last executing test programs: 14.55697514s ago: executing program 0 (id=2155): r0 = syz_io_uring_setup(0x5b52, &(0x7f00000000c0)={0x0, 0xafcc, 0x190, 0x83, 0x31}, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="05000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) dup(r0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c00", @ANYRES32=0x41424344], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000001c0)="c683c320bb386bce45eb641122", 0xd, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) bind$alg(0xffffffffffffffff, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000740)={{}, "5b1d81ce2d1f80dcfd39f0b26d75d4a6e1b9bdebc0077042d47bf85499d25bbf5e3e10cb2796b7728bc8b4be31410bf6d76f9bc43cad94b7f9369b850a3ceb9023350cdfd239cd78052dc7326c411f669f3287bd9f88122ef60b20b5623fde29e1ab250fca237a46040c48d5f163f5ab5c47e1559f593944440462fbc5b8f60113c5ffbd047d01de1f0067c6c6911617806cb3da138af0a124f424c4a7ffdaf4480dde063b3eccc799e2fb69f163589a7e67ab784c4f153acbb9d52fa4c9dd709879e0a23e7b4e5c2e002a163a007358fae4fe6cc10752d9af062e09e84bd35ddde51f7481aac82a0aa19ad6cd831d267181fbec0ee3d601a3b593e09245140d3f196f3632dec7e626fe80d2668f93a238f1c6fa5f36e60c273ab3314c0c298cd175413eaeea1e7e8353d362667aad2aebe1d19c5158a5d4478cf6be635383dc2d56b3303931be708b21778ef32e24bf27023c23fb0bd9839f9e0225ab8b0981fa1807999a494b478fc9c2bb21f0e64d10a758deb88c8d179aa41b83f3fbf90f4c668deef1f891d56c64bdea5c5af569266546b0003b0d3d4343e4ae711d44a04c774bc6ff2bdef1902ad3240119023af68918c3f0252475a888349797722d75b3b3030690c5b4dc6596740393a23377220f7aab24a4fb47e2aa19add7d189fe9e7ea4832ef4a5d2515f59e6c6e1a007d5c778e5e92eec1bf4b9ae2d1a88dbdf9fd939d52cdf4aaeecc18eaef1290fcb420447be2cff8bdbee6aa4d01dbb7f95124e88dcee7a0f1e7bd145a5e83202276f743632be258fd3bdcbd29a8120662b55b7d2d5af6cec27f876d6833aaaa8b25e49e66112f8d903b0747f0172ec0880dca8d16a437ce7d6bc8f51709b8031eb3bb804c7a00a8b1fc3881d5c8e7caf458c21737f7570ff18df4f634dc5fef1d17fe72aca9c86af8a0b08eac72648ea199f324518e9ceb4136b0a7651f09084e4d3d334eb4f1259d5fdb1df3664e043e4e61b98e2e66a6b2882f15e25fb8d1d8abd9408a25fca0af8e0c79139bb89a4473c21cd7f2926831a474971e03feee8096a5259b70e1f95cac6762301e6a0d6e914b4ceb424b5f686fdf0239f9072225a474b51852442191568c1f03277ce9aa74522a6853a7a5bb9dc1980dfd19114797a11ba4ae34153be25aadb2df0bc90e00d8fe9b8dd8750997458a1a01e9f46d7ad50a4e0b9866e90dc8b5769c84fb8e8ccce7f1840dadeff013147e691058e4172a3a330a029880e116fc19e7cc40d03617cf6b2b2bf890f7296ea84d63ba69b265dbdc5d71b4446a5d50ec6a049db1f27321864fb5af63bac8396ddf54b08111cdc554123c35154b26e3022dcf9117efdda6cce349a5ae99ebf6c00264a2d548c3efa516e738206cd9d755121f59c6af04a83fa9bf09f775d9db1ed94b1f3caac82d2cebb3763c65e2cf8e2fe848e3480b61859e2ed1025f5999b251be9dbcc732c78bed9482b9f0e3188ba12bee8d50d4a51e24bd91f7fabddc583d5ab45bcb7bfcecb2935c13e64f5c657b05a8fb2f81e95e93e8913a51d7f91a10f91c466a88675d2e7c9a345532385bc28fa7ee6b1e625d1bf03355a526b3a4892d81afaec138cac17cbb6cd69a60264a2109ba190fa7f92aaaf4804e05615aad07fec7c7898aeb5d7419247da45316ca43c67fc53f8336d31c4423dbd7c58497148fc3a690d932b5cd45da7af2c8409cafecbe4baed4699bd0b990ee404decba20ee44d3601a20dd9bfba1d71bb1bfb7dd68fb975ffbd70c16d8c625630ea3b5012c61b521b151f804b7aab7f4865d8367ecb92fdf19bbc9c6f4bcfd0d47de87382686207b5a1686b3cc20dd7d4cfff055ecec2e80c0f5f294571ad916d5784482f48a56916edb0ad56d100473c17810d7af282de853ff8f1ac4f0887d5d606459864fa0452d6a308d354d91c41807842e57bd81b773a9987dd4fa03576c2152e4a54c532026c4a14d9199d1c429eb1162d80601c9398c626738592e6ea85d3f5b68916b34b4463d3fe6d6daebb8406676060f90c61508b3d27db069f7ce5500beb13144cf7d9edf39f541fc914e521982931c808e926d4063bd45fd8f712150e58403d885d1ee7c24519ab7ea5a25b8fb01145c92db354cc63ce2db45c40f2362471b61733c4958b06b4313764f68a842b32ee4d6b7f10797786262e16255b243e90e76e5332bf7feec4fd3d00f65ae18501663c7484d603c52660cd44d5f64a33b25a01e25d7dd3ab4c3e4a06be7879e49a38f0ec1188a14cce2f9df92aab3200459e05b054fa2f5572ae3580b7d58ad4cde5b11dabb99019f94973b7669b611eb2ee05933513e2b37c5ed2bd31d4d3161f621084e5b8233359c57ae1c6745c5bea3820eb5ec2fbe7b1ea88ad41352e85688135483582ede6a48bed3f5d93982bc6087f81333855e06c2e2a24380d4a8ad2c4fb72c899f029faa78a035c78fab3231ddb94953e9fbc093e05da5cb525aafad03807f0c9960b4afa01935072db7c2c8add77e38b965faaa973e5c9e52e9d20c4af4aa0f559cd4471ad90ad68d380669bfce196dce5d71f3652b31fef59f0234ad5b5ecf0ca19fca8011ccb9968c6d23867df825e96bde3971ce93f53cddaec2859be531feb5f0da26e35410e8b3f00ec54050b91d31bf84e7703d16129fe924290a06cf16a7a244382b3682b57f336d59a528516f55327d01e43b76cfa30e19afa14f25f5953600dcb2a4279041bbb8978fd35920ff533a0019163d4ee4fddc8be5fe34f6e4bf039bf5eb387ce937f6dd30bec3e5642c0c0cc6db7a0791304e17fb91bbb16a581a2a4ec3a66589f5005c768bcdd7309c616ea29b472a57b1340b1745bbcb1254eef288bae516bafc0ad1c7c6bc3c70479f8b58599b7d33b7539eb2e0320b371664a255835d5d142b26dbc88379495aeed0d8693b2459104496e8422b59c17ba36f72d65c92e48992daba8f39caf35e4c47a4da3785b497a0c9b661b334fc165ea97f45cdb75773f90045b1e54de269f91450665c0c63abd2e4e58d4168509594226649d5ef69fbae50195c360ebdf2e786143780d4ab05959734a1e2988dc1bb3f514f439029fad8ae27d5792c50aa591ab148aa3bb5d9f54ac758985d6dfdd24d1992c3c95d434eee279125a12a4e1f926b977333e5c9b78308a7fc47d574f8b3377320919bf2b010975b5cdfd6e92035360d6c10e7c77016089ad21e011ccce41f8b09d11ce8fb4332b0f3657a4630fd69d6ac1ddd6d431f5f651ff58a96c8f6638131831e39a44f5ba1f66590120a0906e5e667f60a307aedf852228bd8f557810e20badf8b52224031a60555821f83cd2891aeed9436a66b398bc33ba80dec50e9d1653d77504e91349a7caae6c0e5d7cbe420a139703404efc13adac6a113fd6b3cd9347a0582a2fefb0fc5d298f95da848db7e6c305bab682b32a04dbd6797d0f1175118292c152cc7cbf46bfb3cfde534707dc8bd5e4a1d0777d25184700e056992efb5e8ca9b2811b59f1d72b9cd46b8e669367767e83e503c58cc8247cd922a28b31937112831096b9d07f1faa762e9e0349a0c6fb1e67142750cfa0cf7da24fc62a38007a5dbe4030d5456dd0d25b848b60ab5872920e5fa4a2959ccf3451f28f7056410501e28f559a692c5cd3f0b39244e77bc3aed5da7dfe82c2457ca9c4be1fb0a9ce169c62953284a53fa1c455b1290bf5d3985ed6127aa61121c880db869e9af186e21e5c84373379944aa855e98f4caeef18176a5a3c14b634b6b294144cc504c0c88690a95b997797d389f85e97900fdd4ce58bc8b69320bdfaa3b3d651146eaead5231e90fc956241df56a5af01d1ef8dd861c3e243157a82cbac9bf466d8f3102f5af9e1db75e4e65a01cd3ec29ace47dc80725b234fe903932612d2179690c42e3d1e3f3042a68f4e66c53e58b06bb31ad9872d58374349fb0303db1d4824453b02d1fcce27ab559215ead657fe57603e3951f0efa1606fd0ff159bf4f8ed185ec2004869cbb5546688f4e2be987cb84c55fe7a5269da38edd0a72be46f0f1787cd2490f01d6221b3eb741362010327c387d746201c59df03ed62341dd3e20e3ceb57a758a7dae8b895eb25acf8fe7d8e27705f0c79ab1a763da3883d342690e7f706c7adca425921d32f4b85374e445ebaf4e38b112877adf36f113bab412f8ad3ae4e9afd0f24715928c19bc7a21466a86ec69ed8e65c2334942d0f50731428451caaa338fd4676fc4dc564aadde2d16a25b092ff63501323463744553dbd32dc4644e42c9d815c7ea48f126341f8ff50ed6beca7ea777065c7dd5774c5987ae6cdf3289535388e7b70dc987b92315ca2e523814e25b0bf34f5a0bf22897f81f3d87f73a96eb728b7685c036ce12b789b1adccaa189477e9f4c0e29cfb0adb1a7f2f66c5d114d22de1541284410f598da32318b0d154c56a05e17a379a6ef1bc6952b9cfd298f974ca37cf9a50d12f4273580f1159b2ff7e19ce089cd491c96838116f1c236da25af61f1fff97f13ee9fc6eee3c2221ce57db51a461228a81a880e1d2def1b44cd09160fc098d4d71cebfb58bfad09873229c30260a435d40a3eebd20e282d90d181cd88f7fe51f49acde8ddf61674586fb8310a25b0a7665bdbffef580c6cabefa91ccf38422a0c05ff57bf86f00c47cc89d3c5c5fd4e272c0df1e9f15ef9b9de2614d9af46f2adfa3ed91108931800d51a6fd7b59b8bc18c4694c0a966248fc28c73b83b7d6a55fff45efbbf5cbd01dd3b997fe2a4310f6896ca5b2f7130d7be43cd94be8572db7748c55b3dbf970c4036a922995c994bf86ac700693662b7524176b605fad9e5286dc774dcfd5d0a8eace8a865d6cd6be5046f9f5ca67a01a8ecc44b7906858562950dd380cc0b24baccdb46510f0106d11320c70c55f3d6086991172b5939ec3fe1ce3e3977ce1f223f3d23d3b29701c2749343f08a85b22d1d5f600b6f11b3fb7a8de85ba94293de750a0acd1e8f39fb918586a8487fa62b8ef3b6316405062140cf7af080841a9f5eba586a8971a4dfb44df2ac96247d90e55b6f8d6811b4cf8ad480b2e7ab2cfe7253242a226b2ae316e98c59f5d99efd22efd482938e5d2bb20727b01cc637b308c3b81d793aad32464933284cee097081baabd3249d20505602b70319f8b14d86212519842dfdc2454bede072e81587c113419e2b8de5feed9e584e9ee721ec57e235d89f6a6be8f0dd3b2e3ba485b1e6f8fc1546f235f70fd13a40e5fdf890f4faee1b39a4472d659b7a2092093df2c01e039a620499d11354bbd421925a7656813490c24855b2c51d6b2b52f7556bd5bc26d8e0d59b38f80584699bba8d93ba0dd93d447bb8477c918fba82837843306709f43c227dd9b2807958ca555523e0a949c86a1c2f9e3f6ded6a0bc55113a55e8ae14f608e90cb0cfd9fa62d56a753f7cc13c33c2be3ab6cd2b8e0787caebbfb4b127c16f5e8cbe4df92de5e39473e2d059529f9da392b916f342cb8a5e0cfd80c0a4775409c9a05d0333494aa93445780a9214bc93e523004060cd3c6e7525fd06c1c22283c9b6644710873bd3ff7a8c8dd19fd1a3c83ae37ce731eb9ae50102db332e56a5037fc9c97db3d81c15b66db9046566adcb16b00ab71bdbc4c6e89b9739e152b9ff2b0d929c7ae59649be2a75023bdfd04a823cde236d8f49bfd0c873f6ab760b38a39ea58885d85f2447e220d964cba9f9897523ad3ad537a680586dfb2d9ee4d4540225bb5a73e451e76b819053303910a899cdf4c905"}) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 14.139096736s ago: executing program 4 (id=2156): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000440)={0x0, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, r1}) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) socket$kcm(0xa, 0x5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mtu(r7, 0x0, 0xa, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000540)=@generic={0x1, 0x8, 0x3}) socket$kcm(0xa, 0x2, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8, r6}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, r5, 0x0) 13.898843861s ago: executing program 0 (id=2158): socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x1) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) shutdown(0xffffffffffffffff, 0x1) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) 12.634629942s ago: executing program 2 (id=2159): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x4, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r8 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12.314354789s ago: executing program 4 (id=2160): syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000640)={{0xa, 0xc}, 'port0\x00', 0x92, 0x0, 0x2, 0x80000001, 0x4c, 0x6, 0x9, 0x0, 0x3, 0xf7}) r3 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = io_uring_setup(0x31e4, &(0x7f0000000100)={0x0, 0x5b70, 0x10, 0x1, 0x2ee, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, &(0x7f0000000a00)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x3a) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340), 0x0, 0x2, 0x0, 0x0, r8}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt(r11, 0x1, 0x8, &(0x7f0000000e80)="b6d38a68f7", 0x5) sendto$inet6(r11, &(0x7f0000000240)="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", 0x140, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) shutdown(r11, 0x1) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000440)={0x1, r10, r8}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 11.665825451s ago: executing program 3 (id=2161): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2009, 0x0, 0x6, 0xffffffffffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) capset(0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00edffffff010000000006000007410000004c00180000005e62726f6164636173742d6c696e6b0000000000000000000000000000000000000000a3823900"/90], 0x68}}, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, 0x0) r3 = inotify_init1(0x800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) memfd_create(0x0, 0x3) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001300010004000000000000", @ANYRES32=0x0, @ANYBLOB="000000b79b5b0d0008", @ANYRES32, @ANYBLOB="05001100010000"], 0x30}, 0x1, 0x0, 0x0, 0x800c010}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) inotify_rm_watch(r3, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) 11.082572865s ago: executing program 1 (id=2162): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x28000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0xa00, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') sendmsg$nl_route(r4, 0x0, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000400, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket(0xa, 0x3, 0xff) sendmsg$unix(r7, &(0x7f0000001680)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40051}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) write$sndseq(r9, &(0x7f00000001c0)=[{0x0, 0x4, 0x0, 0x0, @time={0x0, 0x7}, {0x40, 0xff}, {0x0, 0x9}, @queue={0xb, {0x5, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) r10 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x10, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r10, 0x37b4, 0x0, 0x18, 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000080)) 10.722092715s ago: executing program 0 (id=2163): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@dgm={0x25, 0xb393, 0xa}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001280)}], 0x1}, 0x800) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_dump={0x26, 0x80000000}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=ANY=[], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r7, 0x8070ae9f, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x84) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r9, &(0x7f00000000c0), 0x2) 10.528609708s ago: executing program 4 (id=2164): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000100)={0x9, @pix={0x0, 0x0, 0x32435750}}) syz_usb_disconnect(r0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030300000000fcffffff0c000000080003004d8a1c"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x4000000) close(r5) r8 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r8, 0xffffffffffffffff, 0x0) 10.053188327s ago: executing program 3 (id=2165): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x446982, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589c", 0xd) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$alg(r2, 0x0, 0x0) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'dummy0\x00', 0x12f}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x12, &(0x7f00000003c0)={@empty, @multicast, @void, {@llc={0x4, {@llc={0x42, 0x0, "97", '\x00'}}}}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0xb20}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009cb5984071042903dadb000000010902120001000000"], 0x0) 9.438027276s ago: executing program 2 (id=2166): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, 0x0, 0x0, 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(0x0, 0x8, 0x800) fsetxattr$security_evm(r3, &(0x7f0000000200), &(0x7f0000000240)=@sha1={0x1, "6bcfc674bf8cfd83adbb89a036d38b508c770dc1"}, 0x15, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) semget$private(0x0, 0x4000000009, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x100000b2, 0xa6040) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x2, 0x100000, 0x80000, {r4}}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r7 = socket(0x10, 0x803, 0x0) r8 = openat$kvm(0xffffff9c, &(0x7f0000000480), 0x80, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000093000040"]) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000380000280012800b00010069703667726500001800028014000700fe8000000000000000000000000000aa08000a00", @ANYRES32=r11], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 9.111140521s ago: executing program 1 (id=2167): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(0x0, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xdaf}}, './file0\x00'}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x30b001, 0x0) socket$kcm(0xa, 0x3, 0x87) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffff01, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) 8.920810776s ago: executing program 0 (id=2168): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00'], 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5422) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x8d5f, 0x1046, 0x0, 0x264}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000380)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x1b}, @ioring_restriction_sqe_op={0x1, 0x7}], 0x2) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x6e1}], 0x1, 0x20, 0x0) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e1338720402068829527010203010902240001020000100904d30002be79e8000905040200020500ff09058281"], 0x0) 7.686297873s ago: executing program 1 (id=2169): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) exit(0xfe) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000c80)={0x30, 0x0, 0x1, 0x0, 0x10000, 0xffffffffffff9dce, 0xe8, 0x0}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes i'], 0xd) ptrace(0x10, r5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_pidfd_open(r5, 0x0) keyctl$setperm(0x5, r7, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) ptrace$pokeuser(0x6, r5, 0x358, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) 7.568462906s ago: executing program 2 (id=2170): socket(0xa, 0x3, 0x3a) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$l2tp(0x2, 0x2, 0x73) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f00000003c0)={0xa, 0x0, 0x0, {0x80000004, 0x1, 0x2, 0x8800001}}) sendto$inet6(r5, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) dup3(r1, r2, 0x80000) capget(&(0x7f0000000140)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000180)={0x7, 0x8, 0x6, 0x8, 0x1, 0xffffffff}) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) socket$netlink(0x10, 0x3, 0xc) 6.948378116s ago: executing program 4 (id=2171): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000004180)=0x40b, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x6, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x300, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) r3 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x49, 0x2, 0x3432564e, 0x1, 0x1, [{0x1, 0x4}, {0xfa, 0x2}, {0x2}, {0x5, 0x8}, {0x4, 0x3}, {0x400, 0x80000001}, {0x3ff, 0x2000002}, {0x0, 0x800003}], 0x9, 0xbe, 0x3}}) keyctl$read(0x20, r2, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '\x00'}, &(0x7f0000000040)=""/1, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r5, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) accept4(r0, &(0x7f00000001c0)=@x25={0x9, @remote}, 