last executing test programs: 33m2.092591764s ago: executing program 4 (id=4033): r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x100, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0xc}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008012}, 0x400c0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x345, 0x0, 0x1}]}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x80) r3 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r3, 0x3a5) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)='T', 0x1, 0x805, &(0x7f0000000300)={0x11, 0x9, r6, 0x1, 0xf7}, 0x14) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0x2}) 33m1.805342084s ago: executing program 4 (id=4037): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x3, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r4, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000180)) close(r0) 33m0.754047155s ago: executing program 4 (id=4040): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 32m57.760456565s ago: executing program 4 (id=4051): socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={&(0x7f00000005c0), 0x6e, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/40, 0x28}, {0x0}], 0x4}, 0x10000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYBLOB="01002bbd"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4000c00) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 32m56.482637941s ago: executing program 4 (id=4057): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$netlink(0x10, 0x3, 0x8000000004) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) 32m56.290454988s ago: executing program 4 (id=4058): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) listen(0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20008040) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) 32m41.116926726s ago: executing program 32 (id=4058): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) listen(0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20008040) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) 12.613893377s ago: executing program 2 (id=10261): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) r5 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000003c0)=[@ioring_restriction_register_op={0x0, 0xc}, @ioring_restriction_sqe_flags_required={0x3, 0x19}], 0x2) io_uring_enter(r5, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x0, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) syz_open_dev$tty1(0xc, 0x4, 0x2) pipe2(&(0x7f0000001440), 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.828448863s ago: executing program 2 (id=10272): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001640)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x95}}}}}}}, 0x0) 8.53781204s ago: executing program 2 (id=10273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001040)={@remote, @link_local, @void, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 8.215044995s ago: executing program 2 (id=10274): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 8.08125749s ago: executing program 1 (id=10275): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300f83d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$FUSE(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_emit_ethernet(0x2dc, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd650a9e8202a6000100000000000000000000ffffac141413200100000000000000040000000000012e0e000900000000fc01000000000000000000000000000100000000000000000000ffff0000000000000000000000000000000000000000fc0100000000000000000000000000000000000000000000000000000000000120010000000000000000000000000002ff0200000000000000000000000000013c12020800000000fe80000000000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a3000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x3ff, 0x2d]}, &(0x7f0000000100)=0x8) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 8.011081938s ago: executing program 2 (id=10276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.168547195s ago: executing program 0 (id=10282): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001640)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x95}}}}}}}, 0x0) 5.969793119s ago: executing program 0 (id=10283): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x0, 0x0, 0x0, [], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={r3, 0x0, 0x0, 0x6, 0x0, [0x0], [], [0x0, 0xfffffffc, 0xfffffff7], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)={r4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.827948297s ago: executing program 0 (id=10284): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendto$isdn(r0, &(0x7f000000c380)={0xffffbdee, 0x7, "ed867c"}, 0xb, 0x4000000, &(0x7f000000c440)={0x22, 0xc9, 0xe, 0x71, 0x5f}, 0x6) 5.691708131s ago: executing program 0 (id=10286): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000001c0)={0x1, 0x4, 0x12, &(0x7f0000000080)=""/18}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, r5, 0x2000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) read(r0, 0x0, 0x0) r9 = add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0xa, r9, &(0x7f0000000300)='asymmetric\x00', 0x0) 4.784716688s ago: executing program 5 (id=10289): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 4.599090621s ago: executing program 3 (id=10290): socket$nl_sock_diag(0x10, 0x3, 0x4) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x2402, 0xa5c, 0x47425247, 0x8, 0x9, 0x9, 0xa, 0x3, 0x1, 0x8}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_UNLINKAT={0x24, 0x44, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9}, 0x0) 4.585671105s ago: executing program 5 (id=10291): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x1, 0x1, 0x2, &(0x7f00000001c0)={0x21, "c4333324189eb7eaa68a25221f4ba0fcaa0c928ba7b48ff43b94fc102ede5eae97"}}) 4.256687115s ago: executing program 1 (id=10292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = io_uring_setup(0x3a74, &(0x7f0000002b00)={0x0, 0x9182, 0x100, 0x3, 0x1e5}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r0, r1], 0x2) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000005980)={0x1, 0x0, 0x0, &(0x7f00000058c0)=[{0x0}], 0x0}, 0x20) 4.042670756s ago: executing program 1 (id=10293): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.495513983s ago: executing program 1 (id=10294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.171536819s ago: executing program 3 (id=10295): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000001b40)={0x1, [{0x2, 0x0, 0x8000, 0x0}, {0x3, 0x11, 0xfffffffd, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xffffff56, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x20, 0xa1a, &(0x7f0000000480)="f104fe42"}, {0x0, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4000000, 0x0}, {0x3, 0x8, 0x8, &(0x7f0000000780)="11"}, {0x1, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x18, 0x0}, {0x0, 0x0, 0x8000004, 0x0}]}) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3800, 0x1}}, './file1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000300)={0xa0, 0xfffffffffffffff5, r9, {{0x4, 0x2, 0x4, 0x7, 0x7, 0x7fff, {0x0, 0x2, 0x0, 0x5, 0x5, 0x5a7a, 0x0, 0x0, 0x2, 0x1000, 0x6, 0x0, 0xffffffffffffffff, 0x59, 0xffff840d}}, {0x0, 0x14}}}, 0xa0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x8, 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.941928552s ago: executing program 5 (id=10296): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x95) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000480)={0x8, 0x4, 0x4, 0x1000, &(0x7f0000001280)=""/4096, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="6a010300", @ANYRES16=0x0, @ANYBLOB="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"], 0x100}}, 0x48d1) add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173", 0x68, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socket$inet6_sctp(0xa, 0x3, 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r5) 2.161191139s ago: executing program 0 (id=10297): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x184, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x134, 0x11, [{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x184}}, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @empty, 0x7}, 0x1c) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000040)=0x200000000) r8 = dup2(r7, r7) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/107, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x6) read$FUSE(r8, &(0x7f00000016c0)={0x2020}, 0x2020) write$vhost_msg_v2(r8, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48) 2.142635111s ago: executing program 1 (id=10298): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0x5) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) pipe(0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40848c0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r8, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r9, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.383476975s ago: executing program 5 (id=10299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.306228705s ago: executing program 2 (id=10278): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x800404, 0x20000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) socket$inet6_sctp(0xa, 0x1, 0x84) 1.096825098s ago: executing program 5 (id=10300): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) 797.997836ms ago: executing program 3 (id=10301): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000001640)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x95, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) 666.307078ms ago: executing program 3 (id=10302): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) link(0x0, 0x0) 563.463255ms ago: executing program 3 (id=10303): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000440)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 452.620579ms ago: executing program 0 (id=10304): socket$nl_sock_diag(0x10, 0x3, 0x4) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x2402, 0xa5c, 0x47425247, 0x8, 0x9, 0x9, 0xa, 0x3, 0x1, 0x8}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_UNLINKAT={0x24, 0x44, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9}, 0x0) 376.198302ms ago: executing program 1 (id=10305): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x34, r1, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 363.180805ms ago: executing program 3 (id=10306): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000040) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c"], 0x34}, 0x1, 0x0, 0x0, 0x4040011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, @val=@netkit}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x3, 0x0, 0x0) syz_io_uring_setup(0x400caf, &(0x7f0000000300)={0x0, 0x2695, 0x20, 0x5, 0x80012c}, &(0x7f00000002c0), &(0x7f00000000c0)) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0xfffffffb, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000000, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x9, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x4, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x3, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x408, 0x9, 0x4, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x3, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303f, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x800, 0x2006, 0x0, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000007, 0x0, 0xb9, 0xce7, 0x1fb, 0x2, 0x57, 0x4, 0x3, 0x102, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0xfffffffd, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 0s ago: executing program 5 (id=10307): mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0xfffffffff000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000780001062abd700000008ec20700"], 0x18}], 0x1, 0x0, 0x0, 0x2000}, 0x4000880) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r8}]}}}]}, 0x38}}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ace 0 claimed by hub while 'syz.1.9214' sets config #1 [ 2644.585057][ T5897] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2644.772076][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2644.806111][ T5897] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 2644.844547][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2644.872118][ T5897] usb 2-1: config 0 descriptor?? [ 2644.924167][ T5897] option 2-1:0.0: GSM modem (1-port) converter detected [ 2645.193105][T22392] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2645.431970][T22392] usb 6-1: Using ep0 maxpacket: 16 [ 2645.450381][ T7797] syzkaller0: entered promiscuous mode [ 2645.463468][T22392] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2645.482143][T22392] usb 6-1: config 0 has no interfaces? [ 2645.523565][ T7797] syzkaller0: entered allmulticast mode [ 2645.767781][T22392] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2645.883237][T22392] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2645.924714][T22392] usb 6-1: Product: syz [ 2645.940879][T22392] usb 6-1: Manufacturer: syz [ 2645.984571][T22392] usb 6-1: SerialNumber: syz [ 2646.006949][T22392] usb 6-1: config 0 descriptor?? [ 2646.052329][ T7784] syz.3.9221 (7784): drop_caches: 2 [ 2646.336151][T22392] usb 6-1: USB disconnect, device number 24 [ 2647.068291][ T7825] input: syz1 as /devices/virtual/input/input174 [ 2647.134460][ T7828] tipc: Started in network mode [ 2647.146090][ T7828] tipc: Node identity ac14140f, cluster identity 4711 [ 2647.175147][ T7828] tipc: New replicast peer: 172.20.20.19 [ 2647.186874][ T7828] tipc: Enabled bearer , priority 10 [ 2648.079806][T22392] usb 2-1: USB disconnect, device number 68 [ 2648.087396][T22392] option 2-1:0.0: device disconnected [ 2648.187879][ T7846] input: syz0 as /devices/virtual/input/input175 [ 2648.315395][ T5897] tipc: Node number set to 2886997007 [ 2649.020221][ T7879] tipc: Started in network mode [ 2649.038096][ T7879] tipc: Node identity ac14140f, cluster identity 4711 [ 2649.059785][ T7879] tipc: New replicast peer: 172.20.20.19 [ 2649.093691][ T7879] tipc: Enabled bearer , priority 10 [ 2650.193372][T22392] tipc: Node number set to 2886997007 [ 2650.436209][ T7916] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9272'. [ 2650.460905][ T7916] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9272'. [ 2650.553547][T22392] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 2650.744754][T22392] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2650.781278][T22392] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2650.805318][T22392] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2650.826393][T22392] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2650.860451][T22392] usb 3-1: Product: syz [ 2650.875537][T22392] usb 3-1: Manufacturer: syz [ 2650.895927][T22392] usb 3-1: SerialNumber: syz [ 2650.912513][T22392] usb 3-1: config 0 descriptor?? [ 2650.950487][T22392] usb 3-1: selecting invalid altsetting 0 [ 2650.983183][T30636] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2651.143109][T30636] usb 6-1: Using ep0 maxpacket: 16 [ 2651.157800][T30636] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2651.184914][T30636] usb 6-1: config 0 has no interfaces? [ 2651.207907][T30636] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2651.222511][T30636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2651.227436][ T5897] usb 3-1: USB disconnect, device number 7 [ 2651.231328][T30636] usb 6-1: Product: syz [ 2651.245759][T30636] usb 6-1: Manufacturer: syz [ 2651.250458][T30636] usb 6-1: SerialNumber: syz [ 2651.283508][T30636] usb 6-1: config 0 descriptor?? [ 2651.303245][T22392] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2651.485306][T22392] usb 2-1: Using ep0 maxpacket: 8 [ 2651.505874][T22392] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2651.523081][T22392] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2651.545293][T22392] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2651.584757][T22392] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2651.612401][T22392] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2651.647953][ T5897] usb 6-1: USB disconnect, device number 25 [ 2651.668910][T22392] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2651.690787][T22392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2651.728452][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.750779][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.779594][T22392] usbtmc 2-1:16.0: bulk endpoints not found [ 2652.243201][T22392] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2652.404369][T22392] usb 1-1: Using ep0 maxpacket: 16 [ 2652.421632][T22392] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 2652.448082][T22392] usb 1-1: config 0 has no interface number 0 [ 2652.462625][T22392] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 2652.499021][T22392] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 2652.526483][T22392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2652.551492][T22392] usb 1-1: Product: syz [ 2652.564971][T22392] usb 1-1: Manufacturer: syz [ 2652.580787][T22392] usb 1-1: SerialNumber: syz [ 2652.602156][T22392] usb 1-1: config 0 descriptor?? [ 2653.002738][ T7968] netlink: 'syz.3.9292': attribute type 1 has an invalid length. [ 2653.081192][ T7970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9293'. [ 2653.101299][ T7970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9293'. [ 2654.098816][T27928] usb 2-1: USB disconnect, device number 69 [ 2654.143099][T30636] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 2654.190300][ T7995] fuse: Bad value for 'group_id' [ 2654.207023][ T7995] fuse: Bad value for 'group_id' [ 2654.329313][T30636] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2654.339834][T30636] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2654.371472][T30636] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2654.392113][T30636] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2654.439122][T30636] usb 4-1: Product: syz [ 2654.462274][T30636] usb 4-1: Manufacturer: syz [ 2654.500008][T30636] usb 4-1: SerialNumber: syz [ 2654.547195][T30636] usb 4-1: config 0 descriptor?? [ 2654.609431][T30636] usb 4-1: selecting invalid altsetting 0 [ 2654.864382][T30636] usb 4-1: USB disconnect, device number 59 [ 2655.055749][T22392] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 2655.078257][T22392] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 2655.166932][ T8008] tipc: Enabling of bearer rejected, already enabled [ 2655.386066][ T8016] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9311'. [ 2655.430225][T22392] usb 1-1: USB disconnect, device number 68 [ 2655.445207][ T8016] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9311'. [ 2655.658431][ T7934] udevd[7934]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2655.783332][T22392] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2655.863401][T27928] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2655.983086][T22392] usb 1-1: Using ep0 maxpacket: 8 [ 2656.012751][T22392] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 2656.052282][T22392] usb 1-1: config 0 has no interface number 0 [ 2656.063001][T27928] usb 2-1: Using ep0 maxpacket: 8 [ 2656.088115][T22392] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2656.103285][T27928] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2656.126861][T27928] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2656.154692][T27928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2656.164709][T27928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2656.169991][T22392] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2656.183091][T27928] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2656.214177][T27928] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2656.223446][T27928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2656.254290][T30636] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2656.259359][T27928] usbtmc 2-1:16.0: bulk endpoints not found [ 2656.272228][T22392] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2656.295415][T22392] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2656.323022][T22392] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2656.342330][T22392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2656.361817][T22392] usb 1-1: config 0 descriptor?? [ 2656.381773][T22392] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2656.443017][T30636] usb 6-1: Using ep0 maxpacket: 16 [ 2656.449665][T30636] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2656.468431][T30636] usb 6-1: config 0 has no interfaces? [ 2656.486430][T30636] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2656.503019][T30636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2656.511022][T30636] usb 6-1: Product: syz [ 2656.533026][T30636] usb 6-1: Manufacturer: syz [ 2656.537745][T30636] usb 6-1: SerialNumber: syz [ 2656.554238][T30636] usb 6-1: config 0 descriptor?? [ 2656.661079][T27928] usb 1-1: USB disconnect, device number 69 [ 2656.667117][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 2656.683530][T27928] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 2656.784560][T30636] usb 6-1: USB disconnect, device number 26 [ 2657.395131][ T8033] fuse: Bad value for 'fd' [ 2658.634840][T30636] usb 2-1: USB disconnect, device number 70 [ 2658.798819][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9331'. [ 2659.050343][ T8076] syz_tun: entered allmulticast mode [ 2659.065835][ T8076] syz_tun: left allmulticast mode [ 2660.223049][ T5897] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2660.383074][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 2660.398885][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2660.433656][ T5897] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2660.441606][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9341'. [ 2660.476595][ T5897] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 2660.504591][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2660.531139][ T5897] usb 1-1: Product: syz [ 2660.541718][ T5897] usb 1-1: Manufacturer: syz [ 2660.554907][ T5897] usb 1-1: SerialNumber: syz [ 2660.571281][ T5897] usb 1-1: config 0 descriptor?? [ 2660.679968][ T8101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9343'. [ 2660.705613][ T8101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9343'. [ 2660.828790][ T5897] usb 1-1: USB disconnect, device number 70 [ 2660.911114][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9345'. [ 2661.463013][T30636] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2661.613102][T30636] usb 2-1: Using ep0 maxpacket: 16 [ 2661.620877][T30636] usb 2-1: config 1 interface 0 altsetting 132 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2661.632319][T30636] usb 2-1: config 1 interface 0 altsetting 132 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2661.645668][T30636] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2661.655185][T30636] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2661.664542][T30636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2661.672533][T30636] usb 2-1: Product: syz [ 2661.677488][T30636] usb 2-1: Manufacturer: syz [ 2661.682107][T30636] usb 2-1: SerialNumber: syz [ 2661.695499][ T8113] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2661.703369][ T8113] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2661.945712][T30636] usb 2-1: bad CDC descriptors [ 2661.966403][T30636] usb 2-1: USB disconnect, device number 71 [ 2662.848726][ T8124] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2662.878848][ T8124] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2662.918169][ T8124] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2662.926537][ T8124] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2662.935006][ T8124] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2662.941128][ T8124] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2662.949861][ T8124] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2662.957756][ T8124] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2663.006521][ T8124] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2663.012611][ T8124] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2663.835890][ T8159] team0: Caught tx_queue_len zero misconfig [ 2663.862151][ T8158] fuse: Unknown parameter 'grou00000000000000000000' [ 2663.922405][ T8159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9363'. [ 2664.183078][T30636] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 2664.355856][T30636] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 2664.369994][T30636] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2664.386701][T30636] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2664.399057][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9367'. [ 2664.408286][T30636] usb 2-1: config 1 has no interface number 0 [ 2664.415068][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9367'. [ 2664.425659][T30636] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2664.456666][T30636] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2664.468132][T30636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2664.477440][T30636] usb 2-1: Product: syz [ 2664.481661][T30636] usb 2-1: Manufacturer: syz [ 2664.486832][T30636] usb 2-1: SerialNumber: syz [ 2664.528916][T30636] cdc_wdm 2-1:1.128: skipping garbage [ 2664.544738][T30636] cdc_wdm 2-1:1.128: probe with driver cdc_wdm failed with error -22 [ 2664.660684][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9367'. [ 2664.679435][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9367'. [ 2664.868779][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2664.912245][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2664.920270][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 2665.003062][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 2665.009155][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 2665.015204][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 2665.073132][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 2665.489052][ T8189] fuse: Unknown parameter 'grou00000000000000000000' [ 2665.715624][ T8199] tipc: Enabling of bearer rejected, already enabled [ 2666.115814][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9384'. [ 2666.857700][ T5897] usb 2-1: USB disconnect, device number 72 [ 2666.993390][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 2667.074717][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 2667.080932][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 2667.081215][ T8173] Bluetooth: hci0: command 0x0406 tx timeout [ 2667.100427][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9395'. [ 2667.167648][ T8173] Bluetooth: hci4: command 0x0406 tx timeout [ 2667.203058][T22392] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2667.414691][T22392] usb 6-1: Using ep0 maxpacket: 16 [ 2667.431354][T22392] usb 6-1: config 1 interface 0 altsetting 132 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2667.468894][T22392] usb 6-1: config 1 interface 0 altsetting 132 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2667.509880][T22392] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2667.538090][T22392] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2667.569222][T22392] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2667.592941][T22392] usb 6-1: Product: syz [ 2667.597374][T22392] usb 6-1: Manufacturer: syz [ 2667.617029][T22392] usb 6-1: SerialNumber: syz [ 2667.636025][ T8234] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2667.665183][ T8234] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2667.884830][T22392] usb 6-1: bad CDC descriptors [ 2667.963600][T22392] usb 6-1: USB disconnect, device number 27 [ 2669.266337][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9408'. [ 2669.352864][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9411'. [ 2669.490645][ T8288] tipc: Started in network mode [ 2669.503031][ T8288] tipc: Node identity ac14140f, cluster identity 4711 [ 2669.515248][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9411'. [ 2669.559658][ T8288] tipc: New replicast peer: 172.20.20.19 [ 2669.602637][ T8288] tipc: Enabled bearer , priority 10 [ 2670.134453][ T5897] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2670.353112][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 2670.378788][ T5897] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 2670.422872][ T5897] usb 4-1: config 0 has no interface number 0 [ 2670.422975][T27928] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2670.437013][ T5897] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2670.448935][ T5897] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2670.461024][ T5897] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2670.478272][ T5897] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2670.511793][ T5897] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2670.551661][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2670.613024][T27928] usb 3-1: Using ep0 maxpacket: 8 [ 2670.622612][T27928] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2670.640663][ T5897] usb 4-1: config 0 descriptor?? [ 2670.649128][T27928] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2670.664269][ T5897] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2670.674672][T27928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2670.691943][T27928] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2670.694281][T22392] tipc: Node number set to 2886997007 [ 2670.703850][T27928] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2670.721576][T27928] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2670.733227][T27928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2670.807134][T27928] usbtmc 3-1:16.0: bulk endpoints not found [ 2670.906836][T27928] usb 4-1: USB disconnect, device number 60 [ 2670.912866][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 2670.957017][T27928] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 2670.971746][ T8306] fuse: Unknown parameter 'group_i00000000000000000000' [ 2671.148114][T30636] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2671.240391][ T8311] tipc: Enabling of bearer rejected, already enabled [ 2671.303365][T30636] usb 2-1: Using ep0 maxpacket: 32 [ 2671.310030][T30636] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2671.320842][T30636] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2671.333028][T30636] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2671.344319][T30636] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2671.359604][T30636] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2671.368776][T30636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2671.377104][T30636] usb 2-1: Product: syz [ 2671.381345][T30636] usb 2-1: Manufacturer: syz [ 2671.386502][T30636] usb 2-1: SerialNumber: syz [ 2671.398368][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2671.409078][T30636] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input180 [ 2671.613010][T30636] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2671.621422][T30636] (id 0x00) [ 2671.688564][T30636] rc_core: IR keymap rc-imon-pad not found [ 2671.694717][T30636] Registered IR keymap rc-empty [ 2671.699697][T30636] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2671.710479][T30636] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2671.815738][T30636] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 2671.840604][T30636] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input181 [ 2671.882838][T30636] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:73> initialized [ 2672.585348][ T8324] imon:send_packet: packet tx failed (-71) [ 2672.588608][T30636] usb 2-1: USB disconnect, device number 73 [ 2672.643045][ T8324] imon:vfd_write: send packet #0 failed [ 2673.079684][ T8342] fuse: Unknown parameter '' [ 2673.143062][T27928] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2673.183601][ T5905] usb 3-1: USB disconnect, device number 8 [ 2673.313015][T27928] usb 1-1: Using ep0 maxpacket: 16 [ 2673.332298][T27928] usb 1-1: config 1 interface 0 altsetting 132 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2673.376478][T27928] usb 1-1: config 1 interface 0 altsetting 132 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2673.408142][T27928] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2673.436682][T27928] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2673.470202][T27928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2673.493871][T27928] usb 1-1: Product: syz [ 2673.503882][T27928] usb 1-1: Manufacturer: syz [ 2673.520166][T27928] usb 1-1: SerialNumber: syz [ 2673.545608][ T8336] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2673.566730][ T8336] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2673.814105][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9434'. [ 2673.838136][T27928] usb 1-1: bad CDC descriptors [ 2673.896521][T27928] usb 1-1: USB disconnect, device number 71 [ 2676.078525][ T8388] fuse: Unknown parameter 'group_id00000000000000000000' [ 2676.309271][ T8396] tipc: Enabling of bearer rejected, already enabled [ 2676.624117][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9448'. [ 2678.987445][ T8443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9463'. [ 2679.425977][T30636] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 2680.137747][T30636] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 2680.170517][T30636] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2680.199489][T30636] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2680.251789][T30636] usb 3-1: config 1 has no interface number 0 [ 2680.262786][T30636] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2680.325543][T30636] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2680.343564][T30636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2680.352628][ T8475] tipc: Enabling of bearer rejected, already enabled [ 2680.361526][T30636] usb 3-1: Product: syz [ 2680.368503][T30636] usb 3-1: Manufacturer: syz [ 2680.373411][T30636] usb 3-1: SerialNumber: syz [ 2680.393181][T30636] cdc_wdm 3-1:1.128: skipping garbage [ 