0x14, {{'xcbc(aes)\x00'}, 0x70, 0x0, "97a2c2df58bf2babea45840d4da5"}}]}, 0x148}}, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f00000001c0)={0x1, "5660359c3245d1c40000000000000000000000000000e300000000008000"}) 8.131812488s ago: executing program 4 (id=1057): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800) keyctl$update(0x2, 0x0, &(0x7f0000000300)="31a7", 0x2) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x9) r2 = dup(r0) unshare(0x2010000) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000100003040000000000000000000000005c29008007ed98ca4945e9bb613185507aaf605d220bfe14a6469b44433c2b08c48ba4aa090000446fd411cce71e1fea839ccc37a86a4346833590180419c36445ecf547d3d5b6e13095f1d480", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900880000000500010001000000"], 0x44}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) listen(r4, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000240)=0x1000, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f00000000c0)={0x0, 0x40}) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004c87c810cd0615011e1a0102030109022407000000000009040000026048fe0009050b000000000000090503030000000000"], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 8.130369776s ago: executing program 3 (id=1067): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x40) r1 = socket$inet6(0xa, 0x6, 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x1) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000002e40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002cc0)=@alg={0xe0, 0x10, 0x121, 0x70bd2a, 0x25dfdbfe, {{'drbg_nopr_hmac_sha256\x00'}, '\x00', '\x00', 0x2400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0xe0, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xae}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8357}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3eefe315}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x27d7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0xe0}}, 0x40c0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81e8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81e8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c09425, &(0x7f00000007c0)={"dd9a64b420b1c69f4e76bb0761597e60", r8, r9, {0x6, 0x80000000}, {0x0, 0x72c2}, 0x1, [0x1ff, 0x9d, 0x3, 0x10, 0x962, 0x4, 0x1000000000000000, 0x6, 0x5, 0x9, 0xf6a5, 0x9, 0x2, 0x4, 0x8000, 0xc]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c09425, &(0x7f0000000240)={"f34b77d4afbe334d86a9fad4dff5dc3b", 0x0, 0x0, {0x400, 0x7e}, {0x6, 0x9}, 0x80000000, [0x4, 0x1, 0xf, 0x3, 0x4, 0x8001, 0x6, 0xd, 0x5, 0x1, 0x5, 0xabd, 0x9, 0x8, 0x1, 0x4]}) 8.093469798s ago: executing program 1 (id=1058): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000001180)=0x1, 0x4) 8.070414641s ago: executing program 2 (id=1059): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010000182d1a8e8755e2c399ce808a604e733f0247470319e2805ebeaa9f906e7e0ea87606a000b574251efeb3c1b2812e29f7fa42850ef", @ANYRES32=r7, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0) close(0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000200)={'bond0\x00', 0x0}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000489000/0x3000)=nil, 0x3000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 6.926082941s ago: executing program 1 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044880}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, 0x0) read$char_usb(r4, &(0x7f0000000040)=""/4122, 0x101a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xcd6}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x7, 0x1, 0x7, 0x9}}, 0xe4) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001000000"], 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) shutdown(r8, 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet6(r8, &(0x7f00000000c0), 0x0, 0x64000804, &(0x7f0000000100)={0xa, 0x4e20, 0xa, @loopback, 0x2}, 0x1c) r9 = open$dir(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x800, 0x8) r10 = openat(r9, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r11 = socket$inet6(0xa, 0x6, 0x80000001) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000140)=r10, 0x4) sendfile(r10, r10, &(0x7f0000000000)=0x7, 0x3) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) recvmmsg(r10, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001880), 0x0, &(0x7f0000001900)=""/86, 0x56}, 0xe}, {{&(0x7f0000001980)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001a00)=""/216, 0xd8}, {&(0x7f0000001b00)=""/228, 0xe4}], 0x2}}, {{0x0, 0x0, &(0x7f0000002080), 0x0, &(0x7f00000020c0)=""/238, 0xee}, 0x4}], 0x3, 0x100, &(0x7f0000002240)={0x0, 0x989680}) sendmsg$nl_route(r3, 0x0, 0x14) 6.357086017s ago: executing program 0 (id=1061): landlock_create_ruleset(0x0, 0x0, 0x10000000000001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000840)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) 5.290071898s ago: executing program 0 (id=1062): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0xffffffffffffff47, 0x0, 0x1, 0x0, 0x0, 0x480c0}, 0x20000800) keyctl$clear(0x3, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) membarrier(0x10, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) poll(0x0, 0x0, 0x1) 5.027075305s ago: executing program 3 (id=1063): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x4f20, &(0x7f0000000740)={0x0, 0x1c2a, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aaac14143900000000001700"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000006c000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000a00"/172], 0xf8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f00000001c0)) r11 = dup(r10) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000040)={0x0, r11}) ioctl$VHOST_RESET_OWNER(r9, 0xaf02, 0x0) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r7, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r12, 0x0, 0x0) 4.426651965s ago: executing program 2 (id=1064): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) unshare(0x6a040000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000b40), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7, 0x0, 0xb49, 0xc, 0x2, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in6=@loopback, 0x100, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x2c}, {0x6, 0x0, 0x1, 0x5}, {0x0, 0x0, 0xfffffffffffffffd, 0x2}, 0x4, 0x0, 0x1, 0x0, 0x5}, {{@in=@rand_addr=0x64010102, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x3500, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, 0x0, 0x0, 0x8910, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f00000001c0)="170000000200020000ffbe8c5ee17688a2006c000303000afdff02a257fc5ad90200bb6a88000006080000000000000200df01800a000007bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2a8084cd36276a3afffb743ae", 0xb8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0xfe}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 4.072506566s ago: executing program 4 (id=1065): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000ac0)={0x24, &(0x7f0000000880)={0x0, 0x20, 0x4, "bb92b7f2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@updsa={0x134, 0x1a, 0x20, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0xff}, @in6=@private1, {0x200000, 0x0, 0x3}, {}, {0x0, 0x0, 0x1}, 0x0, 0x34ff, 0x2, 0x4}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x134}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x2000, 0x103) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x20fe, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0xb, 0xf8, 0x8, 0xbf84}, {0x9, 0xff, 0x2, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = io_uring_setup(0x1d6, &(0x7f0000000240)={0x0, 0xb705, 0x200, 0x2, 0x21e}) io_uring_setup(0x6200, &(0x7f0000000300)={0x0, 0xed74, 0x100, 0x0, 0x3a3, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x801) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000003980)}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, 0x6}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000003c0)="f80f70fa3b3a7ba775fd8169471dd98977e813babb643de0df05c6182d20be43167405a66756df0860844caf3c6592ab67036b861cb5e8d16b9da1ab9f56af0361675e96e08b0066b2f387a2011fb7c01f726d298aee2a281fc39bc5a9f89bd2c9d90af2908cd60a3f42c2ce7f0832e43df1", 0x72}, {&(0x7f0000000440)="2acbe8e796f83f3e495e92b265328bdf5948ea6a91747e06a2e835209283b80219e149d6e0441875cfc53f784f8dbf4db9629f3ddc20d3b671173dec5e20c625b9b8521c4f59e29f03d3d8a899222d32b5cf45b0ee019f3acac3ae4d157941e4ee504764e34d78676284794c393cc495d635cdad7c248ef013b1098d3d2d72eabf2b7bafc645c046e62d67510ae6b6b293a3455812daec5bd19be9a5bb19c6f513da6e136e529cd3a8090b547519f889509c84a560123917b3", 0xb9}, {&(0x7f0000000500)="d49e4565ada50b451da0fbaf0631852d3801f187bf14fec1a3f1bb57be4958737e2f2197ef4f57f574d58bd6d53f7ad465cd26cc5552d6233a840a11f67c80a65610b87399f4949a2cdb0d3acc613f58849fb0fa3ae9419990a414eb1d19073633dd6661ceb84e138e56cd990a339f4f74303cd4a85c5b0690b9e6ec65c5a09058ceb8aa36de6cff8f7f03098efc2835b92dcdc3a92f3aab0e19758a6373456729339892f0aac89d942f43135f411cbc4c0c6653ea6fd09e20c7618e1623bf8e1cea73de2e5e8d", 0xc7}, {&(0x7f0000000600)="2c952c90e28941923b8333d85ac5bc5a8d9f76b4cfe2d237f7811d77c4aa977ecc216c75311f8f0ed22329a915a708018f6c14694a295c20a268258428f9f17ac6184163b25fc581a89d7d8c7ab578ea1db1c7e5d6a65764fa5d01dae69ce9bcf9e5ca304167e3786b5b1296c45577de1da8b05fb763e71f898a0a3631dce953b22acf3a93f5acfd780e52a25519e7db1773cd77c943c40abc65e30b54df3a3b446b9b207a6e94c9bef261", 0xab}, {&(0x7f00000006c0)="9b3158ed51cb5212bd9dbb2afed17b1ea15662de87388f799b4b5e4480401daec15dff0c3b723a1ad597e6f88e9116d1a34d58bfe9f525ab9ab412f2dadb155a11", 0x41}, {&(0x7f0000000740)="fc9562af3f050e80343445b1e2383d3053559b0e1cdb382d40cd9b6a96af619dac697c41a907b8f53b85f5aa1e9ef991734e5c69050069ad516328b3ab37b896e51ac24799d0f3c074710ef8f58069f1f18eb6836621b6799ef331a41d806adac94af1ef8d386b68c9f83c40fa383104df2e37e18c0e178d014732f877d517cb81b4d6fd81a96e7e3681aa33a714b2c6b2bcb32d7ddfa9d9278fdc91ee236b664e8f016894f26325b35de872bae38b1ea552a50244b6927b7ae2ccf7d0f59203b4f394f99db560ad41b92adf1626082d2dcb9fb8e0e36a107dd4f4b6a3ac67585b08dee68953", 0xe6}, {&(0x7f0000000840)="14db4a8acf98cc6e7bcbbfba859120e1d02ba676b83975d8f02c58890115e0aa28eea4b1dfad40199be4d6df7cd9b6dc903bd56ac825a3f6f3", 0x39}, {&(0x7f0000000880)="d5856e0baccd2be999b8f09ad59f366e77ca6124753103c393295d04b8b6859c9d935a581a01bce3ef4b18d802d60e53ff24dd2f440f2ec0560f7f15b01dd26ed9ffe4d72b680e4f4a16976babd43282c9bb9e4023bdf89b88d7a7b8ae110a18848f3505c5f1ca7643f78340b2d3650b53cd98284b29b2353781c62ffce6104d1f48cf5d4f88ce0cb53bacc900efc7e93c8fe0b22e13605dd79552047cf9fd663f139455607fb6b4cadb5c34f65b777109117344060fa2bd34cfb88de42e87d8696e7446aeb0dd0956d63692eefe8be30262109a8f2ec326a1436544", 0xdc}], 0x8, &(0x7f00000009c0)=[@rthdrdstopts={{0xb4, 0x29, 0x37, {0x2f, 0x14, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0x9, 0xe, [0x200, 0x8, 0x0, 0xa, 0x8, 0xf6, 0x3, 0xfff, 0x0]}}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0xfff}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x3, [0x8, 0x1, 0xe75]}}, @hao={0xc9, 0x10, @mcast1}]}}}], 0xb4}}], 0x2, 0x4001c00) 3.74498569s ago: executing program 3 (id=1066): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setpriority(0x1, 0x0, 0xc671) pipe2(0x0, 0x0) socket(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x100, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x4}, 0x400}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x2ad41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x8000fffe, 0x1, 'queue0\x00', 0x6}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffffffff, 0x21a028b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffff7}}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x11, 0xa419, 0x32314d54, 0x3, 0x0, [{0x5, 0xb8}, {0x8, 0x4b0c}, {0x9, 0x401}, {0x401, 0x66}, {0x3d27, 0x4}, {0xf534, 0xa}, {0x7e, 0x2}, {0x8801, 0x6}], 0x21, 0xa5, 0x8, 0x2}}) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 3.715575391s ago: executing program 1 (id=1068): pipe(0x0) socket$netlink(0x10, 0x3, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xa3d9, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$sock(r1, &(0x7f0000001240)={&(0x7f0000000640)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f0000001140)=[{&(0x7f00000006c0)="e16a1116098c1116dca2cfb5aaaf3337d41cfb7528ee78e4d91ca8f9fc36f15afc45bc143038045667872de5face045f443f19ae5d94b6699b01bc45b4b2503335d70b2a92e003506b04967f62d88506", 0x50}, {&(0x7f0000000740)="3cd085e83246dedd46200bde4216d1f10f4ea6bcd62ae264", 0x18}, {&(0x7f0000000840)="9647178c9684", 0x6}, {&(0x7f0000000f00)="fcce", 0x2}, {&(0x7f0000000f40)}, {&(0x7f0000001080)="a070e71caa802ec924af3af191d947f0584719831c4ea3e55e7b95e8052ba0780db2cc7934f4bd24b70e725f5cffb61743317545228a42023589a6e84c6c70d09ff622a3978af2301abe89f4a2cec72df195daa77ccdcd6a7bae8725e64ebfd88bd916cdcf0ba92845e3445d2d74f70054750b6b25a228d66d9e1e7c5cf86d381cbba8d5b21053fb", 0x88}], 0x6, &(0x7f0000001180)=[@timestamping={{0x10, 0x1, 0x25, 0x6}}, @timestamping={{0x10, 0x1, 0x25, 0xfffffffc}}, @timestamping={{0x10, 0x1, 0x25, 0x15000}}, @txtime={{0x14, 0x1, 0x3d, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0x9}}, @mark={{0x10, 0x1, 0x24, 0xfffffffd}}, @mark={{0x10, 0x1, 0x24, 0x2}}, @mark={{0x10, 0x1, 0x24, 0x51c68bf5}}], 0x88}, 0x4000000) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x800}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000bc0)={0x28, 0x2, 0x0, {0x3, 0x5, 0x5d}}, 0x28) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}, {0x8, 0x0, 0x401}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0xa, 0x6, 0xfffb, 0x4}}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x44054) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x8000) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wlan1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a45321, &(0x7f0000000580)={{0xe0, 0x3}, 'port1\x00', 0x21, 0x20400, 0x8, 0x8, 0xffffff7f, 0xb085, 0x2, 0x0, 0x6, 0x96}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x51c, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x578) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.410625451s ago: executing program 0 (id=1069): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f00000004c0)='v', 0x1}], 0x2, 0xa, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0x2008, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "54f8"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000380)={"00000004", 0x3, 0x5, 0x2, 0x0, 0x0, 'c\x00', '\x00\x00\x00@', "0300", "f3fd8000", ["8b09a907edff220aac00", "c2fed600ddff9aabeab0cbc7", '\x00', "0000000b0400"]}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r10 = io_uring_setup(0x7c50, &(0x7f0000000080)={0x0, 0xc717, 0x800, 0x1000001, 0x2dc}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000000)=""/30, 0x1e}], 0x2) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r11, &(0x7f00000020c0)={0x2020}, 0x2020) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r11, @ANYBLOB="40000000000000000000000000000000cdd1022e", @ANYRES32=0x0, @ANYBLOB="01000000010000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3c}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, r11, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r13 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r13, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r13, 0x82, 0xa8, &(0x7f0000000040)=ANY=[]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4001000410000100feffffff00000000000040000000000000ffffe0000002ac1414aad4008fad21ff8900000000ffef0000000000000001071c000000000a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b582e57154bffa8765658aa138d36db488b615557651a1a471227d9ff90e869f7548dd7433d9ce55dd0a0ba73a7d50c03205037cbad24d0402cb216ac8add535d1a500000a024adf151d79a6e2d006ac361e1c2fe2a17930482a480a3684d283ddfef482672b1888e82a34e4d906fa15acf343bee2a77b5e764b407d8f265d8638a756404fa0990b0bf75878028026e300bf8992b8c1f78375d89760054e78eaded68208975877fd446a9bcd523e88823f6509d10f89ae1fbbac5ca3bca6adff81ade7edd1d6e705229646e3778e8e9a0b2b15bc92170b0424ae7d35e5f03e344edd77f9cda22b5c6cceab869fdddac1b67485"], 0x140}, 0x1, 0x0, 0x0, 0x2000c002}, 0x2) 1.682203515s ago: executing program 2 (id=1070): waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x1ffc, @loopback, 0x7fffe}, 0x1c) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f6164000e000280080004400000005608000340000000b9080001400000000a08000240000000040900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 1.090166306s ago: executing program 1 (id=1071): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000001180)=0x1, 0x4) 778.221307ms ago: executing program 1 (id=1072): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{}, 'syz0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x4, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x0, 0x14, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3c42, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) read(r5, 0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000700)=""/245, 0xf5}], 0x1) r6 = io_uring_setup(0x3ece, &(0x7f0000000340)={0x0, 0x49d2, 0x2, 0x1, 0x402f}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000300)=[0xe, 0x9], 0x2) r7 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000003c0)='asymmetric\x00', &(0x7f00000002c0)=@secondary) 191.685457ms ago: executing program 3 (id=1073): landlock_create_ruleset(0x0, 0x0, 