0x0, 0x800) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r6, &(0x7f0000000600)=""/4099, 0x1003, 0x0) 6.585027474s ago: executing program 3 (id=2172): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000000c0)=ANY=[]) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.058940008s ago: executing program 1 (id=2173): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000200)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x1f, 0x0, &(0x7f0000000240)=0xa00) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000008000000bf09000000000000a5090100ffffff80bf00200000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.828556752s ago: executing program 0 (id=2174): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket(0x1f, 0xa, 0x0) socket$kcm(0xa, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r3) writev(r4, &(0x7f0000003480)=[{&(0x7f00000021c0)}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000060000001848000600000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010000)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xeee1, 0x100}, &(0x7f0000000040), 0x0) syz_clone(0x12c180, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000500020000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x4000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) 5.046684347s ago: executing program 3 (id=2175): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(0x0, 0xea0839ee05e09f64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket(0x1d, 0x2, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180600fe800000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000422020000c0a5c0faf5258e0d9aee55dcd54985679e3c562cdd563aa5997a30b5786c030d827897d39a272a55db5735198da27b4c76ef2da44000fa92d855304ff69619efc1c9b93d358377b75ea12cd6e72747771267aa558f6b974ca460c4ef3c19c492a2e2b43ad1321da6d8d1366b8de3763a463c557c1451c0a87de7eca6af6457bdba7abd5fd34c7b6dba914137b7a3bccf0a2c"], 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, r5, 0x6) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x4, 0x8, 0xfff8, 0x9}) 3.771911137s ago: executing program 4 (id=2176): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4}, &(0x7f00000000c0)=""/80, 0x50, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="cc", 0x1}, {&(0x7f00000000c0)="8eabd4c0c48034d70c6006aaf0e953151d41e3aa438ad0f818f3ca6e230aa5b077a897a5165d32bd5407444338d4e74dc23e09008a2002a672aaa2b99549da614d74314e1666d923815da827281bee2de6eda534b2496123977149b4e7a4868d036ec6dc798458742e9c158e0c7d81a62785b97a0cc5", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x31a}], 0x1}}], 0x2, 0x4048894) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r6, 0x0) 3.729829077s ago: executing program 2 (id=2177): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, 0x0, 0xfffffffc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, 0x0, 0xffe) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000440)=r6, 0x4) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100009060300", @ANYBLOB="adffa888f00306001c"], 0x3c}}, 0x40050) 3.398510814s ago: executing program 3 (id=2178): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20181, 0x0) unshare(0x68040200) mmap(&(0x7f000046d000/0x1000)=nil, 0x1000, 0x2000007, 0x8010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0}}) socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1bb) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x2, 0x5001) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNGETVNETLE(r7, 0xc0189436, &(0x7f0000001200)) 2.577968074s ago: executing program 0 (id=2179): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) open(0x0, 0x64842, 0x389b0d52417bb201) syz_emit_ethernet(0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800140600fe80000000000000000000000000e228fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, 0x0) 2.232643062s ago: executing program 1 (id=2180): syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x30100) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x22, 0x0, &(0x7f0000000440)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x2, 0x9, 0x0, 0x5}, 0x10}, 0x94) syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000020901"], 0x74}, 0x1, 0x0, 0x0, 0x4048000}, 0x40000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc004800}, 0x8000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000140)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{0x8000000, 0x4000000000000e8}]}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x1) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000600)=0x1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xdddd1000, 0x2000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.004855857s ago: executing program 1 (id=2181): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000045000/0x3000)=nil, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x4000010, 0xffffffffffffffff, 0x0) socket(0xb, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f00004de000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x6b4ed000) 1.677651916s ago: executing program 2 (id=2182): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001440), 0x111, 0x1}}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001f00)=""/4111, 0x100f) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x1}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x0, 0x3, {0xa, 0x4e20, 0x5cba5b7c, @private2={0xfc, 0x2, '\x00', 0xc}, 0x4}}}, 0xfffffffffffffd3e) close_range(r4, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x10000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="7400000000fedbdf257a000000c3e521a20eaf005bc35652cdf6f8f21b9de8b1d9670c487425473652c1fc3b90c95fb21b097941ed4712a762415a5cfa3947316b935b3bc13b01", @ANYRES32=0x0, @ANYBLOB="000004000000000054003480140035006d6163766c616e3100000000000000001400350076657468305f746f5f627269646765001400350076657468305f746f5f6261746164760014003500"/91], 0x74}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.609133925s ago: executing program 4 (id=2183): r0 = socket$unix(0x1, 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x3, "7981b27ccde80dc8802bcb5c171a38daed39ec0ad31b841b130c606cecd516cc", 0x41414270}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) close(r0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_usb_connect(0x5, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d22a6640da0320283c520000000109022f0001000000000904000000ef040100052406000105240000000d240f010051"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.260533087s ago: executing program 3 (id=2184): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004c9e58104505808001000102030109021200f300000000090402"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x3}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r4, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000140)={0xc, r4}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f00000000002000000000000000010021"]) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x80000001, 0x8, 0xb, 0x100, r5, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0xf}, 0x50) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 0s ago: executing program 2 (id=2185): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB]) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T5825] usb 5-1: config 0 descriptor?? [ 651.891972][T12625] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 651.932367][T12625] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 651.974075][T12625] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 652.050913][T12625] usb 4-1: USB disconnect, device number 40 [ 653.094889][ T5825] usb 5-1: USB disconnect, device number 36 [ 653.158764][ T116] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 653.171134][ T116] usb 3-1: USB disconnect, device number 29 [ 653.503228][ T44] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 653.795695][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.956861][ T44] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 654.193324][ T5825] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 654.272825][ T44] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 654.281952][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.359113][ T44] usb 4-1: config 0 descriptor?? [ 654.373221][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 654.456901][ T5825] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 654.615749][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.625304][ T5825] usb 3-1: Product: syz [ 654.643527][ T5825] usb 3-1: Manufacturer: syz [ 654.648277][ T5825] usb 3-1: SerialNumber: syz [ 654.667355][ T5825] usb 3-1: config 0 descriptor?? [ 654.917077][ T5825] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 655.905153][ T5911] usb 4-1: USB disconnect, device number 41 [ 656.327921][ T5825] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 656.339572][ T5825] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 656.348800][ T5825] usb 3-1: media controller created [ 656.369035][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 656.383316][ T5911] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 656.596072][ T5825] i2c i2c-2: Added multiplexed i2c bus 3 [ 656.613564][T13046] hub 9-0:1.0: USB hub found [ 656.627235][T13046] hub 9-0:1.0: 1 port detected [ 656.709064][ T5825] rtl2832 2-0010: Realtek RTL2832 successfully attached [ 656.749102][ T5825] usb 3-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2832 (DVB-T))... [ 656.770954][ T5825] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 656.791264][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'. [ 656.964656][ T5911] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 656.981616][ T5911] usb 4-1: config 0 has no interface number 0 [ 656.992903][ T5911] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 657.146143][ T5911] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 657.280818][ T5825] DVB: Unable to find symbol r820t_attach() [ 657.292396][ T5911] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 657.338485][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.389004][ T5911] usb 4-1: config 0 descriptor?? [ 657.432291][ T5825] usb 3-1: USB disconnect, device number 30 [ 657.508624][T13043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 657.597462][ T5911] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 658.085079][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 658.196301][ T44] usb 4-1: USB disconnect, device number 42 [ 660.833230][ T5911] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 660.987951][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.082764][ T5911] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 661.140980][ T5911] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 661.206659][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.242399][ T5911] usb 3-1: config 0 descriptor?? [ 661.335182][T13102] vlan3: entered promiscuous mode [ 661.348990][T13102] ip6gretap0: entered promiscuous mode [ 661.386706][ T5825] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 661.646087][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.686433][ T5825] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 661.735008][ T5825] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 661.766875][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.858597][ T5825] usb 4-1: config 0 descriptor?? [ 662.487204][ T44] usb 3-1: USB disconnect, device number 31 [ 663.181214][T13114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1697'. [ 663.191310][T13114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1697'. [ 663.200855][T13114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1697'. [ 663.215735][T13114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1697'. [ 663.230381][T13114] netlink: 'syz.0.1697': attribute type 21 has an invalid length. [ 663.459409][ T44] usb 4-1: USB disconnect, device number 43 [ 665.883266][ T5825] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 666.212185][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.235859][ T5825] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 666.263354][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.307849][ T5825] usb 5-1: config 0 descriptor?? [ 666.398563][ T5825] usb 5-1: bad CDC descriptors [ 666.522315][ T116] usb 5-1: USB disconnect, device number 37 [ 667.335867][T13170] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 667.482019][T13175] tipc: Enabling of bearer rejected, failed to enable media [ 667.783436][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 667.933310][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 668.094272][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 668.103878][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.116411][ T10] usb 4-1: Product: syz [ 668.127309][ T10] usb 4-1: Manufacturer: syz [ 668.132120][ T10] usb 4-1: SerialNumber: syz [ 668.154060][ T10] usb 4-1: config 0 descriptor?? [ 668.365524][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 669.325259][ T5825] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 669.579676][T13200] dns_resolver: Unsupported server list version (0) [ 669.633292][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 669.640988][ T5825] usb 3-1: unable to get BOS descriptor or descriptor too short [ 669.652099][ T5825] usb 3-1: config 4 interface 0 has no altsetting 0 [ 669.674034][ T5825] usb 3-1: string descriptor 0 read error: -22 [ 669.691840][ T5825] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 669.713310][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.755517][ T5825] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 669.777588][ T5825] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 669.790364][ T5825] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 669.799750][ T5825] usb 3-1: media controller created [ 669.827884][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 669.844650][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 669.859448][ T10] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 669.904077][ T10] usb 4-1: media controller created [ 669.972350][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 670.044821][ T10] i2c i2c-3: Added multiplexed i2c bus 4 [ 670.058832][ T10] rtl2832 3-0010: Realtek RTL2832 successfully attached [ 670.078594][ T10] usb 4-1: DVB: registering adapter 3 frontend 0 (Realtek RTL2832 (DVB-T))... [ 670.102395][ T10] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 670.162987][ T10] DVB: Unable to find symbol r820t_attach() [ 670.306232][ T10] usb 4-1: USB disconnect, device number 44 [ 670.448442][ T44] usb 3-1: USB disconnect, device number 32 [ 671.327553][T13219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1721'. [ 672.022860][T13231] tipc: Enabled bearer , priority 0 [ 672.038226][T13231] syzkaller0: entered promiscuous mode [ 672.047549][T13231] syzkaller0: entered allmulticast mode [ 672.076922][T13231] tipc: Resetting bearer [ 672.095681][T13230] tipc: Resetting bearer [ 672.204909][T13230] tipc: Disabling bearer [ 672.746466][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'. [ 672.814067][T13248] bridge_slave_1: left allmulticast mode [ 672.824693][T13248] bridge_slave_1: left promiscuous mode [ 672.842119][T13248] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.914972][T13248] bridge_slave_0: left allmulticast mode [ 672.930920][T13248] bridge_slave_0: left promiscuous mode [ 672.946935][T13248] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.026700][T13259] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 673.112843][T13251] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[13251] [ 674.800871][T13278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.627514][ T44] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 676.052302][T13292] sctp: [Deprecated]: syz.4.1735 (pid 13292) Use of int in max_burst socket option deprecated. [ 676.052302][T13292] Use struct sctp_assoc_value instead [ 676.237673][T13292] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1735'. [ 677.083605][ T44] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 677.096378][ T44] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 677.125668][ T44] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 677.146371][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.871115][T13308] tipc: Enabled bearer , priority 0 [ 677.880097][T13308] syzkaller0: entered promiscuous mode [ 677.898203][T13308] syzkaller0: entered allmulticast mode [ 677.921183][ T24] IPVS: starting estimator thread 0... [ 677.957101][T13310] tipc: Resetting bearer [ 677.988758][T13307] tipc: Resetting bearer [ 678.022766][T13307] tipc: Disabling bearer [ 678.026276][T13309] IPVS: using max 33 ests per chain, 79200 per kthread [ 679.099020][ T44] usb 2-1: USB disconnect, device number 48 [ 679.107404][T13280] delete_channel: no stack [ 679.648957][T13338] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1745'. [ 680.153298][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 680.417362][ T24] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 680.426954][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.480272][ T24] usb 2-1: config 0 has no interfaces? [ 680.504428][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 680.520501][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.549588][ T24] usb 2-1: config 0 descriptor?? [ 682.396554][ T10] usb 2-1: USB disconnect, device number 49 [ 682.523867][T13353] netlink: 'syz.0.1747': attribute type 10 has an invalid length. [ 682.567106][T13353] team0: Port device bridge0 added [ 683.741459][T13350] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 683.749711][T13350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 683.756052][T13350] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 683.762361][T13350] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 683.779425][T13350] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 684.047236][ T5825] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 684.229230][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.252456][ T5825] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 684.271211][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.328385][ T5825] usb 5-1: config 0 descriptor?? [ 684.396528][ T5825] usb 5-1: bad CDC descriptors [ 684.413222][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 684.433396][ T44] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 684.533173][T11226] Bluetooth: hci0: command 0x0406 tx timeout [ 684.598166][ T116] usb 5-1: USB disconnect, device number 38 [ 684.607723][ T44] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 684.639968][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.659394][ T44] usb 2-1: config 0 descriptor?? [ 684.732514][ T30] audit: type=1326 audit(1761632928.266:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.2.