last executing test programs: 17.936713706s ago: executing program 0 (id=1027): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r2, &(0x7f0000000380)=""/55, 0x37) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x400, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x3) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r4, 0x0, 0x0, 'syz1\x00', 0x0}) futex(0x0, 0x4, 0xffffffbe, 0x0, 0x0, 0x4000001) close(r3) socket$inet6_udplite(0xa, 0x2, 0x88) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r6, &(0x7f00000002c0)=""/4096, 0x1000) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x48000000, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000001380)="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") ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000280)) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x800) 17.715260327s ago: executing program 4 (id=1028): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x2e, &(0x7f0000000d80)=[{&(0x7f00000000c0)="8871a32229de4e63129dff0e8b9ada9ee6f0c1de74", 0x15}], 0x1}, 0x240480c3) fchmod(r2, 0x140) r3 = dup(r2) write$binfmt_elf32(r2, &(0x7f00000006c0)=ANY=[], 0x5c) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x80800) syz_usb_connect(0x0, 0x172, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e6bef1403c419681e01f0000000109026001010000000009049a0000020600000724060000ba4f05240004000d240f"], 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) r5 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5}, [@selector_unit={0x5, 0x24, 0x5, 0x4, 0xfe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xf, 0x4, 0x80, "29b104d95b829e8153"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x2, 0x1001}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x55, 0xfff8, 0x6, "b1739e85f877"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0x2, 0x52, {0x7, 0x25, 0x1, 0x3, 0x40, 0x8cf9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc0, 0x9, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xd, 0x7, 0x1, {0x7, 0x25, 0x1, 0x81, 0x9, 0xb0}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x3, 0x8, 0x9, 0x20, 0xcf}, 0x105, &(0x7f0000000500)={0x5, 0xf, 0x105, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0xbb, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x2b24, 0xf007, 0x1, [0x3f00]}, @generic={0xce, 0x10, 0x4, "4a7ffd36f8326ae46c84e082cc7d0e7254f6bd47ffedeec08db10e4ca7519aade4ed2f898667fbde0283c207595e9a21642224c683889c55bfbb78a4b17dc3141430878cce4982087dd836fda8637b0ae7786924340470cdef73c0740e6b180ab85441a11f9fdc3c5594df2f6d20d4fb479e6ea298a8f09a73d1238ee39faf40c00a33756c9639fbd31e332a5ed0aeaf7ff9bdf0879efbb9576ccb0d23d788c42fd1210289a080ec2bf9e8bf16eeb563642c1b7b32ca772dd5ec2158227ad40b8d6513ce8069764c46a532"}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0xfe, 0xf78f, 0x5, [0xffc00f, 0xed39adc8f6fc5d7b, 0xff7e3f]}]}, 0x3, [{0xda, &(0x7f0000000640)=@string={0xda, 0x3, "f8488d5e87174f87a0a08069af913a9bb04f5a300a62737de6c1a619c393c31e61fa8f0e065ca569cb4bb6f3a964d0ef63ad3ff8b7c497a0a009278b3f8d21418df8b8ecac04e038287e6ae22d1aec8122df463fef6a8bddcb6593af395e3cdb86d29c180a0b33f7fc073adec71897b602861015fdd204d4c23a626cb8e8f1bdddf4845379eb6ea81503314fb844ffcdbe35ce76554f7394867038642ab39559bd958b2f6569959530f8917321e03e59544f95372d5ce77db9000e03eb83ba87d512f39ccfb9d9ceaebb579740ba5f0145d687ca2b7abe1a"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x81d}}, {0x32, &(0x7f0000000340)=@string={0x32, 0x3, "ddc277ebb3abe8762aa0be4798305ff6c8d70cd7a742b40e26a1f1d169efc95f6bbbe49160da6f466d70f46d5900d45c"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000840)={0xc, &(0x7f0000000780)={0x40, 0xb, 0x75, {0x75, 0x1, "04e845909b5177c3eb6b551cbe39a625660243e95e8ed055cfe579bc062a198e5ee7081479ff1ad24fdaa00a865ae9ce67b204d2dd0b1d6f442938a5d911cead0291e81b4c8e1df8542b8419dc1e1f647f88d68361cf9570ed002f749008b97d3de66e66dd86d7647e5203ef6b83a3c3eab722"}}, &(0x7f0000000900)={0x0, 0x3, 0x93, @string={0x93, 0x3, "ef4b509611032908e155c527667d4b782adfa529a0c9a66527ac1db45c8d7ead65e6dcdce13ba987adfea4db2652e336ca2494e9abf0b144f8182ce558e905ec767f8fdfeb368075ed5667bcc6b399003c4bf74111fc44ab093493dfd592981f77cedb72750f846e71aed75be591ce4662ee938eac46fe1b9771b3377d911636a65e8fc3a24cc4e74205bc2234da8822d7"}}}, &(0x7f0000000d40)={0x24, &(0x7f0000000b40)={0x20, 0xf, 0xc6, "2b347d3a57fa1d7d896cc75eb899b1a702e4b537ae864e5f6b57fc140e27131bdd382721d5e28a6ee81bb36318a7cdbf9e5a43084d8eb56fa9ababaf0fad7ef3e3398a758187eab0367c80e732bef81e2cf8e73927a859866572adf4fec7655d363eaff44bbccc41559950eb1876bc73f32e9259d62e627796d9423f91a1ae3819648335139d26a703842c3f44d3b7e39d93ab37eab09e1b9d164096ef62b81ad636afb6933cfeae2201fd3c17faa48db87c41c5f324655b6fe4a0a1ebc17a5c3ec965a6e18d"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000a00)={0x20, 0x81, 0x1, '+'}, &(0x7f0000000c40)={0x20, 0x82, 0x1, "f4"}, &(0x7f0000000c80)={0x20, 0x83, 0x3, "856a16"}, &(0x7f0000000cc0)={0x20, 0x84, 0x1, 'h'}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "d0b57d"}}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 14.485067655s ago: executing program 3 (id=1031): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r7, 0x4b63, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000400)='cubic', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONCLEX(r8, 0x5450) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 14.167111463s ago: executing program 0 (id=1032): syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1f, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r5, 0x4, 0x2) getdents64(r5, 0xffffffffffffffff, 0x43) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) 13.914222364s ago: executing program 4 (id=1033): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 12.710607862s ago: executing program 2 (id=1035): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) mq_notify(0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="318325bd700000000000190000000c0001800800030005"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_clone(0x2044100, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r7, &(0x7f0000000540)=r8, 0x12) socket(0x400000000010, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r5}, 0x10) 12.14636217s ago: executing program 0 (id=1036): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0x0, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x4001, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xa8) syz_usb_connect(0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}}) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x1) 12.073290633s ago: executing program 1 (id=1037): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) flistxattr(r2, &(0x7f0000000000)=""/12, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x48850, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040600) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000005c0)={0x6, {{0xa, 0x4e20, 0xfffffffe, @mcast1={0xff, 0x7}, 0xf}}, {{0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4000}}}, 0x108) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000100), &(0x7f00000001c0)=0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r4, &(0x7f00000009c0)=[{&(0x7f00000006c0)="1d4ac370cf8c47025bd7a6546c8bd229bbf8fa504cc3774c0f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f50aa794861c0296ca92cb6c", 0x45}, {&(0x7f0000000800)}, {&(0x7f0000000b40)}, {&(0x7f0000004480)}], 0x4) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000480)={0x3, 0x0, [{0xb, 0x8, 0x0, 0x10001, 0x7ffffdff, 0x8015, 0xffff}, {0x80000000, 0x802bb, 0x1, 0xd, 0x66, 0x7ff, 0x400}, {0x80000001, 0x7ff, 0x0, 0x6, 0x7, 0x9}]}) 10.466759898s ago: executing program 2 (id=1038): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1c", 0x1, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 10.466481778s ago: executing program 3 (id=1040): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000001280)}], 0x2}, 0x800) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, 0x0) msgget$private(0x0, 0x40) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0), 0x2) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) 9.523353116s ago: executing program 1 (id=1041): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) r5 = socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)=0xffffffff) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000002, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x460, 0x98, 0x160, 0x160, 0x0, 0x220, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x0, 0x40}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@private=0xa010102, @multicast1, 0xffffffff, 0xff000000, 'veth1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0xff, 0x1, 0xc}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0xffff]}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x36, 0x0, 0x0) 9.316598765s ago: executing program 4 (id=1042): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4800) r2 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/10, 0xa}, 0x40000010) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000080)={0x1, 0xfeac, 0x5, 0x1, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, r4, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x18, "4375bcc9835c999774a850934bd962ae997357675d13aa96"}}) 8.463869385s ago: executing program 3 (id=1043): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002000)=@delchain={0x720, 0x65, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x4, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x6f4, 0x2, [@TCA_BPF_ACT={0x6f0, 0x1, [@m_ct={0xdc, 0x14, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xd5d}, @TCA_CT_LABELS={0x14, 0x7, "e854db7f0821775e9f164cc0fa7bc897"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x1c}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010101}]}, {0x6c, 0x6, "6f9abbfcbfaa7c47e717330134a419e9602444c9619b94a15e9adc81d22bde7cb51b16949b7d79bc03c6deb503d9426acacfbe08411bae56434b8cca075b95d18338f87be666e4696cb05bc378edf38d27876b76963216a8688ee989c435854c468090685c40f99f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0xc8, 0x20, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0xffe4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10000, 0x2, 0x7, 0x7, 0x81}}]}, {0x7a, 0x6, "89567701773dac07134fe898d4d0e81f76b1b1bd7289595596bc64f9d52d71f4b03aa995bf86853d9466436841017cc28292c1e3fd3b8aad5680c5ebf60213250870ab7db64ebc900fdba53f02872ad65ee854dc595de4fc0531255cb4ff394ea9a11e47670c839c410afb666c7e011966febf9b0965"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x198, 0x2, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x761, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x43b, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1d9}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2457, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xbbb, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x7f, 0x4, 0x9, 0x8000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xeb0, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1431}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9a, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x86f2, 0xffffffffffffffff, 0xb3, 0x10001}}]}, {0xdc, 0x6, "9f838a295276cf6196dcde692bfd4c4fef49e58d3d7bc9af81030b1273dced6bbb547410766b14368fbaa79aa37bdbdb5ed2bacb4b875c57a43794b242f879ab7c11364530e40ef351aa87e785280cdc57f69314585d75698c7706cbcd0a99cb42257e4ea7efcf23ff4e73bde047bab139c278b23a2a45f3dd992da9b7436c631b31215c1f3ca57d9c30b82ac402f24dfe2311df53efe01674cf7ee9753759a7c3f0e3f1c9088133f34fca779974d5445048b2dcc43513c74e73903e5125b55e1976e078010773d91902323419d3a30a66b6025e42102bc8"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x19c, 0x1a, 0x0, 0x0, {{0x7}, {0x108, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd7, 0x6, {0x41d9, 'filter\x00', 0x15, 0x8, "ad30ba43f9ee58967f0cdcd89238a821a55a3e84404a08bcee4c1d50caf10cfb96cbd6ce9a9a11c24e7bb5f919a5db5acf17bf83ba446b760b17292a759b5b8018e87abdad24a544a51652b3826f04206b60c22aa50520a3935e360b049a9c4dff9bf649e7674ab99ddd29048bcffe699ab510f08ca119dc766e855167aae836a727599ff026e9058397fa141873b2096287723c0773820529c4d23460c81d9b8ea404b866687c1de2bc0ea6c6"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x70, 0x6, "436c7b9b2b763fc5853da960ac5b40e4f7cfd40a509be1a57897267990972af818e429cbe72a69e0429d9d42f8917bdafbe4c87ba4890abcc6615f270e8be5a4eef42eaf5afbc41a30c1b07aa03a6ccdbed06437dff481a47b5272596c28f013b4958b65632eed0ae4221a6c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x110, 0x5, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xa655, 0x1, 0x8, 0xfffffffe, 0x3}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7fffffff, 0x20000000, 0x2, 0x80}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x83, 0x6, "1c3f4746b930f82a24f4b5b93c1f1dbd2c6016b83fe59a0acee850ad77fd9fac5f2b70541cb6a0752cab4e7d054b7e7e02cb1ae78f1a636d435b4cf4a93a5b4c3d7034f3db5a25db914ec0acd26ac30a35d4d50bea45d0a23269a47e49773fe0fd1a091d7e3c0916dfbbd41395449db08a0aa63ea2a2fd314a028e250e425d"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x104, 0x4, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x7}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010100}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_ACTION={0x6}]}, {0xba, 0x6, "6623ed5c41614838f9502bd51209c712e6adb247e94685638b74b611187102b33a5c5e2ce3018dab66f2c1afa122e7f1334b190703369872ed0914e07abc8e1c3a161a120ec3d1d8924986440f8beb6d53a728ef6c200aaf9fb8704565d18c02f6719c3c07811c75459080ddba5fecda4d6d3163d567cc2b8288a7155e694ade5da7bac1349b91b9b6b8db10e827ba47d1089dcab18916eef08353be9d59175bdd0e652462b692215c7e9d07b3c61bbd3deb5b152e14"}, {0xc, 0x7, {0x0, 0x1d1759bfc4039248}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x720}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0x6c2) msgsnd(r5, &(0x7f0000000340)={0x3}, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) readv(r6, &(0x7f0000000000)=[{&(0x7f0000000100)=""/73, 0x49}], 0x1) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', 0x0, 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@loopback, @in=@empty}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe4) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x55, 0xfffffffc) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0xffffffffffffffb6) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 8.045426613s ago: executing program 0 (id=1044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6.344927758s ago: executing program 2 (id=1045): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001e40), 0x0, 0x100, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0x6e, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'lblcr\x00', 0xa, 0xfffffffc, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]}) sendfile(r8, r8, 0x0, 0x2000fb) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 6.247832907s ago: executing program 4 (id=1046): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r3, 0x1, &(0x7f00000000c0), &(0x7f0000000040)) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f0102030109021200010000"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 6.188865149s ago: executing program 3 (id=1047): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x39c, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2d4, 0x2d4, 0x2d4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xfc, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'team0\x00', {0x6d, 0x6, 0x81, 0x9, 0x8, 0xf, 0x5, 0x20, 0x80}, {0x7}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@dscp={{0x24}, {0x4, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x40c) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000001680)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x800007, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x38c, 0xffffffff, 0x268, 0x0, 0x268, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @remote, [0xffffffff, 0xff, 0xff, 0xff], [0xff000000, 0xff000000, 0xff], 'netdevsim0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0xd, 0x0, 0x2}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x1, 0x1, [0x6, 0x47de, 0x5, 0x3, 0x20, 0xe000, 0x0, 0x5400, 0x1222, 0x1, 0x7, 0x40, 0x8, 0x400, 0x3, 0x400], 0xb}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xf6fa, 'syz1\x00', {0xab7}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e8) mremap(&(0x7f0000c04000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000680)) 5.919495777s ago: executing program 1 (id=1048): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0xa78ec515a42c1b00, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) semctl$SETVAL(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x3) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x14) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) r4 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)=']{-*\'\\\x00', 0x0) r5 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000005a00)=[{{&(0x7f0000001540)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@multicast2]}]}}}], 0x18}}], 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) writev(r2, &(0x7f0000000100), 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220500000083"], 0x0}, 0x0) io_submit(r0, 0x0, 0x0) 4.285866229s ago: executing program 0 (id=1049): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_get$uid(0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040082}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x18, r6, 0xef5ebf77ce25880d, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) 4.285506378s ago: executing program 3 (id=1050): socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, 0x0, 0x8d0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003800800024000000000"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) io_setup(0x1, &(0x7f00000016c0)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) io_getevents(r4, 