0x10000000000001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000840)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) 0s ago: executing program 0 (id=1074): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) rseq(0x0, 0x0, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x42, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xae, 0xd1, 0x8, 0x2013, 0x246, 0xe656, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0xd, 0xa1, 0xb6}}]}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQES(&(0x7f00009f3000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_emit_ethernet(0x22, &(0x7f0000001b40)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800454e00140067000002329d000000ffffffff"], 0x0) openat$kvm(0xffffff9c, 0x0, 0x10803, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ipvlan0\x00'}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c) ptrace(0x10, r2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) ptrace(0x10, r2) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x14}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) kernel console output (not intermixed with test programs): ytes leftover after parsing attributes in process `syz.1.762'. [ 436.418589][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 437.095083][ T9] usb 3-1: USB disconnect, device number 51 [ 437.719492][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 437.731612][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 438.488940][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 438.527142][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 438.797222][ T9051] netlink: 'syz.4.767': attribute type 21 has an invalid length. [ 438.832697][ T9051] netlink: 152 bytes leftover after parsing attributes in process `syz.4.767'. [ 439.214636][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 439.327449][ T5900] usb 1-1: USB disconnect, device number 48 [ 439.384127][ T9] usb 2-1: config 0 has no interfaces? [ 439.431754][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 439.490014][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.562658][ T9] usb 2-1: Product: syz [ 439.585560][ T9] usb 2-1: Manufacturer: syz [ 439.590234][ T9] usb 2-1: SerialNumber: syz [ 439.610617][ T9060] netlink: 'syz.3.770': attribute type 10 has an invalid length. [ 439.726673][ T9] usb 2-1: config 0 descriptor?? [ 439.764765][ T5896] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 439.784790][ T9065] netlink: 'syz.3.770': attribute type 10 has an invalid length. [ 440.089342][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.095835][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.126747][ T9060] bridge0: port 3(syz_tun) entered disabled state [ 440.134159][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.141641][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.183003][ T5896] usb 5-1: config 0 has no interfaces? [ 440.287915][ T9060] bridge0: port 3(syz_tun) entered blocking state [ 440.294600][ T9060] bridge0: port 3(syz_tun) entered forwarding state [ 440.301565][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.308832][ T9060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.316464][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.323632][ T9060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.445180][ T5896] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 440.476439][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.550886][ T5896] usb 5-1: Product: syz [ 440.577065][ T5896] usb 5-1: Manufacturer: syz [ 440.595274][ T5896] usb 5-1: SerialNumber: syz [ 440.619189][ T5896] usb 5-1: config 0 descriptor?? [ 440.638071][ T9060] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 441.010370][ T9065] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 442.361394][ T9] usb 5-1: USB disconnect, device number 48 [ 442.484873][ T5897] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 442.647296][ T5897] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 442.680783][ T5897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 442.754742][ T5897] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.862418][ T5897] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 442.926198][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 442.974715][ T977] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 442.975401][ T5897] usb 4-1: Product: syz [ 442.985002][ T9090] futex_wake_op: syz.0.774 tries to shift op by -33; fix this program [ 442.996839][ T5897] usb 4-1: Manufacturer: syz [ 443.039265][ T5900] usb 2-1: USB disconnect, device number 62 [ 443.057645][ T9090] netdevsim netdevsim0: Direct firmware load for . [ 443.057645][ T9090] failed with error -2 [ 443.070288][ T9090] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 443.070288][ T9090] [ 443.164700][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 443.175137][ T977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 443.203822][ T977] usb 5-1: config 1 has an invalid interface number: 160 but max is 0 [ 443.232542][ T977] usb 5-1: config 1 has no interface number 0 [ 443.249373][ T5897] cdc_wdm 4-1:1.0: skipping garbage [ 443.270884][ T5897] cdc_wdm 4-1:1.0: skipping garbage [ 443.283555][ T5897] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 443.294239][ T977] usb 5-1: config 1 interface 160 has no altsetting 0 [ 443.342964][ T977] usb 5-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 443.352382][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.370650][ T977] usb 5-1: Product: syz [ 443.382679][ T977] usb 5-1: Manufacturer: syz [ 443.397146][ T977] usb 5-1: SerialNumber: syz [ 443.567976][ T5895] usb 4-1: USB disconnect, device number 54 [ 443.919991][ T5897] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 444.172783][ T5897] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 444.185296][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.210186][ T5897] usb 2-1: config 0 descriptor?? [ 444.242355][ T5897] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 444.261258][ T5897] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 444.436405][ T9097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.777'. [ 444.445991][ T9097] netlink: 2 bytes leftover after parsing attributes in process `syz.1.777'. [ 444.757350][ T9104] netlink: 72 bytes leftover after parsing attributes in process `syz.2.778'. [ 444.822431][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 444.835407][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 445.641908][ T977] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 445.785878][ T977] visor 5-1:1.160: Handspring Visor / Palm OS converter detected [ 445.875688][ T977] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 445.988158][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 446.003508][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 446.180331][ T977] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 446.209187][ T977] usb 5-1: USB disconnect, device number 49 [ 446.271266][ T977] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 446.311218][ T977] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 446.339690][ T977] visor 5-1:1.160: device disconnected [ 446.575674][ T5900] usb 2-1: USB disconnect, device number 63 [ 446.725005][ T977] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 446.899346][ T977] usb 5-1: config 0 has no interfaces? [ 446.916183][ T977] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 447.009844][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 447.021947][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 447.152284][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.234424][ T977] usb 5-1: Product: syz [ 447.266832][ T977] usb 5-1: Manufacturer: syz [ 447.274681][ T977] usb 5-1: SerialNumber: syz [ 447.282591][ T977] usb 5-1: config 0 descriptor?? [ 447.342379][ T9123] tipc: Started in network mode [ 447.363951][ T9123] tipc: Node identity 7f000001, cluster identity 4711 [ 447.394322][ T9123] tipc: Enabled bearer , priority 10 [ 447.539027][ T9112] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 448.505184][ T977] tipc: Node number set to 2130706433 [ 448.927618][ T9124] tipc: Enabled bearer , priority 0 [ 449.009587][ T977] usb 5-1: USB disconnect, device number 50 [ 449.484697][ T5895] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 449.996926][ T5895] usb 2-1: config 0 has no interfaces? [ 450.008024][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 450.017792][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.026524][ T5895] usb 2-1: Product: syz [ 450.030865][ T5895] usb 2-1: Manufacturer: syz [ 450.038540][ T5895] usb 2-1: SerialNumber: syz [ 450.055778][ T5895] usb 2-1: config 0 descriptor?? [ 450.258435][ T9145] CIFS: VFS: Malformed UNC in devname [ 450.437307][ T977] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 450.564681][ T5895] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 450.709658][ T977] usb 3-1: config 0 has no interfaces? [ 450.726896][ T977] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 450.738817][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.775390][ T977] usb 3-1: Product: syz [ 450.780727][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.793447][ T5895] usb 5-1: config 0 has no interfaces? [ 450.800762][ T977] usb 3-1: Manufacturer: syz [ 450.811411][ T5895] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 450.832814][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.851715][ T977] usb 3-1: SerialNumber: syz [ 450.856337][ T5895] usb 5-1: config 0 descriptor?? [ 451.146422][ T977] usb 3-1: config 0 descriptor?? [ 451.884712][ T9150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.791'. [ 452.070384][ T9150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.791'. [ 452.135639][ T9150] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 452.504176][ T5900] usb 2-1: USB disconnect, device number 64 [ 452.846172][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 452.855603][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 452.864700][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 452.873911][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 452.883131][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 452.892154][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 452.901244][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 452.910306][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 453.404637][ T5896] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 453.535748][ T5895] usb 3-1: USB disconnect, device number 52 [ 453.753451][ T5896] usb 2-1: config 0 has no interfaces? [ 453.859908][ T5896] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 453.878323][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.959180][ T5896] usb 2-1: Product: syz [ 454.017299][ T5896] usb 2-1: Manufacturer: syz [ 454.044845][ T5895] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 454.104569][ T5896] usb 2-1: SerialNumber: syz [ 454.154436][ T5896] usb 2-1: config 0 descriptor?? [ 454.221816][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 454.247024][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.275070][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.305545][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.544810][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.581257][ T977] usb 5-1: USB disconnect, device number 51 [ 454.761384][ T9164] program syz.2.793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.823547][ T5895] usb 3-1: unable to get BOS descriptor or descriptor too short [ 454.909898][ T5895] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 454.928611][ T5895] usb 3-1: can't read configurations, error -71 [ 455.650307][ T9152] syz.0.791 (9152): drop_caches: 2 [ 455.755316][ T977] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 456.109027][ T977] usb 5-1: config 0 has no interfaces? [ 456.120563][ T977] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 456.130174][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.169911][ T977] usb 5-1: Product: syz [ 456.214590][ T977] usb 5-1: Manufacturer: syz [ 456.247091][ T977] usb 5-1: SerialNumber: syz [ 456.268964][ T9] usb 2-1: USB disconnect, device number 65 [ 456.300974][ T977] usb 5-1: config 0 descriptor?? [ 456.590853][ T9173] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 456.936774][ T9183] __nla_validate_parse: 43 callbacks suppressed [ 456.936798][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 457.482298][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 458.534777][ T5900] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 458.653065][ T977] usb 5-1: USB disconnect, device number 52 [ 458.701167][ T5900] usb 4-1: not running at top speed; connect to a high speed hub [ 458.714959][ T5900] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 458.764995][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.790680][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.807385][ T5900] usb 4-1: Product: syz [ 458.834596][ T5900] usb 4-1: Manufacturer: syz [ 458.839224][ T5900] usb 4-1: SerialNumber: syz [ 458.928224][ T5900] usb 4-1: bad CDC descriptors [ 459.267962][ T9197] netlink: 72 bytes leftover after parsing attributes in process `syz.1.801'. [ 459.449071][ T9205] input: syz1 as /devices/virtual/input/input15 [ 459.811865][ T5895] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 460.002894][ T5895] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 460.024383][ T5895] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 460.063423][ T5895] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 52, changing to 7 [ 460.093991][ T5895] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 8241, setting to 1024 [ 460.106654][ T9201] can: request_module (can-proto-0) failed. [ 460.413570][ T5895] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 460.495594][ T5895] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 460.644906][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.694602][ T5896] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 461.999178][ T5895] ath6kl: Failed to submit usb control message: -110 [ 462.006312][ T5895] ath6kl: unable to send the bmi data to the device: -110 [ 462.016287][ T5895] ath6kl: Unable to send get target info: -110 [ 462.095135][ T5895] ath6kl: Failed to init ath6kl core: -110 [ 462.102630][ T5895] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 462.293988][ T5896] usb 3-1: config 0 has no interfaces? [ 462.318448][ T5896] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 462.427920][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.463424][ T5896] usb 3-1: Product: syz [ 462.489556][ T9] usb 4-1: USB disconnect, device number 55 [ 462.517413][ T5896] usb 3-1: Manufacturer: syz [ 462.564730][ T5895] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 462.584114][ T5896] usb 3-1: SerialNumber: syz [ 462.668950][ T5896] usb 3-1: config 0 descriptor?? [ 462.720359][ T9] usb 5-1: USB disconnect, device number 53 [ 462.730094][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.750619][ T5895] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 462.797715][ T5895] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 462.835579][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.857317][ T5895] usb 2-1: config 0 descriptor?? [ 462.895821][ T5895] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 462.912409][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 462.949560][ T5895] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 462.976237][ T5895] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 462.983459][ T5895] usb 2-1: media controller created [ 462.995578][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.027480][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 463.045290][ T5895] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 463.083901][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.095777][ T5895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 463.115180][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.197255][ T9219] dvb-usb: bulk message failed: -22 (36/0) [ 463.208321][ T5895] dvb-usb: schedule remote query interval to 150 msecs. [ 463.335608][ T5895] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 463.380596][ T5895] usb 2-1: USB disconnect, device number 66 [ 463.424845][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 463.505446][ T5895] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 463.704832][ T9] usb 5-1: config 0 has no interfaces? [ 463.734815][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 463.747833][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.768785][ T9] usb 5-1: Product: syz [ 463.820255][ T9] usb 5-1: Manufacturer: syz [ 463.902011][ T9] usb 5-1: SerialNumber: syz [ 463.941663][ T9] usb 5-1: config 0 descriptor?? [ 464.141631][ T9229] program syz.1.808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.934704][ T5896] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 465.077107][ T52] usb 3-1: USB disconnect, device number 55 [ 465.111513][ T5896] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 465.129035][ T5896] usb 2-1: config 0 has no interface number 0 [ 465.153795][ T5896] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 