last executing test programs: 14.00247253s ago: executing program 4 (id=1178): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010066da5908ba076324e8fea78300000008000500ac141400080005000a0101021800168000000000000600150002000000362bd77be0d1ac56d64aee043e5018926fe7eb8312c107156e8ea37423a85e0de6b6dcf105166c0ef7b2a19236c5647ca8cbf93db40000000000000000e5000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 13.949543506s ago: executing program 3 (id=1179): r0 = socket(0x2, 0x3, 0xff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r4, &(0x7f0000000080)=""/186, 0xba) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f00000002c0)={0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {}, {0xb, 0x17}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x20040054) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r10, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x3, 0x0, @scatter={0x2, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7a", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0x4800) 13.794793095s ago: executing program 0 (id=1180): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x1f, 0x1, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_open_dev$dri(0x0, 0x7, 0x220042) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0xfffffffffffffc7a) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9a7b4c333a53e8c04455397aef78e379cd5e13aec6c2332faaef6ca310547d38e3f94414ebf33411ace8acabb11db28b8d4a121aabc746e6654556cab1e2de77b082d2e061e3fe4c58efe4f8e0ca956bedc5763cc2da2151eb0ac6a937560b54dd5dc11b4e65a4bdf044146", 0xe6}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db22777a29e20", 0x56}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) 13.10171915s ago: executing program 1 (id=1182): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x5, 0x0, 0x97d, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xc000, 0x2, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r3, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r9, r8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r8, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 11.536416996s ago: executing program 4 (id=1183): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0x100000, 0x10, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2000, 0xf, 0xf6, 0x0, 0x0, 0x1, 0xff, 0x8, 0x0, 0x5}, {0xd000, 0xdddd7002, 0x0, 0x80, 0xf9, 0x0, 0xff, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x3}, {0x4000, 0xdddd1000, 0xc, 0x21, 0x3, 0x10, 0xc0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0xdddd1000, 0x2000, 0xa, 0x0, 0x2, 0xfd, 0x0, 0x7, 0x3a, 0x2}, {0xeeef0000, 0x2, 0x0, 0x2, 0x7, 0x6, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x7, 0x4000, 0xffff1000, [0x400000000000000, 0x10000000020, 0x2]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) r10 = fsmount(r6, 0x0, 0x6) r11 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) poll(&(0x7f0000000240)=[{r12, 0x10}], 0x1, 0x1) fchdir(r10) 11.129634477s ago: executing program 3 (id=1184): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r5, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x8f) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4000003e, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x95, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) 10.763839224s ago: executing program 0 (id=1185): pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x8) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendfile(r5, r5, 0x0, 0xffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x39c, 0x0, 0x28c, 0x28c, 0x28c, 0x94, 0x32c, 0x32c, 0x32c, 0x32c, 0x32c, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x94}, @ECN={0x24}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x2000000, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3f8) 10.534829292s ago: executing program 1 (id=1186): socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) ioctl$USBDEVFS_SETINTERFACE(r1, 0x8008550e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) writev(0xffffffffffffffff, &(0x7f0000000140), 0x10000000000002f1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e23, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000140)=ANY=[]) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) socket(0x2b, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10002, 0x3) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) 9.579341304s ago: executing program 1 (id=1187): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r7, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)="2851f7f5abcb6623c4d07cc41e30bd1d877805825c9662133935a9", 0x1b, 0x10, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) 9.4651687s ago: executing program 0 (id=1188): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="07000bf34c56be121a8772"]) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x100008000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)={0xc8, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xa0, 0x8, 0x0, 0x1, [{0x4}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x4}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_open_dev$video4linux(&(0x7f0000000080), 0xffffffffffffffff, 0x141582) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x15) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r10 = dup(r9) write$UHID_INPUT(r10, 0x0, 0x0) 9.421181168s ago: executing program 3 (id=1189): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = io_uring_setup(0x1581, &(0x7f0000000380)={0x0, 0x1b6f, 0x40, 0x0, 0x3bd}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, {0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, 0x0, 0x8}}, [@mark={0xc, 0x15, {0x350759}}]}, 0xcc}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/212, 0xd4) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="8f9f02000000006ca200040000000400018085e6635b351b11591c179fa3e57c845682c08580573056e362350fe0d9be0fc23528b60d6c381ce238c88432fe8f43ff13948ebf1b9e478f1adcb25f"], 0x18}}, 0x2000c090) close_range(r2, r4, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 7.537760375s ago: executing program 4 (id=1191): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = io_uring_setup(0x1581, &(0x7f0000000380)={0x0, 0x1b6f, 0x40, 0x0, 0x3bd}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, {0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, 0x0, 0x8}}, [@mark={0xc, 0x15, {0x350759}}]}, 0xcc}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/212, 0xd4) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="8f9f02000000006ca200040000000400018085e6635b351b11591c179fa3e57c845682c08580573056e362350fe0d9be0fc23528b60d6c381ce238c88432fe8f43ff13948ebf1b9e478f1adcb25f"], 0x18}}, 0x2000c090) close_range(r2, r4, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 7.307355631s ago: executing program 1 (id=1192): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r2, r2, 0x0, 0x68) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000340)=ANY=[], 0x14) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) recvmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="ef0771c3"]}]}]}, 0x20}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280), 0x0) ptrace$cont(0x21, r5, 0x80000001, 0x4) sched_setattr(r5, &(0x7f0000000040)={0x38, 0x3, 0x10000048, 0xfffffff9, 0xc, 0x1800000000000000, 0x0, 0x6, 0x80000000, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000300)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r6, 0xffffffffffffffff, 0x0) 7.248989505s ago: executing program 2 (id=1193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010066da5908ba076324e8fea78300000008000500ac141400080005000a0101021800168000000000000600150002000000362bd77be0d1ac56d64aee043e5018926fe7eb8312c107156e8ea37423a85e0de6b6dcf105166c0ef7b2a19236c5647ca8cbf93db40000000000000000e5000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.948480905s ago: executing program 0 (id=1194): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @private2, 0x3}]}, &(0x7f0000000240)=0xc) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0x8000000000000000, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x517, 0x3ff, 0x5, 0x1ff, 0x9, 0x8, 0x7, 0x0, 0x1000000003, 0x2, 0x6, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x800, 0xd49, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x40005c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x8, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xc39d, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x84, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x0, 0x6, 0xab6, 0x0, 0x2, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0xa, 0x4, 0x6, 0x5, 0x0, 0xd, 0x2, 0x6, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xecd, 0xcc, 0x8, 0x3]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x1, 0x0, 0x2, 0xff, 0x8, 0x3, 0x0, 0x0, 0xd, 0x10, 0x0, 0x20006, 0xf0, 0x0, 0x1, 0x4, 0xfe, '\x00', 0x0, 0x3}) fchdir(0xffffffffffffffff) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3", 0xa1) dup(r3) open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) syz_open_dev$tty20(0xc, 0x4, 0x0) 6.850603701s ago: executing program 2 (id=1195): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_INIT(r1, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xd070000) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create(0x10) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000080)={0x8}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r8, 0x8c5d47e95537ac9b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) 6.651694741s ago: executing program 3 (id=1196): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket(0x2b, 0x6, 0x1) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) r5 = fsmount(r0, 0x0, 0x6) fchdir(r5) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/798], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff96}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000008c0)=r7, 0x4) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8, 0x1, 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r9, 0x541b, &(0x7f0000000080)) 5.25439515s ago: executing program 3 (id=1197): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010066da5908ba076324e8fea78300000008000500ac141400080005000a0101021800168000000000000600150002000000362bd77be0d1ac56d64aee043e5018926fe7eb8312c107156e8ea37423a85e0de6b6dcf105166c0ef7b2a19236c5647ca8cbf93db40000000000000000e5000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r2}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r4, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) r5 = openat$ttyprintk(0xffffff9c, &(0x7f0000000240), 0x10000, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000003c0)={0x9, 0xff, 0xa7c, 0x2, 0x2, "208e04dac6d0f8c3d75c62ae839e2e23b61258", 0x8, 0xe54}) preadv(r4, 0x0, 0x0, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa000000090400"], 0x0) 4.830346231s ago: executing program 4 (id=1198): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4.755118571s ago: executing program 0 (id=1199): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x2a}, 0x20) shmdt(r4) capget(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) poll(0x0, 0x0, 0x7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x8811) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) r8 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r9, 0x0, 0x41}, 0x38) read$FUSE(r8, &(0x7f0000002d80)={0x2020}, 0x2025) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x9, 0x1, 0x4e1f168e26921e94, 0xc}, 0x16, &(0x7f0000000240)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x0, 0x5, 0xe}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x4, 0x1a8}]}, 0x3, [{0x32, &(0x7f00000004c0)=@string={0x32, 0x3, "d1beefab789f5c463eb749f68d8a3d987474f1e6775a06bc31dd7e6cb4d6eb8fec28dc5df30aab33d05f83cf4354358e"}}, {0x89, &(0x7f00000000c0)=@string={0x89, 0x3, "d9d29e4356c753412f4e0769c40f769fc98bb7d6039a304671d5048ba8fd398d4540d07f337f3b0c49c46e9f93681f0b147de0931c64e44da32f0259c753f4cb39fa31b340c49edaf74a3693fdfbf6f023ea14936e81964a72ed9cb53860ad1f1edf5468b7e80d007941e29510b889f0528099ba5ed1a21409021662e37b04d14a6ecc8bc7ad55"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x445}}]}) 4.670326947s ago: executing program 4 (id=1200): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x2a}, 0x20) shmdt(r4) capget(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) poll(0x0, 0x0, 0x7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x8811) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) read$FUSE(r9, &(0x7f0000002d80)={0x2020}, 0x2025) syz_usb_connect(0x3, 0x100, &(0x7f00000002c0)={{0x12, 0x1, 0x100, 0xfa, 0x24, 0x9f, 0x20, 0x734, 0x43b, 0xd800, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x1, 0x9, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x25, 0x8, 0x0, 0x8, 0x5e, 0x8b, 0x3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "9b5b422a55"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0x8000, 0x3, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x6}, @mdlm_detail={0x8a, 0x24, 0x13, 0x4, "f2173b3ed30fbba4826a4b72cb44602077fa41e59f9778e7f3097f18cc71cdc521e0416fc012998f652a3c53f142b87720fe121dfd7af2c6a94c2804cc9db3d4206b38459e3729350285f4a011ad9ed4faaef058a98796eb48ede2d52c9e8a360725219062b14dd0f61ba67142701a5874f770baba93bb7f3da5711c9ecf68401144ce418ef8"}, @mbim={0xc, 0x24, 0x1b, 0x4c0, 0x1, 0x2, 0x9, 0x1, 0xb}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0x9, 0x1, 0x0, 0x6}, @mdlm_detail={0x10, 0x24, 0x13, 0x67, "fdb6997fcfa092dab3f04124"}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x2, 0x1}]}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x9, 0x1, 0x4e1f168e26921e94, 0xc}, 0x16, &(0x7f0000000240)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x0, 0x5, 0xe}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x4, 0x1a8}]}, 0x3, [{0x32, &(0x7f00000004c0)=@string={0x32, 0x3, "d1beefab789f5c463eb749f68d8a3d987474f1e6775a06bc31dd7e6cb4d6eb8fec28dc5df30aab33d05f83cf4354358e"}}, {0x89, &(0x7f00000000c0)=@string={0x89, 0x3, "d9d29e4356c753412f4e0769c40f769fc98bb7d6039a304671d5048ba8fd398d4540d07f337f3b0c49c46e9f93681f0b147de0931c64e44da32f0259c753f4cb39fa31b340c49edaf74a3693fdfbf6f023ea14936e81964a72ed9cb53860ad1f1edf5468b7e80d007941e29510b889f0528099ba5ed1a21409021662e37b04d14a6ecc8bc7ad55"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x445}}]}) 4.614148759s ago: executing program 2 (id=1201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x5761, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x45, 0x0, 0x7, 0xb}, {0x20, 0x0, 0x0, 0x7fff}, {0x0, 0x0, 0x0, 0xa}, {0x0, 0x2}, {0x6}]}) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x18, 0x9, 0xa, 0x300, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_DESC={0x4}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, 0x0) 2.881282409s ago: executing program 2 (id=1202): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mq_timedsend(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x800c, 0x4, 0x4, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee00000000000000000200", 0x57}], 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22903, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r3, 0x80927000) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r3, 0xffffe000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8850) syz_open_dev$loop(&(0x7f0000000000), 0x47ffffd, 0x122c42) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) 2.876881449s ago: executing program 1 (id=1203): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r7, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)="2851f7f5abcb6623c4d07cc41e30bd1d877805825c9662133935a9", 0x1b, 0x10, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) 1.306780592s ago: executing program 0 (id=1204): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsopen(0x0, 0x0) link(0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x3}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000440)={r5, 0x7}, 0x8) r6 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="5af9", 0x2) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)="19c46c87537737a0dc91", 0xa}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x2}, 0x8) 1.306500028s ago: executing program 2 (id=1205): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010066da5908ba076324e8fea78300000008000500ac141400080005000a0101021800168000000000000600150002000000362bd77be0d1ac56d64aee043e5018926fe7eb8312c107156e8ea37423a85e0de6b6dcf105166c0ef7b2a19236c5647ca8cbf93db40000000000000000e5000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.301077898s