0x99, 0x0, &(0x7f0000000200), &(0x7f0000000180)={r5, r6+60000000}) clock_getres(0xeaffffff, 0x0) r7 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r10, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r7, 0x46f3, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r11, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) 4.258794054s ago: executing program 2 (id=1051): socket$nl_generic(0x10, 0x3, 0x10) keyctl$get_persistent(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) unshare(0x28040680) r2 = timerfd_create(0x0, 0x0) timerfd_gettime(r2, &(0x7f0000000200)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r4) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f00000003c0)={0x0, 0xa6, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.244986586s ago: executing program 1 (id=1052): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x40006) r4 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7) fcntl$addseals(r4, 0x409, 0xe) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000810) read$FUSE(r5, &(0x7f0000000240)={0x2020}, 0x2020) epoll_wait(r5, 0x0, 0x0, 0x8) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 2.305721713s ago: executing program 2 (id=1053): socket(0x200000000000011, 0x2, 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 2.116330879s ago: executing program 4 (id=1054): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0xff4, &(0x7f0000001840)=""/4084, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) sendto$inet6(r2, &(0x7f0000000140)='A', 0x1, 0x340c8890, &(0x7f000005ffe4)={0xa, 0x0, 0x9, @loopback, 0x1}, 0x1c) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0)) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, &(0x7f0000000180), 0xfe) 2.052770091s ago: executing program 1 (id=1055): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r7 = io_uring_setup(0x7da, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 14.734371ms ago: executing program 1 (id=1056): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1c", 0x1, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 14.403487ms ago: executing program 2 (id=1057): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000002c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 1.180481ms ago: executing program 4 (id=1058): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002000)=@delchain={0x720, 0x65, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x4, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x6f4, 0x2, [@TCA_BPF_ACT={0x6f0, 0x1, [@m_ct={0xdc, 0x14, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xd5d}, @TCA_CT_LABELS={0x14, 0x7, "e854db7f0821775e9f164cc0fa7bc897"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x1c}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010101}]}, {0x6c, 0x6, "6f9abbfcbfaa7c47e717330134a419e9602444c9619b94a15e9adc81d22bde7cb51b16949b7d79bc03c6deb503d9426acacfbe08411bae56434b8cca075b95d18338f87be666e4696cb05bc378edf38d27876b76963216a8688ee989c435854c468090685c40f99f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0xc8, 0x20, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0xffe4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10000, 0x2, 0x7, 0x7, 0x81}}]}, {0x7a, 0x6, "89567701773dac07134fe898d4d0e81f76b1b1bd7289595596bc64f9d52d71f4b03aa995bf86853d9466436841017cc28292c1e3fd3b8aad5680c5ebf60213250870ab7db64ebc900fdba53f02872ad65ee854dc595de4fc0531255cb4ff394ea9a11e47670c839c410afb666c7e011966febf9b0965"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x198, 0x2, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x761, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x43b, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1d9}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2457, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xbbb, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x7f, 0x4, 0x9, 0x8000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xeb0, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1431}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9a, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x86f2, 0xffffffffffffffff, 0xb3, 0x10001}}]}, {0xdc, 0x6, "9f838a295276cf6196dcde692bfd4c4fef49e58d3d7bc9af81030b1273dced6bbb547410766b14368fbaa79aa37bdbdb5ed2bacb4b875c57a43794b242f879ab7c11364530e40ef351aa87e785280cdc57f69314585d75698c7706cbcd0a99cb42257e4ea7efcf23ff4e73bde047bab139c278b23a2a45f3dd992da9b7436c631b31215c1f3ca57d9c30b82ac402f24dfe2311df53efe01674cf7ee9753759a7c3f0e3f1c9088133f34fca779974d5445048b2dcc43513c74e73903e5125b55e1976e078010773d91902323419d3a30a66b6025e42102bc8"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x19c, 0x1a, 0x0, 0x0, {{0x7}, {0x108, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd7, 0x6, {0x41d9, 'filter\x00', 0x15, 0x8, "ad30ba43f9ee58967f0cdcd89238a821a55a3e84404a08bcee4c1d50caf10cfb96cbd6ce9a9a11c24e7bb5f919a5db5acf17bf83ba446b760b17292a759b5b8018e87abdad24a544a51652b3826f04206b60c22aa50520a3935e360b049a9c4dff9bf649e7674ab99ddd29048bcffe699ab510f08ca119dc766e855167aae836a727599ff026e9058397fa141873b2096287723c0773820529c4d23460c81d9b8ea404b866687c1de2bc0ea6c6"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x70, 0x6, "436c7b9b2b763fc5853da960ac5b40e4f7cfd40a509be1a57897267990972af818e429cbe72a69e0429d9d42f8917bdafbe4c87ba4890abcc6615f270e8be5a4eef42eaf5afbc41a30c1b07aa03a6ccdbed06437dff481a47b5272596c28f013b4958b65632eed0ae4221a6c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x110, 0x5, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xa655, 0x1, 0x8, 0xfffffffe, 0x3}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7fffffff, 0x20000000, 0x2, 0x80}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x83, 0x6, "1c3f4746b930f82a24f4b5b93c1f1dbd2c6016b83fe59a0acee850ad77fd9fac5f2b70541cb6a0752cab4e7d054b7e7e02cb1ae78f1a636d435b4cf4a93a5b4c3d7034f3db5a25db914ec0acd26ac30a35d4d50bea45d0a23269a47e49773fe0fd1a091d7e3c0916dfbbd41395449db08a0aa63ea2a2fd314a028e250e425d"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x104, 0x4, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x7}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010100}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_ACTION={0x6}]}, {0xba, 0x6, "6623ed5c41614838f9502bd51209c712e6adb247e94685638b74b611187102b33a5c5e2ce3018dab66f2c1afa122e7f1334b190703369872ed0914e07abc8e1c3a161a120ec3d1d8924986440f8beb6d53a728ef6c200aaf9fb8704565d18c02f6719c3c07811c75459080ddba5fecda4d6d3163d567cc2b8288a7155e694ade5da7bac1349b91b9b6b8db10e827ba47d1089dcab18916eef08353be9d59175bdd0e652462b692215c7e9d07b3c61bbd3deb5b152e14"}, {0xc, 0x7, {0x0, 0x1d1759bfc4039248}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x720}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0x6c2) msgsnd(r5, &(0x7f0000000340)={0x3}, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) readv(r6, &(0x7f0000000000)=[{&(0x7f0000000100)=""/73, 0x49}], 0x1) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', 0x0, 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@loopback, @in=@empty}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe4) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x55, 0xfffffffc) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0xffffffffffffffb6) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 263.019µs ago: executing program 0 (id=1066): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x20, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x4e24, 0x2, @remote, 0x3}}}, 0x104) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r3, &(0x7f0000000180), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}}, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xfffff) 0s ago: executing program 3 (id=1059): modify_ldt$write(0x1, &(0x7f0000000280)={0x1001, 0x20001000, 0x2000}, 0x10) modify_ldt$read(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x4846c2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): hreads [ 246.296423][ T1152] vhci_hcd vhci_hcd.3: release socket [ 246.308162][ T9] usb 40-1: SetAddress Request (2) to port 0 [ 246.318334][ T9] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 246.336773][ T1152] vhci_hcd vhci_hcd.3: disconnect device [ 246.367273][ T9] usb 40-1: enqueue for inactive port 0 [ 246.378525][ T7306] netlink: 'syz.0.293': attribute type 1 has an invalid length. [ 246.460887][ T7311] misc userio: Invalid payload size [ 246.617198][ T7306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.686824][ T7312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.694229][ T7312] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 246.776950][ T9] usb usb40-port1: attempt power cycle [ 246.829796][ T7312] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 247.130890][ T7316] gretap1: entered promiscuous