465.172862][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.186921][ T5896] usb 2-1: Product: syz [ 465.193633][ T5896] usb 2-1: Manufacturer: syz [ 465.201536][ T5896] usb 2-1: SerialNumber: syz [ 465.212527][ T5896] usb 2-1: config 0 descriptor?? [ 465.539791][ T5896] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 465.682582][ T5896] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 465.713715][ T5896] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 465.744490][ T5896] usb 2-1: media controller created [ 465.919881][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.536927][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.811'. [ 466.567117][ T5900] usb 5-1: USB disconnect, device number 54 [ 466.606925][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.811'. [ 466.918175][ T5896] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 467.137794][ T5896] usb 2-1: USB disconnect, device number 67 [ 467.643557][ T9256] veth1_macvtap: left promiscuous mode [ 467.649248][ T9256] macsec0: entered promiscuous mode [ 467.663325][ T9256] veth1_macvtap: entered promiscuous mode [ 467.669691][ T9256] macsec0: left promiscuous mode [ 467.725699][ T5897] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 467.784655][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 467.954610][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 467.959873][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 467.972259][ T5897] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 467.982171][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 467.991888][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.000110][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.011742][ T5897] usb 5-1: Product: syz [ 468.019636][ T9] usb 2-1: Product: syz [ 468.084281][ T5897] usb 5-1: Manufacturer: syz [ 468.089902][ T9] usb 2-1: Manufacturer: syz [ 468.153110][ T9] usb 2-1: SerialNumber: syz [ 468.167703][ T5897] usb 5-1: SerialNumber: syz [ 468.224949][ T5897] usb 5-1: config 0 descriptor?? [ 468.439767][ T9] usb 2-1: config 0 descriptor?? [ 468.653134][ T5897] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 468.672788][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 469.154705][ T5895] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 469.418627][ T5895] usb 4-1: config 0 has no interfaces? [ 469.460253][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 469.469695][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.478479][ T5895] usb 4-1: Product: syz [ 469.484971][ T5895] usb 4-1: Manufacturer: syz [ 469.489917][ T5895] usb 4-1: SerialNumber: syz [ 469.507560][ T5895] usb 4-1: config 0 descriptor?? [ 471.185080][ T5895] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 471.223548][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 471.246583][ T9] usb 2-1: USB disconnect, device number 68 [ 471.361036][ T5895] usb 3-1: config 0 has no interfaces? [ 471.396401][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 471.414452][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.430072][ T5895] usb 3-1: Product: syz [ 471.441081][ T5895] usb 3-1: Manufacturer: syz [ 471.451296][ T5895] usb 3-1: SerialNumber: syz [ 471.469837][ T5895] usb 3-1: config 0 descriptor?? [ 471.678329][ T5897] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 471.696816][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.706062][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.768333][ T5897] usb 5-1: USB disconnect, device number 55 [ 471.794436][ T5908] udevd[5908]: setting mode of /dev/bus/usb/005/055 to 020664 failed: No such file or directory [ 471.873248][ T5908] udevd[5908]: setting owner of /dev/bus/usb/005/055 to uid=0, gid=0 failed: No such file or directory [ 471.875278][ T5895] usb 4-1: USB disconnect, device number 56 [ 472.754627][ T5895] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 473.009181][ T5895] usb 4-1: config 0 has no interfaces? [ 473.024907][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 473.037163][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.052467][ T5895] usb 4-1: Product: syz [ 473.062681][ T5895] usb 4-1: Manufacturer: syz [ 473.090456][ T5895] usb 4-1: SerialNumber: syz [ 473.100268][ T5895] usb 4-1: config 0 descriptor?? [ 473.416114][ T9292] netlink: 696 bytes leftover after parsing attributes in process `syz.4.821'. [ 474.057394][ T52] usb 3-1: USB disconnect, device number 56 [ 474.792861][ T52] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 475.144246][ T52] usb 3-1: config 0 has no interfaces? [ 475.160490][ T52] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 475.170095][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.182758][ T52] usb 3-1: Product: syz [ 475.187496][ T52] usb 3-1: Manufacturer: syz [ 475.192345][ T52] usb 3-1: SerialNumber: syz [ 475.426553][ T52] usb 3-1: config 0 descriptor?? [ 476.023338][ T5897] usb 4-1: USB disconnect, device number 57 [ 476.206792][ T9283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.671074][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 476.684805][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 478.122450][ T52] usb 3-1: USB disconnect, device number 57 [ 478.834661][ T5897] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 479.122150][ T5897] usb 3-1: config 0 has no interfaces? [ 479.138648][ T5897] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 479.149074][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.164736][ T1209] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 479.172588][ T5897] usb 3-1: Product: syz [ 479.274954][ T5897] usb 3-1: Manufacturer: syz [ 479.292435][ T5897] usb 3-1: SerialNumber: syz [ 479.421696][ T1209] usb 5-1: config 0 has no interfaces? [ 479.495761][ T5897] usb 3-1: config 0 descriptor?? [ 479.589125][ T1209] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 479.720824][ T9336] netlink: 'syz.1.832': attribute type 10 has an invalid length. [ 479.760477][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.766755][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.776001][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.796001][ T1209] usb 5-1: Product: syz [ 479.815157][ T1209] usb 5-1: Manufacturer: syz [ 479.825191][ T1209] usb 5-1: SerialNumber: syz [ 479.861053][ T1209] usb 5-1: config 0 descriptor?? [ 479.863373][ T9340] netlink: 'syz.1.832': attribute type 10 has an invalid length. [ 479.943478][ T9336] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.950839][ T9336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.958475][ T9336] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.965791][ T9336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.051331][ T9336] bridge0: entered promiscuous mode [ 480.060018][ T9336] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 480.434656][ T9340] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 480.450924][ T9340] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 481.555986][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 481.556011][ T30] audit: type=1326 audit(1743916169.103:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 481.715739][ T30] audit: type=1326 audit(1743916169.103:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 481.894308][ T30] audit: type=1326 audit(1743916169.103:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 481.940730][ T52] usb 5-1: USB disconnect, device number 56 [ 482.083050][ T30] audit: type=1326 audit(1743916169.103:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 482.268571][ T30] audit: type=1326 audit(1743916169.103:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=234 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 482.307921][ T30] audit: type=1326 audit(1743916169.103:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 482.382662][ T30] audit: type=1326 audit(1743916169.103:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 482.447350][ T5896] usb 3-1: USB disconnect, device number 58 [ 482.510155][ T30] audit: type=1326 audit(1743916169.213:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 482.715468][ T30] audit: type=1326 audit(1743916169.213:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 482.801172][ T30] audit: type=1326 audit(1743916169.223:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 482.903369][ T52] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 483.293834][ T9378] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 483.300475][ T9378] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 483.402865][ T52] usb 4-1: config 0 has no interfaces? [ 483.421788][ T9374] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 483.428431][ T9374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 483.467169][ T9386] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 483.507683][ T52] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 483.555359][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.851655][ T52] usb 4-1: Product: syz [ 483.857091][ T52] usb 4-1: Manufacturer: syz [ 483.860762][ T9378] vhci_hcd vhci_hcd.0: Device attached [ 483.863019][ T9374] vhci_hcd vhci_hcd.0: Device attached [ 483.873320][ T52] usb 4-1: SerialNumber: syz [ 483.960225][ T52] usb 4-1: config 0 descriptor?? [ 484.023787][ T9388] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 484.030439][ T9388] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 484.140259][ T9] vhci_hcd: vhci_device speed not set [ 484.248706][ T9] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 484.263928][ T9388] vhci_hcd vhci_hcd.0: Device attached [ 484.301974][ T9374] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 484.308612][ T9374] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 484.339650][ T9374] vhci_hcd vhci_hcd.0: Device attached [ 484.367836][ T9374] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 484.382573][ T9374] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 484.459795][ T9374] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 484.497675][ T9374] vhci_hcd vhci_hcd.0: port 0 already used [ 484.624902][ T1209] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 484.647562][ T9383] vhci_hcd: connection closed [ 484.648138][ T9379] vhci_hcd: connection reset by peer [ 484.663671][ T9390] vhci_hcd: connection closed [ 484.664808][ T9395] vhci_hcd: connection closed [ 484.704282][ T6924] vhci_hcd: stop threads [ 484.738638][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 484.757732][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 484.791865][ T6924] vhci_hcd: release socket [ 484.809857][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 484.832598][ T6924] vhci_hcd: disconnect device [ 484.845386][ T6924] vhci_hcd: stop threads [ 484.850112][ T6924] vhci_hcd: release socket [ 484.870802][ T1209] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 484.880046][ T1209] usb 5-1: config 0 has no interface number 0 [ 484.889528][ T6924] vhci_hcd: disconnect device [ 484.905327][ T6924] vhci_hcd: stop threads [ 484.911761][ T1209] usb 5-1: config 0 interface 168 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 484.940118][ T6924] vhci_hcd: release socket [ 484.949922][ T6924] vhci_hcd: disconnect device [ 484.955745][ T1209] usb 5-1: config 0 interface 168 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 16 [ 484.966644][ T1209] usb 5-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 484.966685][ T6924] vhci_hcd: stop threads [ 484.983702][ T1209] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 485.005773][ T6924] vhci_hcd: release socket [ 485.017806][ T6924] vhci_hcd: disconnect device [ 485.023843][ T1209] usb 5-1: config 0 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 485.064997][ T1209] usb 5-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 485.133147][ T1209] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 485.153211][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.209813][ T1209] usb 5-1: Product: syz [ 485.222241][ T1209] usb 5-1: Manufacturer: syz [ 485.272992][ T1209] usb 5-1: SerialNumber: syz [ 485.304131][ T1209] usb 5-1: config 0 descriptor?? [ 485.316676][ T9397] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 485.324042][ T9397] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 485.343129][ T1209] ums-usbat 5-1:0.168: USB Mass Storage device detected [ 485.388423][ T1209] ums-usbat 5-1:0.168: Quirks match for vid 0781 pid 0005: 1 [ 486.541267][ T5895] usb 4-1: USB disconnect, device number 58 [ 487.961504][ T9413] vlan2: entered allmulticast mode [ 487.966879][ T9413] hsr0: entered allmulticast mode [ 487.971956][ T9413] hsr_slave_0: entered allmulticast mode [ 487.977899][ T9413] hsr_slave_1: entered allmulticast mode [ 487.986666][ T9413] bridge0: port 3(vlan2) entered blocking state [ 487.993380][ T9413] bridge0: port 3(vlan2) entered disabled state [ 488.010149][ T9413] vlan2: entered promiscuous mode [ 488.015432][ T9413] hsr0: entered promiscuous mode [ 488.040290][ T9413] bridge0: port 3(vlan2) entered blocking state [ 488.048104][ T9413] bridge0: port 3(vlan2) entered forwarding state [ 488.080697][ T1209] ums-usbat 5-1:0.168: probe with driver ums-usbat failed with error -5 [ 488.135857][ T1209] usb 5-1: USB disconnect, device number 57 [ 488.245706][ T9424] netlink: 'syz.4.847': attribute type 10 has an invalid length. [ 488.253918][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.261466][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.288646][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.295970][ T9424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.303582][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.310861][ T9424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.330038][ T9429] netlink: 'syz.4.847': attribute type 10 has an invalid length. [ 488.349852][ T9424] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 488.429118][ T9429] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 488.564636][ T9438] fuse: Bad value for 'fd' [ 488.880262][ T5896] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 489.054665][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 489.073107][ T5896] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.174708][ T5896] usb 2-1: config 1 interface 0 has no altsetting 0 [ 489.196919][ T5896] usb 2-1: string descriptor 0 read error: -22 [ 489.203594][ T5896] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 489.212876][ T9439] tipc: Started in network mode [ 489.224626][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.264702][ T9439] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 489.286453][ T9439] tipc: Enabled bearer , priority 10 [ 489.493815][ T9] vhci_hcd: vhci_device speed not set [ 490.294795][ T52] tipc: Node number set to 9480874 [ 490.484601][ T1209] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 490.788292][ T1209] usb 5-1: config 0 has no interfaces? [ 490.798564][ T1209] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 490.807886][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.819124][ T1209] usb 5-1: Product: syz [ 490.835526][ T1209] usb 5-1: Manufacturer: syz [ 490.845096][ T1209] usb 5-1: SerialNumber: syz [ 490.891346][ T1209] usb 5-1: config 0 descriptor?? [ 491.397697][ T9456] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 491.444250][ T9454] netlink: 6 bytes leftover after parsing attributes in process `syz.0.851'. [ 491.974736][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 492.260696][ T9] usb 3-1: config 0 has no interfaces? [ 492.279098][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 492.289055][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.300742][ T9] usb 3-1: Product: syz [ 492.310724][ T9] usb 3-1: Manufacturer: syz [ 492.404264][ T9] usb 3-1: SerialNumber: syz [ 492.467320][ T9] usb 3-1: config 0 descriptor?? [ 492.674955][ T1209] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 492.871392][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 492.871418][ T30] audit: type=1400 audit(1743916180.413:103): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3736206B420A52737346696C653A092020203233323936206B420A52737353686D656D3A092020202020202030206B420A566D446174613A092020203336373532206B420A566D53746B3A092020202020313332206B420A566D4578653A092020202031373034206B420A566D4C69623A092020202020203132206B420A566D5054453A092020202020313230206B420A566D537761703A092020202020202030206B420A48756765746C6250616765733A092020202020202030206B420A436F726544756D70696E673A09300A5448505F656E61626C65643A09310A756E7461675F6D61736B3A09307866666666 pid=9457 comm="syz.2.853" [ 492.939509][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.951151][ T1209] usb 4-1: Using ep0 maxpacket: 8 [ 493.048214][ T1209] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 493.084340][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.160224][ T9460] netlink: 44 bytes leftover after parsing attributes in process `syz.2.853'. [ 493.338645][ T1209] usb 4-1: Product: syz [ 493.364853][ T5896] usbhid 2-1:1.0: can't add hid device: -71 [ 493.364993][ T1209] usb 4-1: Manufacturer: syz [ 493.400443][ T5896] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 493.578241][ T1209] usb 4-1: SerialNumber: syz [ 493.630109][ T1209] usb 4-1: config 0 descriptor?? [ 493.642635][ T5896] usb 2-1: USB disconnect, device