2680.398780][T30636] cdc_wdm 3-1:1.128: probe with driver cdc_wdm failed with error -22 [ 2680.754588][ T8443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2680.799261][ T8443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2682.149727][T30636] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 2682.255972][T27928] usb 3-1: USB disconnect, device number 9 [ 2682.327494][T30636] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 2682.342847][T30636] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 2682.358738][T30636] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2682.373912][T30636] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2682.405807][T30636] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2682.453991][T30636] usb 1-1: Product: syz [ 2682.467800][T30636] usb 1-1: Manufacturer: syz [ 2682.480420][T30636] usb 1-1: SerialNumber: syz [ 2682.501686][T30636] usb 1-1: config 0 descriptor?? [ 2682.521638][ T8507] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2682.551469][T30636] usb 1-1: selecting invalid altsetting 0 [ 2682.803137][T27928] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2682.904871][ T8507] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2682.912796][ T8507] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2682.952692][ T8507] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2682.972902][ T8507] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2682.983397][T27928] usb 3-1: Using ep0 maxpacket: 8 [ 2683.014993][T27928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2683.022560][T27928] usb 3-1: can't read configurations, error -61 [ 2683.034290][ T5897] usb 1-1: USB disconnect, device number 72 [ 2683.047213][ T8523] tipc: Enabled bearer , priority 0 [ 2683.138826][ T8523] tipc: Resetting bearer [ 2683.183185][T27928] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2683.382952][T27928] usb 3-1: Using ep0 maxpacket: 8 [ 2683.396617][T27928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2683.405354][T27928] usb 3-1: can't read configurations, error -61 [ 2683.419564][T27928] usb usb3-port1: attempt power cycle [ 2683.783255][T27928] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2683.801497][ T8539] input: syz0 as /devices/virtual/input/input184 [ 2683.860426][T27928] usb 3-1: Using ep0 maxpacket: 8 [ 2683.883527][T27928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2683.907129][T27928] usb 3-1: can't read configurations, error -61 [ 2684.046785][T27928] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2684.074447][T27928] usb 3-1: Using ep0 maxpacket: 8 [ 2684.087568][T27928] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2684.103450][T27928] usb 3-1: can't read configurations, error -61 [ 2684.117654][T27928] usb usb3-port1: unable to enumerate USB device [ 2684.900898][ T8559] fuse: Unknown parameter '' [ 2685.653124][T30636] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2685.844567][T30636] usb 1-1: Using ep0 maxpacket: 16 [ 2685.883108][T30636] usb 1-1: config 1 interface 0 altsetting 132 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2685.933382][T30636] usb 1-1: config 1 interface 0 altsetting 132 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2685.981475][T30636] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2686.009843][T30636] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2686.044555][T30636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2686.087716][T30636] usb 1-1: Product: syz [ 2686.106062][T30636] usb 1-1: Manufacturer: syz [ 2686.118035][T30636] usb 1-1: SerialNumber: syz [ 2686.136443][ T8568] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2686.173208][ T8568] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2686.422585][ T8568] netlink: 'syz.0.9509': attribute type 23 has an invalid length. [ 2686.436393][ T8568] IPv6: NLM_F_CREATE should be specified when creating new route [ 2686.449851][T30636] usb 1-1: bad CDC descriptors [ 2686.474112][ T8578] netlink: 'syz.3.9512': attribute type 12 has an invalid length. [ 2686.484666][T30636] usb 1-1: USB disconnect, device number 73 [ 2686.508994][ T8578] netlink: 'syz.3.9512': attribute type 29 has an invalid length. [ 2686.529910][ T8578] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9512'. [ 2686.546165][ T8578] netlink: 'syz.3.9512': attribute type 1 has an invalid length. [ 2686.556576][ T8578] netlink: 'syz.3.9512': attribute type 2 has an invalid length. [ 2686.567592][ T8580] fuse: Bad value for 'user_id' [ 2686.568979][ T8578] netlink: 11 bytes leftover after parsing attributes in process `syz.3.9512'. [ 2686.597883][ T8580] fuse: Bad value for 'user_id' [ 2686.832102][ T8587] tipc: Enabling of bearer rejected, already enabled [ 2687.333492][ T8603] syzkaller1: entered promiscuous mode [ 2687.343738][ T8603] syzkaller1: entered allmulticast mode [ 2687.394881][T30636] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2687.413039][T22392] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2687.574179][T30636] usb 1-1: Using ep0 maxpacket: 8 [ 2687.579859][T22392] usb 2-1: Using ep0 maxpacket: 8 [ 2687.591051][T30636] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2687.630489][T22392] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 2687.641241][T30636] usb 1-1: can't read configurations, error -61 [ 2687.654030][T22392] usb 2-1: config 127 has an invalid descriptor of length 60, skipping remainder of the config [ 2687.723542][T22392] usb 2-1: config 127 has no interface number 1 [ 2687.755761][T22392] usb 2-1: config 127 interface 171 has no altsetting 0 [ 2687.770325][ T8609] bond1: (slave dummy0): Releasing backup interface [ 2687.788260][ T8609] dummy0: left promiscuous mode [ 2687.793273][T30636] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2687.812289][T22392] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 2687.819061][ T8609] dummy0: left allmulticast mode [ 2687.844172][T22392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2687.845526][ T8609] bridge_slave_0: left allmulticast mode [ 2687.877133][ T8609] bridge_slave_0: left promiscuous mode [ 2687.884011][T22392] usb 2-1: Product: syz [ 2687.888594][T22392] usb 2-1: Manufacturer: syz [ 2687.891914][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 2687.915419][T22392] usb 2-1: SerialNumber: syz [ 2687.921918][ T8609] bridge_slave_1: left allmulticast mode [ 2687.932121][ T8609] bridge_slave_1: left promiscuous mode [ 2687.944207][T30636] usb 1-1: Using ep0 maxpacket: 8 [ 2687.947027][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 2687.972979][T30636] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2687.986289][ T8609] bond0: (slave bond_slave_0): Releasing backup interface [ 2687.993774][T30636] usb 1-1: can't read configurations, error -61 [ 2688.007265][T30636] usb usb1-port1: attempt power cycle [ 2688.013538][ T8609] bond0: (slave bond_slave_1): Releasing backup interface [ 2688.035283][ T8609] team0: Port device team_slave_0 removed [ 2688.047853][ T8609] team0: Port device team_slave_1 removed [ 2688.061933][ T8609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2688.079753][ T8609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2688.098362][ T8609] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2688.403100][T30636] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2688.444366][T30636] usb 1-1: Using ep0 maxpacket: 8 [ 2688.460012][T30636] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2688.483136][T30636] usb 1-1: can't read configurations, error -61 [ 2688.516972][ T8616] syzkaller0: entered promiscuous mode [ 2688.529946][ T8616] syzkaller0: entered allmulticast mode [ 2688.653023][T30636] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2688.703900][T30636] usb 1-1: Using ep0 maxpacket: 8 [ 2688.722799][T30636] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2688.773160][T30636] usb 1-1: can't read configurations, error -61 [ 2688.792377][T30636] usb usb1-port1: unable to enumerate USB device [ 2689.373014][T30636] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2689.553088][T30636] usb 3-1: Using ep0 maxpacket: 16 [ 2689.570517][T30636] usb 3-1: config 1 interface 0 altsetting 132 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2689.601703][ T8640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9536'. [ 2689.611472][T30636] usb 3-1: config 1 interface 0 altsetting 132 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2689.622390][T30636] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2689.633035][T30636] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2689.646078][T30636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2689.654309][T30636] usb 3-1: Product: syz [ 2689.658494][T30636] usb 3-1: Manufacturer: syz [ 2689.666914][T30636] usb 3-1: SerialNumber: syz [ 2689.675354][ T8626] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2689.686252][ T8626] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2689.694897][ T8640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9536'. [ 2689.901917][ T8626] netlink: 'syz.2.9531': attribute type 23 has an invalid length. [ 2689.918115][ T8626] IPv6: NLM_F_CREATE should be specified when creating new route [ 2689.956073][T30636] usb 3-1: bad CDC descriptors [ 2689.962996][T27928] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 2690.027875][T30636] usb 3-1: USB disconnect, device number 14 [ 2690.136421][T27928] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 2690.177795][T27928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2690.228041][T27928] usb 4-1: config 0 has no interfaces? [ 2690.265264][T27928] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2690.303408][T27928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2690.351549][T27928] usb 4-1: config 0 descriptor?? [ 2690.502073][T22392] xr_serial 2-1:127.171: xr_serial converter detected [ 2690.545925][ T8646] tipc: Enabling of bearer rejected, already enabled [ 2690.624060][T22392] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 2690.633879][T22392] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2690.712291][T22392] usb 2-1: USB disconnect, device number 74 [ 2690.818264][T22392] xr_serial 2-1:127.171: device disconnected [ 2692.183147][T22392] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2692.343005][T22392] usb 6-1: Using ep0 maxpacket: 8 [ 2692.355357][T22392] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2692.373198][T22392] usb 6-1: can't read configurations, error -61 [ 2692.513843][T22392] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2692.537821][ T5905] usb 4-1: USB disconnect, device number 61 [ 2692.673698][T22392] usb 6-1: Using ep0 maxpacket: 8 [ 2692.690882][T22392] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2692.719524][T22392] usb 6-1: can't read configurations, error -61 [ 2692.737509][T22392] usb usb6-port1: attempt power cycle [ 2693.093050][T22392] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2693.145091][T22392] usb 6-1: Using ep0 maxpacket: 8 [ 2693.163375][T22392] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2693.201881][T22392] usb 6-1: can't read configurations, error -61 [ 2693.363027][T22392] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2693.413617][T22392] usb 6-1: Using ep0 maxpacket: 8 [ 2693.435579][T22392] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2693.467841][T22392] usb 6-1: can't read configurations, error -61 [ 2693.488088][T22392] usb usb6-port1: unable to enumerate USB device [ 2694.629885][ T8709] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 2694.643150][ T8709] PKCS7: Only support pkcs7_signedData type [ 2695.034749][T22392] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2695.223868][T22392] usb 3-1: Using ep0 maxpacket: 16 [ 2695.259977][T22392] usb 3-1: config 1 interface 0 altsetting 132 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2695.291202][T22392] usb 3-1: config 1 interface 0 altsetting 132 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2695.347966][T22392] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2695.359843][T22392] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2695.383073][T22392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2695.469755][T22392] usb 3-1: Product: syz [ 2695.483095][T22392] usb 3-1: Manufacturer: syz [ 2695.487923][T22392] usb 3-1: SerialNumber: syz [ 2695.513903][ T8716] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2695.523886][ T8716] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2695.798192][ T8716] netlink: 'syz.2.9564': attribute type 23 has an invalid length. [ 2695.824094][T22392] usb 3-1: bad CDC descriptors [ 2695.919824][ T8725] netem: change failed [ 2695.981417][T22392] usb 3-1: USB disconnect, device number 15 [ 2696.093975][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9567'. [ 2696.194528][ T8727] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 2696.772992][T22392] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2696.944773][T22392] usb 2-1: Using ep0 maxpacket: 8 [ 2696.965756][T22392] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2696.985285][T22392] usb 2-1: can't read configurations, error -61 [ 2697.143089][T22392] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2697.343197][T22392] usb 2-1: Using ep0 maxpacket: 8 [ 2697.386305][T22392] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2697.419463][T22392] usb 2-1: can't read configurations, error -61 [ 2697.444847][T22392] usb usb2-port1: attempt power cycle [ 2697.807323][T22392] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2697.870879][T22392] usb 2-1: Using ep0 maxpacket: 8 [ 2697.889650][T22392] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2697.914321][T22392] usb 2-1: can't read configurations, error -61 [ 2698.073055][T22392] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2698.114339][T22392] usb 2-1: Using ep0 maxpacket: 8 [ 2698.121591][T22392] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2698.131972][T22392] usb 2-1: can't read configurations, error -61 [ 2698.150216][T22392] usb usb2-port1: unable to enumerate USB device [ 2698.223955][ T5905] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2698.393033][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 2698.407808][ T5905] usb 4-1: config 1 interface 0 altsetting 132 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2698.422221][ T5905] usb 4-1: config 1 interface 0 altsetting 132 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2698.432458][ T5905] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2698.442066][ T5905] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2698.452624][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2698.461018][ T5905] usb 4-1: Product: syz [ 2698.466761][ T5905] usb 4-1: Manufacturer: syz [ 2698.471381][ T5905] usb 4-1: SerialNumber: syz [ 2698.478798][ T8771] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2698.489902][ T8771] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2698.613031][T27928] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2698.700976][ T8771] netlink: 'syz.3.9584': attribute type 23 has an invalid length. [ 2698.709356][ T8771] IPv6: NLM_F_CREATE should be specified when creating new route [ 2698.747845][ T5905] usb 4-1: bad CDC descriptors [ 2698.773757][T27928] usb 3-1: Using ep0 maxpacket: 8 [ 2698.780855][ T5905] usb 4-1: USB disconnect, device number 62 [ 2698.792518][T27928] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 2698.812864][T27928] usb 3-1: config 0 has no interface number 0 [ 2698.822589][T27928] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2698.834154][T27928] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2698.849961][T27928] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2698.864264][T27928] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2698.878289][T27928] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2698.888695][T27928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2698.931867][T27928] usb 3-1: config 0 descriptor?? [ 2698.977884][T27928] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2699.202730][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 2699.221700][T27928] usb 3-1: USB disconnect, device number 16 [ 2699.249962][T27928] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 2699.570112][ T8803] xfrm0: entered promiscuous mode [ 2699.595671][ T8803] xfrm0: entered allmulticast mode [ 2699.609541][ T8807] fuse: Invalid rootmode [ 2700.413115][T22392] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2700.613749][T22392] usb 6-1: Using ep0 maxpacket: 16 [ 2700.648777][T22392] usb 6-1: config 1 interface 0 altsetting 132 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2700.689738][T22392] usb 6-1: config 1 interface 0 altsetting 132 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2700.742707][T22392] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2700.779041][T22392] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2700.836007][T22392] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2700.864488][T22392] usb 6-1: Product: syz [ 