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7fc00000 [ 684.970658][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.002599][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 685.063815][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 685.127574][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.203198][ T10] usb 4-1: config 0 descriptor?? [ 685.709644][T13405] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 685.735794][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.742296][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.816208][T11226] Bluetooth: hci4: command 0x0405 tx timeout [ 685.822291][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 685.829002][T12121] Bluetooth: hci1: command 0x0406 tx timeout [ 685.835334][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 686.083773][ T5908] usb 4-1: USB disconnect, device number 45 [ 686.342091][T13415] netlink: 'syz.4.1761': attribute type 29 has an invalid length. [ 686.376012][T13415] netlink: 'syz.4.1761': attribute type 29 has an invalid length. [ 686.386100][T13415] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1761'. [ 687.402196][ T116] usb 2-1: USB disconnect, device number 50 [ 688.213221][ T116] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 688.363731][ T116] usb 2-1: Using ep0 maxpacket: 32 [ 688.387944][ T116] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 688.404914][ T116] usb 2-1: config 0 has no interface number 0 [ 688.424867][ T116] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 688.438572][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.441442][T13450] tipc: Can't bind to reserved service type 2 [ 688.447291][ T116] usb 2-1: Product: syz [ 688.461095][ T116] usb 2-1: Manufacturer: syz [ 688.466125][ T116] usb 2-1: SerialNumber: syz [ 688.478259][ T116] usb 2-1: config 0 descriptor?? [ 688.485865][ T116] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 688.532266][T13450] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1769'. [ 688.690943][ T116] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 688.704198][ T116] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 689.009795][T13437] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 689.016383][T13437] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 689.022653][T13437] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 689.029278][T13437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 689.045186][T13437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 689.063974][T13435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.123734][T13435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.284048][ T116] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 689.448622][ T116] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 689.458263][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.476002][ T116] usb 3-1: Product: syz [ 689.496438][T13454] netlink: 'syz.0.1770': attribute type 10 has an invalid length. [ 689.504851][ T116] usb 3-1: Manufacturer: syz [ 689.509506][ T116] usb 3-1: SerialNumber: syz [ 689.592787][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1766'. [ 689.769311][ T116] usb 3-1: config 0 descriptor?? [ 690.031320][ T116] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 690.070585][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 690.098500][T13468] erspan0: entered promiscuous mode [ 690.108257][T13468] erspan0: left promiscuous mode [ 690.424885][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 690.426303][ T5908] usb 2-1: USB disconnect, device number 51 [ 690.668747][ T5908] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 690.705187][ T5908] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 690.765630][ T5908] quatech2 2-1:0.51: device disconnected [ 691.103244][T13410] Bluetooth: hci4: command 0x0405 tx timeout [ 691.103416][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 691.115340][T12121] Bluetooth: hci1: command 0x0406 tx timeout [ 691.121467][T12121] Bluetooth: hci2: command 0x0406 tx timeout [ 691.270457][T13451] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 691.277310][T13451] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 691.283999][T13451] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 691.296036][T13451] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 691.302583][T13451] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 691.563243][ T5908] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 691.721178][ T30] audit: type=1800 audit(1761632935.256:653): pid=13484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1776" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 691.774193][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 691.788237][ T5908] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 691.804370][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.893674][ T5908] usb 2-1: Product: syz [ 691.899635][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1775'. [ 691.918692][T13471] Bluetooth: hci0: command 0x0406 tx timeout [ 691.926787][ T5908] usb 2-1: Manufacturer: syz [ 691.938930][ T5908] usb 2-1: SerialNumber: syz [ 691.959689][ T116] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 691.979785][ T5908] usb 2-1: config 0 descriptor?? [ 691.988147][ T116] usb 3-1: USB disconnect, device number 33 [ 692.215791][ T5908] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 692.244109][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 692.252104][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 692.393775][ T10] usb 5-1: device descriptor read/64, error -32 [ 692.643791][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 693.335235][T13471] Bluetooth: hci4: command 0x0405 tx timeout [ 693.341542][T13471] Bluetooth: hci3: command 0x0406 tx timeout [ 693.347851][T11226] Bluetooth: hci1: command 0x0406 tx timeout [ 693.355701][T13471] Bluetooth: hci2: command 0x0406 tx timeout [ 693.675276][ T5908] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 693.692262][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 693.724390][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 693.736942][ T5908] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 693.766696][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.783197][ T5908] usb 2-1: media controller created [ 693.812174][ T10] usb 5-1: config 0 descriptor?? [ 693.847924][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 694.025898][ T5908] i2c i2c-2: Added multiplexed i2c bus 3 [ 694.086244][ T5908] rtl2832 2-0010: Realtek RTL2832 successfully attached [ 694.117246][ T5908] usb 2-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2832 (DVB-T))... [ 694.167139][ T5908] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 694.430904][ T5908] DVB: Unable to find symbol r820t_attach() [ 694.604369][ T5908] usb 2-1: USB disconnect, device number 52 [ 695.413257][ T44] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 695.573498][ T24] usb 5-1: USB disconnect, device number 40 [ 695.628787][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.693225][ T44] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 695.719394][ T44] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 695.729281][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.744465][ T44] usb 3-1: config 0 descriptor?? [ 696.538388][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1786'. [ 696.682407][T13541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1786'. [ 696.682968][T13536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.718304][T13539] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 697.095893][T13541] bond0 (unregistering): (slave ip6gretap2): Releasing backup interface [ 697.116516][T13541] bond0 (unregistering): Released all slaves [ 697.540950][T13549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1788'. [ 697.716144][ T116] usb 3-1: USB disconnect, device number 34 [ 698.974819][T13554] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 698.981349][T13554] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 699.014772][T13554] vhci_hcd vhci_hcd.0: Device attached [ 699.024844][T13563] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 699.031464][T13563] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 699.063486][T13563] vhci_hcd vhci_hcd.0: Device attached [ 699.141082][T13563] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 699.165021][T13554] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 699.173141][T13554] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 699.182469][T13563] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 699.183267][T13554] vhci_hcd vhci_hcd.0: Device attached [ 699.202719][ T24] vhci_hcd: vhci_device speed not set [ 699.228630][T13577] vhci_hcd: connection closed [ 699.230246][ T60] vhci_hcd: stop threads [ 699.239589][ T60] vhci_hcd: release socket [ 699.244194][ T60] vhci_hcd: disconnect device [ 699.273209][ T24] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 699.322517][T13571] vhci_hcd: connection closed [ 699.324147][T13568] vhci_hcd: connection reset by peer [ 699.349781][ T60] vhci_hcd: stop threads [ 699.354381][ T60] vhci_hcd: release socket [ 699.360172][ T60] vhci_hcd: disconnect device [ 699.366713][ T60] vhci_hcd: stop threads [ 699.371001][ T60] vhci_hcd: release socket [ 699.376252][ T60] vhci_hcd: disconnect device [ 700.987279][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1799'. [ 701.128143][T13604] erspan0: entered promiscuous mode [ 701.136084][T13604] erspan0: left promiscuous mode [ 702.064261][ T5825] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 702.247400][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.363186][ T5825] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 702.398358][ T5825] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 702.538422][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.570717][ T5825] usb 4-1: config 0 descriptor?? [ 702.679865][ T44] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 702.760224][T13631] netlink: 'syz.2.1805': attribute type 10 has an invalid length. [ 702.918187][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 702.938346][ T44] usb 2-1: config 2 has an invalid interface number: 45 but max is 0 [ 702.947202][ T44] usb 2-1: config 2 has no interface number 0 [ 702.955628][ T44] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 702.990199][ T44] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 703.062564][ T44] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 703.108882][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.116894][T13630] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 703.125365][T13630] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 703.142196][ T44] usb 2-1: Product: syz [ 703.360472][ T44] usb 2-1: Manufacturer: syz [ 703.368286][ T44] usb 2-1: SerialNumber: syz [ 703.397774][ T44] kobil_sct 2-1:2.45: KOBIL USB smart card terminal converter detected [ 703.400442][T13630] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 703.425890][ T44] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 703.458633][T13630] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 703.661771][T13630] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 704.377595][ T5908] usb 4-1: USB disconnect, device number 46 [ 704.377647][ T24] vhci_hcd: vhci_device speed not set [ 704.733212][ T5825] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 704.849250][T13651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1808'. [ 704.886551][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.924019][ T5825] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 704.935090][T11226] Bluetooth: hci0: command 0x0406 tx timeout [ 704.947582][ T5825] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 704.982025][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.019419][ T5825] usb 5-1: config 0 descriptor?? [ 705.233737][T13410] Bluetooth: hci2: command 0x0406 tx timeout [ 705.295698][ T5825] usb 5-1: USB disconnect, device number 41 [ 705.413398][T13410] Bluetooth: hci1: command 0x0406 tx timeout [ 705.503194][T13410] Bluetooth: hci3: command 0x0406 tx timeout [ 705.687351][ T5908] usb 2-1: USB disconnect, device number 53 [ 705.743260][T13410] Bluetooth: hci4: command 0x0405 tx timeout [ 705.749042][ T5908] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 705.863750][ T5908] kobil_sct 2-1:2.45: device disconnected [ 705.995862][ T5825] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 706.199423][ T5825] usb 3-1: config 4 has an invalid interface number: 88 but max is 0 [ 706.223158][ T5825] usb 3-1: config 4 has no interface number 0 [ 706.246812][ T5825] usb 3-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 706.288275][ T5825] usb 3-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 706.333241][ T5825] usb 3-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 1024 [ 706.365278][ T5825] usb 3-1: config 4 interface 88 altsetting 119 bulk endpoint 0x85 has invalid maxpacket 1024 [ 706.416786][T13673] random: crng reseeded on system resumption [ 706.423840][ T5825] usb 3-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 706.463671][ T5825] usb 3-1: config 4 interface 88 has no altsetting 0 [ 706.488738][ T5825] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 706.498556][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.507021][ T5825] usb 3-1: Product: syz [ 706.511729][ T5825] usb 3-1: Manufacturer: syz [ 706.516385][ T5825] usb 3-1: SerialNumber: syz [ 706.536020][T13658] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 706.698776][T13685] usb usb8: usbfs: process 13685 (syz.3.1814) did not claim interface 0 before use [ 708.414008][ T5825] usb 3-1: USB disconnect, device number 35 [ 709.103187][ T5908] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 709.265133][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.295080][ T5908] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 709.329974][ T5908] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 709.435252][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.486933][ T5908] usb 3-1: config 0 descriptor?? [ 710.620124][ T24] usb 3-1: USB disconnect, device number 36 [ 710.958987][T13720] veth0: entered promiscuous mode [ 710.981404][T13719] veth0: left promiscuous mode [ 711.521013][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'. [ 711.683242][T12625] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 711.879183][T12625] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.931577][T12625] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 712.002916][T12625] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 712.083989][T12625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.155980][T12625] usb 4-1: config 0 descriptor?? [ 713.422171][ T5825] usb 4-1: USB disconnect, device number 47 [ 713.753349][T12625] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 713.906360][T12625] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.917189][T12625] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 713.982951][T12625] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 714.046880][T12625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.152232][T12625] usb 5-1: config 0 descriptor?? [ 715.323324][T12625] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 715.484498][ T44] usb 5-1: USB disconnect, device number 42 [ 715.563034][T12625] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.592805][T12625] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 715.622543][T12625] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 715.702141][T12625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.814996][T12625] usb 2-1: config 0 descriptor?? [ 716.963325][ T5908] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 716.979940][T13788] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 717.188280][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.230976][ T5908] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 717.365573][ T5908] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 717.375122][ T5825] usb 2-1: USB disconnect, device number 54 [ 717.384187][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.407127][ T5908] usb 5-1: config 0 descriptor?? [ 718.458847][T12625] usb 5-1: USB disconnect, device number 43 [ 719.535449][T13813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 721.088194][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1841'. [ 721.683383][ T5908] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 721.885247][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.903929][ T5908] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 721.963433][ T5908] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 722.047645][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.089216][ T5908] usb 4-1: config 0 descriptor?? [ 722.177401][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 722.860589][T13849] team1: entered promiscuous mode [ 722.868227][T13849] team1: entered allmulticast mode [ 723.118329][ T5908] usb 4-1: USB disconnect, device number 48 [ 723.545150][ T30] audit: type=1326 audit(1761632967.076:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 723.633725][ T30] audit: type=1326 audit(1761632967.086:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 723.675062][ T30] audit: type=1326 audit(1761632967.086:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 723.738400][T13858] program syz.2.1847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 723.855217][ T30] audit: type=1326 audit(1761632967.086:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 723.880403][ T30] audit: type=1326 audit(1761632967.086:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 723.906680][ T30] audit: type=1326 audit(1761632967.086:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 723.938223][ T30] audit: type=1326 audit(1761632967.086:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 723.961311][ T30] audit: type=1326 audit(1761632967.086:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 723.984773][ T30] audit: type=1326 audit(1761632967.086:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 724.078159][ T30] audit: type=1326 audit(1761632967.086:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 724.563174][ T5825] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 724.754874][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 724.790923][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 724.851380][ T5825] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 724.901232][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.924201][ T5825] usb 4-1: config 0 descriptor?? [ 725.177659][T13878] nvme_fabrics: missing parameter 'transport=%s' [ 725.184941][T13878] nvme_fabrics: missing parameter 'nqn=%s' [ 725.338436][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1853'. [ 725.973509][ T5825] ath6kl: Failed to submit usb control message: -110 [ 725.982385][ T5825] ath6kl: unable to send the bmi data to the device: -110 [ 726.095590][ T5825] ath6kl: Unable to send get target info: -110 [ 726.120187][ T5825] ath6kl: Failed to init ath6kl core: -110 [ 726.133876][ T5825] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 726.736411][T13900] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1856'. [ 726.848463][T13890] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 726.862134][T13890] block device autoloading is deprecated and will be removed. [ 727.486638][T13907] netlink: 'syz.1.1855': attribute type 10 has an invalid length. [ 728.882331][ T24] usb 4-1: USB disconnect, device number 49 [ 729.333241][T11226] Bluetooth: hci4: command 0x0405 tx timeout [ 729.450618][T13904] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 729.457858][T13904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 729.464243][T13904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 729.470447][T13904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 729.476773][T13904] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 730.065310][T13410] Bluetooth: hci0: command 0x0406 tx timeout [ 730.217946][ T44] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 730.336314][T13943] random: crng reseeded on system resumption [ 730.483172][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 730.944744][ T44] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 731.038609][ T44] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 731.056417][ T44] usb 5-1: config 179 has no interface number 0 [ 731.079264][ T44] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 731.123690][ T44] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 731.244213][ T44] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 731.298487][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.494091][T13410] Bluetooth: hci4: command 0x0405 tx timeout [ 731.494120][T11226] Bluetooth: hci3: command 0x0406 tx timeout [ 731.500281][T13471] Bluetooth: hci1: command 0x0406 tx timeout [ 731.506296][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 732.013188][ T5825] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 732.175051][ T5825] usb 3-1: not running at top speed; connect to a high speed hub [ 732.183908][ T5825] usb 3-1: config 1 interface 0 has no altsetting 0 [ 732.196863][ T5825] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 732.206975][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.215580][ T5825] usb 3-1: Product: syz [ 732.219846][ T5825] usb 3-1: Manufacturer: syz [ 732.225597][ T5825] usb 3-1: SerialNumber: syz [ 732.476651][T13957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1866'. [ 732.529391][T13957] loop8: detected capacity change from 0 to 16384 [ 732.565349][T13963] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 733.102627][T12625] usb 5-1: USB disconnect, device number 44 [ 733.884201][ T5825] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input31 [ 733.986488][ T5184] bcm5974 3-1:1.0: could not read from device [ 734.000735][ T5184] bcm5974 3-1:1.0: could not read from device [ 734.059411][ T5825] usb 3-1: USB disconnect, device number 37 [ 735.007692][T13984] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 735.456719][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 735.573634][T13993] netlink: 'syz.1.1875': attribute type 10 has an invalid length. [ 735.895392][ T5825] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 736.075830][ T5825] usb 2-1: config 2 has an invalid interface number: 211 but max is 0 [ 736.123280][ T5825] usb 2-1: config 2 has no interface number 0 [ 736.153251][ T5825] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 736.221082][ T5825] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 736.250741][ T5825] usb 2-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 736.269579][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.286233][ T5825] usb 2-1: Product: syz [ 736.300705][ T5825] usb 2-1: Manufacturer: syz [ 736.310899][ T5825] usb 2-1: SerialNumber: syz [ 736.341288][T13993] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 736.364064][ T5825] em28xx 2-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 736.413590][ T5825] em28xx 2-1:2.211: Device initialization failed. [ 736.436161][ T5825] em28xx 2-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 736.583215][ T5825] usb 2-1: USB disconnect, device number 55 [ 736.919408][T14015] netlink: 'syz.2.1876': attribute type 10 has an invalid length. [ 737.034766][T14011] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 737.135898][T14020] program syz.3.1878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 737.170061][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1879'. [ 737.362380][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1877'. [ 737.488466][T14011] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 737.497043][T14011] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 737.509759][T14011] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 737.518787][T14011] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 738.184225][T14038] SET target dimension over the limit! [ 739.103519][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 739.428833][T14042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1882'. [ 739.494224][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 739.573759][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 739.573781][T11226] Bluetooth: hci3: command 0x0406 tx timeout [ 739.585789][T11226] Bluetooth: hci1: command 0x0406 tx timeout [ 739.750906][T14042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.033194][ T44] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 740.089563][T14051] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 740.186829][ T44] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 740.196023][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.253689][ T44] usb 2-1: Product: syz [ 740.257886][ T44] usb 2-1: Manufacturer: syz [ 740.262473][ T44] usb 2-1: SerialNumber: syz [ 740.332350][ T44] usb 2-1: config 0 descriptor?? [ 740.584947][T14061] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1886'. [ 740.755867][ T44] airspy 2-1:0.0: Board ID: 00 [ 740.761272][ T44] airspy 2-1:0.0: Firmware version: [ 741.398083][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'. [ 741.604899][T14073] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 741.803621][T14073] bond4: entered promiscuous mode [ 741.809277][T14073] 8021q: adding VLAN 0 to HW filter on device bond4 [ 741.844541][T14074] 8021q: adding VLAN 0 to HW filter on device bond5 [ 741.853997][T14074] bond4: (slave bond5): making interface the new active one [ 741.861511][T14074] bond5: entered promiscuous mode [ 741.867682][T14074] bond4: (slave bond5): Enslaving as an active interface with an up link [ 742.105396][ T44] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 742.181718][ T44] airspy 2-1:0.0: Registered as swradio24 [ 742.188350][ T44] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 742.219730][ T44] usb 2-1: USB disconnect, device number 56 [ 743.085422][T14089] @: renamed from vlan0 [ 743.429277][T14100] libceph: resolve '0..' (ret=-3): failed [ 745.575561][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1899'. [ 746.527999][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 747.176115][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.182562][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.642486][T14159] batman_adv: batadv0: Adding interface: vlan2 [ 748.648822][T14159] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.715617][T14159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.726309][T14159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.736290][T14159] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 748.872248][T14160] No such timeout policy "syz1" [ 749.103163][ T5911] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 749.424485][ T5911] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 749.433874][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.472561][ T5911] usb 5-1: Product: syz [ 749.478088][ T5911] usb 5-1: Manufacturer: syz [ 749.538012][ T5911] usb 5-1: SerialNumber: syz [ 749.561550][ T5911] usb 5-1: config 0 descriptor?? [ 750.356526][ T5911] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 750.485797][ T5911] airspy 5-1:0.0: Could not detect board [ 750.520178][ T5911] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 750.555534][ T5911] usb 5-1: USB disconnect, device number 45 [ 750.845324][T13471] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 751.136408][T14191] input: syz0 as /devices/virtual/input/input32 [ 752.852662][T14210] netlink: 'syz.4.1917': attribute type 10 has an invalid length. [ 753.006999][T14207] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 753.086850][T14207] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 753.255974][T14207] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 753.263982][T14207] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 753.282884][T14207] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 753.789581][T14219] QAT: failed to copy from user. [ 754.812159][T14233] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[14233] [ 754.875173][T14233] lo: Caught tx_queue_len zero misconfig [ 754.890793][T14233] netlink: 'syz.1.1920': attribute type 6 has an invalid length. [ 755.131988][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 755.138407][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 755.333316][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 755.339557][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 755.345693][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 756.236539][T14248] fuse: Bad value for 'fd' [ 756.288837][T14246] rtc_cmos 00:00: Alarms can be up to one day in the future [ 756.543179][T12625] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 756.714830][T12625] usb 3-1: Using ep0 maxpacket: 8 [ 756.756656][T12625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.780130][T12625] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 756.794340][T12625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.811115][T12625] usb 3-1: config 0 descriptor?? [ 757.193985][T14250] bond0 (unregistering): Released all slaves [ 759.332773][T12625] usbhid 3-1:0.0: can't add hid device: -71 [ 759.339805][T12625] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 759.352193][T12625] usb 3-1: USB disconnect, device number 38 [ 759.631863][T14284] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1931'. [ 759.833347][ T5911] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 760.085208][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.095793][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 760.112031][ T5911] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 760.159931][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.214496][ T5911] usb 2-1: config 0 descriptor?? [ 760.641067][T14301] netlink: 'syz.3.1928': attribute type 10 has an invalid length. [ 760.794494][T14303] SET target dimension over the limit! [ 761.955728][ T5911] usb 2-1: USB disconnect, device number 57 [ 762.288462][T14295] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 762.296996][T14295] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 762.307795][T14295] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 762.314369][T14295] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 762.320630][T14295] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 762.703705][T13471] Bluetooth: hci0: command 0x0406 tx timeout [ 762.721674][T14325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 764.374554][T13471] Bluetooth: hci3: command 0x0406 tx timeout [ 764.380690][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 764.380727][T11226] Bluetooth: hci1: command 0x0406 tx timeout [ 764.386800][T13410] Bluetooth: hci2: command 0x0406 tx timeout [ 764.662888][T14343] xt_ecn: cannot match TCP bits for non-tcp packets [ 765.333149][T12625] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 765.485319][T12625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 765.500628][T12625] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 765.521076][T12625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.532317][T12625] usb 5-1: Product: syz [ 765.536745][T12625] usb 5-1: Manufacturer: syz [ 765.541519][T12625] usb 5-1: SerialNumber: syz [ 765.554247][T12625] usb 5-1: config 0 descriptor?? [ 767.566357][ T5908] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 767.825111][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.841292][ T5908] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 767.865292][ T5908] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 767.886258][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.928456][ T5908] usb 3-1: config 0 descriptor?? [ 768.433184][T12625] usb 5-1: USB disconnect, device number 46 [ 768.602011][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1949'. [ 768.682294][T14389] netlink: 'syz.4.1949': attribute type 10 has an invalid length. [ 768.743180][ T5825] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 768.899998][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.919856][ T5825] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 768.940301][ T5825] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 768.953164][ T5911] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 768.971172][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.054274][ T5825] usb 4-1: config 0 descriptor?? [ 769.114743][ T5911] usb 5-1: config 2 has an invalid interface number: 211 but max is 0 [ 769.163173][ T5911] usb 5-1: config 2 has no interface number 0 [ 769.196084][ T5911] usb 5-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 769.223144][ T5911] usb 5-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 769.246860][ T5911] usb 5-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 769.257664][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.273451][ T5911] usb 5-1: Product: syz [ 769.279461][ T5911] usb 5-1: Manufacturer: syz [ 769.284530][ T5911] usb 5-1: SerialNumber: syz [ 769.296560][T14389] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 769.307314][ T5911] em28xx 5-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 769.318296][ T5911] em28xx 5-1:2.211: Device initialization failed. [ 769.338426][ T5911] em28xx 5-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 769.493596][T12625] usb 3-1: USB disconnect, device number 39 [ 769.553000][ T5911] usb 5-1: USB disconnect, device number 47 [ 770.954253][T12625] usb 4-1: USB disconnect, device number 50 [ 771.617076][T14422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1955'. [ 771.784331][T14426] netlink: 'syz.4.1954': attribute type 10 has an invalid length. [ 771.903125][ T44] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 772.023220][T14429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1956'. [ 772.147077][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 772.173365][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 772.244824][ T44] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 772.246110][T14419] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 772.286446][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.294890][T14419] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 772.323384][T14419] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 772.332815][T14419] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 772.343480][T14419] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 772.371658][ T44] usb 2-1: Product: syz [ 772.386159][ T44] usb 2-1: Manufacturer: syz [ 772.413547][ T44] usb 2-1: SerialNumber: syz [ 772.537088][ T44] usb 2-1: config 0 descriptor?? [ 772.815507][ T44] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 772.993828][ T44] usb 2-1: USB disconnect, device number 58 [ 773.248792][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 774.183301][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 774.183317][ T30] audit: type=1326 