ago: executing program 3 (id=1214): socket$nl_netfilter(0x10, 0x3, 0xc) setuid(0xee01) tkill(0x0, 0x13) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28) close(0x4) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000200), 0x1) socket$nl_route(0x10, 0x3, 0x0) 1.021967239s ago: executing program 2 (id=1206): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x3a9002, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r5, 0x200001fe0000) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4, 0xffffffff, @local}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000140)='-3', 0x2}]) 839.056282ms ago: executing program 1 (id=1207): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)='`M', 0x2}, {0x0}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000540)=0x1) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x1, 'syzkaller0\x00', {}, 0x1}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}], 0x1) 0s ago: executing program 4 (id=1208): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = io_uring_setup(0x1581, &(0x7f0000000380)={0x0, 0x1b6f, 0x40, 0x0, 0x3bd}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, {0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, 0x0, 0x8}}, [@mark={0xc, 0x15, {0x350759}}]}, 0xcc}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/212, 0xd4) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="8f9f02000000006ca200040000000400018085e6635b351b11591c179fa3e57c845682c08580573056e362350fe0d9be0fc23528b60d6c381ce238c88432fe8f43ff13948ebf1b9e478f1adcb25f"], 0x18}}, 0x2000c090) close_range(r2, r4, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) kernel console output (not intermixed with test programs): 93480][ T9] usb 4-1: config 9 has no interface number 0 [ 403.308759][ T9] usb 4-1: config 9 interface 37 has no altsetting 0 [ 403.338077][ T9] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 403.499488][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.569606][ T9] usb 4-1: Product: х [ 403.989017][ T9] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 404.028773][ T9] usb 4-1: SerialNumber: syz [ 406.352546][ T9] gspca_main: spca506-2.14.0 probing 0734:043b [ 406.602042][ T9] usb 4-1: USB disconnect, device number 31 [ 406.874362][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 406.991794][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 407.205421][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 407.219641][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 407.246859][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.246886][ T9] usb 4-1: Product: syz [ 407.247091][ T9] usb 4-1: Manufacturer: syz [ 407.247107][ T9] usb 4-1: SerialNumber: syz [ 407.276376][ T9] usb 4-1: config 0 descriptor?? [ 407.397835][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 407.397852][ T30] audit: type=1326 audit(1765342911.323:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 407.400625][ T30] audit: type=1326 audit(1765342911.333:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 407.462314][ T30] audit: type=1326 audit(1765342911.383:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 407.682698][ T30] audit: type=1326 audit(1765342911.383:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 407.682774][ T30] audit: type=1326 audit(1765342911.383:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 407.682815][ T30] audit: type=1326 audit(1765342911.583:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=450 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 407.682852][ T30] audit: type=1326 audit(1765342911.583:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 407.682885][ T30] audit: type=1326 audit(1765342911.583:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 407.683005][ T30] audit: type=1326 audit(1765342911.593:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 407.683044][ T30] audit: type=1326 audit(1765342911.593:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 407.702813][ T5873] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 407.709909][ T9] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 407.710009][ T9] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 407.806660][ T9] usb 4-1: USB disconnect, device number 32 [ 407.871939][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 407.910938][ T5873] usb 2-1: unable to get BOS descriptor or descriptor too short [ 407.914236][ T5873] usb 2-1: config 4 interface 0 has no altsetting 0 [ 407.924647][ T5873] usb 2-1: string descriptor 0 read error: -22 [ 407.924743][ T5873] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 407.924756][ T5873] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 407.929483][ T5873] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 407.935036][ T5873] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 407.935615][ T5873] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 407.935652][ T5873] usb 2-1: media controller created [ 407.955790][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 408.353187][ T9568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.814'. [ 408.658993][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 408.908643][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 409.288806][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.390566][ T5873] zl10353_read_register: readreg error (reg=127, ret==0) [ 409.397838][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 409.480816][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 409.506268][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 409.607384][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.617721][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 409.645622][ T10] usb 3-1: SerialNumber: syz [ 409.653167][ T9568] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 409.667086][ T9568] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 409.674772][ T5873] usb 2-1: USB disconnect, device number 36 [ 409.686499][ T10] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 409.889866][ T10] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 409.928913][ T10] usb 3-1: USB disconnect, device number 39 [ 410.379927][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 410.478761][ T39] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 410.962923][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 411.117808][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 411.168677][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 411.181965][ T24] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 411.190709][ T24] usb 4-1: config 9 has no interface number 0 [ 411.231398][ T24] usb 4-1: config 9 interface 37 has no altsetting 0 [ 411.475172][ T24] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 411.488845][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.499169][ T24] usb 4-1: Product: х [ 411.504217][ T24] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 411.558732][ T24] usb 4-1: SerialNumber: syz [ 414.114126][ T24] gspca_main: spca506-2.14.0 probing 0734:043b [ 414.272690][ T24] usb 4-1: USB disconnect, device number 33 [ 415.219661][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 417.618719][ T5873] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 418.060038][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 418.107391][ T5873] usb 3-1: config 9 has an invalid interface number: 37 but max is 0 [ 418.116312][ T5873] usb 3-1: config 9 has no interface number 0 [ 418.123101][ T5873] usb 3-1: config 9 interface 37 has no altsetting 0 [ 418.143379][ T5873] usb 3-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 418.161025][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.175920][ T5873] usb 3-1: Product: х [ 418.180281][ T5873] usb 3-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 418.219047][ T5873] usb 3-1: SerialNumber: syz [ 418.585851][ T9672] netlink: 'syz.4.833': attribute type 9 has an invalid length. [ 418.725626][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 419.017780][ T9670] 8021q: VLANs not supported on ip6tnl0 [ 419.445150][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 420.663148][ T5873] gspca_main: spca506-2.14.0 probing 0734:043b [ 420.911007][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 420.972932][ T5873] usb 3-1: USB disconnect, device number 40 [ 421.538744][ T5873] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 421.726286][ T5873] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 421.741442][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.757461][ T5873] usb 3-1: Product: syz [ 421.778691][ T5873] usb 3-1: Manufacturer: syz [ 421.796553][ T5873] usb 3-1: SerialNumber: syz [ 421.846241][ T5873] usb 3-1: config 0 descriptor?? [ 421.883198][ T5873] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 422.298693][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 422.314452][ T5873] gspca_sunplus: reg_r err -32 [ 422.341445][ T5873] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 422.469218][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 424.096119][ T1037] usb 3-1: USB disconnect, device number 41 [ 424.231252][ T9717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.033388][ T9728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.841'. [ 425.588773][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 425.748703][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 425.755988][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.775707][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 425.801604][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 425.823071][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 426.196119][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.206017][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 426.286892][ T9] usb 2-1: SerialNumber: syz [ 426.303664][ T9728] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 426.321625][ T9728] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 426.457934][ T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 426.889016][ T9] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 426.951568][ T9] usb 2-1: USB disconnect, device number 38 [ 427.969593][ T9755] netlink: 'syz.0.849': attribute type 9 has an invalid length. [ 428.156827][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 428.431349][ T1037] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 428.648681][ T1037] usb 2-1: Using ep0 maxpacket: 8 [ 428.720830][ T1037] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 428.875859][ T1037] usb 2-1: config 2 has no interface number 0 [ 428.886546][ T1037] usb 2-1: config 2 interface 31 has no altsetting 0 [ 428.911623][ T1037] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 428.925055][ T1037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.942536][ T1037] usb 2-1: Product: syz [ 428.951304][ T1037] usb 2-1: Manufacturer: syz [ 428.962742][ T1037] usb 2-1: SerialNumber: syz [ 429.042508][ T1037] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 429.163876][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 429.243040][ T1037] usb 2-1: USB disconnect, device number 39 [ 429.274707][ T9762] ipvlan2: entered promiscuous mode [ 429.310704][ T9762] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 429.333080][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 429.449880][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'. [ 429.510020][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.530851][ T9] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 429.555504][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.581276][ T9] usb 1-1: config 0 descriptor?? [ 429.902349][ T9772] delete_channel: no stack [ 430.080370][ T9] hid-alps 0003:044E:1215.0013: hidraw0: USB HID v58.6c Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 430.488766][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 430.497908][ T9779] bridge_slave_1: left allmulticast mode [ 430.503710][ T9779] bridge_slave_1: left promiscuous mode [ 430.509671][ T9779] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.518703][ T1037] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 430.611489][ T9779] bridge_slave_0: left allmulticast mode [ 430.617276][ T9779] bridge_slave_0: left promiscuous mode [ 430.639963][ T9779] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.650726][ T9761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.853'. [ 430.770926][ T1037] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 430.791966][ T1037] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 430.810956][ T1037] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.823414][ T1037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.878769][ T9772] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 430.944572][ T1037] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.050167][ T9] usb 1-1: USB disconnect, device number 31 [ 432.137904][ T9793] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 432.186734][ T9793] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 432.603565][ T9791] could not allocate digest TFM handle sha3-512-generic [ 432.727140][ T9803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.739363][ T9803] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.787047][ T9803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.088431][ T24] usb 4-1: USB disconnect, device number 35 [ 435.231734][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 435.261673][ T9824] bridge_slave_1: left allmulticast mode [ 435.306198][ T9824] bridge_slave_1: left promiscuous mode [ 435.392694][ T9838] netlink: 'syz.3.864': attribute type 9 has an invalid length. [ 435.401053][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.416496][ T9840] netlink: 44 bytes leftover after parsing attributes in process `syz.1.867'. [ 435.456874][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.866'. [ 435.603080][ T9824] bridge_slave_0: left allmulticast mode [ 435.609203][ T9824] bridge_slave_0: left promiscuous mode [ 435.616040][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.505120][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'. [ 437.561662][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 437.683630][ T9856] netlink: 72 bytes leftover after parsing attributes in process `syz.3.880'. [ 438.038855][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 438.268666][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 438.275793][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 438.287662][ T9867] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 438.358727][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.468739][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.488701][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.554821][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.554878][ T9867] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 438.628311][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.711881][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.958974][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 438.968688][ T24] usbtmc 4-1:16.0: can't read capabilities [ 439.054356][ T9866] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 439.151488][ T9866] bond2 (unregistering): Released all slaves [ 439.252046][ T9856] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 439.252795][ T9] usb 4-1: USB disconnect, device number 36 [ 439.487486][ T9879] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 439.494064][ T9879] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 439.512945][ T9879] vhci_hcd vhci_hcd.0: Device attached [ 439.748777][ T24] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 440.151478][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.157912][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.436097][ T9891] delete_channel: no stack [ 440.605275][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 440.970600][ T39] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 441.232780][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.251367][ T9900] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.278476][ T9900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.929056][ T39] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 441.941078][ T39] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 