2700.884422][T22392] usb 6-1: Manufacturer: syz [ 2700.901884][T22392] usb 6-1: SerialNumber: syz [ 2700.932189][ T8829] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2700.944258][ T8829] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2701.170761][ T8829] netlink: 'syz.5.9605': attribute type 23 has an invalid length. [ 2701.207844][T22392] usb 6-1: bad CDC descriptors [ 2701.314348][T22392] usb 6-1: USB disconnect, device number 32 [ 2701.596531][ T8857] syz_tun: entered allmulticast mode [ 2701.615947][ T8857] syz_tun: left allmulticast mode [ 2701.788392][T27928] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2701.983649][T27928] usb 2-1: Using ep0 maxpacket: 8 [ 2701.998990][T27928] usb 2-1: config 0 has no interfaces? [ 2702.013248][T27928] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2702.048578][T27928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2702.093913][T27928] usb 2-1: config 0 descriptor?? [ 2702.368163][T27928] usb 2-1: USB disconnect, device number 79 [ 2702.453574][ T8877] fuse: Unknown parameter '00000000000000000000' [ 2702.528174][ T8878] tipc: Enabling of bearer rejected, already enabled [ 2703.925341][ T8912] mac80211_hwsim hwsim287 syzkaller0: entered promiscuous mode [ 2703.940304][ T8912] mac80211_hwsim hwsim287 syzkaller0: entered allmulticast mode [ 2704.282997][T22392] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2704.433781][T22392] usb 4-1: Using ep0 maxpacket: 8 [ 2704.440559][T22392] usb 4-1: config 6 has an invalid interface number: 51 but max is 1 [ 2704.454393][T22392] usb 4-1: config 6 has no interface number 1 [ 2704.467184][T22392] usb 4-1: config 6 interface 0 has no altsetting 0 [ 2704.480371][T22392] usb 4-1: config 6 interface 51 has no altsetting 0 [ 2704.500527][T22392] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 2704.522343][T22392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2704.556907][T22392] usb 4-1: Product: syz [ 2704.571677][T22392] usb 4-1: Manufacturer: syz [ 2704.586753][T22392] usb 4-1: SerialNumber: syz [ 2704.928785][ T8910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9631'. [ 2705.365146][ T30] audit: type=1326 audit(1771439532.285:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.5.9635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2705.395603][ T30] audit: type=1326 audit(1771439532.285:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.5.9635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2705.428705][ T30] audit: type=1326 audit(1771439532.285:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.5.9635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2705.514312][ T30] audit: type=1326 audit(1771439532.285:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.5.9635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf708ef87 code=0x7ffc0000 [ 2705.606655][ T30] audit: type=1326 audit(1771439532.285:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.5.9635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2705.703033][ T30] audit: type=1326 audit(1771439532.285:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.5.9635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2705.795856][ T30] audit: type=1326 audit(1771439532.285:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.5.9635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2705.872433][ T30] audit: type=1326 audit(1771439532.285:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.5.9635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf708ef87 code=0x7ffc0000 [ 2705.949915][ T30] audit: type=1326 audit(1771439532.285:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.5.9635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2706.021505][ T30] audit: type=1326 audit(1771439532.285:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.5.9635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf708ef87 code=0x7ffc0000 [ 2706.509225][ T8936] fuse: Bad value for 'fd' [ 2706.556760][ T8936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9636'. [ 2707.599337][T22392] xr_serial 4-1:6.51: xr_serial converter detected [ 2707.628538][T22392] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 2707.654001][T22392] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2707.678753][T22392] usb 4-1: USB disconnect, device number 63 [ 2707.704573][T22392] xr_serial 4-1:6.0: device disconnected [ 2707.853015][T30636] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 2708.049365][T30636] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 2708.102975][T30636] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 2708.129437][T30636] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2708.177401][T30636] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2708.195027][T30636] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2708.215059][T30636] usb 1-1: Product: syz [ 2708.242248][T30636] usb 1-1: Manufacturer: syz [ 2708.252939][T30636] usb 1-1: SerialNumber: syz [ 2708.273774][T30636] usb 1-1: config 0 descriptor?? [ 2708.287890][ T8950] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2708.321327][T30636] usb 1-1: selecting invalid altsetting 0 [ 2708.412720][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9645'. [ 2708.469080][ T8956] bridge0: port 3(team0) entered disabled state [ 2708.477311][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 2708.484749][ T8956] bridge0: port 1(bridge_slave_0) entered disabled state [ 2708.533695][T27928] usb 1-1: USB disconnect, device number 78 [ 2708.793057][T30636] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2708.983113][T30636] usb 3-1: Using ep0 maxpacket: 16 [ 2708.998411][T30636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2709.023107][T22392] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2709.044413][T30636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2709.130548][T30636] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2709.198494][T30636] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 2709.211885][T22392] usb 6-1: Using ep0 maxpacket: 8 [ 2709.242380][T22392] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2709.280992][T30636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2709.309518][T22392] usb 6-1: config 0 has no interface number 0 [ 2709.340787][T30636] usb 3-1: config 0 descriptor?? [ 2709.346330][T22392] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2709.404841][T22392] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2709.449750][T22392] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2709.471932][T22392] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2709.512580][T22392] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2709.538410][T22392] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2709.578979][T22392] usb 6-1: config 0 descriptor?? [ 2709.637794][ T8956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2709.638105][T22392] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2709.657163][ T8956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2709.804541][ T29] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2709.974843][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 2709.982514][T22392] usb 6-1: USB disconnect, device number 33 [ 2710.005666][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 2710.025944][T22392] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 2710.045407][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2710.125510][ T29] usb 1-1: config 0 has no interfaces? [ 2710.147992][ T29] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2710.175661][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2710.202529][ T29] usb 1-1: Product: syz [ 2710.224643][ T29] usb 1-1: Manufacturer: syz [ 2710.239987][ T29] usb 1-1: SerialNumber: syz [ 2710.280659][ T29] usb 1-1: config 0 descriptor?? [ 2710.302713][ T8984] fuse: Bad value for 'fd' [ 2710.348885][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9655'. [ 2710.531745][ T29] usb 1-1: USB disconnect, device number 79 [ 2711.428226][ T8995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2711.450222][ T8995] 8021q: adding VLAN 0 to HW filter on device team0 [ 2711.472670][ T8995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2711.513344][ T5897] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 2711.685036][ T5897] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 2711.714099][ T5897] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 2711.768116][ T5897] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2711.811475][ T5897] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2711.842322][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2711.855241][T30636] usbhid 3-1:0.0: can't add hid device: -71 [ 2711.865623][T30636] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2711.905881][ T5897] usb 6-1: Product: syz [ 2711.910183][ T5897] usb 6-1: Manufacturer: syz [ 2711.935701][T30636] usb 3-1: USB disconnect, device number 17 [ 2711.955016][ T5897] usb 6-1: SerialNumber: syz [ 2711.996079][ T5897] usb 6-1: config 0 descriptor?? [ 2712.001990][ T9000] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2712.039223][ T5897] usb 6-1: selecting invalid altsetting 0 [ 2712.316391][ T5897] usb 6-1: USB disconnect, device number 34 [ 2712.476995][ T7934] udevd[7934]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2712.873943][ T5897] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2713.034247][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 2713.056246][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2713.095464][ T5897] usb 3-1: config 0 has no interfaces? [ 2713.124180][ T5897] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2713.163982][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.174206][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.180744][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2713.214977][ T5897] usb 3-1: Product: syz [ 2713.228317][ T5897] usb 3-1: Manufacturer: syz [ 2713.240658][ T5897] usb 3-1: SerialNumber: syz [ 2713.249235][ T5897] usb 3-1: config 0 descriptor?? [ 2713.589390][ T5897] usb 3-1: USB disconnect, device number 18 [ 2713.962720][ T9045] tipc: Enabling of bearer rejected, already enabled [ 2714.731771][ T9062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9684'. [ 2715.013066][ T5897] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 2715.205682][ T5897] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 2715.275037][ T5897] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 2715.337583][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2715.392550][ T5897] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2715.426621][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2715.476939][ T5897] usb 4-1: Product: syz [ 2715.494480][ T5897] usb 4-1: Manufacturer: syz [ 2715.512216][ T5897] usb 4-1: SerialNumber: syz [ 2715.544916][ T5897] usb 4-1: config 0 descriptor?? [ 2715.574502][ T9060] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2715.614299][ T5897] usb 4-1: selecting invalid altsetting 0 [ 2715.853476][ T29] usb 4-1: USB disconnect, device number 64 [ 2717.928803][ T9125] netlink: 'syz.0.9707': attribute type 12 has an invalid length. [ 2717.959265][ T9125] netlink: 'syz.0.9707': attribute type 29 has an invalid length. [ 2717.999469][ T9125] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9707'. [ 2718.025108][ T9125] netlink: 59 bytes leftover after parsing attributes in process `syz.0.9707'. [ 2718.385296][ T29] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2718.573032][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 2718.642504][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2718.671730][ T29] usb 2-1: config 0 has no interfaces? [ 2718.695283][ T29] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2718.714212][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2718.725020][ T29] usb 2-1: Product: syz [ 2718.729402][ T29] usb 2-1: Manufacturer: syz [ 2718.734822][ T29] usb 2-1: SerialNumber: syz [ 2718.787832][ T29] usb 2-1: config 0 descriptor?? [ 2718.996920][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9716'. [ 2719.076135][T27928] usb 2-1: USB disconnect, device number 80 [ 2719.249007][ T9154] netlink: 'syz.2.9720': attribute type 12 has an invalid length. [ 2719.274944][ T9154] netlink: 'syz.2.9720': attribute type 29 has an invalid length. [ 2719.293043][ T9154] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9720'. [ 2719.312741][ T9154] netlink: 59 bytes leftover after parsing attributes in process `syz.2.9720'. [ 2719.443760][ T9155] team0: Caught tx_queue_len zero misconfig [ 2719.489587][ T9155] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9718'. [ 2719.773185][T30636] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 2720.015583][T30636] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 2720.029650][T30636] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2720.040521][T30636] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2720.053003][ T29] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2720.063104][T30636] usb 4-1: config 1 has no interface number 0 [ 2720.080858][T30636] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2720.126001][ T9178] program syz.1.9731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2720.136618][T30636] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2720.145991][T30636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2720.154793][T30636] usb 4-1: Product: syz [ 2720.159296][T30636] usb 4-1: Manufacturer: syz [ 2720.179822][T30636] usb 4-1: SerialNumber: syz [ 2720.211909][T30636] cdc_wdm 4-1:1.128: skipping garbage [ 2720.225699][T30636] cdc_wdm 4-1:1.128: probe with driver cdc_wdm failed with error -22 [ 2720.253032][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 2720.281565][ T29] usb 3-1: config 1 interface 0 altsetting 132 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2720.323325][ T29] usb 3-1: config 1 interface 0 altsetting 132 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2720.359478][ T29] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2720.414147][ T29] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2720.443380][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2720.461727][ T29] usb 3-1: Product: syz [ 2720.474501][ T29] usb 3-1: Manufacturer: syz [ 2720.489046][ T29] usb 3-1: SerialNumber: syz [ 2720.505545][ T9170] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2720.520456][ T9160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2720.540437][ T9160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2720.559791][ T9170] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2720.894205][ T9170] netlink: 'syz.2.9727': attribute type 23 has an invalid length. [ 2720.953411][ T29] usb 3-1: bad CDC descriptors [ 2721.032279][ T29] usb 3-1: USB disconnect, device number 19 [ 2721.563265][ T29] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2721.733033][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 2721.762573][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2721.815800][ T29] usb 2-1: config 0 has no interfaces? [ 2721.852197][ T29] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2721.867205][ T9198] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2721.902090][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2721.921812][ T29] usb 2-1: Product: syz [ 2721.932460][ T29] usb 2-1: Manufacturer: syz [ 2721.948344][ T29] usb 2-1: SerialNumber: syz [ 2721.976057][ T29] usb 2-1: config 0 descriptor?? [ 2722.256792][ T29] usb 2-1: USB disconnect, device number 81 [ 2722.347700][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 2722.347712][ T30] audit: type=1326 audit(1771439549.265:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.0.9742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f6c code=0x7ffc0000 [ 2722.485251][ T30] audit: type=1326 audit(1771439549.295:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.0.9742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=143 compat=1 ip=0xf7f36f6c code=0x7ffc0000 [ 2722.671127][ T30] audit: type=1326 audit(1771439549.295:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.0.9742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f6c code=0x7ffc0000 [ 2722.695602][ T30] audit: type=1326 audit(1771439549.295:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.0.9742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f6c code=0x7ffc0000 [ 2722.869908][ T9221] xfrm0: entered promiscuous mode [ 2722.890996][ T9221] xfrm0: entered allmulticast mode [ 2722.985085][ T9225] fuse: Bad value for 'fd' [ 2723.017519][T27928] usb 4-1: USB disconnect, device number 65 [ 2724.746692][ T9265] fuse: Bad value for 'fd' [ 2725.327237][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9767'. [ 2725.348761][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9767'. [ 2725.366477][ T9278] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9767'. [ 2725.377400][ T9278] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9767'. [ 2726.174617][ T9300] tipc: Enabling of bearer rejected, already enabled [ 2726.265401][ T9306] fuse: Bad value for 'fd' [ 2726.602490][ T9327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9787'. [ 2728.057515][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9790'. [ 2728.433798][ T9359] fuse: Bad value for 'fd' [ 2728.973179][ T9364] netlink: 'syz.2.9798': attribute type 12 has an invalid length. [ 2728.988255][ T9364] netlink: 'syz.2.9798': attribute type 29 has an invalid length. [ 2729.009220][ T9364] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9798'. [ 2729.030827][ T9364] netlink: 59 bytes leftover after parsing attributes in process `syz.2.9798'. [ 2729.177813][ T9374] tipc: Started in network mode [ 2729.183970][ T9374] tipc: Node identity ac14140f, cluster identity 4711 [ 2729.265797][ T9374] tipc: New replicast peer: 172.20.20.19 [ 2729.290849][ T9374] tipc: Enabled bearer , priority 10 [ 2729.635449][ T9388] tipc: Enabling of bearer rejected, already enabled [ 2730.403283][T30636] tipc: Node number set to 2886997007 [ 2730.691589][ T30] audit: type=1326 audit(1771439557.595:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.1.9808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2730.769419][ T30] audit: type=1326 audit(1771439557.605:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.1.9808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2730.868152][ T30] audit: type=1326 audit(1771439557.605:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.1.9808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2730.995784][ T30] audit: type=1326 audit(1771439557.605:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.1.9808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2731.050809][ T30] audit: type=1326 audit(1771439557.605:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.1.9808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2731.078245][ T30] audit: type=1326 audit(1771439557.605:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.1.9808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2731.102301][ T30] audit: type=1326 audit(1771439557.605:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.1.9808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2731.126365][ T9407] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9810'. [ 2731.138331][ T30] audit: type=1326 audit(1771439557.605:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.1.9808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2731.216249][ T30] audit: type=1326 audit(1771439557.605:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.1.9808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2731.330491][ T30] audit: type=1326 audit(1771439557.605:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.1.9808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2731.581630][ T9418] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x2160 (0x33424752, 9, 0, 0, 0) [ 2731.706908][ T9422] tipc: Enabling of bearer rejected, already enabled [ 2731.914852][ T9428] xfrm0: entered promiscuous mode [ 2731.926977][ T9428] xfrm0: entered allmulticast mode [ 2732.223251][ T9434] tipc: Enabling of bearer rejected, already enabled [ 2732.712040][ T9438] netlink: 'syz.0.9823': attribute type 12 has an invalid length. [ 2732.720180][ T9438] netlink: 'syz.0.9823': attribute type 29 has an invalid length. [ 2732.728653][ T9438] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9823'. [ 2732.738556][ T9438] netlink: 59 bytes leftover after parsing attributes in process `syz.0.9823'. [ 2733.279193][ T9460] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9832'. [ 2733.319866][ T9461] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9831'. [ 2733.330659][ T9460] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2734.633140][T27928] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2734.793445][T27928] usb 4-1: Using ep0 maxpacket: 16 [ 2734.830452][T27928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2734.880847][T27928] usb 4-1: config 0 has no interfaces? [ 2734.936074][T27928] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2734.973218][T27928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2735.007590][T27928] usb 4-1: Product: syz [ 2735.024611][T27928] usb 4-1: Manufacturer: syz [ 2735.056364][T27928] usb 4-1: SerialNumber: syz [ 2735.102017][T27928] usb 4-1: config 0 descriptor?? [ 2735.414539][ T29] usb 4-1: USB disconnect, device number 66 [ 2737.569728][ T9551] tipc: Enabling of bearer rejected, already enabled [ 2738.079432][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9872'. [ 2738.808080][ T9587] fuse: Unknown parameter '0x0000000000000003' [ 2739.721070][ T9589] lo: entered promiscuous mode [ 2739.740172][ T9589] lo: entered allmulticast mode [ 2739.771201][ T9589] netlink: 6 bytes leftover after parsing attributes in process `syz.2.9882'. [ 2739.810637][ T9589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2740.079134][ T9609] tipc: Enabling of bearer rejected, already enabled [ 2741.582018][ T9632] tipc: Enabling of bearer rejected, already enabled [ 2741.782420][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9896'. [ 2743.377510][ T9667] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9910'. [ 2743.803731][T30636] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 2743.989545][T30636] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 2744.019966][T30636] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 2744.054147][T30636] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2744.094947][T30636] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2744.113225][T30636] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2744.121459][T30636] usb 3-1: Product: syz [ 2744.146011][T30636] usb 3-1: Manufacturer: syz [ 2744.156390][T30636] usb 3-1: SerialNumber: syz [ 2744.200092][T30636] usb 3-1: config 0 descriptor?? [ 2744.238752][ T9671] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2744.260767][T30636] usb 3-1: selecting invalid altsetting 0 [ 2744.603067][T30636] usb 3-1: USB disconnect, device number 20 [ 2744.710754][ T9684] fuse: Unknown parameter 'fd0x0000000000000003' [ 2744.987373][ T9692] netlink: 652 bytes leftover after parsing attributes in process `syz.0.9917'. [ 2745.014199][ T9692] netlink: 120 bytes leftover after parsing attributes in process `syz.0.9917'. [ 2745.050092][ T9695] hub 1-0:1.0: USB hub found [ 2745.055386][ T9695] hub 1-0:1.0: 1 port detected [ 2745.160151][ T9700] fuse: Bad value for 'fd' [ 2745.654817][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9922'. [ 2745.762844][ T9705] macsec1: entered promiscuous mode [ 2745.770690][ T9705] macsec1: entered allmulticast mode [ 2747.423777][ T9748] netlink: 'syz.2.9936': attribute type 12 has an invalid length. [ 2747.497205][ T9748] netlink: 'syz.2.9936': attribute type 29 has an invalid length. [ 2747.582490][ T9748] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9936'. [ 2747.641948][ T9748] netlink: 59 bytes leftover after parsing attributes in process `syz.2.9936'. [ 2748.429257][ T9760] syzkaller1: entered promiscuous mode [ 2748.439027][ T9760] syzkaller1: entered allmulticast mode [ 2750.465597][ T9823] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9969'. [ 2750.763216][ T29] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2750.933204][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 2750.966430][ T29] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2751.002304][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2751.027484][ T29] usb 3-1: Product: syz [ 2751.037897][ T29] usb 3-1: Manufacturer: syz [ 2751.049422][ T29] usb 3-1: SerialNumber: syz [ 2751.079635][ T29] usb 3-1: config 0 descriptor?? [ 2751.238766][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9979'. [ 2751.282256][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9979'. [ 2751.369052][ T29] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 021 [ 2752.167554][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9989'. [ 2752.188401][ T9872] team_slave_0: entered promiscuous mode [ 2752.194697][ T9872] team_slave_1: entered promiscuous mode [ 2752.210318][ T9872] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2752.229198][ T9872] team_slave_0: left promiscuous mode [ 2752.235041][ T9872] team_slave_1: left promiscuous mode [ 2752.509580][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9991'. [ 2752.743135][ T5897] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2752.843509][ T9888] tipc: Enabling of bearer rejected, already enabled [ 2752.883599][ T5897] usb 6-1: device descriptor read/64, error -71 [ 2753.133035][ T5897] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2753.273134][ T5897] usb 6-1: device descriptor read/64, error -71 [ 2753.384630][ T5897] usb usb6-port1: attempt power cycle [ 2753.733055][ T5897] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2753.753952][ T5897] usb 6-1: device descriptor read/8, error -71 [ 2753.941141][ T29] usb 3-1: USB disconnect, device number 21 [ 2754.013828][ T5897] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2754.063644][ T5897] usb 6-1: device descriptor read/8, error -71 [ 2754.171727][ T9911] syzkaller0: create flow: hash 3958045408 index 1 [ 2754.180000][ T5897] usb usb6-port1: unable to enumerate USB device [ 2754.241090][ T9910] syzkaller0: delete flow: hash 3958045408 index 1 [ 2755.583609][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10012'. [ 2755.687982][ T9935] ptrace attach of "./syz-executor exec"[2213] was attempted by "./syz-executor exec"[9935] [ 2758.917870][ T9966] tipc: Enabling of bearer rejected, already enabled [ 2758.982380][ T9971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10025'. [ 2759.005069][ T9971] team_slave_0: entered promiscuous mode [ 2759.010909][ T9971] team_slave_1: entered promiscuous mode [ 2759.047890][ T9971] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 2759.079487][ T9971] team_slave_0: left promiscuous mode [ 2759.085095][ T9971] team_slave_1: left promiscuous mode [ 2760.883016][ T5897] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 2761.119687][ T5897] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 2761.121636][T10012] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.10038'. [ 2761.168929][ T5897] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 2761.209316][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2761.245411][ T5897] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2761.264883][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2761.276922][ T5897] usb 3-1: Product: syz [ 2761.281422][ T5897] usb 3-1: Manufacturer: syz [ 2761.288453][ T5897] usb 3-1: SerialNumber: syz [ 2761.301068][ T5897] usb 3-1: config 0 descriptor?? [ 2761.307528][T10004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2761.322441][ T5897] usb 3-1: selecting invalid altsetting 0 [ 2761.523003][ T5897] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2761.536310][T10004] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 2761.545016][T10004] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 2761.555123][T10004] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 2761.566668][T10004] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 2761.575601][T10004] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 2761.584503][T10004] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 2761.673316][ T5897] usb 6-1: device descriptor read/64, error -71 [ 2761.801197][T10026] tipc: Enabling of bearer rejected, already enabled [ 2761.924234][ T5897] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2762.074374][ T5897] usb 6-1: device descriptor read/64, error -71 [ 2762.193701][ T5897] usb usb6-port1: attempt power cycle [ 2762.543279][ T5897] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2762.574088][ T5897] usb 6-1: device descriptor read/8, error -71 [ 2762.823106][ T5897] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2762.856120][ T5897] usb 6-1: device descriptor read/8, error -71 [ 2762.868421][T10043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10051'. [ 2762.883242][T10043] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2762.964303][ T5897] usb usb6-port1: unable to enumerate USB device [ 2763.287685][T10060] tipc: Enabling of bearer rejected, already enabled [ 2763.342379][T10003] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 2764.303370][ T29] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2764.369702][ T5897] usb 3-1: USB disconnect, device number 22 [ 2764.490537][ T29] usb 1-1: config 0 has an invalid descriptor of length 85, skipping remainder of the config [ 2764.543666][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2764.654552][ T29] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 2764.800573][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2764.964216][ T29] usb 1-1: config 0 descriptor?? [ 2765.046102][T10090] tipc: Enabling of bearer rejected, already enabled [ 2765.183193][ T5897] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2765.397193][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 2765.474038][ T5897] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2765.508328][ T5897] usb 4-1: config 0 has no interface number 0 [ 2765.539832][ T5897] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2765.591969][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2765.642733][ T5897] usb 4-1: Product: syz [ 2765.651883][ T5897] usb 4-1: Manufacturer: syz [ 2765.687021][ T5897] usb 4-1: SerialNumber: syz [ 2765.724167][ T5897] usb 4-1: config 0 descriptor?? [ 2765.760521][ T5897] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2765.806464][ T5897] usb 4-1: selecting invalid altsetting 1 [ 2765.838047][ T5897] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2765.933378][ T5897] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2765.946484][ T5897] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2765.977146][ T5897] usb 4-1: media controller created [ 2766.006027][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2766.174203][ T5897] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2766.203225][ T5897] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2766.223266][ T5897] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2766.390209][ T5897] usb 4-1: USB disconnect, device number 67 [ 2766.403058][T27928] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2766.543191][T27928] usb 2-1: device descriptor read/64, error -71 [ 2766.685515][T10105] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10076'. [ 2766.790312][T27928] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2766.933023][T27928] usb 2-1: device descriptor read/64, error -71 [ 2766.973050][T22392] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2767.043297][T27928] usb usb2-port1: attempt power cycle [ 2767.106851][T10118] tipc: Enabling of bearer rejected, already enabled [ 2767.163251][T22392] usb 3-1: Using ep0 maxpacket: 32 [ 2767.174416][T22392] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2767.189851][T22392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2767.200135][T22392] usb 3-1: Product: syz [ 2767.206409][T22392] usb 3-1: Manufacturer: syz [ 2767.212697][T22392] usb 3-1: SerialNumber: syz [ 2767.232396][T22392] usb 3-1: config 0 descriptor?? [ 2767.338753][ T29] usb 1-1: string descriptor 0 read error: -71 [ 2767.373869][ T29] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2767.403247][T27928] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2767.414348][ T29] usb 1-1: USB disconnect, device number 80 [ 2767.445751][T27928] usb 2-1: device descriptor read/8, error -71 [ 2767.479929][T22392] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 023 [ 2767.693066][T27928] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2767.733591][T27928] usb 2-1: device descriptor read/8, error -71 [ 2767.855205][T27928] usb usb2-port1: unable to enumerate USB device [ 2767.945253][ T29] IPVS: starting estimator thread 0... [ 2768.043016][T10126] IPVS: using max 56 ests per chain, 134400 per kthread [ 2769.843765][ T29] usb 3-1: USB disconnect, device number 23 [ 2770.323048][ T29] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2770.349173][T10177] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10099'. [ 2770.503121][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 2770.510684][ T29] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 2770.525484][ T29] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2770.536028][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2770.544717][ T29] usb 3-1: Product: syz [ 2770.553179][ T29] usb 3-1: Manufacturer: syz [ 2770.561066][ T29] usb 3-1: SerialNumber: syz [ 2770.583146][ T29] usb 3-1: config 0 descriptor?? [ 2770.600509][ T29] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2770.622616][ T29] usb 3-1: setting power ON [ 2770.638552][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 2770.658321][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2770.705329][ T29] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2770.733770][ T29] usb 3-1: media controller created [ 