mode [ 247.379163][ T7316] bond1: (slave gretap1): making interface the new active one [ 247.406313][ T7316] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 247.571620][ T9] usb usb40-port1: unable to enumerate USB device [ 247.904562][ T7323] macvlan2: entered promiscuous mode [ 247.945748][ T7323] macvlan2: entered allmulticast mode [ 248.362995][ T7323] bond1: entered promiscuous mode [ 248.406672][ T7323] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 248.499346][ T7327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.294'. [ 248.499929][ T7323] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 248.663278][ T7323] bond1: left promiscuous mode [ 249.196452][ T5916] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 249.225794][ T29] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 249.375647][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 249.384494][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.398551][ T5916] usb 3-1: config 0 has no interfaces? [ 249.405850][ T29] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 249.415632][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.480703][ T29] usb 2-1: config 0 has no interface number 0 [ 249.487940][ T29] usb 2-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 249.503690][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.514522][ T5916] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 249.524618][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.534348][ T5916] usb 3-1: Product: syz [ 249.541451][ T29] usb 2-1: config 0 descriptor?? [ 249.546976][ T5916] usb 3-1: Manufacturer: syz [ 249.602965][ T29] qmi_wwan 2-1:0.154: bogus CDC Union: master=0, slave=0 [ 249.610277][ T5916] usb 3-1: SerialNumber: syz [ 249.630142][ T29] qmi_wwan 2-1:0.154: probe with driver qmi_wwan failed with error -22 [ 249.639623][ T5916] usb 3-1: config 0 descriptor?? [ 249.874029][ T7338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.943331][ T7338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.985181][ T9] usb 2-1: USB disconnect, device number 11 [ 251.718279][ T5920] usb 3-1: USB disconnect, device number 20 [ 251.799327][ T7364] netlink: 'syz.1.301': attribute type 4 has an invalid length. [ 254.002083][ T7395] pim6reg: entered allmulticast mode [ 254.028315][ T7395] pim6reg: left allmulticast mode [ 254.714873][ T7398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 256.185643][ T5916] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 256.574705][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 256.623717][ T5916] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 256.686597][ T5916] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 256.715946][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.819463][ T5916] usb 5-1: Product: syz [ 256.878684][ T5916] usb 5-1: Manufacturer: syz [ 256.904467][ T5916] usb 5-1: SerialNumber: syz [ 256.957303][ T5916] usb 5-1: config 0 descriptor?? [ 259.732760][ T29] usb 5-1: USB disconnect, device number 22 [ 260.736481][ T5908] IPVS: starting estimator thread 0... [ 260.876213][ T7451] IPVS: using max 32 ests per chain, 76800 per kthread [ 260.969582][ T7453] vlan2: entered promiscuous mode [ 261.043717][ T7457] delete_channel: no stack [ 261.055813][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.062462][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.070825][ T7453] bridge0: entered promiscuous mode [ 261.755685][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 263.064524][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.324'. [ 263.596883][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 263.638203][ T7477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.325'. [ 265.265691][ T5916] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 265.481743][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 265.548173][ T5916] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 265.676663][ T5916] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 265.742412][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.797135][ T5916] usb 3-1: Product: syz [ 265.860624][ T5916] usb 3-1: Manufacturer: syz [ 265.895949][ T5916] usb 3-1: SerialNumber: syz [ 265.933284][ T5916] usb 3-1: config 0 descriptor?? [ 268.639135][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.335'. [ 269.079225][ T9] usb 3-1: USB disconnect, device number 21 [ 269.282477][ T9] IPVS: starting estimator thread 0... [ 269.298420][ T5908] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 269.314354][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'. [ 269.395888][ T7534] IPVS: using max 28 ests per chain, 67200 per kthread [ 269.506163][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 269.527553][ T5908] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 269.539737][ T5908] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.550805][ T5908] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.561879][ T5908] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.572059][ T5908] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.587033][ T5908] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.596276][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.842556][ T5908] usb 4-1: GET_CAPABILITIES returned 0 [ 269.905877][ T5908] usbtmc 4-1:16.0: can't read capabilities [ 273.091045][ T5908] usb 4-1: USB disconnect, device number 5 [ 273.941677][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 273.950963][ T7580] netlink: 'syz.1.346': attribute type 12 has an invalid length. [ 273.965337][ T7580] netlink: 'syz.1.346': attribute type 13 has an invalid length. [ 274.157263][ T7580] vxlan0: entered promiscuous mode [ 274.321225][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.415816][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.433065][ T60] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.487711][ T60] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.508324][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'. [ 275.735638][ T29] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 275.911463][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.924569][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.957660][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 275.971696][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.989926][ T29] usb 5-1: config 0 descriptor?? [ 276.516171][ T29] logitech-djreceiver 0003:046D:C71F.0008: unknown main item tag 0x7 [ 276.560779][ T29] logitech-djreceiver 0003:046D:C71F.0008: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 276.715060][ T7593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.756142][ T7593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.822035][ T29] usb 5-1: USB disconnect, device number 23 [ 276.989517][ T7607] fido_id[7607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 278.209891][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'. [ 278.814416][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 279.035764][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 279.063306][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 279.098288][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 279.176597][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 279.314307][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 279.334054][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.353091][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 279.375207][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.417375][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 279.663935][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'. [ 279.744478][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 279.753794][ T9] usbtmc 5-1:16.0: can't read capabilities [ 280.592109][ T1014] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.707271][ T1014] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.970777][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'. [ 280.979874][ T5893] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 280.987753][ T7656] netlink: 'syz.0.363': attribute type 12 has an invalid length. [ 281.016778][ T7656] netlink: 'syz.0.363': attribute type 13 has an invalid length. [ 281.156753][ T5893] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 281.231477][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.245688][ T5893] usb 4-1: Product: syz [ 281.251709][ T5893] usb 4-1: Manufacturer: syz [ 281.277430][ T5893] usb 4-1: SerialNumber: syz [ 281.367372][ T7656] vxlan0: entered promiscuous mode [ 281.377987][ T37] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.411376][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.433058][ T5893] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 281.489520][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.497483][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 