441.953185][ T39] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 441.981404][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.023932][ T9891] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 442.064153][ T39] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 443.894904][ T9] usb 5-1: USB disconnect, device number 36 [ 444.157056][ T9913] veth0_to_hsr: entered promiscuous mode [ 444.164160][ T9913] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 444.742458][ T9916] vivid-007: disconnect [ 445.134390][ T9907] vivid-007: reconnect [ 446.206717][ T9927] netlink: 44 bytes leftover after parsing attributes in process `syz.4.881'. [ 446.432737][ T9930] fuse: Unknown parameter '0x0000000000000009' [ 446.448288][ T9930] fuse: Unknown parameter '0x0000000000000008 g%wA˘v' [ 446.520702][ T9925] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 446.527291][ T9925] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 446.566083][ T9925] vhci_hcd vhci_hcd.0: Device attached [ 446.721334][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 446.808745][ T10] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 446.878658][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 446.889698][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.919419][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 446.990236][ T9] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 447.013850][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 447.029954][ T9] usb 3-1: SerialNumber: syz [ 447.192322][ T9] cdc_acm 3-1:1.0: skipping garbage [ 447.203372][ T9] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 447.218200][ T9] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 447.236502][ T9] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 447.568667][ T39] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 447.718989][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 447.731986][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 447.742309][ T39] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 447.752282][ T39] usb 5-1: config 7 has no interface number 0 [ 447.759141][ T39] usb 5-1: config 7 interface 187 has no altsetting 0 [ 447.783020][ T39] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 447.792388][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.800510][ T39] usb 5-1: Product: syz [ 447.804656][ T39] usb 5-1: Manufacturer: syz [ 447.809310][ T39] usb 5-1: SerialNumber: syz [ 447.937938][ T9943] 8021q: VLANs not supported on ip6tnl0 [ 448.127009][ T39] usb 5-1: Limiting number of CPorts to U8_MAX [ 448.134479][ T39] usb 5-1: Not enough endpoints found in device, aborting! [ 448.343854][ T9] usb 5-1: USB disconnect, device number 37 [ 448.971088][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'. [ 448.994308][ T9948] ipvlan2: entered promiscuous mode [ 449.005606][ T9948] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 449.195303][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 449.195317][ T30] audit: type=1326 audit(1765342953.023:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 449.304018][ T39] usb 3-1: USB disconnect, device number 42 [ 449.483085][ T30] audit: type=1326 audit(1765342953.023:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 449.563761][ T30] audit: type=1326 audit(1765342953.023:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 449.662654][ T30] audit: type=1326 audit(1765342953.023:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 449.733512][ T30] audit: type=1326 audit(1765342953.023:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 449.822876][ T30] audit: type=1326 audit(1765342953.023:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 449.979107][ T30] audit: type=1326 audit(1765342953.023:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 450.044990][ T30] audit: type=1326 audit(1765342953.023:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 450.248698][ T30] audit: type=1326 audit(1765342953.183:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 450.361124][ T30] audit: type=1326 audit(1765342953.183:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.3.886" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 451.393794][ T9977] delete_channel: no stack [ 451.551440][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 451.768767][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 451.934925][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 451.957662][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 451.967861][ T5873] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 452.010180][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 452.041992][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.138474][ T5873] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 452.153379][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.169335][ T9980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 452.176792][ T5873] usb 3-1: Product: syz [ 452.192242][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 452.209084][ T5873] usb 3-1: Manufacturer: syz [ 452.254292][ T5873] usb 3-1: SerialNumber: syz [ 452.330423][ T5873] usb 3-1: config 0 descriptor?? [ 452.705575][ T5873] usb 3-1: USB disconnect, device number 43 [ 454.332360][ T9] usb 1-1: USB disconnect, device number 32 [ 455.428948][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 455.643860][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 455.718776][T10006] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 455.721987][ T9] usb 1-1: config 9 has an invalid interface number: 37 but max is 0 [ 455.725330][T10006] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 455.748338][ T9] usb 1-1: config 9 has no interface number 0 [ 455.758065][ T9] usb 1-1: config 9 interface 37 has no altsetting 0 [ 455.808486][ T9] usb 1-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 455.826622][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.891086][ T9] usb 1-1: Product: х [ 455.905325][T10006] vhci_hcd vhci_hcd.0: Device attached [ 455.908796][ T9] usb 1-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 456.116416][ T9] usb 1-1: SerialNumber: syz [ 456.479246][ T1037] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 457.660611][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 458.524913][ T9] gspca_main: spca506-2.14.0 probing 0734:043b [ 458.760763][ T9] usb 1-1: USB disconnect, device number 33 [ 459.124706][T10031] fuse: Bad value for 'user_id' [ 459.129900][T10031] fuse: Bad value for 'user_id' [ 459.818709][ T39] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 459.878968][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 459.978744][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 459.993059][ T39] usb 1-1: config 9 has an invalid interface number: 37 but max is 0 [ 460.008698][ T5873] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 460.147391][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 460.159128][ T9] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 460.167411][ T9] usb 4-1: config 9 has no interface number 0 [ 460.168998][ T39] usb 1-1: config 9 has no interface number 0 [ 460.174383][ T9] usb 4-1: config 9 interface 37 has no altsetting 0 [ 460.347331][ T9] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 460.356667][ T39] usb 1-1: config 9 interface 37 has no altsetting 0 [ 460.370270][ T5873] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 460.475683][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.494603][ T5873] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 460.546783][ T9] usb 4-1: Product: х [ 460.555330][ T5873] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 460.582124][ T9] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 460.609538][ T39] usb 1-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 460.638753][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.648053][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.651004][ T9] usb 4-1: SerialNumber: syz [ 460.666192][T10043] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 460.768482][ T39] usb 1-1: Product: х [ 460.796364][ T39] usb 1-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 460.833220][ T5873] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 460.898382][ T39] usb 1-1: SerialNumber: syz [ 461.178339][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 461.220818][T10043] syz_tun: entered allmulticast mode [ 461.648349][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'. [ 461.665969][T10055] netlink: 72 bytes leftover after parsing attributes in process `syz.2.906'. [ 461.931148][ T5873] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 462.143797][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 462.180618][ T5873] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 462.193476][ T5873] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 462.217985][ T5873] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 462.248292][ T5873] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 462.267381][ T5873] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.445050][ T5873] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 462.482668][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.812008][ T5873] usb 3-1: GET_CAPABILITIES returned 0 [ 462.838877][ T5873] usbtmc 3-1:16.0: can't read capabilities [ 462.990772][ T39] gspca_main: spca506-2.14.0 probing 0734:043b [ 463.140513][ T9] gspca_main: spca506-2.14.0 probing 0734:043b [ 463.190253][T10055] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 463.212694][ T5873] usb 3-1: USB disconnect, device number 44 [ 463.396816][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 463.438260][ T5900] usb 2-1: USB disconnect, device number 40 [ 463.468262][ T9] usb 4-1: USB disconnect, device number 37 [ 463.574474][ T39] usb 1-1: USB disconnect, device number 34 [ 463.747056][T10069] EXT4-fs: Conflicting test_dummy_encryption options [ 464.048643][ T39] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 464.119571][ T5900] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 464.273346][ T39] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 464.282624][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.288651][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 464.305363][ T5900] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 464.320244][ T39] usb 1-1: Product: syz [ 464.328592][ T39] usb 1-1: Manufacturer: syz [ 464.335052][ T5900] usb 4-1: config 9 has no interface number 0 [ 464.343312][ T5900] usb 4-1: config 9 interface 37 has no altsetting 0 [ 464.350468][ T39] usb 1-1: SerialNumber: syz [ 464.358998][ T5900] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 464.368389][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.376570][ T5900] usb 4-1: Product: х [ 464.388056][ T5900] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 464.560530][ T5900] usb 4-1: SerialNumber: syz [ 464.619806][ T39] usb 1-1: config 0 descriptor?? [ 465.342925][ T39] usb 1-1: USB disconnect, device number 35 [ 465.780188][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 466.716880][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 466.783011][ T5900] gspca_main: spca506-2.14.0 probing 0734:043b [ 467.022554][ T5900] usb 4-1: USB disconnect, device number 38 [ 467.173594][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 469.091930][T10124] netlink: 'syz.1.920': attribute type 2 has an invalid length. [ 469.215948][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 469.438863][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 469.480154][ T5900] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 469.711084][ T9] usb 1-1: config 9 has an invalid interface number: 37 but max is 0 [ 469.738613][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 469.758494][ T9] usb 1-1: config 9 has no interface number 0 [ 469.775516][ T9] usb 1-1: config 9 interface 37 has no altsetting 0 [ 469.792468][ T5900] usb 5-1: config 9 has an invalid interface number: 37 but max is 0 [ 469.802834][ T5900] usb 5-1: config 9 has no interface number 0 [ 469.883456][ T5900] usb 5-1: config 9 interface 37 has no altsetting 0 [ 469.893805][ T9] usb 1-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 469.916335][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.057052][ T5900] usb 5-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 470.072276][ T9] usb 1-1: Product: х [ 470.079197][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.099088][ T9] usb 1-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 470.150714][ T5900] usb 5-1: Product: х [ 470.164117][ T5900] usb 5-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 470.226098][ T9] usb 1-1: SerialNumber: syz [ 470.266421][ T5900] usb 5-1: SerialNumber: syz [ 471.001188][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 472.162170][ T9] gspca_main: spca506-2.14.0 probing 0734:043b [ 472.351947][ T5900] gspca_main: spca506-2.14.0 probing 0734:043b [ 472.923736][ T9] usb 1-1: USB disconnect, device number 36 [ 473.094654][ T5900] usb 5-1: USB disconnect, device number 38 [ 473.129085][ T39] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 473.385864][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'. [ 473.398782][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 473.413585][ T39] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 473.425584][ T39] usb 4-1: config 9 has no interface number 0 [ 473.432109][ T39] usb 4-1: config 9 interface 37 has no altsetting 0 [ 473.449950][ T39] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 473.459397][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.467396][ T39] usb 4-1: Product: х [ 473.471982][ T39] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 473.515556][ T39] usb 4-1: SerialNumber: syz [ 474.097476][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 474.715673][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 475.811180][ T39] gspca_main: spca506-2.14.0 probing 0734:043b [ 476.058629][ T5919] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 476.228631][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 476.244859][ T5919] usb 3-1: config 9 has an invalid interface number: 37 but max is 0 [ 476.253223][ T5919] usb 3-1: config 9 has no interface number 0 [ 476.263943][ T5919] usb 3-1: config 9 interface 37 has no altsetting 0 [ 476.304337][ T39] usb 4-1: USB disconnect, device number 39 [ 476.744256][ T5919] usb 3-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 476.774584][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.807674][ T5919] usb 3-1: Product: х [ 476.825235][ T5919] usb 3-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 477.048647][ T5919] usb 3-1: SerialNumber: syz [ 477.377474][T10202] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 477.384073][T10202] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 477.700926][T10202] vhci_hcd vhci_hcd.0: Device attached [ 477.819504][ T5900] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 478.008834][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 478.024272][ T5900] usb 1-1: config 9 has an invalid interface number: 37 but max is 0 [ 478.032691][ T5900] usb 1-1: config 9 has no interface number 0 [ 478.045667][ T5900] usb 1-1: config 9 interface 37 has no altsetting 0 [ 478.086296][ T5900] usb 1-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 478.095788][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.117170][ T5900] usb 1-1: Product: х [ 478.138475][ T5900] usb 1-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 478.191332][ T39] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 478.210256][ T5900] usb 1-1: SerialNumber: syz [ 478.393065][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 478.409117][ T39] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 478.423114][ T39] usb 2-1: config 9 has no interface number 0 [ 478.534479][ T39] usb 2-1: config 9 interface 37 has no altsetting 0 [ 478.686217][ T39] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 478.696566][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.705958][ T39] usb 2-1: Product: х [ 478.716756][ T39] usb 2-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 478.798467][ T5919] gspca_main: spca506-2.14.0 probing 0734:043b [ 478.833016][T10221] trusted_key: encrypted_key: insufficient parameters specified [ 478.851497][ T39] usb 2-1: SerialNumber: syz [ 479.570433][ T5919] usb 3-1: USB disconnect, device number 45 [ 480.831565][ T5900] gspca_main: spca506-2.14.0 probing 0734:043b [ 480.990242][T10203] vhci_hcd: connection closed [ 480.990484][ T1130] vhci_hcd vhci_hcd.3: stop threads [ 481.000903][ T1130] vhci_hcd vhci_hcd.3: release socket [ 481.037006][ T1130] vhci_hcd vhci_hcd.3: disconnect device [ 481.050155][ T5900] usb 1-1: USB disconnect, device number 37 [ 481.260204][ T39] gspca_main: spca506-2.14.0 probing 0734:043b [ 481.842702][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 481.858668][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 481.898872][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 482.068403][ T39] usb 2-1: USB disconnect, device number 41 [ 482.332221][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 482.468938][ T39] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 482.638914][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 483.200307][ T39] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 483.208418][ T39] usb 2-1: config 9 has no interface number 0 [ 483.219717][ T39] usb 2-1: config 9 interface 37 has no altsetting 0 [ 483.349360][ T39] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 483.388574][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.396606][ T39] usb 2-1: Product: х [ 483.411719][ T39] usb 2-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 483.532653][ T39] usb 2-1: SerialNumber: syz [ 484.619332][T10271] ptrace attach of "./syz-executor exec"[10279] was attempted by "./syz-executor exec"[10271] [ 484.954405][ T39] gspca_main: spca506-2.14.0 probing 0734:043b [ 485.156403][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'. [ 485.387960][ T39] usb 2-1: USB disconnect, device number 42 [ 487.124094][T10307] netlink: 'syz.3.955': attribute type 3 has an invalid length. [ 487.295705][T10299] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 487.467689][T10299] bond0 (unregistering): Released all slaves [ 488.056189][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.957'. [ 488.196513][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 488.382909][T10316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.828662][ T5900] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 489.978642][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 489.992244][ T5900] usb 5-1: config 9 has an invalid interface number: 37 but max is 0 [ 490.008619][ T5900] usb 5-1: config 9 has no interface number 0 [ 490.014756][ T5900] usb 5-1: config 9 interface 37 has no altsetting 0 [ 490.137179][ T5900] usb 5-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 490.167349][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.188695][T10062] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 490.226611][T10340] vti0: entered promiscuous mode [ 490.231850][T10340] vti0: entered allmulticast mode [ 490.273379][ T5900] usb 5-1: Product: х [ 490.278155][ T5900] usb 5-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 490.372189][ T5900] usb 5-1: SerialNumber: syz [ 490.422347][T10062] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 490.432738][T10062] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 490.443060][T10062] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 490.498671][ T5919] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 490.952723][ T39] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 490.959727][T10062] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 490.978628][T10062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 491.058622][T10062] usb 2-1: Product: syz [ 491.081907][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 491.148453][ T5919] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 491.157252][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.168594][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 491.181906][ T5919] usb 3-1: config 0 has no interface number 0 [ 491.208450][ T5919] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 491.208735][T10062] usb 2-1: Manufacturer: syz [ 491.318722][ T39] usb 1-1: config 9 has an invalid interface number: 37 but max is 0 [ 491.326919][ T39] usb 1-1: config 9 has no interface number 0 [ 491.341031][T10062] usb 2-1: SerialNumber: syz [ 491.404580][ T39] usb 1-1: config 9 interface 37 has no altsetting 0 [ 491.475086][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.488444][ T5919] usb 3-1: Product: syz [ 491.492785][ T5919] usb 3-1: Manufacturer: syz [ 491.498898][ T39] usb 1-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 491.508677][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.535505][ T5919] usb 3-1: SerialNumber: syz [ 491.554059][ T39] usb 1-1: Product: х [ 491.562277][ T5919] usb 3-1: config 0 descriptor?? [ 491.567332][ T39] usb 1-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 491.596728][ T39] usb 1-1: SerialNumber: syz [ 491.683024][T10062] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 492.055531][ T5834] usb 2-1: USB disconnect, device number 43 [ 492.065473][ T5834] usblp0: removed [ 492.395310][ T5900] gspca_main: spca506-2.14.0 probing 0734:043b [ 492.476493][T10353] EXT4-fs: Conflicting test_dummy_encryption options [ 492.839346][ T5900] usb 5-1: USB disconnect, device number 39 [ 493.175641][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 493.189176][T10362] netlink: 72 bytes leftover after parsing attributes in process `syz.1.965'. [ 493.778676][ T5834] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 493.838739][ T5900] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 493.887713][T10062] usb 3-1: USB disconnect, device number 46 [ 493.961095][ T39] gspca_main: spca506-2.14.0 probing 0734:043b [ 493.986606][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 493.998719][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 494.031344][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.041989][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.084575][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 494.109943][ T5834] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 494.140652][ T5900] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 494.196907][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.198757][ T5834] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 494.377233][ T5834] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 494.401581][ T39] usb 1-1: USB disconnect, device number 38 [ 494.413528][ T5834] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 494.433542][ T5834] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.510554][ T5900] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 494.533878][ T5900] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 494.568703][ T5900] usb 5-1: Manufacturer: syz [ 494.612931][ T5834] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 494.643410][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.662308][ T5900] usb 5-1: config 0 descriptor?? [ 494.764664][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 494.774574][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 494.997548][ T5834] usb 2-1: GET_CAPABILITIES returned 0 [ 495.014542][ T5834] usbtmc 2-1:16.0: can't read capabilities [ 495.630978][ T5900] rc_core: IR keymap rc-hauppauge not found [ 495.637204][ T5900] Registered IR keymap rc-empty [ 495.645364][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.684526][T10362] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 495.701284][ T5834] usb 2-1: USB disconnect, device number 44 [ 495.732251][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.840625][ T5900] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 495.936140][ T5900] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 496.436088][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.501275][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.530723][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.559566][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.599140][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.647124][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.728760][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.778768][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.808687][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.849521][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 496.871315][ T5900] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 496.908683][ T5900] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 496.948410][ T5900] usb 5-1: USB disconnect, device number 40 [ 497.668682][T10062] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 498.019518][T10062] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 498.030606][T10062] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 498.040538][T10062] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 498.054858][T10062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.312337][T10399] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 498.491278][T10062] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 499.095117][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 499.268937][T10062] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 499.438630][T10062] usb 2-1: Using ep0 maxpacket: 32 [ 499.681120][T10062] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 499.705574][T10062] usb 2-1: config 9 has no interface number 0 [ 499.718879][T10062] usb 2-1: config 9 interface 37 has no altsetting 0 [ 499.808014][T10062] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 499.823176][T10062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.858103][T10430] vim2m vim2m.0: vidioc_s_fmt queue busy [ 499.920917][T10429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.932282][T10429] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.949638][T10429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.980599][T10062] usb 2-1: Product: х [ 499.984723][T10062] usb 2-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 500.119158][ T5900] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 500.146922][T10062] usb 2-1: SerialNumber: syz [ 500.281315][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 500.281589][ T39] usb 5-1: USB disconnect, device number 41 [ 500.512787][ T5900] usb 1-1: config 9 has an invalid interface number: 37 but max is 0 [ 500.541231][ T5900] usb 1-1: config 9 has no interface number 0 [ 500.562126][ T5900] usb 1-1: config 9 interface 37 has no altsetting 0 [ 500.628242][ T5900] usb 1-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 500.655126][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.682940][ T5900] usb 1-1: Product: х [ 500.707076][ T5900] usb 1-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 500.826041][T10436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.980'. [ 500.902545][ T5900] usb 1-1: SerialNumber: syz [ 501.128774][ T39] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 501.367434][ T39] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 501.384833][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.393953][ T39] usb 5-1: Product: syz [ 501.400284][ T39] usb 5-1: Manufacturer: syz [ 501.407169][ T39] usb 5-1: SerialNumber: syz [ 501.425403][ T39] usb 5-1: config 0 descriptor?? [ 501.637562][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.644525][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.901601][ T39] usb 5-1: USB disconnect, device number 42 [ 501.960861][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.155880][T10062] gspca_main: spca506-2.14.0 probing 0734:043b [ 502.458395][T10440] netlink: 'syz.3.982': attribute type 7 has an invalid length. [ 502.516042][T10062] usb 2-1: USB disconnect, device number 45 [ 502.751958][T10447] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 503.343988][ T5900] gspca_main: spca506-2.14.0 probing 0734:043b [ 503.616932][ T5900] usb 1-1: USB disconnect, device number 39 [ 504.159829][T10461] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 504.225523][T10461] bond0: (slave netdevsim0): Releasing backup interface [ 504.235606][T10462] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 504.254903][T10461] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 504.271406][T10461] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 504.283402][T10461] team0: Port device netdevsim0 added [ 504.538930][T10462] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 504.743664][T10462] team0: Port device netdevsim0 removed [ 504.758083][T10462] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 504.766342][T10462] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 505.674650][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 506.588628][ T5900] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 506.978829][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 507.180741][ T5900] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 507.210624][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.236722][ T5900] usb 1-1: Product: syz [ 507.255999][ T5900] usb 1-1: Manufacturer: syz [ 507.258687][ T39] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 507.268230][ T5900] usb 1-1: SerialNumber: syz [ 507.302503][ T5900] usb 1-1: config 0 descriptor?? [ 507.433603][ T39] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 507.445091][ T39] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 507.475462][ T39] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 507.505860][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.531545][T10491] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 507.543120][ T39] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 507.586994][ T5900] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 507.834413][ T5900] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 508.037143][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 508.117161][ T5900] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -32 [ 508.158783][T10062] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 508.315345][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'. [ 508.324562][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'. [ 508.333592][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'. [ 508.378701][T10062] usb 3-1: Using ep0 maxpacket: 32 [ 508.391335][T10062] usb 3-1: config 9 has an invalid interface number: 37 but max is 0 [ 508.400919][T10062] usb 3-1: config 9 has no interface number 0 [ 508.407076][T10062] usb 3-1: config 9 interface 37 has no altsetting 0 [ 508.495390][T10062] usb 3-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 508.507548][T10062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.518879][T10062] usb 3-1: Product: х [ 508.523076][T10062] usb 3-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 508.572268][T10062] usb 3-1: SerialNumber: syz [ 508.745929][T10510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.809451][T10510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.690004][ T39] usb 4-1: USB disconnect, device number 40 [ 510.059331][ T5900] usb 1-1: USB disconnect, device number 40 [ 510.686994][T10062] gspca_main: spca506-2.14.0 probing 0734:043b [ 510.714319][ T5900] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 510.856339][T10062] usb 3-1: USB disconnect, device number 47 [ 510.878784][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 510.890798][ T5900] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 510.899775][ T5900] usb 4-1: config 9 has no interface number 0 [ 510.906613][ T5900] usb 4-1: config 9 interface 37 has no altsetting 0 [ 510.927427][ T5900] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 510.936759][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.946882][ T5900] usb 4-1: Product: х [ 511.020705][ T5900] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 511.078613][ T5900] usb 4-1: SerialNumber: syz [ 511.228127][T10534] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 511.308853][T10062] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 511.469682][T10062] usb 5-1: Using ep0 maxpacket: 32 [ 511.539747][T10535] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 511.546315][T10535] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 511.555920][T10062] usb 5-1: config 9 has an invalid interface number: 37 but max is 0 [ 511.568906][T10062] usb 5-1: config 9 has no interface number 0 [ 511.577944][T10062] usb 5-1: config 9 