number 69 [ 493.869897][ T1209] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 493.892020][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 493.910554][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 494.273537][ T1225] usb 5-1: USB disconnect, device number 58 [ 495.367181][ T5900] usb 3-1: USB disconnect, device number 59 [ 496.044818][ T1225] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 496.226614][ T1225] usb 3-1: config 0 has no interfaces? [ 496.235138][ T1225] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 496.245962][ T1225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.473537][ T1225] usb 3-1: Product: syz [ 496.495217][ T1225] usb 3-1: Manufacturer: syz [ 496.507368][ T1225] usb 3-1: SerialNumber: syz [ 496.558056][ T1209] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 496.595772][ T1209] usb 4-1: USB disconnect, device number 59 [ 496.604300][ T1225] usb 3-1: config 0 descriptor?? [ 496.884434][ T5896] usb 3-1: USB disconnect, device number 60 [ 497.421813][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 498.218763][ T5896] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 498.380758][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.393563][ T5896] usb 3-1: config 0 has no interfaces? [ 498.438017][ T5896] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 498.501170][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.531207][ T5896] usb 3-1: config 0 descriptor?? [ 501.458229][ T5896] usb 3-1: USB disconnect, device number 61 [ 501.522672][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.529355][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.063639][ T9517] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.866'. [ 502.113921][ T9508] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.866'. [ 502.464682][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 502.687826][ T9] usb 5-1: config 0 has no interfaces? [ 502.784664][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 502.842045][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.872269][ T9] usb 5-1: Product: syz [ 502.883309][ T9] usb 5-1: Manufacturer: syz [ 503.029543][ T9] usb 5-1: SerialNumber: syz [ 503.049106][ T9] usb 5-1: config 0 descriptor?? [ 503.253427][ T9522] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 503.273312][ T9522] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 503.344210][ T9522] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 503.386164][ T9522] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 503.410661][ T9522] geneve2: entered promiscuous mode [ 503.417591][ T9522] geneve2: entered allmulticast mode [ 503.592912][ T1209] IPVS: starting estimator thread 0... [ 503.694839][ T9526] IPVS: using max 27 ests per chain, 64800 per kthread [ 504.147833][ T9514] vivid-007: ================= START STATUS ================= [ 504.183151][ T9514] vivid-007: Enable Output Cropping: true [ 504.214172][ T9514] vivid-007: Enable Output Composing: true [ 504.259948][ T9514] vivid-007: Enable Output Scaler: true [ 504.266639][ T9514] vivid-007: Tx RGB Quantization Range: Automatic [ 504.281979][ T9514] vivid-007: Transmit Mode: HDMI [ 504.289846][ T9514] vivid-007: Hotplug Present: 0x00000000 [ 504.298808][ T9514] vivid-007: RxSense Present: 0x00000000 [ 504.307977][ T9514] vivid-007: EDID Present: 0x00000000 [ 504.314277][ T9514] vivid-007: ================== END STATUS ================== [ 504.729862][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 504.752567][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 505.342456][ T1209] usb 5-1: USB disconnect, device number 59 [ 506.062448][ T9544] futex_wake_op: syz.1.871 tries to shift op by -33; fix this program [ 506.092358][ T9544] netdevsim netdevsim1: Direct firmware load for . [ 506.092358][ T9544] failed with error -2 [ 506.138668][ T9544] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 506.138668][ T9544] [ 507.355567][ T1209] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 507.520272][ T1209] usb 3-1: unable to get BOS descriptor or descriptor too short [ 507.530381][ T1209] usb 3-1: config 81 has an invalid interface number: 13 but max is 0 [ 507.564814][ T1209] usb 3-1: config 81 has no interface number 0 [ 507.587141][ T1209] usb 3-1: config 81 interface 13 has no altsetting 0 [ 507.731502][ T5900] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 507.800599][ T1209] usb 3-1: New USB device found, idVendor=12d1, idProduct=0ec1, bcdDevice=29.23 [ 507.839613][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.881550][ T1209] usb 3-1: Product: syz [ 507.913866][ T1209] usb 3-1: Manufacturer: syz [ 507.929859][ T5900] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 508.018338][ T1209] usb 3-1: SerialNumber: syz [ 508.019425][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.072538][ T5900] usb 4-1: config 0 descriptor?? [ 508.187594][ T5900] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 508.297059][ T5900] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 508.706860][ T9559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.876'. [ 508.727010][ T9559] netlink: 2 bytes leftover after parsing attributes in process `syz.3.876'. [ 510.404653][ T5896] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 510.461435][ T1209] qmi_wwan 3-1:81.13: More than one union descriptor, skipping ... [ 510.480139][ T9] usb 4-1: USB disconnect, device number 60 [ 510.526215][ T1209] qmi_wwan 3-1:81.13: probe with driver qmi_wwan failed with error -22 [ 510.554915][ T5896] usb 2-1: device descriptor read/64, error -71 [ 510.615511][ T1209] usb 3-1: USB disconnect, device number 62 [ 510.679558][ T9589] random: crng reseeded on system resumption [ 510.795133][ T5896] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 510.925275][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 510.947310][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 510.976544][ T5896] usb 2-1: device descriptor read/64, error -71 [ 511.175690][ T5896] usb usb2-port1: attempt power cycle [ 511.538196][ T5896] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 511.657770][ T5896] usb 2-1: device descriptor read/8, error -71 [ 511.684631][ T5900] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 511.909646][ T5900] usb 5-1: config 0 has no interfaces? [ 511.922504][ T5900] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 511.931869][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.940257][ T5900] usb 5-1: Product: syz [ 511.960797][ T5900] usb 5-1: Manufacturer: syz [ 511.974633][ T5896] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 511.994637][ T5900] usb 5-1: SerialNumber: syz [ 512.042945][ T5900] usb 5-1: config 0 descriptor?? [ 512.052335][ T5896] usb 2-1: device descriptor read/8, error -71 [ 512.186380][ T5896] usb usb2-port1: unable to enumerate USB device [ 512.832256][ T9589] tipc: Started in network mode [ 512.857640][ T9589] tipc: Node identity ac14140f, cluster identity 4711 [ 512.934922][ T9589] tipc: New replicast peer: 255.255.255.255 [ 512.965512][ T5900] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 513.037155][ T9589] tipc: Enabled bearer , priority 10 [ 513.576382][ T5900] usb 2-1: config 0 has no interfaces? [ 513.576422][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 513.653491][ T5900] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 513.702040][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.834819][ T5900] usb 2-1: Product: syz [ 513.851129][ T9] usb 3-1: config 0 has no interfaces? [ 513.884026][ T5900] usb 2-1: Manufacturer: syz [ 513.900704][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 513.910950][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.920092][ T9] usb 3-1: Product: syz [ 513.924439][ T9] usb 3-1: Manufacturer: syz [ 513.934218][ T5900] usb 2-1: SerialNumber: syz [ 513.934784][ T9] usb 3-1: SerialNumber: syz [ 513.982396][ T9] usb 3-1: config 0 descriptor?? [ 514.004181][ T5900] usb 2-1: config 0 descriptor?? [ 514.155152][ T9] tipc: Node number set to 2886997007 [ 514.324045][ T9606] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 514.635007][ T1209] usb 5-1: USB disconnect, device number 60 [ 515.018290][ T9619] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 515.256408][ T9622] syz.3.888 (9622): drop_caches: 2 [ 515.314596][ T5900] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 515.474796][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 515.490537][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.512576][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.523615][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 515.538805][ T5900] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 515.549297][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.563387][ T5900] usb 5-1: config 0 descriptor?? [ 516.045330][ T5900] usbhid 5-1:0.0: can't add hid device: -71 [ 516.051611][ T5900] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 516.063175][ T5900] usb 5-1: USB disconnect, device number 61 [ 516.455244][ T1209] usb 2-1: USB disconnect, device number 74 [ 516.523687][ T5900] usb 3-1: USB disconnect, device number 63 [ 517.184670][ T5900] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 517.470977][ T9644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.839158][ T5900] usb 2-1: config 0 has no interfaces? [ 517.979153][ T5900] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 517.992427][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.036242][ T5900] usb 2-1: Product: syz [ 518.062992][ T5900] usb 2-1: Manufacturer: syz [ 518.115618][ T5900] usb 2-1: SerialNumber: syz [ 518.298365][ T5900] usb 2-1: config 0 descriptor?? [ 519.133203][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.895'. [ 519.407127][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.895'. [ 520.842713][ T1209] usb 2-1: USB disconnect, device number 75 [ 520.899338][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'. [ 520.951292][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'. [ 521.404724][ T5896] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 521.636108][ T5900] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 521.712513][ T5896] usb 3-1: config 0 has no interfaces? [ 521.805707][ T5896] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 521.923362][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.947262][ T5900] usb 2-1: config 0 has no interfaces? [ 521.956685][ T5900] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 521.974363][ T5896] usb 3-1: Product: syz [ 522.003515][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.054848][ T5896] usb 3-1: Manufacturer: syz [ 522.059517][ T5896] usb 3-1: SerialNumber: syz [ 522.064371][ T5900] usb 2-1: Product: syz [ 522.083234][ T5900] usb 2-1: Manufacturer: syz [ 522.089349][ T5896] usb 3-1: config 0 descriptor?? [ 522.094453][ T5900] usb 2-1: SerialNumber: syz [ 522.118206][ T5900] usb 2-1: config 0 descriptor?? [ 522.388281][ T9673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.398752][ T9673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.244607][ T5896] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 523.450579][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 523.546237][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.567671][ T5896] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 523.601940][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.628725][ T5896] usb 5-1: Product: syz [ 523.649398][ T5896] usb 5-1: Manufacturer: syz [ 523.663336][ T5896] usb 5-1: SerialNumber: syz [ 523.757601][ T5896] usb 5-1: config 0 descriptor?? [ 523.777652][ T5896] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 523.807036][ T5896] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 524.065427][ T5895] usb 3-1: USB disconnect, device number 64 [ 524.666034][ T1209] usb 2-1: USB disconnect, device number 76 [ 524.747297][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.903'. [ 525.051438][ T9690] team0 (unregistering): Port device team_slave_0 removed [ 526.594683][ T1209] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 526.988641][ T9] usb 5-1: USB disconnect, device number 62 [ 527.093745][ T1209] usb 4-1: config 0 has no interfaces? [ 527.107886][ T1209] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 527.118489][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.136057][ T1209] usb 4-1: Product: syz [ 527.148974][ T1209] usb 4-1: Manufacturer: syz [ 527.156729][ T1209] usb 4-1: SerialNumber: syz [ 527.185678][ T1209] usb 4-1: config 0 descriptor?? [ 529.137454][ T9709] veth1_macvtap: left promiscuous mode [ 529.143099][ T9709] macsec0: entered promiscuous mode [ 529.171604][ T9709] veth1_macvtap: entered promiscuous mode [ 529.181214][ T9709] macsec0: left promiscuous mode [ 529.326934][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 529.474309][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 530.018121][ T9721] futex_wake_op: syz.4.906 tries to shift op by -33; fix this program [ 530.049232][ T1209] usb 4-1: USB disconnect, device number 61 [ 530.386031][ T9721] netdevsim netdevsim4: Direct firmware load for . [ 530.386031][ T9721] failed with error -2 [ 530.679264][ T9721] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 530.679264][ T9721] [ 531.844719][ T5896] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 532.763739][ T5896] usb 2-1: config 0 has no interfaces? [ 532.870052][ T9743] netlink: 696 bytes leftover after parsing attributes in process `syz.3.915'. [ 532.918765][ T5896] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 532.949678][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.041623][ T5896] usb 2-1: Product: syz [ 533.084808][ T5896] usb 2-1: Manufacturer: syz [ 533.124621][ T5896] usb 2-1: SerialNumber: syz [ 533.154311][ T5896] usb 2-1: config 0 descriptor?? [ 533.656165][ T1209] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 533.840423][ T1209] usb 5-1: config 0 has no interfaces? [ 533.857044][ T1209] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 533.947070][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.013422][ T1209] usb 5-1: Product: syz [ 534.170797][ T1209] usb 5-1: Manufacturer: syz [ 534.444257][ T1209] usb 5-1: SerialNumber: syz [ 534.543895][ T1209] usb 5-1: config 0 descriptor?? [ 535.423113][ T9752] syz.0.918 (9752): drop_caches: 2 [ 535.829406][ T1225] usb 2-1: USB disconnect, device number 77 [ 536.392913][ T1225] usb 5-1: USB disconnect, device number 63 [ 536.464749][ T5900] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 536.522467][ T30] audit: type=1326 audit(1743916224.123:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9765 comm="syz.0.921" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f67579 code=0x0 [ 536.675404][ T5900] usb 3-1: config 0 has no interfaces? [ 536.722550][ T9774] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 536.736522][ T5895] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 536.923955][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 536.958882][ T5895] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 536.974354][ T5895] usb 4-1: config 1 interface 0 has no altsetting 0 [ 537.063020][ T5895] usb 4-1: string descriptor 0 read error: -22 [ 537.071953][ T5895] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 537.211654][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.252471][ T5900] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 537.261760][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.287088][ T5900] usb 3-1: Product: syz [ 537.297050][ T5900] usb 3-1: Manufacturer: syz [ 537.307122][ T5900] usb 3-1: SerialNumber: syz [ 537.320464][ T5900] usb 3-1: config 0 descriptor?? [ 537.754958][ T9771] usb usb8: usbfs: process 9771 (syz.3.922) did not claim interface 0 before use [ 539.569087][ T1225] usb 3-1: USB disconnect, device number 65 [ 539.950148][ T9793] fuse: Unknown parameter '0x0000000000000007' [ 540.093515][ T5895] usbhid 4-1:1.0: can't add hid device: -71 [ 540.112413][ T5895] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 540.139818][ T5895] usb 4-1: USB disconnect, device number 62 [ 540.156319][ T9799] veth1_macvtap: left promiscuous mode [ 540.168924][ T9799] macsec0: entered promiscuous mode [ 540.181155][ T9799] veth1_macvtap: entered promiscuous mode [ 540.187479][ T9799] macsec0: left promiscuous mode [ 540.259444][ T9800] 8021q: VLANs not supported on ipvlan1 [ 540.285907][ T977] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 540.649186][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 540.748300][ T977] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 540.859090][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 540.947010][ T977] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 540.961479][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.971793][ T977] usb 3-1: Product: syz [ 540.976170][ T977] usb 3-1: Manufacturer: syz [ 540.981129][ T977] usb 3-1: SerialNumber: syz [ 541.264647][ T977] usb 3-1: config 0 descriptor?? [ 541.339033][ T977] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 541.384603][ T977] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 541.990528][ T977] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 541.997742][ T977] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 