281.547970][ T1014] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.460451][ T29] usb 5-1: USB disconnect, device number 24 [ 282.575810][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 282.583572][ T9] ath9k_htc: Failed to initialize the device [ 282.760434][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 283.300116][ T29] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 283.594425][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 283.621333][ T5919] usb 4-1: USB disconnect, device number 6 [ 283.758923][ T29] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.790187][ T29] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 283.799587][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.916677][ T29] usb 5-1: Product: syz [ 283.925816][ T5908] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 283.978719][ T29] usb 5-1: Manufacturer: syz [ 283.992445][ T29] usb 5-1: SerialNumber: syz [ 284.013696][ T29] usb 5-1: config 0 descriptor?? [ 284.151315][ T5908] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 284.240226][ T5908] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 284.471907][ T5908] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 284.504655][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.761888][ T5908] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.145258][ T5877] udevd[5877]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 285.163566][ T5908] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 285.187029][ T5877] udevd[5877]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 285.731249][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'. [ 286.158151][ T9] usb 5-1: USB disconnect, device number 25 [ 286.475153][ T7699] macsec1: entered promiscuous mode [ 286.489386][ T7668] delete_channel: no stack [ 286.493931][ T9] usb 2-1: USB disconnect, device number 12 [ 286.504831][ T7699] macvlan0: entered promiscuous mode [ 286.531769][ T7699] macvlan0: left promiscuous mode [ 290.875736][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 291.054745][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 291.087645][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 291.096127][ T9] usb 3-1: config 0 has no interface number 0 [ 291.103120][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 291.125946][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 291.170046][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 291.192556][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'. [ 291.203639][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 291.227283][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 291.257341][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.298953][ T9] usb 3-1: Product: syz [ 291.343960][ T9] usb 3-1: Manufacturer: syz [ 291.348764][ T9] usb 3-1: SerialNumber: syz [ 291.487035][ T9] usb 3-1: config 0 descriptor?? [ 291.532586][ T7732] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 291.541842][ T7732] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 291.705791][ T29] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 292.076941][ T7753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 292.085096][ T7753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 292.094094][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 292.134891][ T29] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 292.177270][ T29] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 292.240613][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.355920][ T29] usb 4-1: Product: syz [ 292.372158][ T29] usb 4-1: Manufacturer: syz [ 292.381517][ T29] usb 4-1: SerialNumber: syz [ 292.412781][ T29] usb 4-1: config 0 descriptor?? [ 292.606774][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32 [ 293.065818][ T7719] syz.0.378 (7719): drop_caches: 2 [ 294.126406][ T29] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 294.617926][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.635833][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 294.670239][ T29] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 294.692982][ T5908] usb 4-1: USB disconnect, device number 7 [ 294.946070][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.996443][ T29] usb 2-1: config 0 descriptor?? [ 295.037556][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 295.067061][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 295.124500][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 295.172769][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 295.213532][ T29] usb 2-1: media controller created [ 295.229604][ T7762] dibusb: i2c wr: len=8192 is too big! [ 295.229604][ T7762] [ 295.252932][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.323638][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 295.344676][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 295.394000][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 295.617446][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 295.637294][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 295.795975][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 295.801883][ T29] dvb-usb: error while querying for an remote control event. [ 295.975769][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 295.981692][ T29] dvb-usb: error while querying for an remote control event. [ 296.024333][ T24] usb 3-1: USB disconnect, device number 22 [ 296.254715][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 296.274178][ T29] dvb-usb: error while querying for an remote control event. [ 296.282281][ T5908] usb 2-1: USB disconnect, device number 13 [ 296.439970][ T5908] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 297.897273][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 298.055656][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 298.499488][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.525830][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.537702][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.396'. [ 298.605720][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 298.648170][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.697684][ T9] usb 5-1: config 0 descriptor?? [ 299.201679][ T9] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x7 [ 299.242287][ T9] logitech-djreceiver 0003:046D:C71F.0009: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 299.490835][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.569506][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.668504][ T5908] usb 5-1: USB disconnect, device number 26 [ 299.704701][ T7814] fido_id[7814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C71F.0009/report_descriptor': No such file or directory [ 299.821850][ T7822] netlink: 52 bytes leftover after parsing attributes in process `syz.1.399'. [ 299.882112][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'. [ 299.924247][ T29] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 300.171057][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 300.183469][ T29] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 300.225244][ T29] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 300.315677][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.339422][ T29] usb 4-1: Product: syz [ 300.343671][ T29] usb 4-1: Manufacturer: syz [ 300.408090][ T29] usb 4-1: SerialNumber: syz [ 300.486423][ T29] usb 4-1: config 0 descriptor?? [ 302.182466][ T7844] loop6: detected capacity change from 0 to 524288000 [ 302.505811][ T7845] support for the xor transformation has been removed. [ 302.834864][ T24] usb 4-1: USB disconnect, device number 8 [ 303.166761][ T7849] vivid-002: disconnect [ 303.990931][ T7846] vivid-002: reconnect [ 304.065767][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.406'. [ 304.175723][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 304.363655][ T7859] vlan3: entered promiscuous mode [ 304.390771][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 304.401909][ T7859] bridge_slave_1: left allmulticast mode [ 304.418085][ T7859] bridge_slave_1: left promiscuous mode [ 304.424799][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.457551][ T24] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 304.466071][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.476467][ T24] usb 2-1: config 0 has no interface number 0 [ 304.482654][ T24] usb 2-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 304.523266][ T7859] bridge_slave_0: left allmulticast mode [ 304.529189][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.553824][ T24] usb 2-1: config 0 descriptor?? [ 304.583886][ T24] qmi_wwan 2-1:0.154: bogus CDC Union: master=0, slave=0 [ 304.585986][ T7859] bridge_slave_0: left promiscuous mode [ 304.598208][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.649190][ T24] qmi_wwan 2-1:0.154: probe with driver qmi_wwan failed with error -22 [ 304.850914][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.861816][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.880633][ T5908] usb 2-1: USB disconnect, device number 14 [ 305.157675][ T7868] usb usb8: usbfs: process 7868 (syz.0.418) did not claim interface 0 before use [ 305.252333][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 305.924516][ T24] usb 4-1: config 0 has an invalid interface number: 154 but max is 0 [ 305.935727][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.946362][ T24] usb 4-1: config 0 has no interface number 0 [ 305.952530][ T24] usb 4-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 305.972108][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.006388][ T24] usb 4-1: config 0 descriptor?? [ 306.068862][ T24] qmi_wwan 4-1:0.154: bogus CDC Union: master=0, slave=0 [ 306.186141][ T24] qmi_wwan 4-1:0.154: probe with driver qmi_wwan failed with error -22 [ 306.275501][ T7867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.307359][ T7867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.511687][ T5916] usb 4-1: USB disconnect, device number 9 [ 309.022859][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.415'. [ 309.875609][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 310.987838][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.995731][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.344836][ T7938] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 311.527447][ T7947] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 311.579883][ T7938] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 311.588765][ T7938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.599685][ T7938] usb 5-1: config 0 has no interface number 0 [ 311.614887][ T7926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.627268][ T7938] usb 5-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 311.676097][ T7926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.695742][ T7938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.719523][ T7947] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 311.733799][ T7938] usb 5-1: config 0 descriptor?? [ 311.736944][ T7947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.769167][ T7947] usb 3-1: config 0 has no interface number 0 [ 311.782230][ T7938] qmi_wwan 5-1:0.154: bogus CDC Union: master=0, slave=0 [ 311.788762][ T7947] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 311.815158][ T7938] qmi_wwan 5-1:0.154: probe with driver qmi_wwan failed with error -22 [ 312.037783][ T7930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.126026][ T7947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.162205][ T7930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.182324][ T7947] usb 3-1: config 0 descriptor?? [ 312.201933][ T7938] usb 5-1: USB disconnect, device number 27 [ 312.211821][ T7947] qmi_wwan 3-1:0.154: bogus CDC Union: master=0, slave=0 [ 312.235283][ T7947] qmi_wwan 3-1:0.154: probe with driver qmi_wwan failed with error -22 [ 312.415826][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.445976][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.467334][ T5920] usb 3-1: USB disconnect, device number 23 [ 312.627648][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.656242][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.689381][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.706817][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.738359][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.764255][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.810384][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.840119][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.628316][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 314.003501][ T24] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 314.011879][ T7936] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 314.095654][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.180031][ T24] usb 2-1: config 0 has no interface number 0 [ 314.196949][ T24] usb 2-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 314.219839][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.245833][ T24] usb 2-1: config 0 descriptor?? [ 314.256835][ T24] qmi_wwan 2-1:0.154: bogus CDC Union: master=0, slave=0 [ 314.264500][ T24] qmi_wwan 2-1:0.154: probe with driver qmi_wwan failed with error -22 [ 314.318038][ T7936] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 314.331770][ T7936] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 314.376312][ T7936] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 314.396946][ T7936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.445262][ T7936] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 314.476137][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.550988][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.602356][ T29] usb 2-1: USB disconnect, device number 15 [ 314.692555][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.709338][ T7936] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 315.421165][ T7986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'. [ 317.745898][ T8014] tap0: tun_chr_ioctl cmd 1074025677 [ 317.751734][ T8014] tap0: linktype set to 825 [ 317.872320][ T7936] usb 5-1: USB disconnect, device number 28 [ 317.888140][ T7969] delete_channel: no stack [ 319.192805][ T8030] mmap: syz.0.438 (8030) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 320.205730][ T7936] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 320.803299][ T7936] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 320.813377][ T7936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.866449][ T7936] usb 5-1: config 0 has no interface number 0 [ 320.876103][ T7936] usb 5-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 320.886161][ T7936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.939901][ T7936] usb 5-1: config 0 descriptor?? [ 321.065289][ T7936] qmi_wwan 5-1:0.154: bogus CDC Union: master=0, slave=0 [ 321.102583][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 321.125949][ T7936] qmi_wwan 5-1:0.154: probe with driver qmi_wwan failed with error -22 [ 321.314222][ T8037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.377102][ T8037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.415384][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 321.463856][ T29] usb 5-1: USB disconnect, device number 29 [ 322.159340][ T8053] batadv0: entered promiscuous mode [ 322.171754][ T8053] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 322.503005][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.509794][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.627098][ T8077] fuse: Bad value for 'fd' [ 325.832317][ T8086] IPVS: Error connecting to the multicast addr [ 326.731369][ T7956] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 326.760759][ T8100] netlink: 52 bytes leftover after parsing attributes in process `syz.0.451'. [ 326.790551][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.451'. [ 326.915655][ T7956] usb 4-1: Using ep0 maxpacket: 8 [ 327.493424][ T7956] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 327.516019][ T7956] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.603201][ T7956] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.634556][ T7956] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.658818][ T7956] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.808353][ T7956] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 327.837255][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 327.841056][ T7956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.682949][ T8118] usbtmc 4-1:16.0: simple usb_control_msg returned 0 [ 328.852103][ T8126] tipc: Started in network mode [ 328.857167][ T8126] tipc: Node identity 7f000001, cluster identity 4711 [ 328.864082][ T8126] tipc: Enabling of bearer rejected, failed to enable media [ 328.937053][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 328.937074][ T30] audit: type=1326 audit(1770780840.513:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 329.002708][ T8128] vhci_hcd vhci_hcd.0: port 0 already used [ 329.008761][ T30] audit: type=1326 audit(1770780840.513:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 329.008823][ T30] audit: type=1326 audit(1770780840.513:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 329.116094][ T8127] netlink: 'syz.2.458': attribute type 21 has an invalid length. [ 329.124367][ T8127] netlink: 128 bytes leftover after parsing attributes in process `syz.2.458'. [ 329.169654][ T8127] netlink: 'syz.2.458': attribute type 4 has an invalid length. [ 329.177502][ T8127] netlink: 3 bytes leftover after parsing attributes in process `syz.2.458'. [ 