interface 37 has no altsetting 0 [ 511.604288][T10062] usb 5-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 511.616875][T10062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.775825][T10062] usb 5-1: Product: х [ 511.790465][T10062] usb 5-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 511.832271][T10535] vhci_hcd vhci_hcd.0: Device attached [ 511.870339][T10062] usb 5-1: SerialNumber: syz [ 512.159917][ T182] usb 36-1: SetAddress Request (2) to port 0 [ 512.166520][ T182] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 513.415365][T10536] vhci_hcd: connection reset by peer [ 513.421929][ T3876] vhci_hcd vhci_hcd.1: stop threads [ 513.427296][ T3876] vhci_hcd vhci_hcd.1: release socket [ 513.447134][ T3876] vhci_hcd vhci_hcd.1: disconnect device [ 513.727531][ T5900] gspca_main: spca506-2.14.0 probing 0734:043b [ 513.951056][T10062] gspca_main: spca506-2.14.0 probing 0734:043b [ 513.968102][ T5900] usb 4-1: USB disconnect, device number 41 [ 514.354316][T10062] usb 5-1: USB disconnect, device number 43 [ 514.384101][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 514.629920][T10565] binder: 10558:10565 ioctl 40046210 0 returned -14 [ 515.665176][T10572] binder: 10569:10572 ioctl c018620c 800002c0 returned -1 [ 516.169791][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'. [ 516.714492][T10579] bond0: (slave dummy0): Releasing backup interface [ 516.733169][T10579] batman_adv: batadv0: Adding interface: dummy0 [ 516.755396][T10579] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.815794][T10579] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 517.269281][ T182] usb 36-1: device descriptor read/8, error -110 [ 517.950278][ T182] usb usb36-port1: attempt power cycle [ 518.323418][ T39] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 518.534519][ T182] usb usb36-port1: unable to enumerate USB device [ 518.541544][ T5899] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 518.588652][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 518.731615][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 518.770400][ T5899] usb 3-1: config 9 has an invalid interface number: 37 but max is 0 [ 518.773300][ T39] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 518.797332][ T5899] usb 3-1: config 9 has no interface number 0 [ 518.827830][ T39] usb 2-1: config 9 has no interface number 0 [ 518.837930][ T39] usb 2-1: config 9 interface 37 has no altsetting 0 [ 518.853196][ T5899] usb 3-1: config 9 interface 37 has no altsetting 0 [ 518.875635][ T39] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 518.890909][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.917162][ T5899] usb 3-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 518.931640][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.931693][ T39] usb 2-1: Product: х [ 518.974403][ T5899] usb 3-1: Product: х [ 519.008588][ T5899] usb 3-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 519.040594][ T39] usb 2-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 519.195678][ T5899] usb 3-1: SerialNumber: syz [ 519.248613][ T39] usb 2-1: SerialNumber: syz [ 520.189391][ T5834] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 520.189479][T10616] faux_driver vgem: [drm] Unknown color mode 65545; guessing buffer size. [ 520.449702][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1013'. [ 520.508704][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 520.525605][ T5834] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 520.534987][ T5834] usb 4-1: config 9 has no interface number 0 [ 520.613128][ T5834] usb 4-1: config 9 interface 37 has no altsetting 0 [ 520.717489][ T5834] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 520.748816][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.783464][ T5834] usb 4-1: Product: х [ 520.808291][ T5834] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 520.922427][ T5834] usb 4-1: SerialNumber: syz [ 521.195231][ T39] gspca_main: spca506-2.14.0 probing 0734:043b [ 521.375707][ T5899] gspca_main: spca506-2.14.0 probing 0734:043b [ 521.605736][ T39] usb 2-1: USB disconnect, device number 46 [ 521.608027][ T5899] videodev: could not get a free minor [ 521.652355][ T5899] gspca_main: video_register_device err -23 [ 521.689811][ T5899] spca506 3-1:9.37: probe with driver spca506 failed with error -23 [ 521.785017][ T5899] usb 3-1: USB disconnect, device number 48 [ 522.078784][ T39] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 522.399098][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 522.427586][ T39] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 522.439894][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.506988][ T39] usb 2-1: Product: syz [ 522.537404][ T39] usb 2-1: Manufacturer: syz [ 522.578473][ T39] usb 2-1: SerialNumber: syz [ 522.618598][ T5899] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 522.620186][ T39] usb 2-1: config 0 descriptor?? [ 522.778607][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 522.830316][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1018'. [ 522.923191][ T5899] usb 1-1: config 9 has an invalid interface number: 37 but max is 0 [ 522.932398][ T5899] usb 1-1: config 9 has no interface number 0 [ 522.957218][ T5899] usb 1-1: config 9 interface 37 has no altsetting 0 [ 522.995548][ T5899] usb 1-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 523.004866][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.018826][ T5899] usb 1-1: Product: х [ 523.043281][ T5899] usb 1-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 523.135648][ T5899] usb 1-1: SerialNumber: syz [ 523.151361][ T39] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 047 [ 523.343283][T10629] i2c i2c-1: adapter quirk: no zero length (addr 0x0001, size 0, read) [ 523.388217][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.398342][ T5834] gspca_main: spca506-2.14.0 probing 0734:043b [ 523.413207][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.441234][ T39] usb 2-1: USB disconnect, device number 47 [ 523.562921][ T5834] usb 4-1: USB disconnect, device number 42 [ 524.288226][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'. [ 524.543307][ T5834] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 524.753593][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.767289][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.856263][ T5834] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 524.971807][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.101065][ T5834] usb 2-1: config 0 descriptor?? [ 525.293026][ T5899] gspca_main: spca506-2.14.0 probing 0734:043b [ 525.522088][ T5834] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 525.534152][ T5834] hid-steam 0003:28DE:1142.0014: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 525.541482][ T5899] usb 1-1: USB disconnect, device number 41 [ 525.673916][ T5834] hid-steam 0003:28DE:1142.0014: Steam wireless receiver connected [ 525.719383][ T5834] hid-steam 0003:28DE:1142.0014: No HID_FEATURE_REPORT submitted - nothing to read [ 525.981752][T10666] netlink: 'syz.0.1022': attribute type 5 has an invalid length. [ 526.110545][T10667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.126114][T10667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.223900][ T5834] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 526.397071][ T5834] hid-steam 0003:28DE:1142.0015: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 526.949553][ T39] usb 2-1: reset high-speed USB device number 48 using dummy_hcd [ 527.043570][T10674] mmap: syz.4.1023 (10674): VmData 45891584 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 527.165999][T10673] can: request_module (can-proto-3) failed. [ 528.123031][T10693] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1027'. [ 528.139236][ T5919] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 528.409125][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 528.415409][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 528.452983][ T5919] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 528.461573][ T39] usb 2-1: device descriptor read/64, error -71 [ 528.480706][ T5919] usb 4-1: config 9 has no interface number 0 [ 528.527829][ T5919] usb 4-1: config 9 interface 37 has no altsetting 0 [ 528.616844][ T5919] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 528.618627][ T5899] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 528.750308][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.760516][ T39] usb 2-1: reset high-speed USB device number 48 using dummy_hcd [ 528.795127][ T5919] usb 4-1: Product: х [ 528.799800][ T39] usb 2-1: device reset changed ep0 maxpacket size! [ 528.814266][ T5919] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 528.864523][ T5834] usb 2-1: USB disconnect, device number 48 [ 528.893427][ T5899] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 528.912704][ T5919] usb 4-1: SerialNumber: syz [ 528.927237][ T5899] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 528.958890][ T5899] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 529.011923][ T5899] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 529.024006][ T5834] hid-steam 0003:28DE:1142.0014: Steam wireless receiver disconnected [ 529.083539][ T5899] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 529.119698][ T5899] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 529.308709][ T5834] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 529.424402][ T5899] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 529.491759][ T5899] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 529.520304][ T5899] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 529.531977][ T5899] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 529.548689][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.748673][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 529.769249][ T5834] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 529.777514][ T5834] usb 2-1: config 9 has no interface number 0 [ 529.804105][ T5834] usb 2-1: config 9 interface 37 has no altsetting 0 [ 530.061618][ T5834] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 530.073594][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.087697][ T5834] usb 2-1: Product: х [ 530.094317][ T5834] usb 2-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 530.156050][ T5834] usb 2-1: SerialNumber: syz [ 530.387386][ T5834] gspca_main: spca506-2.14.0 probing 0734:043b [ 531.294397][ T5919] gspca_main: spca506-2.14.0 probing 0734:043b [ 531.473155][ T39] usb 3-1: USB disconnect, device number 49 [ 531.596137][T10709] pim6reg: entered allmulticast mode [ 531.683483][ T5919] usb 4-1: USB disconnect, device number 43 [ 531.714538][T10718] fuse: Unknown parameter '0x0000000000000009' [ 531.725304][T10718] fuse: Unknown parameter '0x0000000000000008 g%wA˘v' [ 531.882567][ T5834] usb 2-1: USB disconnect, device number 49 [ 532.193588][T10706] pim6reg: left allmulticast mode [ 532.338587][ T5834] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 532.353578][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1033'. [ 532.433683][T10733] trusted_key: encrypted_key: insufficient parameters specified [ 532.517544][T10733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1034'. [ 532.635941][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 532.880193][ T5834] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.902356][ T5834] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 532.943200][ T5834] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 532.982081][ T5834] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 533.026572][ T5834] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 533.381977][ T5834] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 533.432584][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 533.445127][ T5834] usb 2-1: SerialNumber: syz [ 533.480502][T10718] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 533.511819][ T5834] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 533.524445][ T5834] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 533.575742][T10740] fuse: Unknown parameter '_[' [ 533.968614][ T5899] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 534.139408][ T5899] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 534.148775][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.156759][ T5899] usb 5-1: Product: syz [ 534.189516][ T5899] usb 5-1: Manufacturer: syz [ 534.240581][ T5899] usb 5-1: SerialNumber: syz [ 534.271974][ T5899] usb 5-1: config 0 descriptor?? [ 534.548650][T10750] netlink: 'syz.2.1037': attribute type 10 has an invalid length. [ 534.569338][ T5899] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 534.639359][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 534.664754][ T5899] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 534.674859][T10750] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 534.709019][ T5899] usb 5-1: media controller created [ 534.868095][T10740] dvb-usb: bulk message failed: -22 (7/0) [ 535.280058][ T182] usb 2-1: USB disconnect, device number 50 [ 535.452603][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 535.680010][ T5899] DVB: Unable to find symbol mt352_attach() [ 535.706386][ T5899] DVB: Unable to find symbol nxt6000_attach() [ 535.714172][ T5899] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 535.953856][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 536.054799][T10762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 536.099449][ T5899] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 536.162735][ T5899] dvb-usb: schedule remote query interval to 1000 msecs. [ 536.215092][ T5899] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 536.241086][ T5899] dvb-usb: bulk message failed: -22 (7/0) [ 536.259140][ T5899] dvb-usb: bulk message failed: -22 (7/0) [ 536.337553][ T5834] usb 5-1: USB disconnect, device number 44 [ 536.611882][ T5834] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 536.900685][T10774] overlayfs: missing 'lowerdir' [ 537.324563][T10772] could not allocate digest TFM handle sha3-512-generic [ 537.498659][ T5834] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 537.758606][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 537.779266][ T5834] usb 5-1: config 9 has an invalid interface number: 37 but max is 0 [ 537.787419][ T5834] usb 5-1: config 9 has no interface number 0 [ 537.797573][ T5834] usb 5-1: config 9 interface 37 has no altsetting 0 [ 538.345041][ T5834] usb 5-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 538.358654][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.366967][ T5834] usb 5-1: Product: х [ 538.488640][ T5834] usb 5-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 538.562625][ T5834] usb 5-1: SerialNumber: syz [ 538.578887][ T5899] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 538.798841][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 538.852243][ T5899] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 538.865029][ T5899] usb 2-1: config 9 has no interface number 0 [ 539.210578][ T5899] usb 2-1: config 9 interface 37 has no altsetting 0 [ 539.236255][ T5899] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 539.248631][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.281217][ T5899] usb 2-1: Product: х [ 539.285642][ T5899] usb 2-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 539.354729][ T5899] usb 2-1: SerialNumber: syz [ 540.058597][ T39] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 540.148808][T10801] fuse: Unknown parameter '0x0000000000000009' [ 540.160002][T10801] fuse: Unknown parameter '0x0000000000000008 g%wA˘v' [ 540.292399][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 540.324325][ T39] usb 3-1: config 9 has an invalid interface number: 37 but max is 0 [ 540.338012][ T39] usb 3-1: config 9 has no interface number 0 [ 540.361480][ T39] usb 3-1: config 9 interface 37 has no altsetting 0 [ 540.397979][ T39] usb 3-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 540.411593][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.420247][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1047'. [ 540.438680][ T5919] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 540.448646][ T39] usb 3-1: Product: х [ 540.458417][ T39] usb 3-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 540.491325][ T39] usb 3-1: SerialNumber: syz [ 