542.667193][ T977] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 542.689396][ T977] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 542.714968][ T1225] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 542.745376][ T977] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 542.775761][ T977] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 542.806820][ T977] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 543.088273][ T977] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 543.127978][ T1225] usb 2-1: config 0 has no interfaces? [ 543.140670][ T1225] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 543.177344][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.313974][ T1225] usb 2-1: Product: syz [ 543.321485][ T1225] usb 2-1: Manufacturer: syz [ 543.338127][ T1225] usb 2-1: SerialNumber: syz [ 543.351609][ T1225] usb 2-1: config 0 descriptor?? [ 543.430114][ T977] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 543.439425][ T977] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 543.449851][ T977] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 543.849631][ T977] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 543.849739][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.902378][ T977] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 543.926286][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.984869][ T9] usb 2-1: USB disconnect, device number 78 [ 544.004007][ T977] usb 3-1: USB disconnect, device number 66 [ 544.675663][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 544.745032][ T977] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 544.877072][ T9841] trusted_key: encrypted_key: insufficient parameters specified [ 544.890942][ T9] usb 3-1: config 0 has no interfaces? [ 544.904811][ T5900] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 544.918645][ T977] usb 5-1: config 0 has no interfaces? [ 544.939711][ T977] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 544.949333][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.968396][ T977] usb 5-1: Product: syz [ 544.982855][ T977] usb 5-1: Manufacturer: syz [ 544.998663][ T977] usb 5-1: SerialNumber: syz [ 545.125614][ T5900] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 545.134678][ T5900] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 545.150642][ T977] usb 5-1: config 0 descriptor?? [ 545.156320][ T5900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 545.170226][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 545.272516][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 545.323231][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 545.351139][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.369765][ T9] usb 3-1: Product: syz [ 545.378644][ T9] usb 3-1: Manufacturer: syz [ 545.405078][ T9] usb 3-1: SerialNumber: syz [ 545.521961][ T9] usb 3-1: config 0 descriptor?? [ 545.684929][ T5900] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 545.741636][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 545.784088][ T5900] usb 4-1: Product: syz [ 545.799199][ T5900] usb 4-1: Manufacturer: syz [ 545.823147][ T5900] cdc_wdm 4-1:1.0: skipping garbage [ 545.836884][ T5900] cdc_wdm 4-1:1.0: skipping garbage [ 545.890417][ T5900] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 545.899163][ T5900] cdc_wdm 4-1:1.0: Unknown control protocol [ 546.133666][ T9837] fuse: Unknown parameter '0x0000000000000007' [ 546.223814][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 546.230706][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 546.237323][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 546.243966][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 546.250946][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 546.257578][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 546.264583][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 546.271243][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 546.277583][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 546.284217][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 546.290548][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 546.297152][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 546.303495][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 546.310093][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 546.316606][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 546.323241][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 546.330092][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 546.336709][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 546.343311][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 546.349942][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 546.357261][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 546.366083][ T52] usb 4-1: USB disconnect, device number 63 [ 547.223555][ T9848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.459263][ T52] usb 3-1: USB disconnect, device number 67 [ 547.826585][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 547.890682][ T1225] usb 5-1: USB disconnect, device number 64 [ 548.044582][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 548.061817][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.104574][ T52] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 548.215995][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 548.252598][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.270592][ T52] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 548.279858][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.288026][ T9] usb 4-1: Product: syz [ 548.294660][ T5895] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 548.305126][ T52] usb 3-1: Product: syz [ 548.308127][ T9] usb 4-1: Manufacturer: syz [ 548.309318][ T52] usb 3-1: Manufacturer: syz [ 548.323546][ T9] usb 4-1: SerialNumber: syz [ 548.338172][ T52] usb 3-1: SerialNumber: syz [ 548.369739][ T52] usb 3-1: config 0 descriptor?? [ 548.387600][ T9] usb 4-1: config 0 descriptor?? [ 548.420070][ T9] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 548.439832][ T9] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 548.592193][ T5895] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.603888][ T5895] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 548.614717][ T1225] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 548.647666][ T5895] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 548.683242][ T52] ch341 3-1:0.0: ch341-uart converter detected [ 548.774635][ T1225] usb 5-1: Using ep0 maxpacket: 32 [ 548.929383][ T1225] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 548.937964][ T1225] usb 5-1: config 0 has no interface number 0 [ 549.033439][ T1225] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 549.050840][ T5895] usb 2-1: string descriptor 0 read error: -22 [ 549.057438][ T5895] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 549.066676][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.144311][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.152457][ T1225] usb 5-1: Product: syz [ 549.158631][ T1225] usb 5-1: Manufacturer: syz [ 549.166027][ T1225] usb 5-1: SerialNumber: syz [ 549.208675][ T1225] usb 5-1: config 0 descriptor?? [ 549.217537][ T1225] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 549.498083][ T1225] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 549.553905][ T1225] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 549.692342][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.790983][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.816791][ C0] quatech-serial ttyUSB1: qt2_process_read_urb - unsupported command 6 [ 549.886360][ T52] ch341-uart ttyUSB0: failed to read break control: -71 [ 549.895160][ T52] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 549.933198][ T52] usb 3-1: USB disconnect, device number 68 [ 549.975268][ T52] ch341 3-1:0.0: device disconnected [ 550.101473][ T9864] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 550.108072][ T9864] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 550.199306][ T9864] vhci_hcd vhci_hcd.0: Device attached [ 550.212232][ T9867] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 550.218909][ T9867] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 550.295612][ T9864] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 550.320361][ T9867] vhci_hcd vhci_hcd.0: Device attached [ 550.364630][ T5900] vhci_hcd: vhci_device speed not set [ 550.385667][ T9870] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 550.392333][ T9870] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 550.411869][ T1209] usb 4-1: USB disconnect, device number 64 [ 550.424720][ T5900] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 550.585748][ T9870] vhci_hcd vhci_hcd.0: Device attached [ 550.627354][ T30] audit: type=1326 audit(1743916238.223:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 550.780960][ T9867] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 550.875791][ T5895] cdc_ncm 2-1:1.0: bind() failure [ 550.885606][ T5895] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 550.912617][ T5895] cdc_ncm 2-1:1.1: bind() failure [ 550.921344][ T30] audit: type=1326 audit(1743916238.223:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 550.924706][ T9864] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13) [ 550.950332][ T9864] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 550.967024][ T5895] usb 2-1: USB disconnect, device number 79 [ 550.980463][ T9864] vhci_hcd vhci_hcd.0: Device attached [ 550.998569][ T30] audit: type=1326 audit(1743916238.253:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 551.021257][ T30] audit: type=1326 audit(1743916238.253:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 551.045713][ T30] audit: type=1326 audit(1743916238.253:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 551.068047][ T30] audit: type=1326 audit(1743916238.273:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 551.090234][ T30] audit: type=1326 audit(1743916238.273:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 551.170941][ T9867] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(21) [ 551.177631][ T9867] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 551.204624][ T30] audit: type=1326 audit(1743916238.273:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 551.364126][ T9868] vhci_hcd: connection closed [ 551.375598][ T9883] vhci_hcd: connection closed [ 551.380960][ T9867] vhci_hcd vhci_hcd.0: Device attached [ 551.427152][ T30] audit: type=1326 audit(1743916238.273:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 551.456635][ T9873] vhci_hcd: connection closed [ 551.457403][ T9871] vhci_hcd: connection closed [ 551.462738][ T30] audit: type=1326 audit(1743916238.273:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 551.516203][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 551.525019][ T977] usb 5-1: USB disconnect, device number 65 [ 551.553054][ T9865] vhci_hcd: connection reset by peer [ 551.559692][ T977] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 551.646685][ T977] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 551.687410][ T12] vhci_hcd: stop threads [ 551.691777][ T12] vhci_hcd: release socket [ 551.730944][ T977] quatech2 5-1:0.51: device disconnected [ 551.751173][ T12] vhci_hcd: disconnect device [ 551.772552][ T12] vhci_hcd: stop threads [ 552.030977][ T12] vhci_hcd: release socket [ 552.087943][ T12] vhci_hcd: disconnect device [ 552.094933][ T12] vhci_hcd: stop threads [ 552.099237][ T12] vhci_hcd: release socket [ 552.103822][ T12] vhci_hcd: disconnect device [ 552.112774][ T12] vhci_hcd: stop threads [ 552.117742][ T12] vhci_hcd: release socket [ 552.151502][ T9887] syz.2.946 (9887): drop_caches: 2 [ 552.201914][ T12] vhci_hcd: disconnect device [ 552.478488][ T12] vhci_hcd: stop threads [ 552.482802][ T12] vhci_hcd: release socket [ 552.504691][ T12] vhci_hcd: disconnect device [ 553.305387][ T1209] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 553.570495][ T1209] usb 4-1: config 4 has an invalid interface number: 231 but max is 0 [ 553.597433][ T1209] usb 4-1: config 4 has no interface number 0 [ 553.630660][ T1209] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 553.653325][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.679820][ T1209] usb 4-1: Product: syz [ 553.693819][ T1209] usb 4-1: Manufacturer: syz [ 553.709377][ T1209] usb 4-1: SerialNumber: syz [ 553.751518][ T1209] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 553.964642][ T1209] vp7045: USB control message 'out' went wrong. [ 553.974602][ T1209] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 554.157158][ T1209] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 554.460525][ T1209] usb 4-1: USB disconnect, device number 65 [ 555.349362][ T24] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 555.570775][ T9916] netlink: 696 bytes leftover after parsing attributes in process `syz.1.951'. [ 555.621563][ T24] usb 4-1: config 0 has no interfaces? [ 555.664688][ T5900] vhci_hcd: vhci_device speed not set [ 555.670240][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 555.768713][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.826863][ T24] usb 4-1: Product: syz [ 555.847944][ T24] usb 4-1: Manufacturer: syz [ 555.867259][ T24] usb 4-1: SerialNumber: syz [ 555.912463][ T24] usb 4-1: config 0 descriptor?? [ 556.669468][ T9924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.035064][ T9930] veth1_macvtap: left promiscuous mode [ 557.040836][ T9930] macsec0: entered promiscuous mode [ 557.059526][ T9930] veth1_macvtap: entered promiscuous mode [ 557.073748][ T9930] macsec0: left promiscuous mode [ 557.099747][ T5896] usb usb34-port1: attempt power cycle [ 557.842635][ T5896] usb usb34-port1: unable to enumerate USB device [ 559.078977][ T5900] usb 4-1: USB disconnect, device number 66 [ 559.264680][ T5896] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 559.454825][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 559.469695][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.497659][ T5896] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 559.507426][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.518655][ T5896] usb 2-1: Product: syz [ 559.523011][ T5896] usb 2-1: Manufacturer: syz [ 559.528132][ T5896] usb 2-1: SerialNumber: syz [ 559.545408][ T5896] usb 2-1: config 0 descriptor?? [ 559.599183][ T5896] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 559.614676][ T5900] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 559.632729][ T5896] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 559.713753][ T9947] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 559.720353][ T9947] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 559.799053][ T9950] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 559.805654][ T9950] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 559.832377][ T9947] vhci_hcd vhci_hcd.0: Device attached [ 559.840758][ T5900] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 559.874249][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.884767][ T5900] usb 4-1: Product: syz [ 559.912102][ T9947] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 559.915268][ T5900] usb 4-1: Manufacturer: syz [ 559.931206][ T5900] usb 4-1: SerialNumber: syz [ 560.022038][ T9950] vhci_hcd vhci_hcd.0: Device attached [ 560.034940][ T1209] vhci_hcd: vhci_device speed not set [ 560.042185][ T9956] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 560.048812][ T9956] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 560.074125][ T9956] vhci_hcd vhci_hcd.0: Device attached [ 560.090029][ T5900] usb 4-1: config 0 descriptor?? [ 560.094855][ T1209] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 560.123512][ T5900] ch341 4-1:0.0: ch341-uart converter detected [ 560.174818][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 560.174839][ T30] audit: type=1326 audit(1743916247.743:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 560.209964][ T9950] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 560.227905][ T9947] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 560.234569][ T9947] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 560.293415][ T9947] vhci_hcd vhci_hcd.0: Device attached [ 560.316926][ T9956] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(22) [ 560.323587][ T9956] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 560.358807][ T30] audit: type=1326 audit(1743916247.743:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 560.454825][ T9956] vhci_hcd vhci_hcd.0: Device attached [ 560.473887][ T9961] vhci_hcd: connection closed [ 560.476754][ T12] vhci_hcd: stop threads [ 560.486472][ T30] audit: type=1326 audit(1743916247.743:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 560.495053][ T9959] vhci_hcd: connection closed [ 560.508438][ T9957] vhci_hcd: connection closed [ 560.508877][ T9951] vhci_hcd: connection closed [ 560.514202][ T9948] vhci_hcd: connection reset by peer [ 560.534641][ T12] vhci_hcd: release socket [ 560.591541][ T12] vhci_hcd: disconnect device [ 560.603190][ T12] vhci_hcd: stop threads [ 560.651687][ T12] vhci_hcd: release socket [ 560.656558][ T12] vhci_hcd: disconnect device [ 560.673857][ T12] vhci_hcd: stop threads [ 560.681924][ T30] audit: type=1326 audit(1743916247.743:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 560.720865][ T12] vhci_hcd: release socket [ 560.733533][ T12] vhci_hcd: disconnect device [ 560.749929][ T12] vhci_hcd: stop threads [ 560.764269][ T12] vhci_hcd: release socket [ 560.773967][ T30] audit: type=1326 audit(1743916247.743:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 560.806225][ T12] vhci_hcd: disconnect device [ 560.853773][ T12] vhci_hcd: stop threads [ 561.052226][ T30] audit: type=1326 audit(1743916247.743:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 561.053335][ T12] vhci_hcd: release socket [ 561.099096][ T12] vhci_hcd: disconnect device [ 561.413426][ T9969] netlink: 'syz.4.962': attribute type 10 has an invalid length. [ 561.442230][ T9969] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.449872][ T9969] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.464121][ T5900] ch341-uart ttyUSB0: failed to read break control: -71 [ 561.474886][ T5900] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 561.500682][ T30] audit: type=1326 audit(1743916247.743:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 561.503200][ T9970] netlink: 'syz.4.962': attribute type 10 has an invalid length. [ 561.727010][ T5900] usb 4-1: USB disconnect, device number 67 [ 561.750951][ T30] audit: type=1326 audit(1743916247.743:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 561.787470][ T5900] ch341 4-1:0.0: device disconnected [ 561.813447][ T30] audit: type=1326 audit(1743916247.753:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 561.866358][ T30] audit: type=1326 audit(1743916247.753:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 562.401545][ T5900] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 562.536477][ T5895] usb 2-1: USB disconnect, device number 80 [ 562.681486][ T9980] xt_policy: too many policy elements [ 562.689855][ T9980] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 562.818004][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 562.962519][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.968989][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.040633][ T9980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 563.070270][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'. [ 563.121535][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 563.161693][ T5900] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.230719][ T9983] gretap1: entered promiscuous mode [ 563.252978][ T5900] usb 5-1: config 1 interface 0 has no altsetting 0 [ 563.320452][ T5900] usb 5-1: string descriptor 0 read error: -22 [ 563.328489][ T9983] bond1: (slave gretap1): making interface the new active one [ 563.346403][ T5900] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 563.368189][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.459630][ T9983] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 564.804738][ T52] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 565.121975][ T52] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 565.182798][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.216462][ T1209] vhci_hcd: vhci_device speed not set [ 565.230195][ T52] usb 3-1: config 0 descriptor?? [ 565.687643][ T52] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 565.707269][ T52] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 565.957087][ T5900] usbhid 5-1:1.0: can't add hid device: -71 [ 565.970008][ T5900] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 566.110264][ T5900] usb 5-1: USB disconnect, device number 66 [ 566.434641][ T52] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 566.664706][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 566.675989][ T52] usb 2-1: unable to get BOS descriptor or descriptor too short [ 566.688606][ T52] usb 2-1: config 0 has no interfaces? [ 566.702462][ T52] usb 2-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=39.f0 [ 566.714948][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.756285][ T52] usb 2-1: Product: syz [ 566.760492][ T52] usb 2-1: Manufacturer: syz [ 566.779575][ T52] usb 2-1: SerialNumber: syz [ 566.803799][ T52] usb 2-1: config 0 descriptor?? [ 567.153046][ T5897] usb 3-1: USB disconnect, device number 69 [ 567.191396][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.255355][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.270731][T10013] xt_recent: Unsupported userspace flags (000000fe) [ 567.316362][ T1225] usb usb42-port1: attempt power cycle [ 567.886478][ T1225] usb usb42-port1: unable to enumerate USB device [ 568.294794][ T1225] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 568.854694][ T1225] usb 4-1: Using ep0 maxpacket: 8 [ 568.873885][ T1225] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 568.908581][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.929147][ T1225] usb 4-1: Product: syz [ 568.933413][ T1225] usb 4-1: Manufacturer: syz [ 568.953476][ T1225] usb 4-1: SerialNumber: syz [ 568.978311][ T1225] usb 4-1: config 0 descriptor?? [ 568.978987][ T24] usb 2-1: USB disconnect, device number 81 [ 569.227993][ T1225] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 569.984622][ T5897] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 570.193205][ T5897] usb 2-1: config 0 has no interfaces? [ 570.206108][ T5897] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 570.218379][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.226831][ T5897] usb 2-1: Product: syz [ 570.231047][ T5897] usb 2-1: Manufacturer: syz [ 570.240808][ T5897] usb 2-1: SerialNumber: syz [ 570.249074][ T5897] usb 2-1: config 0 descriptor?? [ 571.002827][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 571.023550][T10046] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 572.312099][ T1225] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 572.330928][ T1225] usb 4-1: USB disconnect, device number 68 [ 572.656224][T10045] team0 (unregistering): Port device team_slave_0 removed [ 572.929429][T10051] xt_policy: too many policy elements [ 572.938044][T10051] netlink: 'syz.0.978': attribute type 1 has an invalid length. [ 573.213422][ T5897] usb 2-1: USB disconnect, device number 82 [ 573.384800][T10051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.402907][T10053] gretap1: entered promiscuous mode [ 573.413532][T10053] bond1: (slave gretap1): making interface the new active one [ 573.440454][T10053] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 574.865086][ T5897] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 574.974685][ T52] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 575.075291][ T5897] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 575.083979][ T5897] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 575.176796][ T52] usb 4-1: config 0 has no interfaces? [ 575.195330][ T52] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 575.227374][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.258096][ T52] usb 4-1: Product: syz [ 575.262329][ T52] usb 4-1: Manufacturer: syz [ 575.266870][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 575.296841][T10084] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 575.364937][T10088] sch_tbf: burst 8787 is lower than device lo mtu (65550) ! [ 575.442155][ T5897] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 575.459459][ T52] usb 4-1: SerialNumber: syz [ 575.463446][ T5897] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 575.510102][ T5897] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 575.521325][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 575.531268][ T5897] usb 5-1: Product: syz [ 575.637731][ T5897] usb 5-1: Manufacturer: syz [ 575.673152][ T52] usb 4-1: config 0 descriptor?? [ 575.673640][ T5897] cdc_wdm 5-1:1.0: skipping garbage [ 575.763613][ T5897] cdc_wdm 5-1:1.0: skipping garbage [ 575.776883][ T5900] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 575.934602][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 575.941693][ T5900] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 575.950758][ T5900] usb 2-1: config 0 has no interface number 0 [ 575.975269][ T5900] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 576.001155][ T5897] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 576.015927][ T5897] cdc_wdm 5-1:1.0: Unknown control protocol [ 576.034873][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.050558][T10072] fuse: Unknown parameter '0x0000000000000006' [ 576.145821][ T5897] usb 5-1: USB disconnect, device number 67 [ 576.191176][ T5900] usb 2-1: Product: syz [ 576.220216][ T5900] usb 2-1: Manufacturer: syz [ 576.253865][ T5900] usb 2-1: SerialNumber: syz [ 576.330051][ T5900] usb 2-1: config 0 descriptor?? [ 576.422082][ T5900] as10x_usb: device has been detected [ 576.430431][ T5900] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 576.479017][ T5900] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 576.545044][ T5900] as10x_usb: error during firmware upload part1 [ 576.652295][ T5900] Registered device PCTV Systems picoStick (74e) [ 576.660926][ T5900] usb 2-1: USB disconnect, device number 83 [ 576.805722][ T5900] Unregistered device PCTV Systems picoStick (74e) [ 576.821370][ T5900] as10x_usb: device has been disconnected [ 577.294846][ T5900] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 577.515443][ T52] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 577.575529][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 577.611512][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 577.713966][ T52] usb 5-1: config 0 has no interfaces? [ 577.762315][ T52] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 577.774621][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 577.797804][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.836312][ T5900] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 577.850083][ T52] usb 5-1: Product: syz [ 577.854398][ T52] usb 5-1: Manufacturer: syz [ 577.904718][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.931138][ T52] usb 5-1: SerialNumber: syz [ 577.986021][ T5900] usb 2-1: Product: syz [ 577.990248][ T5900] usb 2-1: Manufacturer: syz [ 577.999864][ T52] usb 5-1: config 0 descriptor?? [ 578.033769][ T5900] usb 2-1: SerialNumber: syz [ 578.080869][ T5897] usb 4-1: USB disconnect, device number 69 [ 578.158589][T10118] kvm: kvm [10117]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 578.171662][ T5900] usb 2-1: config 0 descriptor?? [ 578.274709][ T5900] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 578.290056][ T5900] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 578.733067][ T52] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 578.894274][ T5900] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 578.917777][ T5900] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 579.134680][ T5897] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 579.357512][ T5897] usb 3-1: config 0 has no interfaces? [ 579.370522][ T52] usb 4-1: config 0 has no interfaces? [ 579.384008][ T52] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 579.400101][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.421855][ T52] usb 4-1: Product: syz [ 579.431491][ T52] usb 4-1: Manufacturer: syz [ 579.446068][ T52] usb 4-1: SerialNumber: syz [ 579.455141][ T5897] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 579.465265][ T52] usb 4-1: config 0 descriptor?? [ 579.496864][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.540462][ T5897] usb 3-1: Product: syz [ 579.617043][ T5897] usb 3-1: Manufacturer: syz [ 579.658459][ T5900] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 579.749785][ T5900] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 579.761083][ T5897] usb 3-1: SerialNumber: syz [ 579.790226][ T5897] usb 3-1: config 0 descriptor?? [ 579.811109][ T5900] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 580.104033][ T5900] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 580.143294][ T5900] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 580.158198][ T5900] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 580.377923][ T5900] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 580.385050][ T5900] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 580.402220][ T24] usb 5-1: USB disconnect, device number 68 [ 580.431744][ T5900] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 580.447730][ T5900] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 580.461665][ T5900] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 580.549820][ T5900] usb 2-1: USB disconnect, device number 84 [ 580.615214][T10147] : renamed from bond0 (while UP) [ 581.791336][ T1225] usb 4-1: USB disconnect, device number 70 [ 582.378467][ T5897] usb 3-1: USB disconnect, device number 70 [ 582.388464][T10173] netlink: 36 bytes leftover after parsing attributes in process `syz.3.996'. [ 582.434839][ T1225] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 582.645628][ T1225] usb 5-1: config 0 has no interfaces? [ 582.663579][ T1225] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 582.683202][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.683236][ T1225] usb 5-1: Product: syz [ 582.683254][ T1225] usb 5-1: Manufacturer: syz [ 582.683271][ T1225] usb 5-1: SerialNumber: syz [ 582.766828][ T1225] usb 5-1: config 0 descriptor?? [ 583.024846][ T5897] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 583.265183][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 583.285047][ T5897] usb 4-1: config index 0 descriptor too short (expected 1828, got 36) [ 583.369190][ T5897] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 583.432315][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 583.474940][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 583.485780][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 583.504576][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 583.526920][ T5897] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 583.549786][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.566748][ T5897] usb 4-1: Product: syz [ 583.589102][ T5897] usb 4-1: Manufacturer: syz [ 583.609798][ T5897] usb 4-1: SerialNumber: syz [ 583.692026][ T5897] usb 4-1: config 0 descriptor?? [ 583.904809][ T5897] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 583.970484][ T5897] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 583.985261][ T5897] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 583.996121][ T5897] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 584.024696][ T5897] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 584.032455][ T5897] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 584.070513][ T5897] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 584.122986][ T5897] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 584.237479][ T5897] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 584.271481][ T5897] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 584.299901][ T5897] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 584.324038][ T5897] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 584.351356][T10205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.564425][ T5897] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 584.590827][ T5897] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 584.672645][ T5897] usb 4-1: USB disconnect, device number 71 [ 584.747137][ T5897] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 584.789154][ T5897] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 584.809081][ T5897] keyspan 4-1:0.0: device disconnected [ 585.284588][ T5896] usb 5-1: USB disconnect, device number 69 [ 585.764683][ T5896] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 585.938843][ T5896] usb 5-1: config 0 has no interfaces? [ 585.967417][ T5896] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 586.007208][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.144513][ T5896] usb 5-1: Product: syz [ 586.158966][ T5896] usb 5-1: Manufacturer: syz [ 586.189412][ T5896] usb 5-1: SerialNumber: syz [ 586.266049][ T5896] usb 5-1: config 0 descriptor?? [ 586.335429][T10228] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1002'. [ 586.345967][T10231] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1002'. [ 586.477089][T10191] dccp_close: ABORT with 60 bytes unread [ 588.490651][ T1225] usb 5-1: USB disconnect, device number 70 [ 588.658164][ T24] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 588.725501][ T5897] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 588.836606][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 588.882635][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 588.929828][ T24] usb 3-1: config 0 has no interfaces? [ 588.970256][ T5897] usb 4-1: config 0 has no interfaces? [ 588.970286][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=39.f0 [ 588.985592][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.998279][ T24] usb 3-1: Product: syz [ 589.003286][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 589.013314][ T24] usb 3-1: Manufacturer: syz [ 589.019454][ T24] usb 3-1: SerialNumber: syz [ 589.047083][ T24] usb 3-1: config 0 descriptor?? [ 589.131381][ T5897] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 