329.335705][ T30] audit: type=1326 audit(1770780840.513:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 329.436694][ T30] audit: type=1326 audit(1770780840.523:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 329.542767][ T30] audit: type=1326 audit(1770780840.523:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 329.673546][ T30] audit: type=1326 audit(1770780840.523:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 329.795684][ T30] audit: type=1326 audit(1770780840.523:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf719572b code=0x7ffc0000 [ 329.832191][ T30] audit: type=1326 audit(1770780840.523:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf719572b code=0x7ffc0000 [ 329.924891][ T30] audit: type=1326 audit(1770780840.523:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf719572b code=0x7ffc0000 [ 330.682388][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 331.644225][ T8161] netlink: 132 bytes leftover after parsing attributes in process `syz.3.465'. [ 332.126471][ T8163] usb usb8: usbfs: process 8163 (syz.2.464) did not claim interface 0 before use [ 332.711602][ T8164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.728567][ T8164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.078111][ T8168] tipc: Enabling of bearer rejected, failed to enable media [ 334.754469][ T8186] fuse: Bad value for 'fd' [ 336.358045][ T8197] netlink: 'syz.4.472': attribute type 25 has an invalid length. [ 336.412683][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.474'. [ 336.795403][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.846138][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.045226][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 338.915688][ T7950] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 338.927145][ T8222] syz.4.479 (8222): drop_caches: 2 [ 339.087851][ T7950] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 339.125842][ T7950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.166833][ T7950] usb 2-1: config 0 has no interface number 0 [ 339.185678][ T7950] usb 2-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 339.226909][ T7950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.256646][ T7950] usb 2-1: config 0 descriptor?? [ 339.283482][ T7950] qmi_wwan 2-1:0.154: bogus CDC Union: master=0, slave=0 [ 339.323258][ T7950] qmi_wwan 2-1:0.154: probe with driver qmi_wwan failed with error -22 [ 339.575027][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.629093][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.661924][ T29] usb 2-1: USB disconnect, device number 16 [ 341.323790][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 342.706475][ T8261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.718490][ T8261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.285631][ T7950] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 343.489861][ T7950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.516956][ T7950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.561338][ T7950] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 343.591812][ T7950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.642623][ T7950] usb 2-1: config 0 descriptor?? [ 343.690835][ T8274] batadv0: entered promiscuous mode [ 343.697140][ T8274] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 344.484467][ T7950] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x7 [ 344.554119][ T7950] logitech-djreceiver 0003:046D:C71F.000A: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 344.687401][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.696870][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.717479][ T29] usb 2-1: USB disconnect, device number 17 [ 344.941343][ T8283] loop6: detected capacity change from 0 to 524288000 [ 345.236007][ T8282] support for the xor transformation has been removed. [ 345.973071][ T7936] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 346.137603][ T7936] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 346.154744][ T7936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.235826][ T5929] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 346.245879][ T7936] usb 2-1: config 0 has no interface number 0 [ 346.264025][ T7936] usb 2-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 346.288210][ T7936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.324840][ T7936] usb 2-1: config 0 descriptor?? [ 346.348315][ T7936] qmi_wwan 2-1:0.154: bogus CDC Union: master=0, slave=0 [ 346.389753][ T7936] qmi_wwan 2-1:0.154: probe with driver qmi_wwan failed with error -22 [ 346.454206][ T5929] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 346.474892][ T5929] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 346.491428][ T5929] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 346.500871][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.571261][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.636103][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.833803][ T7950] usb 2-1: USB disconnect, device number 18 [ 346.972639][ T5929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.145702][ T8289] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 347.230623][ T5929] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 347.782204][ T8302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'. [ 349.183296][ T8313] syz.1.510 (8313): drop_caches: 2 [ 350.002421][ T8288] delete_channel: no stack [ 350.013206][ T29] usb 3-1: USB disconnect, device number 24 [ 352.721017][ T8347] batadv0: entered promiscuous mode [ 352.727006][ T8347] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 354.673551][ T8359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.728513][ T8359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.808893][ T8359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.126379][ T8359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.391719][ T8367] input: syz1 as /devices/virtual/input/input17 [ 357.214106][ T8377] usb usb8: usbfs: process 8377 (syz.2.512) did not claim interface 0 before use [ 357.265746][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 357.265763][ T30] audit: type=1400 audit(1770780868.883:176): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=8374 comm="syz.2.512" [ 357.532783][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 359.807407][ T8417] netlink: 132 bytes leftover after parsing attributes in process `syz.4.521'. [ 363.209573][ T8443] batadv0: entered promiscuous mode [ 363.216873][ T8443] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 367.918706][ T8489] netlink: 132 bytes leftover after parsing attributes in process `syz.2.534'. [ 369.391451][ T8499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.411584][ T8499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.840772][ T8498] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 371.457682][ T7948] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 371.619914][ T7948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 371.628708][ T7948] usb 5-1: can't read configurations, error -61 [ 371.815828][ T7948] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 372.061319][ T7948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 372.125726][ T7948] usb 5-1: can't read configurations, error -61 [ 372.224682][ T7948] usb usb5-port1: attempt power cycle [ 372.705644][ T7948] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 372.738390][ T7948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 372.751681][ T7948] usb 5-1: can't read configurations, error -61 [ 372.818164][ T8497] delete_channel: no stack [ 373.033886][ T30] audit: type=1800 audit(1770780884.703:177): pid=8533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.544" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 373.125797][ T7950] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 373.348570][ T7950] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 373.357435][ T7950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.368527][ T7950] usb 3-1: config 0 has no interface number 0 [ 373.375246][ T7950] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 373.461591][ T7950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.516446][ T7950] usb 3-1: config 0 descriptor?? [ 373.544275][ T7950] qmi_wwan 3-1:0.154: bogus CDC Union: master=0, slave=0 [ 373.555925][ T7950] qmi_wwan 3-1:0.154: probe with driver qmi_wwan failed with error -22 [ 373.941223][ T8524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.010869][ T5929] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 374.028010][ T8524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.121179][ T7936] usb 3-1: USB disconnect, device number 25 [ 374.206854][ T5929] usb 2-1: device descriptor read/64, error -71 [ 374.497367][ T5929] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 