540.645671][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 540.662938][ T5919] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.758058][ T5919] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 540.853856][ T5919] usb 4-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 540.899265][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 540.960063][ T5919] usb 4-1: SerialNumber: syz [ 541.012064][ T5919] cdc_acm 4-1:1.0: skipping garbage [ 541.017914][ T5919] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 541.035550][ T5919] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 541.053209][ T5919] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 541.094791][ T5834] gspca_main: spca506-2.14.0 probing 0734:043b [ 541.596119][ T5899] gspca_main: spca506-2.14.0 probing 0734:043b [ 541.777099][ T5834] usb 5-1: USB disconnect, device number 45 [ 541.815435][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1048'. [ 541.884190][ T5899] usb 2-1: USB disconnect, device number 51 [ 542.541601][T10820] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1059'. [ 542.870392][ T39] gspca_main: spca506-2.14.0 probing 0734:043b [ 542.876330][T10821] netlink: 'syz.0.1049': attribute type 2 has an invalid length. [ 542.922748][ T5834] usb 4-1: USB disconnect, device number 44 [ 542.989876][T10821] : entered promiscuous mode [ 543.870740][ T39] usb 3-1: USB disconnect, device number 50 [ 544.363657][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 544.559112][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 545.458590][ T39] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 545.887802][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 545.900550][ T39] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 545.913778][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.938643][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 546.006178][ T39] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 546.038844][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.040690][T10860] netlink: 'syz.2.1055': attribute type 10 has an invalid length. [ 546.078314][ T39] usb 5-1: config 0 descriptor?? [ 546.099375][T10861] netlink: 'syz.2.1055': attribute type 10 has an invalid length. [ 546.193078][T10860] bond0: (slave netdevsim0): Releasing backup interface [ 546.243308][T10860] team0: Port device netdevsim0 added [ 546.324452][T10861] team0: Port device netdevsim0 removed [ 546.358425][T10861] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 546.530919][T10865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.837055][T10865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.041965][ T39] samsung 0003:0419:0001.0016: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.4-1/input0 [ 549.054147][ T39] usb 5-1: USB disconnect, device number 46 [ 549.285868][T10895] veth1_to_bond: entered allmulticast mode [ 549.303484][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 549.319330][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 550.629153][ T39] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 550.746292][T10904] misc userio: The device must be registered before sending interrupts [ 550.888625][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 550.927640][ T39] usb 3-1: config 9 has an invalid interface number: 37 but max is 0 [ 550.935960][ T39] usb 3-1: config 9 has no interface number 0 [ 550.943625][ T39] usb 3-1: config 9 interface 37 has no altsetting 0 [ 550.995738][ T39] usb 3-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 551.006091][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.030465][ T5899] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 551.109087][ T39] usb 3-1: Product: х [ 551.113315][ T39] usb 3-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 551.150713][ T39] usb 3-1: SerialNumber: syz [ 551.251375][ T5899] usb 2-1: No LPM exit latency info found, disabling LPM. [ 551.487530][ T5899] usb 2-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 551.571304][ T5899] usb 2-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt [ 551.583396][ T5899] usb 2-1: config 1 interface 0 has no altsetting 0 [ 551.691100][ T5899] usb 2-1: string descriptor 0 read error: -22 [ 551.697382][ T5899] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 551.756175][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.895750][T10904] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 551.906342][T10904] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 552.339702][T10908] kAFS: unable to lookup cell '({^@' [ 552.675023][T10892] veth1_to_bond: left allmulticast mode [ 553.108123][ T39] gspca_main: spca506-2.14.0 probing 0734:043b [ 553.374221][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 553.413678][ T39] usb 3-1: USB disconnect, device number 51 [ 553.750703][T10925] netlink: 'syz.2.1068': attribute type 2 has an invalid length. [ 553.861139][T10925] : entered promiscuous mode [ 554.327819][ T39] usb 2-1: USB disconnect, device number 52 [ 554.640332][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 556.428706][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 556.428723][ T30] audit: type=1326 audit(1765343060.353:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01558 code=0x7ffc0000 [ 556.535576][ T30] audit: type=1326 audit(1765343060.463:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 556.624503][ T30] audit: type=1326 audit(1765343060.493:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01558 code=0x7ffc0000 [ 556.684268][ T30] audit: type=1326 audit(1765343060.583:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01558 code=0x7ffc0000 [ 556.727400][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 556.781181][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1073'. [ 556.800071][ T30] audit: type=1326 audit(1765343060.583:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01558 code=0x7ffc0000 [ 556.867971][ T30] audit: type=1326 audit(1765343060.583:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01558 code=0x7ffc0000 [ 556.894031][ T30] audit: type=1326 audit(1765343060.583:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01558 code=0x7ffc0000 [ 556.956880][ T30] audit: type=1326 audit(1765343060.583:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01558 code=0x7ffc0000 [ 556.981716][ T30] audit: type=1326 audit(1765343060.583:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01558 code=0x7ffc0000 [ 557.097564][ T30] audit: type=1326 audit(1765343060.583:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.0.1072" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01558 code=0x7ffc0000 [ 557.577149][T10974] macsec0: entered promiscuous mode [ 557.584474][T10974] macsec0: left promiscuous mode [ 557.634720][T10974] vlan2: entered allmulticast mode [ 557.640158][T10974] ip6gretap0: entered allmulticast mode [ 558.539519][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 560.619807][T11005] vim2m vim2m.0: vidioc_s_fmt queue busy [ 560.680993][T11002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 562.191309][T11023] EXT4-fs: Conflicting test_dummy_encryption options [ 563.078975][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.085277][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.198612][ T182] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 563.438574][ T182] usb 2-1: Using ep0 maxpacket: 32 [ 563.927620][T11042] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 564.304279][ T182] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 564.384542][ T182] usb 2-1: config 9 has no interface number 0 [ 564.671676][ T182] usb 2-1: config 9 interface 37 has no altsetting 0 [ 564.890850][ T182] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 564.900695][ T182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.908781][ T182] usb 2-1: Product: х [ 564.918530][ T182] usb 2-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 564.948550][ T182] usb 2-1: SerialNumber: syz [ 565.420655][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'. [ 565.558626][ T5919] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 566.020685][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 566.027672][ T5919] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 566.046065][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.114578][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 566.146775][ T5919] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 566.160885][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.195797][ T5919] usb 3-1: config 0 descriptor?? [ 566.529441][T11060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.539808][T11060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.566564][T11060] pimreg: entered allmulticast mode [ 566.671901][ T182] gspca_main: spca506-2.14.0 probing 0734:043b [ 566.789047][ T182] usb 2-1: USB disconnect, device number 53 [ 566.998055][ T5919] samsung 0003:0419:0001.0017: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 567.678845][ T182] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 567.988657][ C1] syz_tun: tun_net_xmit 118 [ 568.248597][ T182] usb 1-1: Using ep0 maxpacket: 32 [ 568.268092][ T182] usb 1-1: config 9 has an invalid interface number: 37 but max is 0 [ 568.329867][ T182] usb 1-1: config 9 has no interface number 0 [ 568.336000][ T182] usb 1-1: config 9 interface 37 has no altsetting 0 [ 568.645021][ T182] usb 1-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 568.654511][ T182] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.662957][ T182] usb 1-1: Product: х [ 568.667469][ T182] usb 1-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 568.800839][ T182] usb 1-1: SerialNumber: syz [ 569.028610][ C1] syz_tun: tun_net_xmit 118 [ 569.117796][ T5919] usb 3-1: USB disconnect, device number 52 [ 569.450495][ T39] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 569.513539][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 569.778766][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 570.069110][ C1] syz_tun: tun_net_xmit 118 [ 570.221664][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.232863][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 570.253295][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 570.277254][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 570.340748][ T5899] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 570.392986][ T39] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 570.523839][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.534823][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 570.575601][ T5899] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 570.665631][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.706312][ T5899] usb 3-1: config 0 descriptor?? [ 570.776717][ T39] hub 4-1:1.0: bad descriptor, ignoring hub [ 570.811563][ T39] hub 4-1:1.0: probe with driver hub failed with error -5 [ 570.828947][ T39] cdc_wdm 4-1:1.0: skipping garbage [ 570.835516][ T39] cdc_wdm 4-1:1.0: skipping garbage [ 570.842291][ T39] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 570.848209][ T39] cdc_wdm 4-1:1.0: Unknown control protocol [ 570.869899][ T182] gspca_main: spca506-2.14.0 probing 0734:043b [ 571.094958][ T182] usb 1-1: USB disconnect, device number 42 [ 571.108618][ C1] syz_tun: tun_net_xmit 118 [ 571.131272][ T5899] hid (null): report_id 0 is invalid [ 571.148857][ T5899] creative-sb0540 0003:041E:3100.0018: report_id 0 is invalid [ 571.156345][ T5899] creative-sb0540 0003:041E:3100.0018: item 0 0 1 8 parsing failed [ 571.212072][ T5899] creative-sb0540 0003:041E:3100.0018: parse failed [ 571.387731][ T5899] creative-sb0540 0003:041E:3100.0018: probe with driver creative-sb0540 failed with error -22 [ 571.446725][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'. [ 571.464033][T11102] netlink: 'syz.0.1096': attribute type 13 has an invalid length. [ 571.564178][T11105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.573558][T11105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.692638][T11102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 571.801160][T11108] syz.3.1104 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 572.148632][ C1] syz_tun: tun_net_xmit 118 [ 572.619555][T11123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.962889][ T39] usb 3-1: USB disconnect, device number 53 [ 573.188581][ C1] syz_tun: tun_net_xmit 118 [ 573.875272][ T5919] usb 4-1: USB disconnect, device number 45 [ 574.228618][ C1] syz_tun: tun_net_xmit 118 [ 574.953208][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'. [ 575.278573][ C1] syz_tun: tun_net_xmit 118 [ 575.695032][T11152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1106'. [ 575.704353][T11152] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1106'. [ 576.280289][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'. [ 576.291201][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'. [ 576.301678][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'. [ 576.310847][ C1] syz_tun: tun_net_xmit 118 [ 577.358576][ C1] syz_tun: tun_net_xmit 118 [ 577.486302][T11170] misc userio: The device must be registered before sending interrupts [ 577.778653][ T5919] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 577.954051][ T5919] usb 3-1: No LPM exit latency info found, disabling LPM. [ 577.963761][ T5919] usb 3-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 577.985503][ T5919] usb 3-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt [ 577.998658][ T5919] usb 3-1: config 1 interface 0 has no altsetting 0 [ 578.010840][ T5919] usb 3-1: string descriptor 0 read error: -22 [ 578.017375][ T5919] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 578.027291][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.065145][T11170] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 578.073122][T11170] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 578.388655][ C1] syz_tun: tun_net_xmit 118 [ 579.428615][ C1] syz_tun: tun_net_xmit 118 [ 579.829073][T11195] @: renamed from vlan0 [ 579.898094][T11197] EXT4-fs: Conflicting test_dummy_encryption options [ 580.125309][ T5919] usb 3-1: USB disconnect, device number 54 [ 580.468581][ C1] syz_tun: tun_net_xmit 118 [ 580.473357][ T5899] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 580.636778][T11208] kAFS: unable to lookup cell '({^@' [ 580.683250][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 580.972191][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.013193][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 581.023325][ T5899] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 581.039667][ T5899] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 581.416041][ T5899] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 581.443330][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.508610][ C1] syz_tun: tun_net_xmit 118 [ 581.566647][ T5899] hub 1-1:1.0: bad descriptor, ignoring hub [ 581.574036][ T5899] hub 1-1:1.0: probe with driver hub failed with error -5 [ 581.613732][ T5899] cdc_wdm 1-1:1.0: skipping garbage [ 581.619579][ T5899] cdc_wdm 1-1:1.0: skipping garbage [ 581.631907][ T5899] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 581.637988][ T5899] cdc_wdm 1-1:1.0: Unknown control protocol [ 582.509510][T11224] binder: 11217:11224 ioctl c018620c 800002c0 returned -1 [ 582.548608][ C1] syz_tun: tun_net_xmit 118 [ 582.738583][ T5899] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 583.036267][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 583.222623][ T5899] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 583.348712][ T5899] usb 4-1: config 9 has no interface number 0 [ 583.554347][ T5899] usb 4-1: config 9 interface 37 has no altsetting 0 [ 583.588570][ C1] syz_tun: tun_net_xmit 118 [ 583.796698][ T5899] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 583.864000][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.900926][ T5899] usb 4-1: Product: х [ 583.971108][ T5899] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 584.196298][ T5899] usb 4-1: SerialNumber: syz [ 584.628694][ C1] syz_tun: tun_net_xmit 118 [ 585.110909][ T182] usb 1-1: USB disconnect, device number 43 [ 585.668576][ C1] syz_tun: tun_net_xmit 118 [ 586.467104][ T5899] gspca_main: spca506-2.14.0 probing 0734:043b [ 586.708745][ C1] syz_tun: tun_net_xmit 118 [ 587.064145][ T5899] usb 4-1: USB disconnect, device number 46 [ 