589.172385][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.241019][ T5897] usb 4-1: Product: syz [ 589.381383][ T5897] usb 4-1: Manufacturer: syz [ 589.388793][T10269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.397925][T10269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.505006][ T5897] usb 4-1: SerialNumber: syz [ 590.011731][ T5897] usb 4-1: config 0 descriptor?? [ 590.924606][ T5896] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 591.434829][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 591.568567][ T5896] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 591.579002][ T5896] usb 5-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 591.599289][ T5896] usb 5-1: config 1 interface 0 has no altsetting 0 [ 591.629769][ T5896] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 591.641114][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.650217][ T5896] usb 5-1: Product: syz [ 591.656927][ T5896] usb 5-1: Manufacturer: syz [ 591.661716][ T5896] usb 5-1: SerialNumber: syz [ 591.954692][ T5900] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 591.962249][ T24] usb 4-1: USB disconnect, device number 72 [ 592.127365][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 592.182841][ T52] usb 3-1: USB disconnect, device number 71 [ 592.237926][ T5900] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 592.264305][ T5900] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 592.447759][ T5900] usb 2-1: Manufacturer: syz [ 592.485983][ T5900] usb 2-1: config 0 descriptor?? [ 592.501052][ T5900] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 592.685820][T10284] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1012'. [ 594.640560][ T5896] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 594.804941][ T5896] usb 5-1: USB disconnect, device number 71 [ 595.152124][ T5900] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 595.174792][T10315] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1017'. [ 595.205260][T10314] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1017'. [ 595.305087][ T5897] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 595.472529][ T5900] usb 3-1: config 0 has no interfaces? [ 595.496005][ T5900] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 595.570337][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.621793][ T5900] usb 3-1: Product: syz [ 595.641139][ T5897] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 595.662702][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.681602][ T5900] usb 3-1: Manufacturer: syz [ 595.821212][ T5897] usb 4-1: config 0 descriptor?? [ 595.859740][ T5897] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 595.868895][ T5897] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 595.926830][ T5900] usb 3-1: SerialNumber: syz [ 595.950912][ T5900] usb 3-1: config 0 descriptor?? [ 596.081919][T10313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1016'. [ 596.095382][T10313] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1016'. [ 596.211641][ T5897] usb 2-1: USB disconnect, device number 85 [ 597.675507][ T5900] usb 3-1: USB disconnect, device number 72 [ 597.897724][ T5900] usb 4-1: USB disconnect, device number 73 [ 598.865754][T10332] sctp: [Deprecated]: syz.3.1021 (pid 10332) Use of int in maxseg socket option. [ 598.865754][T10332] Use struct sctp_assoc_value instead [ 599.379536][T10332] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 599.418581][T10332] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 599.572974][T10332] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 599.663315][T10332] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 599.724556][T10332] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 599.941549][T10332] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 599.988210][T10332] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 600.143445][T10332] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 600.161717][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 600.161733][ T30] audit: type=1326 audit(1743916287.763:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 600.215531][T10332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 600.228562][T10332] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 600.235247][ T30] audit: type=1326 audit(1743916287.763:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 600.277081][ T30] audit: type=1326 audit(1743916287.763:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 600.447440][T10332] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 600.453866][T10332] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 600.469544][ T30] audit: type=1326 audit(1743916287.763:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 600.530619][T10332] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 600.538343][ T30] audit: type=1326 audit(1743916287.763:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 600.606336][ T30] audit: type=1326 audit(1743916287.763:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 600.628983][ T30] audit: type=1326 audit(1743916287.763:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 600.661641][ T30] audit: type=1326 audit(1743916287.763:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 600.814625][ T5896] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 600.823445][ T30] audit: type=1326 audit(1743916287.793:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 600.975055][ T30] audit: type=1326 audit(1743916287.793:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 601.005242][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 601.041480][ T5896] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 601.112305][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 601.163066][ T5851] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 601.219727][ T5896] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 601.360755][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 601.393208][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 601.410896][ T5896] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 601.432064][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 601.450987][ T5896] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 601.454590][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 601.463084][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 601.490464][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 601.549615][ T5896] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 601.558639][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 601.580705][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 601.603040][T10368] bridge0: port 3(syz_tun) entered disabled state [ 601.614926][ T5896] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 601.654924][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 601.678582][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 601.687944][ T5896] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 601.717131][T10368] syz_tun (unregistering): left allmulticast mode [ 601.960995][T10368] syz_tun (unregistering): left promiscuous mode [ 601.961072][T10368] bridge0: port 3(syz_tun) entered disabled state [ 601.968704][ T5896] usb 3-1: string descriptor 0 read error: -22 [ 601.968834][ T5896] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 601.968853][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.000553][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 602.029033][ T5896] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 602.234622][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 602.479747][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 602.540825][ T5897] usb 3-1: USB disconnect, device number 73 [ 602.981532][ T5900] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 603.244802][ T5897] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 603.364904][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 603.393704][ T5900] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.443786][ T5900] usb 4-1: config 1 interface 0 has no altsetting 0 [ 603.480691][ T5900] usb 4-1: string descriptor 0 read error: -22 [ 603.482112][ T5897] usb 5-1: config 0 has no interfaces? [ 603.491224][ T5900] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 603.515168][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 603.522081][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.609494][ T5897] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 603.651113][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.755001][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 603.778874][ T5897] usb 5-1: Product: syz [ 603.849395][ T5897] usb 5-1: Manufacturer: syz [ 603.854053][ T5897] usb 5-1: SerialNumber: syz [ 603.935590][ T5897] usb 5-1: config 0 descriptor?? [ 604.058220][T10384] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 604.066907][T10384] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 604.080479][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 604.087399][T10384] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 604.315408][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 604.845237][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 605.554739][ T5896] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 605.595313][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 605.877129][ T5896] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 605.912286][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.013875][ T5896] usb 3-1: config 0 descriptor?? [ 606.053775][ T5896] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 606.083995][ T5896] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 606.188131][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 606.894583][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 607.046481][ T5900] usbhid 4-1:1.0: can't add hid device: -71 [ 607.052501][ T5900] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 607.307899][ T5900] usb 4-1: USB disconnect, device number 74 [ 607.522448][ T5896] usb 5-1: USB disconnect, device number 72 [ 607.713172][T10415] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 608.115613][ T5896] usb 3-1: USB disconnect, device number 74 [ 608.592777][ T5898] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 608.889052][ T5898] usb 2-1: config 0 has no interfaces? [ 608.910503][ T5898] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 608.919912][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.965022][ T5898] usb 2-1: Product: syz [ 608.978394][ T5898] usb 2-1: Manufacturer: syz [ 609.000474][ T5898] usb 2-1: SerialNumber: syz [ 609.045778][ T5898] usb 2-1: config 0 descriptor?? [ 610.191417][T10421] [U]  [ 610.533274][T10436] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1043'. [ 611.414770][ T5898] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 611.678793][ T5897] usb 2-1: USB disconnect, device number 86 [ 611.753307][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 611.787447][ T5898] usb 4-1: not running at top speed; connect to a high speed hub [ 611.812032][ T5898] usb 4-1: config 129 has an invalid interface number: 145 but max is 0 [ 611.828820][ T5898] usb 4-1: config 129 has no interface number 0 [ 611.873543][ T5898] usb 4-1: config 129 interface 145 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 611.960929][ T5898] usb 4-1: config 129 interface 145 has no altsetting 0 [ 612.403152][ T5898] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.52 [ 612.584932][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.593132][ T5898] usb 4-1: Product: syz [ 612.880046][ T5898] usb 4-1: Manufacturer: syz [ 612.984527][ T5895] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 612.984644][ T5898] usb 4-1: SerialNumber: syz [ 613.335128][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 613.335149][ T30] audit: type=1326 audit(1743916300.923:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 613.437363][ T30] audit: type=1326 audit(1743916300.923:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 613.463813][ T30] audit: type=1326 audit(1743916300.923:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 613.512266][ T5895] usb 3-1: config index 0 descriptor too short (expected 64028, got 77) [ 613.531959][ T5895] usb 3-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 613.612016][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.628798][ T30] audit: type=1326 audit(1743916300.923:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 613.912040][ T5895] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 241 [ 613.989043][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 613.999619][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.014534][ T5895] usb 3-1: Product: syz [ 614.018983][ T30] audit: type=1326 audit(1743916300.933:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 614.044543][ T5895] usb 3-1: Manufacturer: syz [ 614.068102][ T5895] usb 3-1: SerialNumber: syz [ 614.111101][ T5895] usb 3-1: config 0 descriptor?? [ 614.175429][ T30] audit: type=1326 audit(1743916300.933:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 614.277518][ T30] audit: type=1326 audit(1743916300.933:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 614.401425][ T30] audit: type=1326 audit(1743916300.943:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 614.684530][ T5895] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 614.852106][ T5895] usb 5-1: config 0 has no interfaces? [ 615.346669][ T5895] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 615.397200][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.441155][ T5898] usb 4-1: USB disconnect, device number 75 [ 615.480934][ T5895] usb 5-1: Product: syz [ 615.728494][ T5895] usb 5-1: Manufacturer: syz [ 615.741117][ T5895] usb 5-1: SerialNumber: syz [ 615.798401][ T5895] usb 5-1: config 0 descriptor?? [ 616.035730][ T5895] usb 3-1: USB disconnect, device number 75 [ 617.114640][ T1225] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 617.549353][T10508] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1051'. [ 617.575684][ T1225] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 617.588491][ T1225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.697509][ T1225] usb 3-1: config 0 descriptor?? [ 617.921265][ T1225] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 617.935741][ T1225] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 618.960264][ T5898] usb 5-1: USB disconnect, device number 73 [ 619.676834][T10526] netlink: 728 bytes leftover after parsing attributes in process `syz.4.1054'. [ 621.411630][ T1225] usb 3-1: USB disconnect, device number 76 [ 621.872109][T10545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1057'. [ 622.555255][ T1225] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 622.710551][T10548] vlan2: entered promiscuous mode [ 622.735242][ T1225] usb 3-1: config 0 has no interfaces? [ 622.832971][T10548] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 622.846588][ T1225] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 622.872979][ T1225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.924682][ T5898] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 622.954621][ T1225] usb 3-1: Product: syz [ 622.954620][ T5900] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 622.966854][ T1225] usb 3-1: Manufacturer: syz [ 622.971921][ T1225] usb 3-1: SerialNumber: syz [ 623.012739][ T1225] usb 3-1: config 0 descriptor?? [ 623.154616][ T1209] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 623.164570][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 623.217037][ T5898] usb 4-1: config 0 has no interfaces? [ 623.226020][ T5898] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 623.237556][ T5900] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 623.256710][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.296564][ T5900] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 623.315633][ T5898] usb 4-1: Product: syz [ 623.319927][ T5898] usb 4-1: Manufacturer: syz [ 623.324820][ T5900] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 623.333819][ T5898] usb 4-1: SerialNumber: syz [ 623.340212][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 623.344728][ T1209] usb 2-1: Using ep0 maxpacket: 16 [ 623.367135][ T1209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.379303][ T1209] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 623.411246][ T5898] usb 4-1: config 0 descriptor?? [ 623.415777][ T1209] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 623.425961][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 623.493695][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 623.503771][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.512379][ T1209] usb 2-1: Product: syz [ 623.520390][T10542] netlink: 'syz.2.1059': attribute type 10 has an invalid length. [ 623.559812][ T5900] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 623.573617][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.582087][ T5900] usb 5-1: Product: syz [ 623.586801][ T1209] usb 2-1: Manufacturer: syz [ 623.592082][ T1209] usb 2-1: SerialNumber: syz [ 623.600686][ T1209] usb 2-1: config 0 descriptor?? [ 623.615301][ T5900] usb 5-1: Manufacturer: syz [ 623.673414][ T5898] usb 