audit(1761633017.716:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 774.234589][ T30] audit: type=1326 audit(1761633017.716:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 774.257926][ T30] audit: type=1326 audit(1761633017.716:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 774.303288][T13410] Bluetooth: hci0: command 0x0406 tx timeout [ 774.304976][ T30] audit: type=1326 audit(1761633017.716:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 774.373603][T13410] Bluetooth: hci3: command 0x0406 tx timeout [ 774.379660][T13471] Bluetooth: hci1: command 0x0406 tx timeout [ 774.385719][T13471] Bluetooth: hci4: command 0x0405 tx timeout [ 774.391742][T13471] Bluetooth: hci2: command 0x0406 tx timeout [ 774.553170][ T30] audit: type=1326 audit(1761633017.716:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 774.623136][ T30] audit: type=1326 audit(1761633017.716:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 774.707514][ T30] audit: type=1326 audit(1761633017.716:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 774.786820][ T30] audit: type=1326 audit(1761633017.716:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 774.809608][ T5911] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 774.860190][ T30] audit: type=1326 audit(1761633017.716:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 774.908062][ T30] audit: type=1326 audit(1761633017.716:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 774.985059][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.999895][ T5911] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 775.033322][ T5911] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 775.101258][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.160958][ T5911] usb 3-1: config 0 descriptor?? [ 775.366614][T14457] delete_channel: no stack [ 775.674913][T14478] input: syz0 as /devices/virtual/input/input34 [ 776.155788][T14479] geneve2: entered promiscuous mode [ 776.161167][T14479] geneve2: entered allmulticast mode [ 776.463131][ T5911] usb 3-1: USB disconnect, device number 40 [ 777.433170][ T44] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 777.596576][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.624647][T14502] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 777.661641][ T44] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 777.749108][ T44] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 777.801905][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.872171][ T44] usb 5-1: config 0 descriptor?? [ 778.213326][T13471] Bluetooth: hci4: command 0x0405 tx timeout [ 779.574045][T12625] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 779.592204][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 779.592219][ T30] audit: type=1326 audit(1761633023.126:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 779.642128][ T30] audit: type=1326 audit(1761633023.126:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 779.675842][ T30] audit: type=1326 audit(1761633023.136:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 779.701973][ T30] audit: type=1326 audit(1761633023.136:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 779.737706][ T30] audit: type=1326 audit(1761633023.136:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 779.760445][T12625] usb 4-1: Using ep0 maxpacket: 8 [ 779.815948][ T30] audit: type=1326 audit(1761633023.136:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 779.838943][T14524] netlink: 'syz.1.1971': attribute type 10 has an invalid length. [ 779.852400][ T30] audit: type=1326 audit(1761633023.136:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 779.891389][T12625] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 779.941961][T12625] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 779.954082][T12625] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 779.965911][ T30] audit: type=1326 audit(1761633023.136:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 779.988467][T12625] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 780.015214][ T30] audit: type=1326 audit(1761633023.136:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 780.038209][ T30] audit: type=1326 audit(1761633023.136:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14519 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 780.106578][T12625] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 780.117479][T12625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.137784][T12625] usb 4-1: Product: syz [ 780.148672][T12625] usb 4-1: Manufacturer: syz [ 780.161074][T12625] usb 4-1: SerialNumber: syz [ 780.216907][T14512] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 780.226604][T14518] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 780.252452][T14518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 780.278776][ T24] usb 5-1: USB disconnect, device number 48 [ 780.285786][T12625] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 780.307170][T14518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 780.315531][T12625] usbtest 4-1:1.0: Linux user mode ISO test driver [ 780.323294][T12625] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 780.342481][T14518] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 780.350060][T14518] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 781.603466][ T5911] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 781.835060][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.874080][ T5911] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 781.922487][ T5911] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 781.964782][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.026660][ T5911] usb 3-1: config 0 descriptor?? [ 782.293215][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 782.303141][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 782.373344][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 782.379429][T13471] Bluetooth: hci3: command 0x0406 tx timeout [ 782.385577][T13471] Bluetooth: hci1: command 0x0406 tx timeout [ 782.558423][ T24] usb 4-1: USB disconnect, device number 51 [ 784.300486][ T5911] usb 3-1: USB disconnect, device number 41 [ 784.823339][ T5911] IPVS: starting estimator thread 0... [ 784.973211][T14575] IPVS: using max 31 ests per chain, 74400 per kthread [ 785.037440][T14579] netlink: 'syz.2.1985': attribute type 10 has an invalid length. [ 785.725378][T14559] delete_channel: no stack [ 786.792095][T14586] fuse: Bad value for 'fd' [ 787.013304][T13471] Bluetooth: hci4: command 0x0405 tx timeout [ 787.101833][T14577] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 787.173941][T13471] Bluetooth: hci0: command 0x0406 tx timeout [ 787.705779][T14577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 787.717315][T14577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 787.731968][T14577] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 787.748643][T14577] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 788.093123][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 788.259344][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.283516][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.318213][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 788.378702][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.403135][ T5911] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 788.430723][ T24] usb 4-1: config 0 descriptor?? [ 788.893167][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 788.963639][ T24] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 789.000155][ T5911] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 789.011931][ T5911] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 789.022998][ T5911] usb 5-1: config 135 has no interface number 0 [ 789.029720][ T5911] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 789.049268][ T5911] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 789.058535][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.066707][ T5911] usb 5-1: Product: syz [ 789.071129][ T5911] usb 5-1: Manufacturer: syz [ 789.075978][ T5911] usb 5-1: SerialNumber: syz [ 789.097644][ T5911] uvcvideo 5-1:135.230: probe with driver uvcvideo failed with error -22 [ 789.174257][T13471] Bluetooth: hci2: command 0x0406 tx timeout [ 789.203603][ T24] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 789.243138][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 789.289228][ T24] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 789.412727][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 789.445497][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 789.455041][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.463024][ T10] usb 2-1: Product: syz [ 789.483349][ T10] usb 2-1: Manufacturer: syz [ 789.488042][ T10] usb 2-1: SerialNumber: syz [ 789.524263][ T10] usb 2-1: config 0 descriptor?? [ 789.535789][ T10] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 789.825774][T13471] Bluetooth: hci4: command 0x0405 tx timeout [ 789.831946][T13410] Bluetooth: hci3: command 0x0406 tx timeout [ 789.838296][T13410] Bluetooth: hci1: command 0x0406 tx timeout [ 789.939323][ T10] usb 2-1: clie_3_5_startup: get interface number bad return length: 0 [ 789.948516][ T10] visor 2-1:0.0: probe with driver visor failed with error -5 [ 790.386393][T12625] usb 4-1: reset high-speed USB device number 52 using dummy_hcd [ 790.413192][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 790.588278][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.599593][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 790.650956][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 790.684739][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.787422][ T24] usb 3-1: config 0 descriptor?? [ 791.324299][ T44] usb 4-1: USB disconnect, device number 52 [ 791.660222][ T5911] usb 3-1: USB disconnect, device number 42 [ 792.018896][ T10] usb 2-1: USB disconnect, device number 59 [ 792.128188][T12625] usb 5-1: USB disconnect, device number 49 [ 792.541836][T14645] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 792.548381][T14645] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 792.628255][T14645] vhci_hcd vhci_hcd.0: Device attached [ 792.653469][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 792.873445][T14622] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 792.912627][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.974094][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 793.014314][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 793.074971][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.095739][ T10] usb 2-1: config 0 descriptor?? [ 793.235566][T14661] netdevsim netdevsim3: Direct firmware load for x failed with error -2 [ 793.263375][T14661] netdevsim netdevsim3: Falling back to sysfs fallback for: x [ 793.287053][T14662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2000'. [ 793.317856][T14651] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 793.324381][T14651] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 793.335971][T14646] vhci_hcd: connection reset by peer [ 793.352583][ T4564] vhci_hcd: stop threads [ 793.360431][ T4564] vhci_hcd: release socket [ 793.370221][T14651] vhci_hcd vhci_hcd.0: Device attached [ 793.384619][ T4564] vhci_hcd: disconnect device [ 793.534886][T14659] vhci_hcd: connection closed [ 793.535438][ T4564] vhci_hcd: stop threads [ 793.580685][ T4564] vhci_hcd: release socket [ 793.603872][T12625] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 793.628088][ T4564] vhci_hcd: disconnect device [ 794.212941][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 794.212953][ T30] audit: type=1326 audit(1761633037.746:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.0.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 794.253176][ T30] audit: type=1326 audit(1761633037.776:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.0.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 794.320850][ T30] audit: type=1326 audit(1761633037.786:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.0.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 794.344351][ T30] audit: type=1326 audit(1761633037.786:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.0.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 794.368044][ T30] audit: type=1326 audit(1761633037.786:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.0.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 794.469028][ T30] audit: type=1326 audit(1761633037.786:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.0.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 794.589481][ T30] audit: type=1326 audit(1761633037.786:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.0.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 794.725248][ T30] audit: type=1326 audit(1761633037.786:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.0.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 794.872183][ T30] audit: type=1326 audit(1761633037.786:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.0.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 795.013448][ T30] audit: type=1326 audit(1761633037.786:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.0.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369998efc9 code=0x7ffc0000 [ 795.203213][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 795.341892][ T10] usb 2-1: USB disconnect, device number 60 [ 795.386582][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 795.524860][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 795.559738][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.578076][ T24] usb 5-1: Product: syz [ 795.592168][ T24] usb 5-1: Manufacturer: syz [ 795.602103][ T24] usb 5-1: SerialNumber: syz [ 795.621294][ T24] usb 5-1: config 0 descriptor?? [ 796.412509][T14688] netdevsim netdevsim2: Direct firmware load for . [ 796.412509][T14688] failed with error -2 [ 796.441527][T14688] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 796.441527][T14688] [ 797.053864][T14679] delete_channel: no stack [ 797.973212][T14622] vhci_hcd: vhci_device speed not set [ 798.024576][ T5908] usb 5-1: USB disconnect, device number 50 [ 798.543148][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 798.750784][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.781859][T12625] vhci_hcd: vhci_device speed not set [ 798.813497][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 798.848661][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 798.885045][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.907059][ T24] usb 3-1: config 0 descriptor?? [ 799.663300][T14721] veth0_to_team: entered promiscuous mode [ 799.923199][ T5908] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 800.145995][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.164199][ T5908] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 800.184808][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.212998][ T5908] usb 2-1: config 0 descriptor?? [ 800.228156][ T5908] pwc: Askey VC010 type 2 USB webcam detected. [ 800.628225][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00 [ 800.888455][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00 [ 800.933010][ T5908] pwc: recv_control_msg error -32 req 04 val 1000 [ 800.965488][ T5908] pwc: recv_control_msg error -32 req 04 val 1300 [ 800.997704][ T5908] pwc: recv_control_msg error -32 req 04 val 1400 [ 801.010576][ T5908] pwc: recv_control_msg error -32 req 02 val 2000 [ 801.044870][ T5908] pwc: recv_control_msg error -32 req 02 val 2100 [ 801.065973][ T5908] pwc: recv_control_msg error -32 req 04 val 1500 [ 801.294688][ T5911] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 801.312727][T12625] usb 3-1: USB disconnect, device number 43 [ 801.433793][ T5908] pwc: recv_control_msg error -71 req 02 val 2400 [ 801.444607][ T5908] pwc: recv_control_msg error -71 req 02 val 2600 [ 801.451538][ T5908] pwc: recv_control_msg error -71 req 02 val 2900 [ 801.462827][ T5908] pwc: recv_control_msg error -71 req 02 val 2800 [ 801.470275][ T5908] pwc: recv_control_msg error -71 req 04 val 1100 [ 801.495793][ T5908] pwc: recv_control_msg error -71 req 04 val 1200 [ 801.503902][ T5908] pwc: Registered as video103. [ 801.509921][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 801.523103][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.533690][ T5911] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.542791][ T5911] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 801.565386][ T5908] usb 2-1: USB disconnect, device number 61 [ 801.576955][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.612353][ T5911] usb 5-1: config 0 descriptor?? [ 803.101022][T14622] usb 5-1: USB disconnect, device number 51 [ 803.313185][ T5908] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 803.485409][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 803.493779][ T5908] usb 2-1: not running at top speed; connect to a high speed hub [ 803.523014][ T5908] usb 2-1: config 219 has an invalid interface number: 109 but max is 0 [ 803.539257][ T5908] usb 2-1: config 219 has no interface number 0 [ 803.617439][ T5908] usb 2-1: config 219 interface 109 has no altsetting 0 [ 803.649939][ T5908] usb 2-1: New USB device found, idVendor=15c2, idProduct=0044, bcdDevice=c4.50 [ 803.866055][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.888088][ T5908] usb 2-1: Product: syz [ 803.892268][ T5908] usb 2-1: Manufacturer: syz [ 803.905586][ T5908] usb 2-1: SerialNumber: syz [ 805.364863][ T5908] imon 2-1:219.109: unable to register, err -19 [ 805.389465][ T5908] usb 2-1: USB disconnect, device number 62 [ 806.172398][T14780] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 806.190242][T14780] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 806.203282][T14780] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 806.222489][T14780] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 806.245368][T14780] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 806.503129][ T5911] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 806.713161][ T5908] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 806.744779][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.762678][ T5911] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 806.822491][ T5911] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 806.842714][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.853503][T14794] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2028'. [ 806.867013][ T5911] usb 5-1: config 0 descriptor?? [ 806.914484][T14795] geneve2: entered promiscuous mode [ 806.919728][T14795] geneve2: entered allmulticast mode [ 807.129637][ T5908] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 807.155750][ T5908] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 807.204457][ T5908] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 807.261974][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.317097][T14779] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 807.345586][T13471] Bluetooth: hci0: command 0x0406 tx timeout [ 807.346247][ T5908] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 807.611030][T14779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.630265][T14779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.348282][T13471] Bluetooth: hci4: command 0x0405 tx timeout [ 808.354605][T13471] Bluetooth: hci3: command 0x0406 tx timeout [ 808.360713][T13471] Bluetooth: hci1: command 0x0406 tx timeout [ 808.366942][T13471] Bluetooth: hci2: command 0x0406 tx timeout [ 808.443582][T14622] usb 5-1: USB disconnect, device number 52 [ 808.618737][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.625605][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.125465][ T5911] usb 4-1: USB disconnect, device number 53 [ 809.152318][T14811] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 810.313159][ T5911] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 810.459972][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 810.475039][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.485772][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 810.752104][ T5911] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 810.765482][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.775498][ T5911] usb 2-1: config 0 descriptor?? [ 810.980266][T14834] loop6: detected capacity change from 0 to 524288000 [ 812.674169][T12625] usb 2-1: USB disconnect, device number 63 [ 813.383788][T14849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2039'. [ 813.794899][T14857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2040'. [ 814.119204][T14864] netlink: 'syz.2.2042': attribute type 27 has an invalid length. [ 814.148714][T14864] syz_tun: left promiscuous mode [ 814.199413][T14864] vlan2: left allmulticast mode [ 814.204541][T14864] bond1: left allmulticast mode [ 814.210782][T14864] gretap1: left allmulticast mode [ 814.220182][T14864] gretap2: left promiscuous mode [ 814.260352][T14864] hsr0: left allmulticast mode [ 814.265348][T14864] hsr_slave_0: left allmulticast mode [ 814.272224][T14864] hsr0: left promiscuous mode [ 814.281851][T14864] macvlan2: left promiscuous mode [ 814.303225][T14864] macvlan2: left allmulticast mode [ 814.410343][T14864] bond4: left promiscuous mode [ 814.448886][T14864] bond4: left allmulticast mode [ 814.632751][T14865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 814.653125][ T5825] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 814.823207][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 814.831667][ T5825] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 814.845498][ T5825] usb 3-1: config 0 has no interface number 0 [ 814.864893][ T5825] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 814.879642][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.903726][ T5825] usb 3-1: Product: syz [ 814.914547][ T5825] usb 3-1: Manufacturer: syz [ 814.926955][ T5825] usb 3-1: SerialNumber: syz [ 814.954593][ T5825] usb 3-1: config 0 descriptor?? [ 814.988790][ T5825] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 815.514229][ T5825] gspca_spca1528: reg_w err -110 [ 815.544448][ T5825] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 816.300351][T14888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2046'. [ 816.975290][ T5825] usb 3-1: USB disconnect, device number 44 [ 817.403150][T12625] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 817.433238][ T5825] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 817.577301][T12625] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 817.588867][T12625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.597015][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 817.606806][T12625] usb 5-1: Product: syz [ 817.610994][T12625] usb 5-1: Manufacturer: syz [ 817.626935][T12625] usb 5-1: SerialNumber: syz [ 817.643232][ T5825] usb 3-1: config 8 has an invalid interface number: 183 but max is 0 [ 817.651553][ T5825] usb 3-1: config 8 has an invalid interface descriptor of length 5, skipping [ 817.663557][T12625] usb 5-1: config 0 descriptor?? [ 817.677457][ T5825] usb 3-1: config 8 has an invalid descriptor of length 180, skipping remainder of the config [ 817.688155][ T5825] usb 3-1: config 8 has no interface number 0 [ 817.694491][ T5825] usb 3-1: config 8 interface 183 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 817.723380][ T5911] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 817.766145][ T5825] usb 3-1: config 8 interface 183 has no altsetting 0 [ 817.832084][ T5825] usb 3-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=69.50 [ 817.859500][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.869567][ T5825] usb 3-1: Product: syz [ 817.892890][ T5825] usb 3-1: Manufacturer: syz [ 817.909012][ T5825] usb 3-1: SerialNumber: syz [ 817.926548][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.954016][ T5911] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 817.979481][ T5911] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 818.009271][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.026240][ T5911] usb 4-1: config 0 descriptor?? [ 818.165234][T12625] airspy 5-1:0.0: Board ID: 00 [ 818.182361][T14893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.217501][T12625] airspy 5-1:0.0: Firmware version: Ä!Ôˆ?˜skú^¥©hø«yý)Ä7qQ…àž1RÂ,žP*”CA•{×½ƒ¾û˜hžYcœbON1f [ 818.818593][ T5825] gspca_main: tv8532-2.14.0 probing 0545:808b [ 818.997943][ T5825] usb 3-1: USB disconnect, device number 45 [ 819.070266][T12625] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 819.107932][T12625] airspy 5-1:0.0: Registered as swradio24 [ 819.126013][T12625] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 819.167192][T12625] usb 5-1: USB disconnect, device number 53 [ 820.223195][T12625] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 820.493135][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 820.713135][T12625] usb 2-1: Using ep0 maxpacket: 16 [ 820.745715][T12625] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.983197][T12625] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.003436][T12625] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 821.012518][T12625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.033947][T14622] usb 4-1: USB disconnect, device number 54 [ 821.098586][ T10] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 821.115865][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.134031][T12625] usb 2-1: config 0 descriptor?? [ 821.186407][ T10] usb 3-1: config 0 descriptor?? [ 821.659639][T12625] usbhid 2-1:0.0: can't add hid device: -71 [ 821.665875][T12625] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 821.735697][T12625] usb 2-1: USB disconnect, device number 64 [ 821.821192][T14622] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 822.013127][T14622] usb 5-1: Using ep0 maxpacket: 32 [ 822.039040][T14622] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 822.274762][T14622] usb 5-1: config 0 has no interface number 0 [ 822.368206][T14622] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 822.419665][T14622] usb 5-1: config 0 interface 85 has no altsetting 0 [ 822.437450][T14622] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 822.446958][T14622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.455285][T14622] usb 5-1: Product: syz [ 822.459455][T14622] usb 5-1: Manufacturer: syz [ 822.465716][T14622] usb 5-1: SerialNumber: syz [ 822.474323][T14622] usb 5-1: config 0 descriptor?? [ 822.793430][ T5825] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 822.933380][T14622] appletouch 5-1:0.85: Geyser mode initialized. [ 822.953380][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 822.965776][ T5825] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 822.993248][ T5825] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 823.015112][T14622] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input37 [ 823.033326][ T5825] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 823.084503][ T5825] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 823.140010][ T5825] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 823.221261][T14622] usb 5-1: USB disconnect, device number 54 [ 823.230654][ T5825] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 823.291880][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.337011][ T5825] usbtmc 2-1:16.0: bulk endpoints not found [ 823.345552][T14622] appletouch 5-1:0.85: input: appletouch disconnected [ 823.479530][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 823.485780][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 823.520925][ T10] usb 3-1: USB disconnect, device number 46 [ 823.527187][ T5911] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 823.586346][T14622] usb 2-1: USB disconnect, device number 65 [ 823.713489][ T5911] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 823.727121][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.747009][ T5911] usb 4-1: Product: syz [ 823.755300][ T5911] usb 4-1: Manufacturer: syz [ 823.765755][ T5911] usb 4-1: SerialNumber: syz [ 823.863981][ T5911] usb 4-1: config 0 descriptor?? [ 824.093531][ T5911] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 824.410250][T14968] ip6tnl1: entered promiscuous mode [ 824.465002][T14968] ip6tnl1: entered allmulticast mode [ 825.445966][T14980] loop6: detected capacity change from 0 to 2560 [ 825.511677][ T5824] Buffer I/O error on dev loop6, logical block 0, async page read [ 825.521183][ T5824] Buffer I/O error on dev loop6, logical block 0, async page read [ 825.530119][ T5824] Buffer I/O error on dev loop6, logical block 0, async page read [ 825.540055][ T5824] Buffer I/O error on dev loop6, logical block 0, async page read [ 825.549836][ T5824] Buffer I/O error on dev loop6, logical block 0, async page read [ 825.588618][ T5824] Buffer I/O error on dev loop6, logical block 0, async page read [ 825.632878][ T5824] Buffer I/O error on dev loop6, logical block 0, async page read [ 825.680586][ T5824] Buffer I/O error on dev loop6, logical block 0, async page read [ 825.708028][ T5824] Buffer I/O error on dev loop6, logical block 0, async page read [ 825.716939][ T5824] Buffer I/O error on dev loop6, logical block 0, async page read [ 826.569395][ T5911] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 826.613859][ T5911] usb 4-1: USB disconnect, device number 55 [ 827.956847][ T5911] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 828.329310][ T5911] usb 3-1: config 0 has no interfaces? [ 828.343899][ T5911] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 828.361713][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.563110][ T5911] usb 3-1: config 0 descriptor?? [ 829.832361][ T24] usb 3-1: USB disconnect, device number 47 [ 830.735252][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 830.735278][ T30] audit: type=1326 audit(1761633074.266:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15030 comm="syz.1.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 830.812218][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'. [ 830.861621][ T30] audit: type=1326 audit(1761633074.266:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15030 comm="syz.1.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 830.883978][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.003355][ T30] audit: type=1326 audit(1761633074.306:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15030 comm="syz.1.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 831.127868][ T30] audit: type=1326 audit(1761633074.306:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15030 comm="syz.1.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 831.150219][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.318792][ T30] audit: type=1326 audit(1761633074.306:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15030 comm="syz.1.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 831.387850][ T30] audit: type=1326 audit(1761633074.306:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15030 comm="syz.1.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 831.460968][ T30] audit: type=1326 audit(1761633074.306:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15030 comm="syz.1.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 831.483357][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.611267][ T30] audit: type=1326 audit(1761633074.306:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15030 comm="syz.1.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 831.633626][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.687483][ T30] audit: type=1326 audit(1761633074.306:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15030 comm="syz.1.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 831.773121][ T30] audit: type=1326 audit(1761633074.306:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15030 comm="syz.1.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 832.626797][T15056] team0: Caught tx_queue_len zero misconfig [ 835.863365][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 835.973318][ T5911] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 836.102016][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.151899][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 836.184711][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.250330][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 836.266685][ T5911] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 836.275845][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.287012][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.322100][ T10] usb 2-1: config 0 descriptor?? [ 836.331529][ T5911] usb 5-1: config 0 descriptor?? [ 836.365233][ T5911] usb 5-1: bad CDC descriptors [ 836.972896][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 836.972914][ T30] audit: type=1326 audit(1761633080.506:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1838efc9 code=0x7ffc0000 [ 837.007320][ T30] audit: type=1326 audit(1761633080.536:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1838efc9 code=0x7ffc0000 [ 837.029686][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.037503][ T30] audit: type=1326 audit(1761633080.536:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8a1838efc9 code=0x7ffc0000 [ 837.061226][ T30] audit: type=1326 audit(1761633080.536:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1838efc9 code=0x7ffc0000 [ 837.091662][ T30] audit: type=1326 audit(1761633080.536:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1838efc9 code=0x7ffc0000 [ 837.114010][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.123249][ T30] audit: type=1326 audit(1761633080.546:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a1838d810 code=0x7ffc0000 [ 837.145610][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.195910][ T30] audit: type=1326 audit(1761633080.546:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1838efc9 code=0x7ffc0000 [ 837.218951][ T30] audit: type=1326 audit(1761633080.546:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1838efc9 code=0x7ffc0000 [ 837.242061][ T30] audit: type=1326 audit(1761633080.546:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8a1838efc9 code=0x7ffc0000 [ 837.264396][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.272326][ T30] audit: type=1326 audit(1761633080.546:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.3.