587.148649][ T39] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 587.356527][ T39] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 587.365997][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.374397][ T39] usb 2-1: Product: syz [ 587.379595][ T39] usb 2-1: Manufacturer: syz [ 587.384197][ T39] usb 2-1: SerialNumber: syz [ 587.501177][ T39] usb 2-1: config 0 descriptor?? [ 587.748654][ C1] syz_tun: tun_net_xmit 118 [ 587.840507][ T39] hso 2-1:0.0: Failed to find BULK IN ep [ 587.879584][ T39] usb-storage 2-1:0.0: USB Mass Storage device detected [ 588.200790][T11260] netlink: 'syz.1.1126': attribute type 16 has an invalid length. [ 588.208804][T11260] netlink: 'syz.1.1126': attribute type 17 has an invalid length. [ 588.216624][T11260] netlink: 'syz.1.1126': attribute type 27 has an invalid length. [ 588.226297][ T39] usb 2-1: USB disconnect, device number 54 [ 588.517538][T11280] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1139'. [ 588.788603][ C1] syz_tun: tun_net_xmit 118 [ 589.271131][T11282] [U]  [ 589.536195][T11298] EXT4-fs: Conflicting test_dummy_encryption options [ 589.558742][ T5899] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 589.828670][ C1] syz_tun: tun_net_xmit 118 [ 589.888602][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 589.896510][ T5899] usb 5-1: config 252 has too many interfaces: 129, using maximum allowed: 32 [ 589.905911][ T5899] usb 5-1: config 252 has 1 interface, different from the descriptor's value: 129 [ 589.917792][ T5899] usb 5-1: config 252 has no interface number 0 [ 590.017025][ T5899] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 590.298560][ T5899] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 590.311567][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.322940][ T5899] usb 5-1: Product: syz [ 590.327670][ T5899] usb 5-1: Manufacturer: syz [ 590.334048][ T5899] usb 5-1: SerialNumber: syz [ 590.423842][ T5899] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 590.616862][ T5899] usb 5-1: USB disconnect, device number 47 [ 590.623114][ T50] usb 5-1: Failed to submit usb control message: -71 [ 590.635341][ T50] usb 5-1: unable to send the bmi data to the device: -71 [ 590.674025][ T50] usb 5-1: unable to get target info from device [ 590.694294][ T50] usb 5-1: could not get target info (-71) [ 590.701836][ T50] usb 5-1: could not probe fw (-71) [ 590.868609][ C1] syz_tun: tun_net_xmit 118 [ 591.539255][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'. [ 591.908600][ C1] syz_tun: tun_net_xmit 118 [ 592.948915][ C1] syz_tun: tun_net_xmit 118 [ 593.080050][T11340] gretap2: entered promiscuous mode [ 593.671278][T11344] random: crng reseeded on system resumption [ 593.858627][ T5899] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 593.988740][ C1] syz_tun: tun_net_xmit 118 [ 594.042890][ T5899] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 594.369789][ T5899] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 594.425317][ T5899] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 594.517350][ T5899] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 594.534135][ T5899] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 594.570752][ T5899] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 594.583507][ T5899] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 594.637070][ T5899] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 594.689420][ T5899] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 594.704493][T11346] can: request_module (can-proto-3) failed. [ 594.710915][ T5899] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 594.720946][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.906168][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 595.028662][ C1] syz_tun: tun_net_xmit 118 [ 595.094551][ T5919] usb 1-1: USB disconnect, device number 44 [ 595.817827][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 595.932293][T11369] QAT: Device 64 not found [ 595.937684][T11369] QAT: Invalid ioctl -1072667448 [ 596.068624][ C1] syz_tun: tun_net_xmit 118 [ 596.189078][ T5919] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 596.259030][T11374] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 596.289316][T11374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.575262][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 596.584055][ T5919] usb 1-1: config 8 has an invalid interface number: 8 but max is 1 [ 596.594883][ T5919] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 596.615567][ T5919] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 596.657808][ T5919] usb 1-1: config 8 has no interface number 0 [ 596.675671][ T5919] usb 1-1: config 8 interface 8 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 596.735214][ T5919] usb 1-1: config 8 interface 8 has no altsetting 0 [ 596.754882][ T5919] usb 1-1: language id specifier not provided by device, defaulting to English [ 596.783791][ T5919] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=31.8b [ 596.794164][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.816820][ T5919] usb 1-1: Manufacturer: ы [ 596.836947][ T5919] usb 1-1: SerialNumber: 몐꧶螒㖈쵀缼䆎즪狸 [ 597.108619][ C1] syz_tun: tun_net_xmit 118 [ 597.180516][T11369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.196830][T11369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.304581][ T5919] dm9601 1-1:8.8: probe with driver dm9601 failed with error -22 [ 597.321815][ T5919] sr9700 1-1:8.8: probe with driver sr9700 failed with error -22 [ 597.341813][ T5919] usb 1-1: USB disconnect, device number 45 [ 597.558682][ T182] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 597.720877][ T182] usb 4-1: unable to get BOS descriptor or descriptor too short [ 597.730072][ T182] usb 4-1: not running at top speed; connect to a high speed hub [ 597.742299][ T182] usb 4-1: config 196 has an invalid interface number: 176 but max is 0 [ 597.751126][ T182] usb 4-1: config 196 has no interface number 0 [ 597.758031][ T182] usb 4-1: config 196 interface 176 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 597.947918][ T182] usb 4-1: config 196 interface 176 has no altsetting 0 [ 597.956380][ T182] usb 4-1: string descriptor 0 read error: -22 [ 597.962854][ T182] usb 4-1: New USB device found, idVendor=03f0, idProduct=3016, bcdDevice=63.f0 [ 597.972173][ T182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.983800][T11380] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 598.037863][ T182] ipaq 4-1:196.176: PocketPC PDA converter detected [ 598.063851][ T182] usb 4-1: active config #196 != 1 ?? [ 598.148557][ C1] syz_tun: tun_net_xmit 118 [ 598.461538][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 598.478620][T11400] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1160'. [ 598.624396][ T182] usb 4-1: USB disconnect, device number 47 [ 598.709087][T11380] binder: 11378:11380 ioctl c0306201 0 returned -14 [ 598.735641][T11380] binder: BINDER_SET_CONTEXT_MGR already set [ 598.755724][T11380] binder: 11378:11380 ioctl 4018620d 80000100 returned -16 [ 599.188627][ C1] syz_tun: tun_net_xmit 118 [ 600.008616][ T182] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 600.039467][ T5919] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 600.228608][ C1] syz_tun: tun_net_xmit 118 [ 600.260892][ T182] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 600.276954][ T182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.286021][ T182] usb 2-1: Product: syz [ 600.291690][ T182] usb 2-1: Manufacturer: syz [ 600.298807][ T182] usb 2-1: SerialNumber: syz [ 600.308446][ T5919] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 600.317999][ T5919] usb 1-1: config 0 has no interface number 0 [ 600.324508][ T5919] usb 1-1: config 0 interface 160 has no altsetting 0 [ 600.389155][ T182] usb 2-1: config 0 descriptor?? [ 600.424380][ T5919] usb 1-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 600.435873][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.460250][T11420] misc userio: Invalid payload size [ 600.484096][ T5919] usb 1-1: Product: syz [ 600.532683][ T5919] usb 1-1: Manufacturer: syz [ 600.568346][ T5919] usb 1-1: SerialNumber: syz [ 600.600141][ T5919] usb 1-1: config 0 descriptor?? [ 600.618928][ T5919] usb-storage 1-1:0.160: USB Mass Storage device detected [ 601.268680][ C1] syz_tun: tun_net_xmit 118 [ 601.736148][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'. [ 601.814286][ T182] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 601.969214][ T182] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 601.979812][ T182] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 601.994587][ T182] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 602.016628][ T182] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 602.047717][ T182] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 602.066972][ T5919] usb 1-1: USB disconnect, device number 46 [ 602.082178][ T182] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 602.094818][ T182] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 602.112106][ T182] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 602.133627][ T182] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 602.145815][ T182] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 602.156345][ T182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.308722][ C1] syz_tun: tun_net_xmit 118 [ 602.462984][ T5919] usb 3-1: USB disconnect, device number 55 [ 602.559365][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'. [ 602.653682][T11406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.679996][ T182] usb 2-1: USB disconnect, device number 55 [ 603.036879][ T5899] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 603.348657][ C1] syz_tun: tun_net_xmit 118 [ 603.801748][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.801782][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.801818][ T5899] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 603.801841][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.803938][ T5899] usb 5-1: config 0 descriptor?? [ 603.931427][T11450] ipip0: entered promiscuous mode [ 603.931443][T11450] ipip0: entered allmulticast mode [ 604.246930][ T5899] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 604.247495][ T5899] hid-steam 0003:28DE:1142.0019: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 604.299610][ T5899] hid-steam 0003:28DE:1142.0019: Steam wireless receiver connected [ 604.299645][ T5899] hid-steam 0003:28DE:1142.0019: No HID_FEATURE_REPORT submitted - nothing to read [ 604.311660][ T5899] hid-steam 0003:28DE:1142.001A: unknown main item tag 0x0 [ 604.314721][ T5899] hid-steam 0003:28DE:1142.001A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 604.358628][ T5919] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 604.388608][ C1] syz_tun: tun_net_xmit 118 [ 604.539228][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 604.605952][ T5919] usb 3-1: config 9 has an invalid interface number: 37 but max is 0 [ 604.605985][ T5919] usb 3-1: config 9 has no interface number 0 [ 604.606956][ T5919] usb 3-1: config 9 interface 37 has no altsetting 0 [ 604.621952][ T5919] usb 3-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 604.621973][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.621983][ T5919] usb 3-1: Product: х [ 604.621991][ T5919] usb 3-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 604.622005][ T5919] usb 3-1: SerialNumber: syz [ 604.926255][T11472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.936926][T11472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.428740][ C1] syz_tun: tun_net_xmit 118 [ 605.518593][ T5899] usb 5-1: reset high-speed USB device number 48 using dummy_hcd [ 606.238969][ T39] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 606.468763][ C1] syz_tun: tun_net_xmit 118 [ 606.643293][ T39] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 606.653737][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.685364][ T39] usb 1-1: Product: syz [ 606.715891][ T39] usb 1-1: Manufacturer: syz [ 606.729631][ T39] usb 1-1: SerialNumber: syz [ 606.766910][ T39] usb 1-1: config 0 descriptor?? [ 606.800866][ T39] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 606.911582][ T182] usb 5-1: USB disconnect, device number 48 [ 607.135731][ T182] hid-steam 0003:28DE:1142.0019: Steam wireless receiver disconnected [ 607.318990][ T39] gspca_sn9c2028: read1 error -110 [ 607.326312][ T39] gspca_sn9c2028: read1 error -32 [ 607.429702][ T39] gspca_sn9c2028: read1 error -32 [ 607.438633][ T39] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -32 [ 607.508583][ C1] syz_tun: tun_net_xmit 118 [ 607.714054][ T5919] gspca_main: spca506-2.14.0 probing 0734:043b [ 607.882441][ T5919] usb 3-1: USB disconnect, device number 56 [ 608.144824][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 608.212743][T11503] netlink: 'syz.2.1171': attribute type 4 has an invalid length. [ 608.303565][T11504] netlink: 'syz.2.1171': attribute type 4 has an invalid length. [ 608.558945][ C1] syz_tun: tun_net_xmit 118 [ 608.750708][ T39] usb 1-1: USB disconnect, device number 47 [ 608.853988][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'. [ 608.978536][ T182] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 609.248576][ T182] usb 2-1: Using ep0 maxpacket: 8 [ 609.364671][ T182] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 609.388046][ T182] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 609.413144][ T182] usb 2-1: config 6 has no interface number 0 [ 609.427565][ T182] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 609.463733][ T182] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 609.489309][ T182] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 609.588586][ C1] syz_tun: tun_net_xmit 118 [ 609.634046][ T182] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 609.867378][ T182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.875913][ T182] usb 2-1: Product: syz [ 609.877021][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 609.898839][ T182] usb 2-1: Manufacturer: syz [ 609.905243][ T182] usb 2-1: SerialNumber: syz [ 609.931911][ T182] hso 2-1:6.2: Failed to find INT IN ep [ 610.046460][T11521] kernel profiling enabled (shift: 63) [ 610.053306][T11521] profiling shift: 63 too large [ 610.628800][ C1] syz_tun: tun_net_xmit 118 [ 611.361487][T11533] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1178'. [ 611.630081][ T182] usb 2-1: USB disconnect, device number 56 [ 611.668660][ C1] syz_tun: tun_net_xmit 118 [ 611.704137][T11539] binder: 11528:11539 ioctl c018620c 800002c0 returned -1 [ 612.099567][ T5899] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 612.579256][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 612.708564][ C1] syz_tun: tun_net_xmit 118 [ 612.880602][ T5899] usb 3-1: config 9 has an invalid interface number: 37 but max is 0 [ 612.891733][ T5899] usb 3-1: config 9 has no interface number 0 [ 612.897839][ T5899] usb 3-1: config 9 interface 37 has no altsetting 0 [ 612.934983][ T5899] usb 3-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 612.944383][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.960871][ T5899] usb 3-1: Product: х [ 612.988542][ T5899] usb 3-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 613.058557][ T5899] usb 3-1: SerialNumber: syz [ 613.748595][ C1] syz_tun: tun_net_xmit 118 [ 613.769287][T11556] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 614.088864][ T182] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 614.248567][ T182] usb 5-1: Using ep0 maxpacket: 32 [ 614.258769][ T182] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 614.297902][ T182] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 614.402548][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 614.402588][ T30] audit: type=1326 audit(1765343118.283:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 614.464841][ T182] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 614.484481][ T182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 614.675421][ T182] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 614.788617][ C1] syz_tun: tun_net_xmit 118 [ 614.902269][ T30] audit: type=1326 audit(1765343118.313:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 615.048909][ T182] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 615.064594][ T30] audit: type=1326 audit(1765343118.313:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 