4-1: USB disconnect, device number 76 [ 623.699884][ T5900] usb 5-1: SerialNumber: syz [ 623.800558][ T5900] usb 5-1: config 0 descriptor?? [ 623.876103][ T5900] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 623.940370][ T5900] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 623.973126][ T5900] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 623.985946][ T5900] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 623.993856][ T5900] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 624.002594][ T5900] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 624.010530][ T5900] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 624.018505][ T5900] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 624.028804][ T5900] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 624.041078][ T5900] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 624.052523][ T5900] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 624.060436][ T5900] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 624.070580][ T5900] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 624.081174][ T5900] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 624.401395][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.408308][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.479721][ T52] usb 5-1: USB disconnect, device number 74 [ 624.489994][ T52] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 624.542035][ T52] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 624.568984][ T52] keyspan 5-1:0.0: device disconnected [ 624.648999][T10558] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1062'. [ 624.705459][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'. [ 625.053510][ T52] usb 3-1: USB disconnect, device number 77 [ 625.751206][ T1225] usb 2-1: USB disconnect, device number 87 [ 625.824993][ T5900] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 625.995260][ T30] audit: type=1326 audit(1743916313.573:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.2.1064" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x0 [ 626.020378][ T5900] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 626.099514][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.128932][ T5900] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 626.144568][ T5900] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 626.789285][ T5900] usb 5-1: Manufacturer: syz [ 626.864689][ T5896] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 626.906341][ T5900] usb 5-1: config 0 descriptor?? [ 627.024753][ T5900] rc_core: IR keymap rc-hauppauge not found [ 627.033361][ T5900] Registered IR keymap rc-empty [ 627.049476][ T5900] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 627.149159][ T5896] usb 4-1: config 0 has no interfaces? [ 627.178263][ T5900] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 627.200252][ T5896] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 627.209990][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.249261][ T5896] usb 4-1: Product: syz [ 627.282194][ T5896] usb 4-1: Manufacturer: syz [ 627.371022][ T5896] usb 4-1: SerialNumber: syz [ 627.397271][ T5896] usb 4-1: config 0 descriptor?? [ 627.437321][ C1] igorplugusb 5-1:0.0: receive overflow invalid: 183 [ 627.691407][ T30] audit: type=1326 audit(1743916315.293:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.4.1065" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff1579 code=0x0 [ 628.495194][ T5900] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 628.781488][ T5900] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 628.822915][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.897227][ T5900] usb 3-1: config 0 descriptor?? [ 629.163811][ T5900] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 629.262382][ T1225] usb 4-1: USB disconnect, device number 77 [ 629.439714][ T5900] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 629.516760][ C0] [ 629.519180][ C0] ============================================ [ 629.525358][ C0] WARNING: possible recursive locking detected [ 629.531553][ C0] 6.14.0-syzkaller-13524-gf4d2ef48250a #0 Not tainted [ 629.538373][ C0] -------------------------------------------- [ 629.544538][ C0] kworker/u8:17/6930 is trying to acquire lock: [ 629.550794][ C0] ffff88807e056f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 629.559902][ C0] [ 629.559902][ C0] but task is already holding lock: [ 629.567278][ C0] ffff88807da5af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 629.576419][ C0] [ 629.576419][ C0] other info that might help us debug this: [ 629.584506][ C0] Possible unsafe locking scenario: [ 629.584506][ C0] [ 629.591980][ C0] CPU0 [ 629.595275][ C0] ---- [ 629.598568][ C0] lock(&hsr->seqnr_lock); [ 629.603095][ C0] lock(&hsr->seqnr_lock); [ 629.607626][ C0] [ 629.607626][ C0] *** DEADLOCK *** [ 629.607626][ C0] [ 629.615791][ C0] May be due to missing lock nesting notation [ 629.615791][ C0] [ 629.624125][ C0] 15 locks held by kworker/u8:17/6930: [ 629.629600][ C0] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 629.641313][ C0] #1: ffffc900043ffc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 629.656072][ C0] #2: ffff88805b432250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb50 [ 629.667097][ C0] #3: ffff88805bb0e4e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1a9/0xb50 [ 629.678716][ C0] #4: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xb8/0x23b0 [ 629.688445][ C0] #5: ffffc90000007bc0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xc2/0x650 [ 629.698094][ C0] #6: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1ef/0x1560 [ 629.707641][ C0] #7: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x1750 [ 629.717512][ C0] #8: ffffffff8ed3e040 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 629.727461][ C0] #9: ffff88807da5af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 629.736983][ C0] #10: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb8/0x2d20 [ 629.746605][ C0] #11: ffffffff8ed3e040 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 629.756650][ C0] #12: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x220/0x1c00 [ 629.765987][ C0] #13: ffffffff8ed3e040 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 629.776118][ C0] #14: ffffffff8ed3e040 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 629.786151][ C0] [ 629.786151][ C0] stack backtrace: [ 629.792045][ C0] CPU: 0 UID: 0 PID: 6930 Comm: kworker/u8:17 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 629.792069][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 629.792087][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 629.792111][ C0] Call Trace: [ 629.792119][ C0] [ 629.792125][ C0] dump_stack_lvl+0x241/0x360 [ 629.792154][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.792184][ C0] ? __pfx__printk+0x10/0x10 [ 629.792214][ C0] print_deadlock_bug+0x2be/0x2d0 [ 629.792242][ C0] validate_chain+0x928/0x24e0 [ 629.792263][ C0] ? skb_release_data+0x2b5/0x8b0 [ 629.792284][ C0] __lock_acquire+0xad5/0xd80 [ 629.792306][ C0] lock_acquire+0x116/0x2f0 [ 629.792327][ C0] ? hsr_dev_xmit+0x18a/0x210 [ 629.792359][ C0] ? validate_xmit_skb+0xb5e/0x1150 [ 629.792380][ C0] ? hsr_dev_xmit+0x18a/0x210 [ 629.792406][ C0] _raw_spin_lock_bh+0x35/0x50 [ 629.792421][ C0] ? hsr_dev_xmit+0x18a/0x210 [ 629.792442][ C0] hsr_dev_xmit+0x18a/0x210 [ 629.792474][ C0] dev_hard_start_xmit+0x2d4/0x840 [ 629.792502][ C0] __dev_queue_xmit+0x1b80/0x3f60 [ 629.792531][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 629.792552][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 629.792568][ C0] ? __virt_addr_valid+0x183/0x530 [ 629.792589][ C0] ? virtqueue_add_outbuf+0xc5/0x110 [ 629.792620][ C0] ? __pfx_virtqueue_add_outbuf+0x10/0x10 [ 629.792654][ C0] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 629.792675][ C0] vlan_dev_hard_start_xmit+0x374/0x600 [ 629.792698][ C0] ? __pfx_vlan_dev_hard_start_xmit+0x10/0x10 [ 629.792716][ C0] dev_hard_start_xmit+0x2d4/0x840 [ 629.792736][ C0] __dev_queue_xmit+0x1b80/0x3f60 [ 629.792763][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 629.792789][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 629.792809][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 629.792829][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 629.792850][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 629.792866][ C0] ? ebt_do_table+0x2858/0x2a60 [ 629.792885][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 629.792902][ C0] ? ebt_do_table+0x2858/0x2a60 [ 629.792939][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 629.792962][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 629.792980][ C0] ? skb_push+0x97/0x100 [ 629.793002][ C0] br_dev_queue_push_xmit+0x771/0x950 [ 629.793019][ C0] ? br_nf_post_routing+0x1ef/0xe80 [ 629.793037][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 629.793057][ C0] ? NF_HOOK+0xa1/0x460 [ 629.793080][ C0] NF_HOOK+0x3ac/0x460 [ 629.793100][ C0] ? NF_HOOK+0xa1/0x460 [ 629.793117][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 629.793136][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 629.793158][ C0] br_forward_finish+0xd8/0x130 [ 629.793171][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 629.793187][ C0] NF_HOOK+0x3ac/0x460 [ 629.793201][ C0] ? nsim_dev_trap_report_work+0x260/0xb50 [ 629.793232][ C0] ? NF_HOOK+0xa1/0x460 [ 629.793250][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 629.793269][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 629.793294][ C0] __br_forward+0x46a/0x640 [ 629.793308][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 629.793324][ C0] ? __pfx___br_forward+0x10/0x10 [ 629.793339][ C0] ? skb_clone+0x240/0x390 [ 629.793362][ C0] maybe_deliver+0xb3/0x150 [ 629.793384][ C0] br_flood+0x2e4/0x680 [ 629.793406][ C0] br_dev_xmit+0x12ac/0x1c00 [ 629.793432][ C0] ? br_dev_xmit+0x220/0x1c00 [ 629.793457][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 629.793474][ C0] ? hsr_forward_skb+0x1238/0x2d20 [ 629.793489][ C0] ? dev_hard_start_xmit+0x2d4/0x840 [ 629.793508][ C0] ? __dev_queue_xmit+0x1b80/0x3f60 [ 629.793531][ C0] ? ip6_finish_output2+0x1296/0x1750 [ 629.793559][ C0] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 629.793577][ C0] ? call_timer_fn+0x189/0x650 [ 629.793598][ C0] ? netif_skb_features+0x8be/0xca0 [ 629.793624][ C0] dev_hard_start_xmit+0x2d4/0x840 [ 629.793645][ C0] __dev_queue_xmit+0x1b80/0x3f60 [ 629.793717][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 629.793742][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 629.793760][ C0] ? __copy_skb_header+0xa7/0x5a0 [ 629.793775][ C0] ? __asan_memcpy+0x40/0x70 [ 629.793790][ C0] ? __pskb_copy_fclone+0x9fb/0x10e0 [ 629.793813][ C0] ? __asan_memcpy+0x40/0x70 [ 629.793834][ C0] ? __pskb_copy_fclone+0x9fb/0x10e0 [ 629.793862][ C0] ? hsr_addr_subst_dest+0x30d/0xac0 [ 629.793896][ C0] hsr_forward_skb+0x184c/0x2d20 [ 629.793912][ C0] ? kthread+0x7b7/0x940 [ 629.793930][ C0] ? ret_from_fork+0x4b/0x80 [ 629.793945][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 629.793968][ C0] ? hsr_forward_skb+0xb8/0x2d20 [ 629.793994][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 629.794017][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 629.794045][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 629.794062][ C0] ? hsr_dev_xmit+0x18a/0x210 [ 629.794085][ C0] hsr_dev_xmit+0x195/0x210 [ 629.794111][ C0] dev_hard_start_xmit+0x2d4/0x840 [ 629.794140][ C0] __dev_queue_xmit+0x1b80/0x3f60 [ 629.794161][ C0] ? register_lock_class+0x54/0x330 [ 629.794182][ C0] ? __lock_acquire+0xad5/0xd80 [ 629.794203][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 629.794220][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 629.794237][ C0] ? neigh_connected_output+0x1d5/0x450 [ 629.794262][ C0] ? read_seqbegin+0x15c/0x2c0 [ 629.794287][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 629.794309][ C0] ? read_seqbegin+0x202/0x2c0 [ 629.794335][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 629.794357][ C0] ? eth_header+0x11c/0x1f0 [ 629.794374][ C0] ? neigh_connected_output+0x3a7/0x450 [ 629.794399][ C0] ip6_finish_output2+0x1296/0x1750 [ 629.794430][ C0] ? ip6_finish_output2+0x701/0x1750 [ 629.794464][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 629.794493][ C0] ? ip6_mtu+0x81/0x3f0 [ 629.794518][ C0] ? ip6_mtu+0x81/0x3f0 [ 629.794536][ C0] ip6_finish_output+0x421/0x840 [ 629.794557][ C0] ndisc_send_skb+0xb58/0x1560 [ 629.794572][ C0] ? ndisc_send_skb+0x1ef/0x1560 [ 629.794597][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 629.794622][ C0] ? __pfx_dst_output+0x10/0x10 [ 629.794644][ C0] ? __ndisc_fill_addr_option+0xe8/0x140 [ 629.794665][ C0] ? ndisc_send_rs+0x439/0x5c0 [ 629.794681][ C0] addrconf_rs_timer+0x380/0x680 [ 629.794704][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 629.794734][ C0] call_timer_fn+0x189/0x650 [ 629.794756][ C0] ? call_timer_fn+0xc2/0x650 [ 629.794775][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 629.794802][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 629.794823][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 629.794845][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 629.794867][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.794886][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 629.794909][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 629.794937][ C0] __run_timer_base+0x66e/0x8e0 [ 629.794963][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 629.794979][ C0] ? seqcount_lockdep_reader_access+0x1c3/0x230 [ 629.795003][ C0] run_timer_softirq+0xb7/0x170 [ 629.795018][ C0] handle_softirqs+0x2d6/0x9b0 [ 629.795043][ C0] ? __irq_exit_rcu+0xfb/0x220 [ 629.795065][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 629.795086][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 629.795117][ C0] __irq_exit_rcu+0xfb/0x220 [ 629.795131][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 629.795150][ C0] irq_exit_rcu+0x9/0x30 [ 629.795162][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 629.795184][ C0] [ 629.795191][ C0] [ 629.795200][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 629.795222][ C0] RIP: 0010:unwind_next_frame+0xb14/0x23b0 [ 629.795248][ C0] Code: 00 00 00 fc ff df 48 8b 44 24 38 80 3c 28 00 48 8b 5c 24 10 74 08 48 89 df e8 88 7b bf 00 4c 89 33 48 8b 44 24 50 80 3c 28 00 <4c> 8b 24 24 48 8b 9c 24 80 00 00 00 74 08 48 89 df e8 66 7b bf 00 [ 629.795266][ C0] RSP: 0018:ffffc900043ff368 EFLAGS: 00000246 [ 629.795280][ C0] RAX: 1ffff9200087fe9b RBX: ffffc900043ff4e8 RCX: 1ffff9200087fe94 [ 629.795292][ C0] RDX: ffffffff90eae13c RSI: 0000000000000002 RDI: ffffc900043ff498 [ 629.795302][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 629.795312][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200087fe96 [ 629.795322][ C0] R13: ffffc90004400000 R14: ffffffff816440c7 R15: ffffc900043f8000 [ 629.795340][ C0] ? arch_stack_walk+0xe7/0x150 [ 629.795374][ C0] ? unwind_next_frame+0xae3/0x23b0 [ 629.795400][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 629.795424][ C0] ? __unwind_start+0xf8/0x740 [ 629.795443][ C0] __unwind_start+0x59a/0x740 [ 629.795463][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 629.795493][ C0] arch_stack_walk+0xe7/0x150 [ 629.795521][ C0] ? arch_stack_walk+0xe7/0x150 [ 629.795548][ C0] stack_trace_save+0x11a/0x1d0 [ 629.795576][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 629.795597][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 629.795618][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 629.795640][ C0] __kfence_alloc+0x312/0x430 [ 629.795666][ C0] ? __pfx___kfence_alloc+0x10/0x10 [ 629.795711][ C0] ? __alloc_skb+0x166/0x480 [ 629.795728][ C0] ? kmem_cache_alloc_node_noprof+0x2da/0x3b0 [ 629.795750][ C0] kmem_cache_alloc_node_noprof+0x2fb/0x3b0 [ 629.795771][ C0] ? __alloc_skb+0x1c2/0x480 [ 629.795791][ C0] __alloc_skb+0x1c2/0x480 [ 629.795811][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 629.795833][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 629.795851][ C0] ? kmem_cache_free+0x197/0x410 [ 629.795877][ C0] ? nsim_dev_trap_report_work+0x7d1/0xb50 [ 629.795898][ C0] nsim_dev_trap_report_work+0x260/0xb50 [ 629.795924][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 629.795948][ C0] process_scheduled_works+0xac3/0x18e0 [ 629.795984][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 629.796011][ C0] ? assign_work+0x367/0x3d0 [ 629.796031][ C0] worker_thread+0x870/0xd50 [ 629.796052][ C0] ? __kthread_parkme+0x1a8/0x200 [ 629.796071][ C0] ? __pfx_worker_thread+0x10/0x10 [ 629.796096][ C0] kthread+0x7b7/0x940 [ 629.796125][ C0] ? __pfx_worker_thread+0x10/0x10 [ 629.796147][ C0] ? __pfx_kthread+0x10/0x10 [ 629.796173][ C0] ? __pfx_kthread+0x10/0x10 [ 629.796192][ C0] ? __pfx_kthread+0x10/0x10 [ 629.796211][ C0] ? __pfx_kthread+0x10/0x10 [ 629.796235][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.796256][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 629.796277][ C0] ? __pfx_kthread+0x10/0x10 [ 629.796303][ C0] ret_from_fork+0x4b/0x80 [ 629.796323][ C0] ? __pfx_kthread+0x10/0x10 [ 629.796343][ C0] ret_from_fork_asm+0x1a/0x30 [ 629.796361][ C0] [ 631.001233][ T1225] usb 5-1: USB disconnect, device number 75 [ 631.271514][ T5895] usb 3-1: USB disconnect, device number 78