2770.787459][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2770.892361][ T29] usb 3-1: selecting invalid altsetting 6 [ 2770.918577][ T29] usb 3-1: digital interface selection failed (-22) [ 2770.945350][ T29] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2770.990382][ T29] usb 3-1: setting power OFF [ 2771.010831][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 2771.045111][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2771.096779][ T29] (NULL device *): no alternate interface [ 2771.186879][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2771.257629][ T29] usb 3-1: USB disconnect, device number 24 [ 2771.643164][T27928] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2771.798421][T27928] usb 4-1: Using ep0 maxpacket: 8 [ 2771.821738][T27928] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 2771.857053][T27928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2771.877054][T27928] usb 4-1: config 0 has no interface number 0 [ 2771.887291][T27928] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2771.897571][T27928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2771.918478][T27928] usb 4-1: config 0 descriptor?? [ 2771.938466][T27928] ldusb 4-1:0.55: Interrupt in endpoint not found [ 2772.031950][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10109'. [ 2772.169250][ T29] usb 4-1: USB disconnect, device number 68 [ 2772.243578][T10205] random: crng reseeded on system resumption [ 2774.035706][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2774.055511][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2774.079389][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2774.088486][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2774.096522][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2774.607919][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.615946][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.924981][T10245] chnl_net:caif_netlink_parms(): no params data found [ 2775.180810][T10245] bridge0: port 1(bridge_slave_0) entered blocking state [ 2775.188751][T10245] bridge0: port 1(bridge_slave_0) entered disabled state [ 2775.196745][T10245] bridge_slave_0: entered allmulticast mode [ 2775.205052][T10245] bridge_slave_0: entered promiscuous mode [ 2775.225502][T10245] bridge0: port 2(bridge_slave_1) entered blocking state [ 2775.232876][T10245] bridge0: port 2(bridge_slave_1) entered disabled state [ 2775.241979][T10245] bridge_slave_1: entered allmulticast mode [ 2775.265313][T10245] bridge_slave_1: entered promiscuous mode [ 2775.389364][T10245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2775.424206][T10245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2775.460590][T10245] team0: Port device team_slave_0 added [ 2775.480920][T10245] team0: Port device team_slave_1 added [ 2775.572600][T10245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2775.589950][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2775.617221][T10245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2775.629429][T10245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2775.636967][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2775.664955][T10245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2775.778650][T10245] hsr_slave_0: entered promiscuous mode [ 2775.801276][T10245] hsr_slave_1: entered promiscuous mode [ 2775.827094][T10245] debugfs: 'hsr0' already exists in 'hsr' [ 2775.839795][T10245] Cannot create hsr debugfs directory [ 2776.193392][ T8173] Bluetooth: hci5: command tx timeout [ 2777.126363][T10294] netlink: 'syz.2.10138': attribute type 4 has an invalid length. [ 2777.563730][ T5897] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2777.804136][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 2777.818791][ T5897] usb 3-1: config 0 has no interfaces? [ 2777.845886][ T5897] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2777.880578][ T5897] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2777.920022][ T5897] usb 3-1: Manufacturer: syz [ 2777.948843][ T5897] usb 3-1: config 0 descriptor?? [ 2778.273176][ T8173] Bluetooth: hci5: command tx timeout [ 2779.117241][T10245] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2779.138649][T10245] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2779.159925][T10245] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2779.192160][T10245] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2779.342768][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10145'. [ 2779.503072][T10325] macsec1: entered promiscuous mode [ 2779.533518][T10325] macsec1: entered allmulticast mode [ 2779.708745][T10245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2779.761872][T10245] 8021q: adding VLAN 0 to HW filter on device team0 [ 2779.792739][ T657] bridge0: port 1(bridge_slave_0) entered blocking state [ 2779.799913][ T657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2779.862256][T13535] bridge0: port 2(bridge_slave_1) entered blocking state [ 2779.869555][T13535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2780.238447][ T5905] usb 3-1: USB disconnect, device number 25 [ 2780.363009][ T8173] Bluetooth: hci5: command tx timeout [ 2780.486860][T10245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2780.699054][T10245] veth0_vlan: entered promiscuous mode [ 2780.730881][T10245] veth1_vlan: entered promiscuous mode [ 2780.785504][T10245] veth0_macvtap: entered promiscuous mode [ 2780.829334][T10245] veth1_macvtap: entered promiscuous mode [ 2781.030942][T10245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2781.597088][T10245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2781.740719][T19659] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2781.818034][T19659] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2781.841982][T19659] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2781.937106][T19659] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2782.443201][ T8173] Bluetooth: hci5: command tx timeout [ 2782.553655][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2782.575248][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2782.741308][T10371] tipc: Enabling of bearer rejected, already enabled [ 2782.788276][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2782.873846][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2784.773835][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2784.786928][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2784.796260][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2784.806444][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2784.814667][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2785.832247][T10393] chnl_net:caif_netlink_parms(): no params data found [ 2786.290165][T10393] bridge0: port 1(bridge_slave_0) entered blocking state [ 2786.303153][T10393] bridge0: port 1(bridge_slave_0) entered disabled state [ 2786.321329][T10393] bridge_slave_0: entered allmulticast mode [ 2786.368631][T10393] bridge_slave_0: entered promiscuous mode [ 2786.395588][T10393] bridge0: port 2(bridge_slave_1) entered blocking state [ 2786.404398][T10393] bridge0: port 2(bridge_slave_1) entered disabled state [ 2786.439773][T10393] bridge_slave_1: entered allmulticast mode [ 2786.451847][T10393] bridge_slave_1: entered promiscuous mode [ 2786.569444][T10393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2786.598654][T10393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2786.677725][T10393] team0: Port device team_slave_0 added [ 2786.725209][T10393] team0: Port device team_slave_1 added [ 2786.847290][T10393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2786.862431][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2786.913315][ T8173] Bluetooth: hci4: command tx timeout [ 2786.923638][T10393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2786.944657][T10393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2786.951735][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2787.009625][T10393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2787.169070][T10393] hsr_slave_0: entered promiscuous mode [ 2787.198135][T10393] hsr_slave_1: entered promiscuous mode [ 2787.248648][T10393] debugfs: 'hsr0' already exists in 'hsr' [ 2787.258937][T10434] random: crng reseeded on system resumption [ 2787.265198][T10393] Cannot create hsr debugfs directory [ 2788.016223][T30636] IPVS: starting estimator thread 0... [ 2788.103012][T10450] IPVS: using max 37 ests per chain, 88800 per kthread [ 2788.427450][T10448] syzkaller1: entered promiscuous mode [ 2788.441883][T10448] syzkaller1: entered allmulticast mode [ 2788.993039][ T8173] Bluetooth: hci4: command tx timeout [ 2790.211674][T10393] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2790.250785][T10393] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2790.314966][T10393] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2790.342683][T10393] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2790.628887][T10393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2790.696936][T10393] 8021q: adding VLAN 0 to HW filter on device team0 [ 2790.742580][ T2187] bridge0: port 1(bridge_slave_0) entered blocking state [ 2790.749861][ T2187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2790.801343][ T2187] bridge0: port 2(bridge_slave_1) entered blocking state [ 2790.808647][ T2187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2790.835044][T10490] tipc: Enabling of bearer rejected, already enabled [ 2790.934639][T10393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2791.015483][T10393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2791.073058][ T8173] Bluetooth: hci4: command tx timeout [ 2791.177072][T10393] veth0_vlan: entered promiscuous mode [ 2791.211217][T10393] veth1_vlan: entered promiscuous mode [ 2791.281294][T10393] veth0_macvtap: entered promiscuous mode [ 2791.312137][T10393] veth1_macvtap: entered promiscuous mode [ 2791.395020][T10393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2791.441618][T10393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2791.501356][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2791.519651][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2791.531718][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2791.548066][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2791.926870][ T657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2791.942519][ T657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2792.061171][T19659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2792.097292][T19659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2793.154704][ T8173] Bluetooth: hci4: command tx timeout [ 2793.283653][ T5897] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 2793.479125][ T5897] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 2793.501674][ T5897] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 2793.593000][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2793.616022][ T5897] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2793.659875][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2793.728228][ T5897] usb 2-1: Product: syz [ 2793.732446][ T5897] usb 2-1: Manufacturer: syz [ 2793.771303][ T5897] usb 2-1: SerialNumber: syz [ 2793.791570][ T5897] usb 2-1: config 0 descriptor?? [ 2793.824488][T10518] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2793.852212][ T5897] usb 2-1: selecting invalid altsetting 0 [ 2794.079699][T10518] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2794.106847][T10518] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2794.161387][T10533] dummy0: entered promiscuous mode [ 2794.192795][T10533] vlan2: entered promiscuous mode [ 2794.229117][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2794.248577][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2794.261920][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2794.297547][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2794.307261][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2795.026396][T10537] chnl_net:caif_netlink_parms(): no params data found [ 2795.266435][T10537] bridge0: port 1(bridge_slave_0) entered blocking state [ 2795.307391][T10537] bridge0: port 1(bridge_slave_0) entered disabled state [ 2795.346193][T10537] bridge_slave_0: entered allmulticast mode [ 2795.370837][T10537] bridge_slave_0: entered promiscuous mode [ 2795.392216][T10537] bridge0: port 2(bridge_slave_1) entered blocking state [ 2795.402374][T10537] bridge0: port 2(bridge_slave_1) entered disabled state [ 2795.439310][T10537] bridge_slave_1: entered allmulticast mode [ 2795.462307][T10537] bridge_slave_1: entered promiscuous mode [ 2795.592661][T10537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2795.645140][T10537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2795.716459][ T2187] wlan0: Trigger new scan to find an IBSS to join [ 2795.837412][T10537] team0: Port device team_slave_0 added [ 2795.881907][T10537] team0: Port device team_slave_1 added [ 2795.896382][T10517] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2796.025768][T10537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2796.047054][T10537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2796.092328][T10537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2796.165816][T10537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2796.177532][T10537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2796.217395][T10537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2796.353589][ T8173] Bluetooth: hci3: command tx timeout [ 2796.446350][T10537] hsr_slave_0: entered promiscuous mode [ 2796.489382][T10537] hsr_slave_1: entered promiscuous mode [ 2796.521240][T10537] debugfs: 'hsr0' already exists in 'hsr' [ 2796.544513][T10537] Cannot create hsr debugfs directory [ 2796.917318][T10517] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 2796.958481][T30636] usb 2-1: USB disconnect, device number 86 [ 2797.222745][T10586] xfrm0: entered promiscuous mode [ 2797.239060][T10586] xfrm0: entered allmulticast mode [ 2797.437581][T10537] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2797.657866][T10537] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2797.896003][T10537] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2798.142567][T10537] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2798.433982][ T8173] Bluetooth: hci3: command tx timeout [ 2798.616658][T10537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2798.672762][T10537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2798.703979][T10537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2798.745774][T10537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2798.759204][ T657] wlan0: Trigger new scan to find an IBSS to join [ 2799.147665][T10537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2799.172056][T10537] 8021q: adding VLAN 0 to HW filter on device team0 [ 2799.204075][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 2799.212012][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2799.271909][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 2799.279150][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2799.312460][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10224'. [ 2799.399406][T10624] macsec1: entered promiscuous mode [ 2799.406703][T10624] macsec1: entered allmulticast mode [ 2799.507625][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10226'. [ 2799.605340][T10537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2799.727263][T10537] veth0_vlan: entered promiscuous mode [ 2799.775449][T10537] veth1_vlan: entered promiscuous mode [ 2799.917055][T10537] veth0_macvtap: entered promiscuous mode [ 2799.971830][T10537] veth1_macvtap: entered promiscuous mode [ 2800.009439][T10537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2800.051275][T10537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2800.092339][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2800.111841][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2800.136017][ T657] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2800.154296][ T657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2800.366150][T13535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2800.392847][T13535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2800.451332][T13535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2800.461204][T13535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2800.521268][ T8173] Bluetooth: hci3: command tx timeout [ 2800.795197][T10643] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10230'. [ 2800.817582][T10643] team_slave_0: entered promiscuous mode [ 2800.823519][T10643] team_slave_1: entered promiscuous mode [ 2800.862104][T10643] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2800.898691][T10643] team_slave_0: left promiscuous mode [ 2800.904500][T10643] team_slave_1: left promiscuous mode [ 2801.228437][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10233'. [ 