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1838efc9 code=0x7ffc0000 [ 837.294694][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.437646][ T24] usb 2-1: USB disconnect, device number 66 [ 837.548095][T15101] netlink: 'syz.2.2087': attribute type 10 has an invalid length. [ 837.818718][T15108] fuse: Bad value for 'fd' [ 838.459950][T12625] usb 5-1: USB disconnect, device number 55 [ 839.003475][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2092'. [ 839.577396][T15127] gretap1: entered promiscuous mode [ 839.588448][T15127] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2093'. [ 839.699209][T15100] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 839.709467][T15100] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 839.718527][T15100] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 839.734222][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 839.741843][T15100] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 839.748331][T15100] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 840.053518][ T5911] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 840.459317][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.486048][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 840.503140][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 840.545903][ T5911] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 840.561460][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.589551][ T5911] usb 2-1: config 0 descriptor?? [ 840.655515][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.686743][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 840.718140][T15139] vivid-000: disconnect [ 840.743286][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 840.802386][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.860859][T14622] usb 2-1: USB disconnect, device number 67 [ 840.908375][ T24] usb 5-1: config 0 descriptor?? [ 840.920927][T15141] netlink: 'syz.2.2096': attribute type 10 has an invalid length. [ 840.957002][T15141] netlink: 'syz.2.2096': attribute type 10 has an invalid length. [ 841.528137][T15130] vivid-000: reconnect [ 841.734150][T13410] Bluetooth: hci2: command 0x0406 tx timeout [ 841.813348][T13410] Bluetooth: hci4: command 0x0405 tx timeout [ 841.819559][T13410] Bluetooth: hci3: command 0x0406 tx timeout [ 841.826134][T13410] Bluetooth: hci1: command 0x0406 tx timeout [ 842.267729][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 842.267745][ T30] audit: type=1326 audit(1761633085.806:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 842.318747][ T30] audit: type=1326 audit(1761633085.836:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 842.345067][ T30] audit: type=1326 audit(1761633085.846:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 842.420337][ T30] audit: type=1326 audit(1761633085.846:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 842.460618][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2098'. [ 842.536083][ T30] audit: type=1326 audit(1761633085.846:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 842.589455][ T30] audit: type=1326 audit(1761633085.846:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa256b8da7f code=0x7ffc0000 [ 842.616505][ T30] audit: type=1326 audit(1761633085.846:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 842.639407][ T30] audit: type=1326 audit(1761633085.846:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 842.662372][ T30] audit: type=1326 audit(1761633085.846:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 842.722436][ T30] audit: type=1326 audit(1761633085.846:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa256b8efc9 code=0x7ffc0000 [ 843.346350][ T5825] usb 5-1: USB disconnect, device number 56 [ 843.738878][T15160] sit1: entered allmulticast mode [ 844.395228][T15179] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 844.416326][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2104'. [ 844.459026][T15179] fuse: Unknown parameter 'Failures TCPSackFailures TCPLossFailures TCPFastRetrans TCPSlowStartRetrans TCPTimeouts TCPLossProbes TCPLossProbeRecovery TCPRenoRecoveryFail TCPSackRecoveryFail TCPRcvCollapsed TCPBacklogCoalesce TCPDSACKOldSent TCPDSACKOfoSent TCPDSACKRecv TCPDSACKOfoRecv TCPAbortOnData TCPAbortOnClose TCPAbortOnMemory TCPAbortOnTim' [ 845.265487][T15185] fuse: Bad value for 'fd' [ 845.463116][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 845.773657][ T24] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 845.801264][ T24] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 845.867567][T15190] netlink: 'syz.1.2106': attribute type 10 has an invalid length. [ 845.877152][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 845.935955][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 846.018827][ T24] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 846.064576][ T24] usb 4-1: Product: syz [ 846.069495][ T24] usb 4-1: Manufacturer: syz [ 846.074551][ T24] usb 4-1: SerialNumber: syz [ 846.083516][ T24] usb 4-1: config 0 descriptor?? [ 846.090078][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 846.096281][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 846.112898][ T24] usb 4-1: selecting invalid altsetting 0 [ 846.475784][T15204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.597723][T15207] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2110'. [ 847.893327][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 847.899479][T15201] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 848.330905][T15201] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 848.338234][T15201] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 848.346669][T15201] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 848.352895][T15201] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 848.613339][ T5825] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 848.795606][ T5825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.827868][ T5825] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 848.865951][ T5825] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 848.963171][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.982652][ T5825] usb 3-1: config 0 descriptor?? [ 849.064219][ T5911] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 849.253734][T12625] usb 4-1: USB disconnect, device number 56 [ 849.338748][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.408507][ T5911] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 849.475743][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.578414][ T5911] usb 5-1: config 0 descriptor?? [ 849.597107][ T5911] usb 5-1: bad CDC descriptors [ 849.624002][T12625] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 849.735244][T15217] delete_channel: no stack [ 849.853090][T12625] usb 4-1: Using ep0 maxpacket: 32 [ 849.941477][T12625] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 849.956739][T12625] usb 4-1: config 0 has no interface number 0 [ 849.973158][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 849.979426][T12625] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 850.004406][T12625] usb 4-1: config 0 interface 85 has no altsetting 0 [ 850.015563][T12625] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 850.024950][T12625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.043186][T12625] usb 4-1: Product: syz [ 850.049882][T12625] usb 4-1: Manufacturer: syz [ 850.060473][T12625] usb 4-1: SerialNumber: syz [ 850.078745][T12625] usb 4-1: config 0 descriptor?? [ 850.373108][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 850.373166][T13410] Bluetooth: hci1: command 0x0406 tx timeout [ 850.383128][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 850.548298][ T5911] usb 3-1: USB disconnect, device number 48 [ 850.554360][T12625] appletouch 4-1:0.85: Geyser mode initialized. [ 850.585159][T12625] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input38 [ 850.736647][T12625] usb 4-1: USB disconnect, device number 57 [ 850.812850][T12625] appletouch 4-1:0.85: input: appletouch disconnected [ 850.953102][ T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 851.133158][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 851.169070][ T24] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 851.198207][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 851.206003][ T24] usb 2-1: can't read configurations, error -61 [ 851.357678][ T24] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 851.583165][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 851.593399][ T24] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 851.627110][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 851.637347][ T24] usb 2-1: can't read configurations, error -61 [ 851.646808][ T24] usb usb2-port1: attempt power cycle [ 851.913108][T12625] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 851.983227][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 852.073291][T12625] usb 4-1: Using ep0 maxpacket: 8 [ 852.102065][T12625] usb 4-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 852.159074][T12625] usb 4-1: config 0 has an invalid interface number: 224 but max is 189 [ 852.189403][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 852.206408][T12625] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 852.239254][T14622] usb 5-1: USB disconnect, device number 57 [ 852.289584][T12625] usb 4-1: config 0 has no interface number 0 [ 852.331276][T12625] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 852.387120][T12625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.403164][ T24] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 852.441099][T12625] usb 4-1: config 0 descriptor?? [ 852.474420][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 852.515350][ T24] usb 2-1: can't read configurations, error -61 [ 852.663131][ T24] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 853.133223][T15261] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2121'. [ 853.197536][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 853.226893][T15261] ip_vti0: entered promiscuous mode [ 853.245709][ T24] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 853.288817][T15261] ip_vti0: entered allmulticast mode [ 853.303785][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 853.335727][ T24] usb 2-1: can't read configurations, error -71 [ 853.362504][ T24] usb usb2-port1: unable to enumerate USB device [ 853.547332][T15259] xt_CT: No such helper "pptp" [ 854.895374][ T5825] usb 4-1: USB disconnect, device number 58 [ 855.124710][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 855.124723][ T30] audit: type=1326 audit(1761633098.666:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 855.153113][ C1] vkms_vblank_simulate: vblank timer overrun [ 855.180385][ T30] audit: type=1326 audit(1761633098.666:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 855.202734][ C1] vkms_vblank_simulate: vblank timer overrun [ 855.286999][ T30] audit: type=1326 audit(1761633098.766:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 855.433170][ T30] audit: type=1326 audit(1761633098.766:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 855.482396][T15297] program syz.1.2126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 855.510944][T15295] netlink: 'syz.2.2125': attribute type 10 has an invalid length. [ 855.539590][ T30] audit: type=1326 audit(1761633098.766:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 855.566792][ T30] audit: type=1326 audit(1761633098.776:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 855.602118][ T30] audit: type=1326 audit(1761633098.776:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 855.705636][ T30] audit: type=1326 audit(1761633098.776:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 855.763853][ T30] audit: type=1326 audit(1761633098.776:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 855.866930][ T30] audit: type=1326 audit(1761633098.776:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15280 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f62b8efc9 code=0x7ffc0000 [ 855.993290][ T5825] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 856.193382][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 856.206725][ T5825] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 856.233295][ T5825] usb 3-1: config 0 has no interface number 0 [ 856.384221][ T5825] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 856.393321][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.415602][ T5825] usb 3-1: Product: syz [ 856.430061][ T5825] usb 3-1: Manufacturer: syz [ 856.441162][ T5825] usb 3-1: SerialNumber: syz [ 856.459384][ T5825] usb 3-1: config 0 descriptor?? [ 856.480627][ T5825] ftdi_sio 3-1:0.217: FTDI USB Serial Device converter detected [ 856.505984][ T5825] usb 3-1: Detected SIO [ 856.519956][ T5825] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 856.845558][T15295] wg1: entered promiscuous mode [ 856.885195][T15295] wg1: entered allmulticast mode [ 857.599158][T15311] netlink: 'syz.3.2124': attribute type 10 has an invalid length. [ 858.643681][T15307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 858.653488][T15307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 858.666242][T15307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 858.679081][T15307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 858.691885][T15307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 858.719284][ T24] usb 3-1: USB disconnect, device number 49 [ 858.731216][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 858.749862][ T24] ftdi_sio 3-1:0.217: device disconnected [ 859.010801][T15322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 859.425133][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 859.533111][T12625] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 859.593402][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 859.909487][T12625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.948016][T12625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.986476][T12625] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 860.023409][T12625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.070328][T12625] usb 5-1: config 0 descriptor?? [ 860.530271][T12625] saitek 0003:06A3:0CFA.0008: unknown main item tag 0x0 [ 860.554519][T12625] saitek 0003:06A3:0CFA.0008: hidraw0: USB HID v0.00 Device [HID 06a3:0cfa] on usb-dummy_hcd.4-1/input0 [ 860.693327][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 860.699434][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 860.705909][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 860.773192][T13410] Bluetooth: hci4: command 0x0405 tx timeout [ 860.809447][ T5825] usb 5-1: USB disconnect, device number 58 [ 861.475911][T15352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 861.953383][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 862.164077][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.258002][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 862.377508][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 862.432526][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.505632][ T24] usb 5-1: config 0 descriptor?? [ 863.656177][T15388] netlink: 'syz.3.2143': attribute type 10 has an invalid length. [ 863.811528][T15386] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 863.814062][T15385] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 863.831671][T15386] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 863.838793][T15386] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 863.853740][T15386] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 864.032912][ T24] usb 5-1: USB disconnect, device number 59 [ 864.729213][T15392] geneve2: entered promiscuous mode [ 864.739472][T15392] geneve2: entered allmulticast mode [ 865.552198][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2148'. [ 865.734250][T13471] Bluetooth: hci0: command 0x0406 tx timeout [ 865.893325][T13471] Bluetooth: hci4: command 0x0405 tx timeout [ 865.899466][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 865.906617][T11226] Bluetooth: hci1: command 0x0406 tx timeout [ 865.912688][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 865.988589][T15386] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 868.073333][T13410] Bluetooth: hci4: command 0x0405 tx timeout [ 868.487083][T15436] kvm: apic: phys broadcast and lowest prio [ 868.753447][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 868.893150][ T10] usb 4-1: device descriptor read/64, error -71 [ 869.133117][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 869.283548][ T10] usb 4-1: device descriptor read/64, error -71 [ 869.425346][ T10] usb usb4-port1: attempt power cycle [ 869.652587][T15460] random: crng reseeded on system resumption [ 869.953113][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 870.023189][ T10] usb 4-1: device descriptor read/8, error -71 [ 870.075520][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.081941][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.263092][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 870.310396][ T10] usb 4-1: device descriptor read/8, error -71 [ 870.434424][ T10] usb usb4-port1: unable to enumerate USB device [ 870.492901][T15469] bridge2: entered promiscuous mode [ 870.523752][T15469] bridge2: entered allmulticast mode [ 870.549684][T15469] team0: Port device bridge2 added [ 870.569036][T15470] bridge0: port 3(team0) entered blocking state [ 870.578791][T15470] bridge0: port 3(team0) entered disabled state [ 870.578953][T15470] team0: entered allmulticast mode [ 870.633552][T15470] team_slave_0: entered allmulticast mode [ 870.666504][T15470] team_slave_1: entered allmulticast mode [ 870.672302][T15470] bridge0: entered allmulticast mode [ 870.780509][T15470] team0: left allmulticast mode [ 870.786515][T15470] team_slave_0: left allmulticast mode [ 870.787408][T15469] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 870.793572][T15470] team_slave_1: left allmulticast mode [ 870.851624][T15470] bridge0: left allmulticast mode [ 872.735179][T15495] trusted_key: encrypted_key: insufficient parameters specified [ 872.773322][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 872.865058][T15495] misc userio: No port type given on /dev/userio [ 872.974074][ T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 873.080819][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 873.114165][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 873.123418][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 873.139828][ T10] usb 5-1: Product: syz [ 873.164400][ T10] usb 5-1: Manufacturer: syz [ 873.174794][ T10] usb 5-1: SerialNumber: syz [ 873.214128][ T10] usb 5-1: config 0 descriptor?? [ 873.247528][ T10] usb 5-1: selecting invalid altsetting 0 [ 873.575525][T14622] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 873.783673][T14622] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.843073][T14622] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 873.875752][T14622] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 873.875774][T14622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.884450][T14622] usb 4-1: config 0 descriptor?? [ 873.908629][T14622] usb 5-1: USB disconnect, device number 60 [ 874.148988][T15510] netlink: 'syz.2.2166': attribute type 1 has an invalid length. [ 874.275674][T15513] netlink: 'syz.0.2168': attribute type 10 has an invalid length. [ 874.308559][T15510] bond0: entered promiscuous mode [ 874.320268][T15510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.790731][T15533] netlink: 'syz.2.2170': attribute type 15 has an invalid length. [ 875.799812][T15533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2170'. [ 876.410426][ T5911] usb 4-1: USB disconnect, device number 63 [ 879.452912][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 879.452928][ T30] audit: type=1326 audit(1761633122.986:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 879.481339][ C0] vkms_vblank_simulate: vblank timer overrun [ 879.675381][T15566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2177'. [ 879.733775][ T30] audit: type=1326 audit(1761633122.996:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 879.853186][ T30] audit: type=1326 audit(1761633122.996:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 879.878469][ T30] audit: type=1326 audit(1761633122.996:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 879.909768][ T30] audit: type=1326 audit(1761633122.996:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 879.932090][ C0] vkms_vblank_simulate: vblank timer overrun [ 880.113135][ T30] audit: type=1326 audit(1761633122.996:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 880.245145][ T30] audit: type=1326 audit(1761633122.996:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 880.277992][T15575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 880.345186][ T30] audit: type=1326 audit(1761633122.996:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.4.