615.087106][ T182] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 615.107411][ T182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.209432][ T182] usb 5-1: config 0 descriptor?? [ 615.261887][ T30] audit: type=1326 audit(1765343118.313:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 615.284519][ T30] audit: type=1326 audit(1765343118.313:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 615.368048][ T30] audit: type=1326 audit(1765343118.313:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 615.399034][ T30] audit: type=1326 audit(1765343118.313:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 615.433039][ T30] audit: type=1326 audit(1765343118.313:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 615.466237][ T182] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 615.490117][ T5899] gspca_main: spca506-2.14.0 probing 0734:043b [ 615.613310][ T30] audit: type=1326 audit(1765343118.313:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 615.695561][ T5899] usb 3-1: USB disconnect, device number 57 [ 615.737947][ T30] audit: type=1326 audit(1765343118.313:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 615.828560][ C1] syz_tun: tun_net_xmit 118 [ 616.300373][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 616.406319][T11590] overlayfs: missing 'lowerdir' [ 616.868595][ C1] syz_tun: tun_net_xmit 118 [ 617.281734][ T5899] usb 5-1: USB disconnect, device number 49 [ 617.300664][ T5899] usblp0: removed [ 617.554610][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'. [ 617.908550][ C1] syz_tun: tun_net_xmit 118 [ 617.947296][T11603] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1193'. [ 618.558726][ T5899] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 618.627602][T11618] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1196'. [ 618.738550][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 618.790479][ T5899] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 618.790508][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.790519][ T5899] usb 2-1: Product: syz [ 618.790527][ T5899] usb 2-1: Manufacturer: syz [ 618.790535][ T5899] usb 2-1: SerialNumber: syz [ 618.792260][ T5899] usb 2-1: config 0 descriptor?? [ 618.799421][ T5899] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 618.801340][ T5899] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 618.948586][ C1] syz_tun: tun_net_xmit 118 [ 619.547663][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 619.547680][ T30] audit: type=1326 audit(1765343123.473:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.1.1192" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x0 [ 619.988576][ C1] syz_tun: tun_net_xmit 118 [ 620.067930][T11631] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1197'. [ 621.028624][ C1] syz_tun: tun_net_xmit 118 [ 621.134207][ T5899] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 621.321356][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 621.470273][ T5899] usb 5-1: config 9 has an invalid interface number: 37 but max is 0 [ 621.478400][ T5899] usb 5-1: config 9 has no interface number 0 [ 621.491733][ T5899] usb 5-1: config 9 interface 37 has no altsetting 0 [ 621.512120][ T5899] usb 5-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 621.521253][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.534563][ T5899] usb 5-1: Product: х [ 621.538700][ T5899] usb 5-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 621.560087][ T5899] usb 5-1: SerialNumber: syz [ 621.678112][ T182] usb 2-1: USB disconnect, device number 57 [ 622.068584][ C1] syz_tun: tun_net_xmit 118 [ 623.108576][ C1] syz_tun: tun_net_xmit 118 [ 623.791582][T11670] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1205'. [ 623.921025][T11673] overlayfs: missing 'lowerdir' [ 624.148586][ C1] syz_tun: tun_net_xmit 118 [ 624.429778][ T5899] gspca_main: spca506-2.14.0 probing 0734:043b [ 624.472186][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.489368][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.114128][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 625.133281][ T31] Tainted: G L syzkaller #0 [ 625.133505][ T5899] usb 5-1: USB disconnect, device number 50 [ 625.180616][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 625.189495][ C1] syz_tun: tun_net_xmit 118 [ 625.223004][ T31] task:kworker/0:0 state:D stack:19968 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 625.304515][ T31] Workqueue: usb_hub_wq hub_event [ 625.324985][ T31] Call Trace: [ 625.342546][ T31] [ 625.352118][ T31] __schedule+0x14bc/0x5000 [ 625.388328][ T31] ? __pfx___schedule+0x10/0x10 [ 625.417389][ T31] ? schedule+0x91/0x360 [ 625.458554][ T31] schedule+0x165/0x360 [ 625.479007][ T31] schedule_preempt_disabled+0x13/0x30 [ 625.491704][ T31] __mutex_lock+0x7e6/0x1350 [ 625.506940][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 625.617284][ T31] ? __mutex_lock+0x5bb/0x1350 [ 625.649860][ T31] ? hub_event+0x2182/0x4ef0 [ 625.699334][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 625.720133][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 625.732470][ T31] hub_event+0x2182/0x4ef0 [ 625.765133][ T31] ? irqentry_exit+0x5dd/0x660 [ 625.781036][ T31] ? __pfx_hub_event+0x10/0x10 [ 625.802188][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 625.814826][ T31] ? __pfx_hub_event+0x10/0x10 [ 625.830236][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 625.853167][ T31] process_scheduled_works+0xad1/0x1770 [ 625.868963][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 625.883121][ T31] worker_thread+0x8a0/0xda0 [ 625.891264][ T31] kthread+0x711/0x8a0 [ 625.895432][ T31] ? __pfx_worker_thread+0x10/0x10 [ 625.901932][ T31] ? __pfx_kthread+0x10/0x10 [ 625.938232][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.948648][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 625.954036][ T31] ? __pfx_kthread+0x10/0x10 [ 625.958720][ T31] ret_from_fork+0x599/0xb30 [ 625.963334][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 625.968630][ T31] ? __switch_to_asm+0x39/0x70 [ 625.973461][ T31] ? __switch_to_asm+0x33/0x70 [ 625.978245][ T31] ? __pfx_kthread+0x10/0x10 [ 625.983868][ T31] ret_from_fork_asm+0x1a/0x30 [ 626.037973][ T31] [ 626.042444][ T31] [ 626.042444][ T31] Showing all locks held in the system: [ 626.050349][ T31] 5 locks held by kworker/0:0/9: [ 626.055316][ T31] #0: ffff888142aa9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 626.066665][ T31] #1: ffffc900000e7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 626.078846][ T31] #2: ffff888146721198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 626.087744][ T31] #3: ffff888146355518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 626.097702][ T31] #4: ffff8881457aa268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 626.107579][ T31] 5 locks held by kworker/0:1/10: [ 626.112620][ T31] #0: ffff888142aa9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 626.124097][ T31] #1: ffffc900000f7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 626.135973][ T31] #2: ffff88814638e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 626.145021][ T31] #3: ffff888146340518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 626.158588][ T31] #4: ffff8881457aa268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 626.203734][ T31] 5 locks held by kworker/1:0/24: [ 626.228605][ C1] syz_tun: tun_net_xmit 118 [ 626.234087][ T30] audit: type=1326 audit(1765343129.943:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 626.277580][ T31] #0: ffff888142aa9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 626.322333][ T31] #1: ffffc900001e7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 626.334561][ T30] audit: type=1326 audit(1765343129.943:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 626.359392][ T31] #2: ffff888029405198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 626.368553][ T31] #3: ffff8880293d4518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 626.398665][ T30] audit: type=1326 audit(1765343129.943:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 626.438523][ T31] #4: ffff88802930b968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 626.458670][ T30] audit: type=1326 audit(1765343129.943:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 626.478550][ T31] 5 locks held by kauditd/30: [ 626.508614][ T31] 1 lock held by khungtaskd/31: [ 626.517943][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 626.554483][ T31] 2 locks held by kworker/u8:3/50: [ 626.565882][ T30] audit: type=1326 audit(1765343129.943:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 626.578526][ T31] #0: ffff888145a8d148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 626.588908][ T30] audit: type=1326 audit(1765343129.943:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 626.628888][ T30] audit: type=1326 audit(1765343129.943:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 626.638551][ T31] #1: ffffc90000bb7b80 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 626.668830][ T30] audit: type=1326 audit(1765343129.943:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 626.709706][ T30] audit: type=1326 audit(1765343129.943:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 626.728512][ T31] 5 locks held by kworker/1:2/1037: [ 626.736900][ T31] #0: ffff888142aa9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 626.739355][ T30] audit: type=1326 audit(1765343129.943:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.1.1207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 626.788506][ T31] #1: ffffc90003befb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 626.804782][ T31] #2: ffff888146722198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 626.821586][ T31] #3: ffff888146725518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 626.838502][ T31] #4: ffff888145be8b68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 626.848354][ T31] 2 locks held by getty/5591: [ 626.868498][ T31] #0: ffff8880303ec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 626.878393][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 626.890944][ T31] 5 locks held by kworker/0:8/6099: [ 626.896148][ T31] #0: ffff888142aa9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 626.907510][ T31] #1: ffffc9000c4c7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 626.919606][ T31] #2: ffff8880292fb198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 626.928587][ T31] #3: ffff8881457c5518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 626.939082][ T31] #4: ffff888028fb9e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 626.949008][ T31] 1 lock held by syz.2.1206/11678: [ 626.954128][ T31] #0: ffffffff8df47400 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.964124][ T31] 3 locks held by syz.1.1207/11692: [ 626.969347][ T31] #0: ffff8880954d7508 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 626.979577][ T31] #1: ffff88802cd5b260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1cd/0x940 [ 626.988852][ T31] #2: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 626.999844][ T31] 2 locks held by dhcpcd/11693: [ 627.004706][ T31] #0: ffff8880799f0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 627.014433][ T31] #1: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 627.025477][ T31] [ 627.027854][ T31] ============================================= [ 627.027854][ T31] [ 627.049229][ T31] NMI backtrace for cpu 1 [ 627.049253][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 627.049278][ T31] Tainted: [L]=SOFTLOCKUP [ 627.049284][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.049295][ T31] Call Trace: [ 627.049301][ T31] [ 627.049309][ T31] dump_stack_lvl+0x189/0x250 [ 627.049337][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.049358][ T31] ? __pfx__printk+0x10/0x10 [ 627.049393][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 627.049416][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 627.049438][ T31] ? __pfx__printk+0x10/0x10 [ 627.049465][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 627.049493][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 627.049515][ T31] sys_info+0x135/0x170 [ 627.049532][ T31] watchdog+0xf95/0xfe0 [ 627.049559][ T31] ? watchdog+0x20a/0xfe0 [ 627.049587][ T31] kthread+0x711/0x8a0 [ 627.049612][ T31] ? __pfx_watchdog+0x10/0x10 [ 627.049634][ T31] ? __pfx_kthread+0x10/0x10 [ 627.049656][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 627.049677][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 627.049698][ T31] ? __pfx_kthread+0x10/0x10 [ 627.049719][ T31] ret_from_fork+0x599/0xb30 [ 627.049739][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 627.049766][ T31] ? __switch_to_asm+0x39/0x70 [ 627.049787][ T31] ? __switch_to_asm+0x33/0x70 [ 627.049806][ T31] ? __pfx_kthread+0x10/0x10 [ 627.049827][ T31] ret_from_fork_asm+0x1a/0x30 [ 627.049863][ T31] [ 627.049869][ T31] Sending NMI from CPU 1 to CPUs 0: [ 627.207868][ C0] NMI backtrace for cpu 0 [ 627.207888][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.207909][ C0] Tainted: [L]=SOFTLOCKUP [ 627.207915][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.207925][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 627.207957][ C0] Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 50 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 627.207971][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 627.207986][ C0] RAX: 98c019a54f31d400 RBX: ffffffff81978eba RCX: 98c019a54f31d400 [ 627.207999][ C0] RDX: 0000000000000001 RSI: ffffffff8d78fddd RDI: ffffffff8bc07960 [ 627.208010][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 627.208022][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f81f870 [ 627.208033][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 627.208044][ C0] FS: 0000000000000000(0000) GS:ffff888125e3a000(0000) knlGS:0000000000000000 [ 627.208057][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 627.208068][ C0] CR2: 00000000f73a99b4 CR3: 0000000076778000 CR4: 00000000003526f0 [ 627.208082][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 627.208091][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 627.208101][ C0] Call Trace: [ 627.208110][ C0] [ 627.208117][ C0] default_idle+0x13/0x20 [ 627.208132][ C0] default_idle_call+0x73/0xb0 [ 627.208147][ C0] do_idle+0x1ea/0x520 [ 627.208164][ C0] ? irqentry_exit+0x5ba/0x660 [ 627.208185][ C0] ? __pfx_do_idle+0x10/0x10 [ 627.208208][ C0] cpu_startup_entry+0x44/0x60 [ 627.208224][ C0] rest_init+0x2de/0x300 [ 627.208241][ C0] start_kernel+0x3a7/0x400 [ 627.208260][ C0] x86_64_start_reservations+0x24/0x30 [ 627.208280][ C0] x86_64_start_kernel+0x143/0x1c0 [ 627.208300][ C0] common_startup_64+0x13e/0x147 [ 627.208326][ C0] [ 627.209503][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 627.209521][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 627.209545][ T31] Tainted: [L]=SOFTLOCKUP [ 627.209552][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.209563][ T31] Call Trace: [ 627.209571][ T31] [ 627.209579][ T31] dump_stack_lvl+0x99/0x250 [ 627.209603][ T31] ? __asan_memcpy+0x40/0x70 [ 627.209628][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.209649][ T31] ? __pfx__printk+0x10/0x10 [ 627.209684][ T31] vpanic+0x237/0x6d0 [ 627.209704][ T31] ? __pfx_vpanic+0x10/0x10 [ 627.209725][ T31] ? preempt_schedule_common+0x83/0xd0 [ 627.209753][ T31] panic+0xb9/0xc0 [ 627.209773][ T31] ? __pfx_panic+0x10/0x10 [ 627.209794][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 627.209816][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 627.209840][ T31] watchdog+0xfdf/0xfe0 [ 627.209869][ T31] ? watchdog+0x20a/0xfe0 [ 627.209897][ T31] kthread+0x711/0x8a0 [ 627.209922][ T31] ? __pfx_watchdog+0x10/0x10 [ 627.209943][ T31] ? __pfx_kthread+0x10/0x10 [ 627.209966][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 627.209988][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 627.210009][ T31] ? __pfx_kthread+0x10/0x10 [ 627.210031][ T31] ret_from_fork+0x599/0xb30 [ 627.210051][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 627.210077][ T31] ? __switch_to_asm+0x39/0x70 [ 627.210097][ T31] ? __switch_to_asm+0x33/0x70 [ 627.210116][ T31] ? __pfx_kthread+0x10/0x10 [ 627.210139][ T31] ret_from_fork_asm+0x1a/0x30 [ 627.210175][ T31] [ 627.567417][ T31] Kernel Offset: disabled [ 627.571735][ T31] Rebooting in 86400 seconds..