2801.330826][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2801.358027][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2801.368366][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2801.380824][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2801.390984][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2801.713839][ T48] wlan0: Trigger new scan to find an IBSS to join [ 2802.236504][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 2802.246918][T30510] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2802.285464][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2802.389702][T10669] tipc: Enabling of bearer rejected, already enabled [ 2802.430543][T10652] chnl_net:caif_netlink_parms(): no params data found [ 2802.446828][T30510] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2802.485234][T30510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2802.526799][T30510] usb 2-1: Product: syz [ 2802.546331][T30510] usb 2-1: Manufacturer: syz [ 2802.554934][T30510] usb 2-1: SerialNumber: syz [ 2802.589871][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2802.603831][ T8173] Bluetooth: hci3: command tx timeout [ 2802.612058][T30510] usb 2-1: config 0 descriptor?? [ 2802.629277][T30510] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2802.690589][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2802.714053][T30510] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2802.748199][T30510] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2802.805854][T30510] usb 2-1: media controller created [ 2802.839371][T30510] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2802.910641][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2803.025074][T30510] DVB: Unable to find symbol mt352_attach() [ 2803.128838][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2803.144292][T30510] DVB: Unable to find symbol nxt6000_attach() [ 2803.170498][T30510] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2803.226318][T30510] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input198 [ 2803.311878][T30510] dvb-usb: schedule remote query interval to 1000 msecs. [ 2803.324128][T30510] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2803.363052][T30510] dvb-usb: bulk message failed: -22 (7/0) [ 2803.369086][T30510] dvb-usb: bulk message failed: -22 (7/0) [ 2803.412366][T30510] usb 2-1: USB disconnect, device number 87 [ 2803.473181][ T8173] Bluetooth: hci1: command tx timeout [ 2803.545821][T10652] bridge0: port 1(bridge_slave_0) entered blocking state [ 2803.624778][T10652] bridge0: port 1(bridge_slave_0) entered disabled state [ 2803.663614][T10652] bridge_slave_0: entered allmulticast mode [ 2803.691920][T10652] bridge_slave_0: entered promiscuous mode [ 2803.699659][T30510] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2803.743301][T10652] bridge0: port 2(bridge_slave_1) entered blocking state [ 2803.768930][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10244'. [ 2803.778640][T10691] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.10241'. [ 2803.791768][T10652] bridge0: port 2(bridge_slave_1) entered disabled state [ 2803.820294][T10652] bridge_slave_1: entered allmulticast mode [ 2803.859038][T10652] bridge_slave_1: entered promiscuous mode [ 2803.963169][T22392] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 2804.054857][T30510] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2804.071790][T10652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2804.121540][T10652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2804.152418][T22392] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 2804.206264][T22392] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 2804.240832][T22392] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2804.251819][T30510] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2804.268052][T10652] team0: Port device team_slave_0 added [ 2804.274769][T30510] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2804.290825][T22392] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2804.301299][T10652] team0: Port device team_slave_1 added [ 2804.307859][T30510] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2804.323216][T22392] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2804.339399][T22392] usb 1-1: Product: syz [ 2804.344258][T22392] usb 1-1: Manufacturer: syz [ 2804.356747][T22392] usb 1-1: SerialNumber: syz [ 2804.362569][T30510] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2804.384488][T30510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2804.432227][T22392] usb 1-1: config 0 descriptor?? [ 2804.463149][T30510] usb 2-1: Product: syz [ 2804.468819][T10689] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2804.478997][T30510] usb 2-1: Manufacturer: syz [ 2804.497293][T22392] usb 1-1: selecting invalid altsetting 0 [ 2804.504232][T30510] usb 2-1: SerialNumber: syz [ 2804.519404][T30510] hub 2-1:1.0: bad descriptor, ignoring hub [ 2804.527457][T10652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2804.545633][T30510] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2804.557289][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2804.630887][T10652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2804.647539][ T13] bridge_slave_1: left allmulticast mode [ 2804.656124][ T13] bridge_slave_1: left promiscuous mode [ 2804.682685][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 2804.712311][ T13] bridge_slave_0: left allmulticast mode [ 2804.731678][ T13] bridge_slave_0: left promiscuous mode [ 2804.747132][T30510] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 88 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2804.765710][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 2804.800695][T10689] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2804.836681][T10689] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2805.337781][T10686] usb 2-1: reset high-speed USB device number 88 using dummy_hcd [ 2805.554462][ T8173] Bluetooth: hci1: command tx timeout [ 2805.570196][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10249'. [ 2805.712037][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2805.739447][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2805.760078][ T13] bond0 (unregistering): Released all slaves [ 2805.794535][ T2419] usb 2-1: USB disconnect, device number 88 [ 2805.801444][ T13] bond1 (unregistering): Released all slaves [ 2805.840236][ T2419] usblp0: removed [ 2805.863233][ T13] bond2 (unregistering): Released all slaves [ 2805.910709][T10652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2805.922267][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2805.952343][T10652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2806.137625][ T13] tipc: Disabling bearer [ 2806.143389][ T13] tipc: Disabling bearer [ 2806.165217][ T13] tipc: Left network mode [ 2806.449337][T10652] hsr_slave_0: entered promiscuous mode [ 2806.480235][T10652] hsr_slave_1: entered promiscuous mode [ 2806.507978][T10652] debugfs: 'hsr0' already exists in 'hsr' [ 2806.517541][T10732] program syz.1.10251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2806.583999][T10652] Cannot create hsr debugfs directory [ 2806.625825][T10688] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2806.946175][T10746] tipc: Enabling of bearer rejected, already enabled [ 2807.522998][T22392] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 2807.643164][ T5897] usb 1-1: USB disconnect, device number 81 [ 2807.651163][ T8173] Bluetooth: hci1: command tx timeout [ 2807.663387][T22392] usb 2-1: device descriptor read/64, error -71 [ 2807.903930][T22392] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 2808.053698][T22392] usb 2-1: device descriptor read/64, error -71 [ 2808.078173][T10767] netlink: 'syz.2.10258': attribute type 23 has an invalid length. [ 2808.173409][T22392] usb usb2-port1: attempt power cycle [ 2808.312158][ T13] hsr_slave_0: left promiscuous mode [ 2808.324414][ T13] hsr_slave_1: left promiscuous mode [ 2808.339803][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2808.364581][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2808.398668][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2808.415949][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2808.443849][ T13] veth1_macvtap: left promiscuous mode [ 2808.452155][ T13] veth0_macvtap: left promiscuous mode [ 2808.523123][T22392] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 2808.546065][T22392] usb 2-1: device descriptor read/8, error -71 [ 2808.793147][T22392] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 2808.823831][T22392] usb 2-1: device descriptor read/8, error -71 [ 2808.880102][ T13] team0 (unregistering): Port device team_slave_1 removed [ 2808.900941][ T13] team0 (unregistering): Port device team_slave_0 removed [ 2808.980000][T22392] usb usb2-port1: unable to enumerate USB device [ 2809.344040][T10782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10262'. [ 2809.398305][T10782] team_slave_0: entered promiscuous mode [ 2809.404254][T10782] team_slave_1: entered promiscuous mode [ 2809.439613][T10782] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2809.464394][T10782] team_slave_0: left promiscuous mode [ 2809.469857][T10782] team_slave_1: left promiscuous mode [ 2809.685570][T10652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2809.715391][ T8173] Bluetooth: hci1: command tx timeout [ 2809.756610][T10652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2809.806370][T10652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2809.867041][T10652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2810.036884][ T13] IPVS: stop unused estimator thread 0... [ 2810.193475][T10652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2810.251260][T10652] 8021q: adding VLAN 0 to HW filter on device team0 [ 2810.336316][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 2810.343602][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2810.400687][ T657] bridge0: port 2(bridge_slave_1) entered blocking state [ 2810.408098][ T657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2810.815906][T10652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2810.925222][T10652] veth0_vlan: entered promiscuous mode [ 2810.957770][T10652] veth1_vlan: entered promiscuous mode [ 2811.015937][T10652] veth0_macvtap: entered promiscuous mode [ 2811.034640][T10652] veth1_macvtap: entered promiscuous mode [ 2811.163804][T10773] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2811.226798][T10652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2811.354170][T10773] usb 1-1: Using ep0 maxpacket: 16 [ 2811.371886][T10773] usb 1-1: config 0 has no interfaces? [ 2811.391577][T10652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2811.420848][T10773] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2811.442555][T10773] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2811.442616][T10834] tipc: Started in network mode [ 2811.453039][T10773] usb 1-1: Manufacturer: syz [ 2811.489123][T10773] usb 1-1: config 0 descriptor?? [ 2811.539193][T10834] tipc: Node identity ac14140f, cluster identity 4711 [ 2811.613917][T10834] tipc: New replicast peer: 172.20.20.19 [ 2811.649184][T10834] tipc: Enabled bearer , priority 10 [ 2811.922836][T13535] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2811.932097][T13535] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2812.048568][T13535] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2812.085484][T13535] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2812.901347][ T2419] tipc: Node number set to 2886997007 [ 2812.988161][T10839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2813.066844][T10839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2813.190621][T10839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2813.226552][T10839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2813.543070][ T5897] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 2813.563236][T10877] fuse: Unknown parameter 'group_i00000000000000000000' [ 2813.799490][ T5897] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=3d.f8 [ 2813.822184][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2813.840778][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2813.847934][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2813.847961][ T5897] usb 2-1: Product: syz [ 2813.847974][ T5897] usb 2-1: Manufacturer: syz [ 2813.847987][ T5897] usb 2-1: SerialNumber: syz [ 2813.866124][ T5897] usb 2-1: config 0 descriptor?? [ 2813.880834][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2813.895503][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2813.905003][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2814.140149][ T5897] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2814.756355][T10882] chnl_net:caif_netlink_parms(): no params data found [ 2814.777850][ T5897] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2815.057809][ T5897] usb 1-1: USB disconnect, device number 82 [ 2815.130993][T10899] tipc: Started in network mode [ 2815.152288][T10899] tipc: Node identity ac14140f, cluster identity 4711 [ 2815.186653][T10899] tipc: New replicast peer: 172.20.20.19 [ 2815.205676][T10899] tipc: Enabled bearer , priority 10 [ 2815.338139][T10882] bridge0: port 1(bridge_slave_0) entered blocking state [ 2815.356021][T10882] bridge0: port 1(bridge_slave_0) entered disabled state [ 2815.365679][T10882] bridge_slave_0: entered allmulticast mode [ 2815.374607][T10882] bridge_slave_0: entered promiscuous mode [ 2815.401012][T10882] bridge0: port 2(bridge_slave_1) entered blocking state [ 2815.427249][T10882] bridge0: port 2(bridge_slave_1) entered disabled state [ 2815.446521][T10882] bridge_slave_1: entered allmulticast mode [ 2815.466448][T10882] bridge_slave_1: entered promiscuous mode [ 2815.587752][T10882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2815.622381][T10882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2815.671113][T10882] team0: Port device team_slave_0 added [ 2815.680042][T10882] team0: Port device team_slave_1 added [ 2815.781506][T10882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2815.818334][T10882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2815.845395][T10882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2815.859623][T10882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2815.866759][T10882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2815.903614][T10882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2815.959028][ T8173] Bluetooth: hci2: command tx timeout [ 2816.000409][T10882] hsr_slave_0: entered promiscuous mode [ 2816.029079][T10882] hsr_slave_1: entered promiscuous mode [ 2816.035278][ T2419] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 2816.061596][T10882] debugfs: 'hsr0' already exists in 'hsr' [ 2816.079720][T10882] Cannot create hsr debugfs directory [ 2816.236631][T10920] fuse: Unknown parameter 'group_i00000000000000000000' [ 2816.238197][ T2419] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 2816.278588][ T2419] usb 1-1: config 0 has no interface number 0 [ 2816.293384][ T2419] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 2816.342675][ T2419] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2816.378408][T27928] tipc: Node number set to 2886997007 [ 2816.385469][ T2419] usb 1-1: config 0 interface 113 has no altsetting 0 [ 2816.417385][ T2419] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2816.453052][ T2419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2816.461753][ T2419] usb 1-1: Product: syz [ 2816.473045][ T2419] usb 1-1: Manufacturer: syz [ 2816.477679][ T2419] usb 1-1: SerialNumber: syz [ 2816.487948][ T2419] usb 1-1: config 0 descriptor?? [ 2816.537602][ C0] usb 1-1: NFC: Urb failure (status -71) [ 2816.563026][ T2419] usb 1-1: NFC: Unable to get FW version [ 2816.609134][ T2419] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 2816.815419][T10882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2816.929182][T10882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2816.955188][T22392] usb 2-1: USB disconnect, device number 93 [ 2817.013109][T10773] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2817.112012][T10882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2817.216630][T10773] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2817.245553][T10773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2817.262070][T10882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2817.276999][T10773] usb 6-1: Product: syz [ 2817.287517][T10773] usb 6-1: Manufacturer: syz [ 2817.301319][T10773] usb 6-1: SerialNumber: syz [ 2817.325569][T10773] usb 6-1: config 0 descriptor?? [ 2817.361432][T10773] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2817.414203][T10773] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2817.480685][T10773] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2817.518718][T10773] usb 6-1: media controller created [ 2817.583656][T10773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2817.692104][T10882] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2817.727408][T10882] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2817.773652][T10882] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2817.780630][T10773] DVB: Unable to find symbol mt352_attach() [ 2817.812861][T10882] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2817.860794][T10773] DVB: Unable to find symbol nxt6000_attach() [ 2817.878261][T10773] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2817.911941][T10773] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input199 [ 2817.962198][T10773] dvb-usb: schedule remote query interval to 1000 msecs. [ 2817.996610][T10773] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2818.033807][ T8173] Bluetooth: hci2: command tx timeout [ 2818.049232][T10773] dvb-usb: bulk message failed: -22 (7/0) [ 2818.068055][T10773] dvb-usb: bulk message failed: -22 (7/0) [ 2818.092100][T10773] usb 6-1: USB disconnect, device number 43 [ 2818.117931][T10882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2818.175497][T10882] 8021q: adding VLAN 0 to HW filter on device team0 [ 2818.229910][T10773] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2818.268591][ T657] bridge0: port 1(bridge_slave_0) entered blocking state [ 2818.275743][ T657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2818.340424][ T657] bridge0: port 2(bridge_slave_1) entered blocking state [ 2818.347587][ T657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2818.567696][T10959] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.10296'. [ 2818.649721][T10882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2818.785306][T10882] veth0_vlan: entered promiscuous mode [ 2818.817978][T10882] veth1_vlan: entered promiscuous mode [ 2818.892844][T10882] veth0_macvtap: entered promiscuous mode [ 2818.902528][T10882] veth1_macvtap: entered promiscuous mode [ 2818.927485][T10882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2818.948593][T10882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2818.982354][ T3543] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.050043][ T3543] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.070972][T30510] usb 1-1: USB disconnect, device number 83 [ 2819.139651][ T3543] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.180095][ T3543] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.508572][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2819.546187][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2819.670053][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2819.711888][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2820.021600][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10299'. [ 2820.116474][ T8173] Bluetooth: hci2: command tx timeout [ 2820.220799][T10978] tipc: Started in network mode [ 2820.245197][T10978] tipc: Node identity ac14140f, cluster identity 4711 [ 2820.259076][T10978] tipc: New replicast peer: 172.20.20.19 [ 2820.281176][T10978] tipc: Enabled bearer , priority 10 [ 2821.095151][T11000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2821.273142][ T2419] tipc: Node number set to 2886997007 [ 2821.374844][T27490] [ 2821.377197][T27490] ============================================ [ 2821.383327][T27490] WARNING: possible recursive locking detected [ 2821.389472][T27490] syzkaller #0 Tainted: G L [ 2821.395425][T27490] -------------------------------------------- [ 2821.401553][T27490] kworker/u8:0/27490 is trying to acquire lock: [ 2821.407770][T27490] ffff8880335244a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 2821.417078][T27490] [ 2821.417078][T27490] but task is already holding lock: [ 2821.424531][T27490] ffff8880335244a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 2821.434077][T27490] [ 2821.434077][T27490] other info that might help us debug this: [ 2821.442133][T27490] Possible unsafe locking scenario: [ 2821.442133][T27490] [ 2821.449585][T27490] CPU0 [ 2821.452869][T27490] ---- [ 2821.456146][T27490] lock(k-sk_lock-AF_INET6); [ 2821.460809][T27490] lock(k-sk_lock-AF_INET6); [ 2821.465526][T27490] [ 2821.465526][T27490] *** DEADLOCK *** [ 2821.465526][T27490] [ 2821.473666][T27490] May be due to missing lock nesting notation [ 2821.473666][T27490] [ 2821.482020][T27490] 4 locks held by kworker/u8:0/27490: [ 2821.487384][T27490] #0: ffff888063f40148 ((wq_completion)krds_cp_wq#23/0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 2821.499312][T27490] #1: ffffc90013c57c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 2821.512076][T27490] #2: ffff8880335244a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 2821.522084][T27490] #3: ffff888033524648 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 2821.532076][T27490] [ 2821.532076][T27490] stack backtrace: [ 2821.538067][T27490] CPU: 1 UID: 0 PID: 27490 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2821.538092][T27490] Tainted: [L]=SOFTLOCKUP [ 2821.538098][T27490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2821.538110][T27490] Workqueue: krds_cp_wq#23/0 rds_send_worker [ 2821.538143][T27490] Call Trace: [ 2821.538150][T27490] [ 2821.538157][T27490] dump_stack_lvl+0xe8/0x150 [ 2821.538178][T27490] print_deadlock_bug+0x279/0x290 [ 2821.538200][T27490] __lock_acquire+0x253f/0x2cf0 [ 2821.538223][T27490] ? unwind_next_frame+0xa5/0x23c0 [ 2821.538247][T27490] lock_acquire+0xf0/0x2e0 [ 2821.538263][T27490] ? inet6_getname+0x15d/0x650 [ 2821.538282][T27490] lock_sock_nested+0x48/0x100 [ 2821.538297][T27490] ? inet6_getname+0x15d/0x650 [ 2821.538311][T27490] inet6_getname+0x15d/0x650 [ 2821.538328][T27490] rds_tcp_conn_slots_available+0x288/0x470 [ 2821.538345][T27490] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2821.538366][T27490] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2821.538385][T27490] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2821.538401][T27490] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 2821.538415][T27490] ? process_scheduled_works+0xb02/0x1830 [ 2821.538432][T27490] ? worker_thread+0xa50/0xfc0 [ 2821.538447][T27490] ? kthread+0x388/0x470 [ 2821.538463][T27490] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 2821.538483][T27490] rds_recv_incoming+0x9f6/0x12d0 [ 2821.538499][T27490] ? __pfx_rds_recv_incoming+0x10/0x10 [ 2821.538513][T27490] ? skb_copy_bits+0x7e5/0x8f0 [ 2821.538531][T27490] rds_tcp_data_recv+0x7f1/0xa40 [ 2821.538553][T27490] __tcp_read_sock+0x196/0x970 [ 2821.538577][T27490] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 2821.538592][T27490] rds_tcp_data_ready+0x369/0x9a0 [ 2821.538607][T27490] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2821.538626][T27490] ? __pfx_sock_def_readable+0x10/0x10 [ 2821.538641][T27490] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 2821.538660][T27490] tcp_rcv_established+0x19f4/0x2740 [ 2821.538686][T27490] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2821.538713][T27490] ? ip6_dst_check+0xd0/0x7e0 [ 2821.538730][T27490] ? ip6_dst_check+0xe2/0x7e0 [ 2821.538745][T27490] ? ip6_dst_check+0x5e3/0x7e0 [ 2821.538761][T27490] ? __pfx_ip6_dst_check+0x10/0x10 [ 2821.538776][T27490] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 2821.538794][T27490] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 2821.538807][T27490] __release_sock+0x1b8/0x3a0 [ 2821.538829][T27490] release_sock+0x5f/0x1f0 [ 2821.538842][T27490] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 2821.538856][T27490] rds_send_xmit+0x207e/0x28d0 [ 2821.538883][T27490] ? __pfx_rds_send_xmit+0x10/0x10 [ 2821.538904][T27490] rds_send_worker+0x7d/0x2e0 [ 2821.538921][T27490] ? process_scheduled_works+0xa25/0x1830 [ 2821.538938][T27490] process_scheduled_works+0xb02/0x1830 [ 2821.538962][T27490] ? __pfx_process_scheduled_works+0x10/0x10 [ 2821.538982][T27490] ? assign_work+0x3d5/0x5e0 [ 2821.539001][T27490] worker_thread+0xa50/0xfc0 [ 2821.539028][T27490] kthread+0x388/0x470 [ 2821.539041][T27490] ? __pfx_worker_thread+0x10/0x10 [ 2821.539058][T27490] ? __pfx_kthread+0x10/0x10 [ 2821.539072][T27490] ret_from_fork+0x51e/0xb90 [ 2821.539092][T27490] ? __pfx_ret_from_fork+0x10/0x10 [ 2821.539108][T27490] ? __switch_to+0xc7d/0x1450 [ 2821.539126][T27490] ? __pfx_kthread+0x10/0x10 [ 2821.539140][T27490] ret_from_fork_asm+0x1a/0x30 [ 2821.539165][T27490] [ 2821.859306][T27490] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 2821.868103][T27490] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 27490, name: kworker/u8:0 [ 2821.877789][T27490] preempt_count: 201, expected: 0 [ 2821.882963][T27490] RCU nest depth: 0, expected: 0 [ 2821.888023][T27490] INFO: lockdep is turned off. [ 2821.892820][T27490] Preemption disabled at: [ 2821.892830][T27490] [<0000000000000000>] 0x0 [ 2821.901726][T27490] CPU: 1 UID: 0 PID: 27490 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2821.901745][T27490] Tainted: [L]=SOFTLOCKUP [ 2821.901749][T27490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2821.901757][T27490] Workqueue: krds_cp_wq#23/0 rds_send_worker [ 2821.901777][T27490] Call Trace: [ 2821.901783][T27490] [ 2821.901788][T27490] dump_stack_lvl+0xe8/0x150 [ 2821.901803][T27490] __might_resched+0x378/0x4d0 [ 2821.901817][T27490] lock_sock_nested+0x5d/0x100 [ 2821.901827][T27490] inet6_getname+0x15d/0x650 [ 2821.901839][T27490] rds_tcp_conn_slots_available+0x288/0x470 [ 2821.901849][T27490] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2821.901862][T27490] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2821.901877][T27490] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2821.901887][T27490] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 2821.901897][T27490] ? process_scheduled_works+0xb02/0x1830 [ 2821.901909][T27490] ? worker_thread+0xa50/0xfc0 [ 2821.901920][T27490] ? kthread+0x388/0x470 [ 2821.901929][T27490] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 2821.901942][T27490] rds_recv_incoming+0x9f6/0x12d0 [ 2821.901954][T27490] ? __pfx_rds_recv_incoming+0x10/0x10 [ 2821.901964][T27490] ? skb_copy_bits+0x7e5/0x8f0 [ 2821.901977][T27490] rds_tcp_data_recv+0x7f1/0xa40 [ 2821.901989][T27490] __tcp_read_sock+0x196/0x970 [ 2821.902005][T27490] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 2821.902014][T27490] rds_tcp_data_ready+0x369/0x9a0 [ 2821.902023][T27490] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2821.902035][T27490] ? __pfx_sock_def_readable+0x10/0x10 [ 2821.902043][T27490] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 2821.902054][T27490] tcp_rcv_established+0x19f4/0x2740 [ 2821.902071][T27490] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2821.902083][T27490] ? ip6_dst_check+0xd0/0x7e0 [ 2821.902094][T27490] ? ip6_dst_check+0xe2/0x7e0 [ 2821.902103][T27490] ? ip6_dst_check+0x5e3/0x7e0 [ 2821.902112][T27490] ? __pfx_ip6_dst_check+0x10/0x10 [ 2821.902122][T27490] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 2821.902133][T27490] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 2821.902140][T27490] __release_sock+0x1b8/0x3a0 [ 2821.902155][T27490] release_sock+0x5f/0x1f0 [ 2821.902164][T27490] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 2821.902174][T27490] rds_send_xmit+0x207e/0x28d0 [ 2821.902191][T27490] ? __pfx_rds_send_xmit+0x10/0x10 [ 2821.902203][T27490] rds_send_worker+0x7d/0x2e0 [ 2821.902215][T27490] ? process_scheduled_works+0xa25/0x1830 [ 2821.902226][T27490] process_scheduled_works+0xb02/0x1830 [ 2821.902241][T27490] ? __pfx_process_scheduled_works+0x10/0x10 [ 2821.902253][T27490] ? assign_work+0x3d5/0x5e0 [ 2821.902265][T27490] worker_thread+0xa50/0xfc0 [ 2821.902281][T27490] kthread+0x388/0x470 [ 2821.902289][T27490] ? __pfx_worker_thread+0x10/0x10 [ 2821.902300][T27490] ? __pfx_kthread+0x10/0x10 [ 2821.902308][T27490] ret_from_fork+0x51e/0xb90 [ 2821.902320][T27490] ? __pfx_ret_from_fork+0x10/0x10 [ 2821.902331][T27490] ? __switch_to+0xc7d/0x1450 [ 2821.902342][T27490] ? __pfx_kthread+0x10/0x10 [ 2821.902349][T27490] ret_from_fork_asm+0x1a/0x30 [ 2821.902365][T27490] [ 2821.902375][T27490] BUG: scheduling while atomic: kworker/u8:0/27490/0x00000202 [ 2822.207067][T27490] INFO: lockdep is turned off. [ 2822.211922][T27490] Modules linked in: [ 2822.215843][T27490] Preemption disabled at: [ 2822.215852][T27490] [<0000000000000000>] 0x0 [ 2822.224690][T27490] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 2822.233440][T27490] CPU: 1 UID: 0 PID: 27490 Comm: kworker/u8:0 Tainted: G W L syzkaller #0 PREEMPT(full) [ 2822.244710][T27490] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2822.249896][T27490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2822.259936][T27490] Workqueue: krds_cp_wq#23/0 rds_send_worker [ 2822.265910][T27490] Call Trace: [ 2822.269171][T27490] [ 2822.272080][T27490] vpanic+0x56c/0xa60 [ 2822.276047][T27490] ? __pfx_vpanic+0x10/0x10 [ 2822.280590][T27490] ? rcu_is_watching+0x15/0xb0 [ 2822.285375][T27490] panic+0xc5/0xd0 [ 2822.289095][T27490] ? __pfx_panic+0x10/0x10 [ 2822.293498][T27490] ? __pfx__printk+0x10/0x10 [ 2822.298069][T27490] ? vprintk_emit+0x4eb/0x560 [ 2822.302738][T27490] ? __pfx_vprintk_emit+0x10/0x10 [ 2822.307747][T27490] check_panic_on_warn+0x89/0xb0 [ 2822.312662][T27490] __schedule_bug+0xf6/0x150 [ 2822.317237][T27490] __schedule+0x16a9/0x5340 [ 2822.321721][T27490] ? __wake_up_klogd+0xe6/0x120 [ 2822.326547][T27490] ? vprintk_emit+0x4eb/0x560 [ 2822.331206][T27490] ? rcu_is_watching+0x15/0xb0 [ 2822.335958][T27490] ? __pfx_vprintk_emit+0x10/0x10 [ 2822.341017][T27490] ? unwind_next_frame+0xa5/0x23c0 [ 2822.346122][T27490] ? do_raw_spin_lock+0x12b/0x2f0 [ 2822.351129][T27490] ? __pfx___schedule+0x10/0x10 [ 2822.356056][T27490] ? rcu_is_watching+0x15/0xb0 [ 2822.360829][T27490] ? rcu_is_watching+0x15/0xb0 [ 2822.365584][T27490] ? lock_release+0x4b/0x3d0 [ 2822.370165][T27490] ? schedule+0x90/0x360 [ 2822.374478][T27490] ? wq_worker_sleeping+0x63/0x250 [ 2822.379678][T27490] schedule+0x164/0x360 [ 2822.383853][T27490] __lock_sock+0x161/0x2c0 [ 2822.388275][T27490] ? __pfx___lock_sock+0x10/0x10 [ 2822.393198][T27490] ? do_raw_spin_lock+0x12b/0x2f0 [ 2822.398246][T27490] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2822.404326][T27490] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2822.409735][T27490] ? lock_acquire+0x57/0x2e0 [ 2822.414326][T27490] ? dump_stack_lvl+0x135/0x150 [ 2822.419173][T27490] ? lock_sock_nested+0x6a/0x100 [ 2822.424191][T27490] lock_sock_nested+0x9f/0x100 [ 2822.428988][T27490] inet6_getname+0x15d/0x650 [ 2822.433603][T27490] rds_tcp_conn_slots_available+0x288/0x470 [ 2822.439622][T27490] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2822.446214][T27490] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2822.452031][T27490] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2822.458438][T27490] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 2822.463594][T27490] ? process_scheduled_works+0xb02/0x1830 [ 2822.469300][T27490] ? worker_thread+0xa50/0xfc0 [ 2822.474045][T27490] ? kthread+0x388/0x470 [ 2822.478366][T27490] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 2822.484012][T27490] rds_recv_incoming+0x9f6/0x12d0 [ 2822.489059][T27490] ? __pfx_rds_recv_incoming+0x10/0x10 [ 2822.494499][T27490] ? skb_copy_bits+0x7e5/0x8f0 [ 2822.499249][T27490] rds_tcp_data_recv+0x7f1/0xa40 [ 2822.504265][T27490] __tcp_read_sock+0x196/0x970 [ 2822.509036][T27490] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 2822.514499][T27490] rds_tcp_data_ready+0x369/0x9a0 [ 2822.519641][T27490] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2822.525636][T27490] ? __pfx_sock_def_readable+0x10/0x10 [ 2822.531105][T27490] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 2822.536645][T27490] tcp_rcv_established+0x19f4/0x2740 [ 2822.541928][T27490] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2822.547565][T27490] ? ip6_dst_check+0xd0/0x7e0 [ 2822.552227][T27490] ? ip6_dst_check+0xe2/0x7e0 [ 2822.556882][T27490] ? ip6_dst_check+0x5e3/0x7e0 [ 2822.561643][T27490] ? __pfx_ip6_dst_check+0x10/0x10 [ 2822.566740][T27490] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 2822.571416][T27490] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 2822.576519][T27490] __release_sock+0x1b8/0x3a0 [ 2822.581218][T27490] release_sock+0x5f/0x1f0 [ 2822.585624][T27490] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 2822.591858][T27490] rds_send_xmit+0x207e/0x28d0 [ 2822.596639][T27490] ? __pfx_rds_send_xmit+0x10/0x10 [ 2822.602303][T27490] rds_send_worker+0x7d/0x2e0 [ 2822.607119][T27490] ? process_scheduled_works+0xa25/0x1830 [ 2822.613018][T27490] process_scheduled_works+0xb02/0x1830 [ 2822.618569][T27490] ? __pfx_process_scheduled_works+0x10/0x10 [ 2822.624584][T27490] ? assign_work+0x3d5/0x5e0 [ 2822.629337][T27490] worker_thread+0xa50/0xfc0 [ 2822.633918][T27490] kthread+0x388/0x470 [ 2822.637974][T27490] ? __pfx_worker_thread+0x10/0x10 [ 2822.643079][T27490] ? __pfx_kthread+0x10/0x10 [ 2822.647838][T27490] ret_from_fork+0x51e/0xb90 [ 2822.652417][T27490] ? __pfx_ret_from_fork+0x10/0x10 [ 2822.657509][T27490] ? __switch_to+0xc7d/0x1450 [ 2822.662171][T27490] ? __pfx_kthread+0x10/0x10 [ 2822.666759][T27490] ret_from_fork_asm+0x1a/0x30 [ 2822.671515][T27490] [ 2822.675044][T27490] Kernel Offset: disabled [ 2822.679439][T27490] Rebooting in 86400 seconds..