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd598efc9 code=0x7ffc0000 [ 880.778268][T15579] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 881.072062][T15579] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 881.121868][T15579] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 881.152232][T15579] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 882.118631][T12625] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 882.154485][T14622] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 882.313269][T12625] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.324981][T14622] usb 4-1: Using ep0 maxpacket: 16 [ 882.343191][T12625] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 882.356822][T14622] usb 4-1: config 0 has too many interfaces: 243, using maximum allowed: 32 [ 882.367089][T14622] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 243 [ 882.379067][T12625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.398827][T14622] usb 4-1: config 0 has no interface number 0 [ 882.405443][T12625] usb 5-1: config 0 descriptor?? [ 882.425050][T14622] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 882.436140][T12625] usb 5-1: bad CDC descriptors [ 882.454579][T14622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.491377][T14622] usb 4-1: Product: syz [ 882.502033][T14622] usb 4-1: Manufacturer: syz [ 882.512743][T14622] usb 4-1: SerialNumber: syz [ 882.534584][T14622] usb 4-1: config 0 descriptor?? [ 882.564756][T14622] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 883.253134][ C1] ------------[ cut here ]------------ [ 883.259195][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 883.265912][ C1] WARNING: CPU: 1 PID: 15593 at kernel/workqueue.c:2258 __queue_work+0xd38/0xfb0 [ 883.275009][ C1] Modules linked in: [ 883.279226][ C1] CPU: 1 UID: 0 PID: 15593 Comm: syz.4.2183 Not tainted syzkaller #0 PREEMPT(full) [ 883.288569][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 883.298603][ C1] RIP: 0010:__queue_work+0xd38/0xfb0 [ 883.303874][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 e3 ca 9b 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 eb 69 8b 4c 89 fa e8 b9 31 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 9a 15 36 00 90 0f 0b 90 e9 dd fc ff [ 883.323468][ C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010046 [ 883.329526][ C1] RAX: 562f6afeb4275900 RBX: 0000000000000100 RCX: ffff888075ac1e40 [ 883.337554][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 883.345614][ C1] RBP: 1ffff11004c51638 R08: ffff8880b8924293 R09: 1ffff11017124852 [ 883.353576][ C1] R10: dffffc0000000000 R11: ffffed1017124853 R12: dffffc0000000000 [ 883.361534][ C1] R13: ffff888032a90990 R14: 0000000000000008 R15: ffff88802628b178 [ 883.369488][ C1] FS: 00007fbdd68816c0(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 883.378396][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 883.384960][ C1] CR2: 00002000001e7030 CR3: 0000000052148000 CR4: 00000000003526f0 [ 883.392944][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 883.400905][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 883.408861][ C1] Call Trace: [ 883.412121][ C1] [ 883.414957][ C1] call_timer_fn+0x17e/0x5f0 [ 883.419527][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 883.425312][ C1] ? call_timer_fn+0xbe/0x5f0 [ 883.429980][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 883.435088][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 883.440275][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 883.446072][ C1] __run_timer_base+0x646/0x860 [ 883.450916][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 883.456272][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 883.462507][ C1] run_timer_softirq+0xb7/0x180 [ 883.467344][ C1] handle_softirqs+0x286/0x870 [ 883.472089][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 883.476833][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 883.482097][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 883.487283][ C1] __irq_exit_rcu+0xca/0x1f0 [ 883.491850][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 883.497030][ C1] irq_exit_rcu+0x9/0x30 [ 883.501249][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 883.506864][ C1] [ 883.509778][ C1] [ 883.512695][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 883.518655][ C1] RIP: 0010:smp_call_function_many_cond+0xfbd/0x12d0 [ 883.525309][ C1] Code: 0b 00 4d 89 fe 48 85 db 75 15 e8 ee 6c 0b 00 44 84 74 24 34 0f 85 7c fc ff ff e9 98 fe ff ff e8 d9 6c 0b 00 fb 44 84 74 24 34 <0f> 84 87 fe ff ff e9 61 fc ff ff e8 c3 6c 0b 00 44 84 74 24 34 0f [ 883.544891][ C1] RSP: 0018:ffffc90004376fc0 EFLAGS: 00000246 [ 883.550937][ C1] RAX: ffffffff81b49797 RBX: 0000000000000200 RCX: 0000000000080000 [ 883.558888][ C1] RDX: ffffc9000d9ef000 RSI: 000000000007ffff RDI: 0000000000080000 [ 883.566841][ C1] RBP: ffffc90004377140 R08: ffffffff8f7cd477 R09: 1ffffffff1ef9a8e [ 883.574796][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9a8f R12: ffff8880b893b240 [ 883.582753][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 883.590710][ C1] ? smp_call_function_many_cond+0xfb7/0x12d0 [ 883.596780][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 883.602137][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 883.607327][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 883.613733][ C1] ? try_charge_memcg+0x237/0x1280 [ 883.618833][ C1] ? rcu_is_watching+0x15/0xb0 [ 883.623591][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 883.628941][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 883.634117][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 883.639208][ C1] flush_tlb_mm_range+0x6b1/0x12d0 [ 883.644299][ C1] ? page_table_check_clear+0x187/0x700 [ 883.649829][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 883.655365][ C1] ? page_table_check_clear+0x187/0x700 [ 883.660893][ C1] ? page_table_check_clear+0x4f3/0x700 [ 883.666420][ C1] ? page_table_check_clear+0x187/0x700 [ 883.671947][ C1] ptep_clear_flush+0x120/0x170 [ 883.676782][ C1] do_wp_page+0x1bc2/0x5800 [ 883.681269][ C1] ? do_wp_page+0x161d/0x5800 [ 883.685926][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 883.690754][ C1] ? do_raw_spin_lock+0x121/0x290 [ 883.695758][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 883.701114][ C1] __handle_mm_fault+0x1033/0x5400 [ 883.706217][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 883.711694][ C1] ? find_vma+0xe7/0x160 [ 883.715923][ C1] ? __pfx_find_vma+0x10/0x10 [ 883.720581][ C1] handle_mm_fault+0x40a/0x8e0 [ 883.725327][ C1] do_user_addr_fault+0x764/0x1380 [ 883.730422][ C1] exc_page_fault+0x82/0x100 [ 883.735007][ C1] asm_exc_page_fault+0x26/0x30 [ 883.739849][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 883.745553][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 07 68 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 883.765145][ C1] RSP: 0018:ffffc900043778b8 EFLAGS: 00050202 [ 883.771192][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000001e7030 [ 883.779141][ C1] RDX: ffff888075ac1e40 RSI: 0000000000000002 RDI: 00000000ffffffff [ 883.787096][ C1] RBP: ffffc90004377a30 R08: ffffc90004377667 R09: 1ffff9200086eecc [ 883.795048][ C1] R10: dffffc0000000000 R11: fffff5200086eecd R12: 0000000000000002 [ 883.802999][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 00002000001e7000 [ 883.810979][ C1] ____sys_recvmsg+0x2ab/0x460 [ 883.815733][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 883.821003][ C1] ? import_iovec+0x74/0xa0 [ 883.825486][ C1] ___sys_recvmsg+0x1b5/0x510 [ 883.830143][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 883.835331][ C1] ? __might_fault+0xb0/0x130 [ 883.839990][ C1] do_recvmmsg+0x307/0x770 [ 883.844398][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 883.849320][ C1] ? count_memcg_event_mm+0x21/0x260 [ 883.854597][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 883.859604][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 883.865126][ C1] ? do_syscall_64+0xbe/0xfa0 [ 883.869785][ C1] do_syscall_64+0xfa/0xfa0 [ 883.874264][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.879442][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.885486][ C1] ? clear_bhb_loop+0x60/0xb0 [ 883.890141][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.896008][ C1] RIP: 0033:0x7fbdd598efc9 [ 883.900404][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.919990][ C1] RSP: 002b:00007fbdd6881038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 883.928385][ C1] RAX: ffffffffffffffda RBX: 00007fbdd5be6090 RCX: 00007fbdd598efc9 [ 883.936335][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 883.944284][ C1] RBP: 00007fbdd5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 883.952230][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 883.960176][ C1] R13: 00007fbdd5be6128 R14: 00007fbdd5be6090 R15: 00007fbdd5d0fa28 [ 883.968137][ C1] [ 883.971136][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 883.978391][ C1] CPU: 1 UID: 0 PID: 15593 Comm: syz.4.2183 Not tainted syzkaller #0 PREEMPT(full) [ 883.987735][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 883.997768][ C1] Call Trace: [ 884.001028][ C1] [ 884.003853][ C1] dump_stack_lvl+0x99/0x250 [ 884.008429][ C1] ? __asan_memcpy+0x40/0x70 [ 884.013013][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 884.018201][ C1] ? __pfx__printk+0x10/0x10 [ 884.022770][ C1] vpanic+0x237/0x6d0 [ 884.026735][ C1] ? __pfx_vpanic+0x10/0x10 [ 884.031222][ C1] panic+0xb9/0xc0 [ 884.034923][ C1] ? __pfx_panic+0x10/0x10 [ 884.039358][ C1] __warn+0x31b/0x4b0 [ 884.043330][ C1] ? __queue_work+0xd38/0xfb0 [ 884.047983][ C1] ? __queue_work+0xd38/0xfb0 [ 884.052635][ C1] report_bug+0x2be/0x4f0 [ 884.056946][ C1] ? __queue_work+0xd38/0xfb0 [ 884.061614][ C1] ? __queue_work+0xd38/0xfb0 [ 884.066271][ C1] ? __queue_work+0xd3a/0xfb0 [ 884.070925][ C1] handle_bug+0x84/0x160 [ 884.075148][ C1] exc_invalid_op+0x1a/0x50 [ 884.079632][ C1] asm_exc_invalid_op+0x1a/0x20 [ 884.084459][ C1] RIP: 0010:__queue_work+0xd38/0xfb0 [ 884.089727][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 e3 ca 9b 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 eb 69 8b 4c 89 fa e8 b9 31 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 9a 15 36 00 90 0f 0b 90 e9 dd fc ff [ 884.109312][ C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010046 [ 884.115362][ C1] RAX: 562f6afeb4275900 RBX: 0000000000000100 RCX: ffff888075ac1e40 [ 884.123310][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 884.131256][ C1] RBP: 1ffff11004c51638 R08: ffff8880b8924293 R09: 1ffff11017124852 [ 884.139200][ C1] R10: dffffc0000000000 R11: ffffed1017124853 R12: dffffc0000000000 [ 884.147147][ C1] R13: ffff888032a90990 R14: 0000000000000008 R15: ffff88802628b178 [ 884.155112][ C1] call_timer_fn+0x17e/0x5f0 [ 884.159693][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 884.165476][ C1] ? call_timer_fn+0xbe/0x5f0 [ 884.170125][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 884.175214][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 884.180393][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 884.186179][ C1] __run_timer_base+0x646/0x860 [ 884.191017][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 884.196370][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 884.202601][ C1] run_timer_softirq+0xb7/0x180 [ 884.207437][ C1] handle_softirqs+0x286/0x870 [ 884.212180][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 884.216924][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 884.222186][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 884.227363][ C1] __irq_exit_rcu+0xca/0x1f0 [ 884.231927][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 884.237105][ C1] irq_exit_rcu+0x9/0x30 [ 884.241320][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 884.246931][ C1] [ 884.249837][ C1] [ 884.252747][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 884.258702][ C1] RIP: 0010:smp_call_function_many_cond+0xfbd/0x12d0 [ 884.265358][ C1] Code: 0b 00 4d 89 fe 48 85 db 75 15 e8 ee 6c 0b 00 44 84 74 24 34 0f 85 7c fc ff ff e9 98 fe ff ff e8 d9 6c 0b 00 fb 44 84 74 24 34 <0f> 84 87 fe ff ff e9 61 fc ff ff e8 c3 6c 0b 00 44 84 74 24 34 0f [ 884.284939][ C1] RSP: 0018:ffffc90004376fc0 EFLAGS: 00000246 [ 884.290984][ C1] RAX: ffffffff81b49797 RBX: 0000000000000200 RCX: 0000000000080000 [ 884.298932][ C1] RDX: ffffc9000d9ef000 RSI: 000000000007ffff RDI: 0000000000080000 [ 884.306881][ C1] RBP: ffffc90004377140 R08: ffffffff8f7cd477 R09: 1ffffffff1ef9a8e [ 884.314832][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9a8f R12: ffff8880b893b240 [ 884.322779][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 884.330735][ C1] ? smp_call_function_many_cond+0xfb7/0x12d0 [ 884.336791][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 884.342151][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 884.347333][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 884.353642][ C1] ? try_charge_memcg+0x237/0x1280 [ 884.358741][ C1] ? rcu_is_watching+0x15/0xb0 [ 884.363482][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 884.368835][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 884.374011][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 884.379102][ C1] flush_tlb_mm_range+0x6b1/0x12d0 [ 884.384192][ C1] ? page_table_check_clear+0x187/0x700 [ 884.389721][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 884.395246][ C1] ? page_table_check_clear+0x187/0x700 [ 884.400783][ C1] ? page_table_check_clear+0x4f3/0x700 [ 884.406309][ C1] ? page_table_check_clear+0x187/0x700 [ 884.411838][ C1] ptep_clear_flush+0x120/0x170 [ 884.416672][ C1] do_wp_page+0x1bc2/0x5800 [ 884.421159][ C1] ? do_wp_page+0x161d/0x5800 [ 884.425822][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 884.430667][ C1] ? do_raw_spin_lock+0x121/0x290 [ 884.435672][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 884.441026][ C1] __handle_mm_fault+0x1033/0x5400 [ 884.446126][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 884.451576][ C1] ? find_vma+0xe7/0x160 [ 884.455798][ C1] ? __pfx_find_vma+0x10/0x10 [ 884.460457][ C1] handle_mm_fault+0x40a/0x8e0 [ 884.465214][ C1] do_user_addr_fault+0x764/0x1380 [ 884.470310][ C1] exc_page_fault+0x82/0x100 [ 884.474895][ C1] asm_exc_page_fault+0x26/0x30 [ 884.479724][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 884.485430][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 07 68 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 884.505014][ C1] RSP: 0018:ffffc900043778b8 EFLAGS: 00050202 [ 884.511060][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000001e7030 [ 884.519010][ C1] RDX: ffff888075ac1e40 RSI: 0000000000000002 RDI: 00000000ffffffff [ 884.526958][ C1] RBP: ffffc90004377a30 R08: ffffc90004377667 R09: 1ffff9200086eecc [ 884.534909][ C1] R10: dffffc0000000000 R11: fffff5200086eecd R12: 0000000000000002 [ 884.542859][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 00002000001e7000 [ 884.550817][ C1] ____sys_recvmsg+0x2ab/0x460 [ 884.555567][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 884.560842][ C1] ? import_iovec+0x74/0xa0 [ 884.565332][ C1] ___sys_recvmsg+0x1b5/0x510 [ 884.569994][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 884.575184][ C1] ? __might_fault+0xb0/0x130 [ 884.579846][ C1] do_recvmmsg+0x307/0x770 [ 884.584247][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 884.589195][ C1] ? count_memcg_event_mm+0x21/0x260 [ 884.594468][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 884.599476][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 884.605001][ C1] ? do_syscall_64+0xbe/0xfa0 [ 884.609661][ C1] do_syscall_64+0xfa/0xfa0 [ 884.614141][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 884.619318][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.625360][ C1] ? clear_bhb_loop+0x60/0xb0 [ 884.630017][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.635886][ C1] RIP: 0033:0x7fbdd598efc9 [ 884.640279][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.659861][ C1] RSP: 002b:00007fbdd6881038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 884.668257][ C1] RAX: ffffffffffffffda RBX: 00007fbdd5be6090 RCX: 00007fbdd598efc9 [ 884.676205][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 884.684155][ C1] RBP: 00007fbdd5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 884.692104][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 884.700053][ C1] R13: 00007fbdd5be6128 R14: 00007fbdd5be6090 R15: 00007fbdd5d0fa28 [ 884.708020][ C1] [ 884.711285][ C1] Kernel Offset: disabled [ 884.715597][ C1] Rebooting in 86400 seconds..