374.727114][ T8550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.806665][ T8550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.911584][ T8550] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 374.918249][ T8550] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 374.930207][ T8550] vhci_hcd vhci_hcd.0: Device attached [ 374.944128][ T8550] vhci_hcd vhci_hcd.0: port 0 already used [ 374.962102][ T8551] vhci_hcd: connection closed [ 374.965926][ T37] vhci_hcd vhci_hcd.3: stop threads [ 374.996026][ T37] vhci_hcd vhci_hcd.3: release socket [ 375.001640][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 375.217765][ T8556] netlink: 56 bytes leftover after parsing attributes in process `syz.2.551'. [ 375.418604][ T8561] netlink: 132 bytes leftover after parsing attributes in process `syz.0.550'. [ 375.555700][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 375.735948][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 375.746054][ T24] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 375.754306][ T24] usb 3-1: config 0 has no interface number 0 [ 375.760702][ T24] usb 3-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.978606][ T24] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 375.998282][ T24] usb 3-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 376.017961][ T24] usb 3-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 376.043560][ T24] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 376.332268][ T24] usb 3-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.362301][ T24] usb 3-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 376.376081][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.865679][ T24] usb 3-1: Product: syz [ 376.874124][ T24] usb 3-1: Manufacturer: syz [ 376.895819][ T24] usb 3-1: SerialNumber: syz [ 376.928270][ T24] usb 3-1: config 0 descriptor?? [ 376.956112][ T8556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 376.963458][ T8556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 377.010048][ T24] ipaq 3-1:0.19: PocketPC PDA converter detected [ 377.055997][ T24] usb 3-1: active config #0 != 1 ?? [ 377.255962][ T24] usb 3-1: USB disconnect, device number 26 [ 378.354585][ T8587] tipc: Started in network mode [ 378.359781][ T8587] tipc: Node identity 7f000001, cluster identity 4711 [ 378.370249][ T8587] tipc: Enabling of bearer rejected, failed to enable media [ 378.443994][ T30] audit: type=1326 audit(1770780890.003:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 378.718491][ T30] audit: type=1326 audit(1770780890.003:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 378.775823][ T30] audit: type=1326 audit(1770780890.013:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 379.061299][ T30] audit: type=1326 audit(1770780890.013:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 379.112740][ T30] audit: type=1326 audit(1770780890.013:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 379.362262][ T30] audit: type=1326 audit(1770780890.013:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 379.464010][ T30] audit: type=1326 audit(1770780890.013:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 379.495223][ T30] audit: type=1326 audit(1770780890.013:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 379.695877][ T30] audit: type=1326 audit(1770780890.023:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 379.847643][ T30] audit: type=1326 audit(1770780890.023:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8577 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 380.702411][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 380.916323][ T7948] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 380.985608][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 381.085940][ T7948] usb 3-1: Using ep0 maxpacket: 16 [ 381.103497][ T7948] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.115375][ T7948] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 381.129814][ T7948] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 381.160907][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 381.247000][ T24] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 381.293730][ T7948] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 381.357280][ T7948] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 381.402392][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 381.488685][ T7948] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 381.499459][ T7948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 381.680198][ T7948] usb 3-1: SerialNumber: syz [ 381.689701][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.818171][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 381.995696][ T7950] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 382.004779][ T8600] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 382.038432][ T24] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 382.082232][ T8599] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 382.167683][ T7948] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 382.293835][ T7948] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 382.415717][ T7950] usb 2-1: Using ep0 maxpacket: 16 [ 382.442091][ T7950] usb 2-1: config 0 has no interfaces? [ 382.501897][ T7950] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 382.707370][ T7950] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 382.750433][ T7950] usb 2-1: Manufacturer: syz [ 382.795299][ T7950] usb 2-1: config 0 descriptor?? [ 383.874146][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 383.933860][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.940990][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.083487][ T24] usb 3-1: USB disconnect, device number 27 [ 384.119318][ T8597] delete_channel: no stack [ 384.128780][ T29] usb 5-1: USB disconnect, device number 34 [ 384.715601][ T7950] usb 2-1: USB disconnect, device number 21 [ 385.435812][ T8641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.565'. [ 386.281680][ T8618] netlink: 'syz.3.560': attribute type 33 has an invalid length. [ 386.289626][ T8618] netlink: 51 bytes leftover after parsing attributes in process `syz.3.560'. [ 386.435682][ T7950] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 387.447529][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'. [ 387.735877][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 387.889194][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.901318][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.941769][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 387.977708][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.010023][ T24] usb 3-1: config 0 descriptor?? [ 388.338318][ T8663] fuse: Bad value for 'fd' [ 388.466982][ T24] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x7 [ 388.615660][ T24] logitech-djreceiver 0003:046D:C71F.000B: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 388.661148][ T8658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.691841][ T8658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.745423][ T24] usb 3-1: USB disconnect, device number 28 [ 389.212674][ T8667] fido_id[8667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 390.098032][ T8679] tipc: Started in network mode [ 390.124241][ T8679] tipc: Node identity 7f000001, cluster identity 4711 [ 390.137364][ T8679] tipc: Enabled bearer , priority 10 [ 391.095675][ T7950] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 391.326452][ T24] tipc: Node number set to 2130706433 [ 391.552216][ T7950] usb 2-1: Using ep0 maxpacket: 16 [ 391.707704][ T7950] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.778702][ T8690] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 391.825652][ T7950] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 391.882055][ T7950] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 391.920663][ T7950] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 392.107739][ T7950] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 392.324441][ T7950] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 392.354601][ T7950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 392.413136][ T7950] usb 2-1: SerialNumber: syz [ 393.726042][ T8678] delete_channel: no stack [ 393.958197][ T7950] usb 2-1: can't set config #1, error -71 [ 393.978449][ T7950] usb 2-1: USB disconnect, device number 22 [ 394.298519][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'. [ 395.278871][ T8727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.289848][ T8727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.516467][ T29] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 396.692691][ T8741] netlink: 56 bytes leftover after parsing attributes in process `syz.4.589'. [ 396.705692][ T29] usb 3-1: device descriptor read/64, error -71 [ 397.025173][ T29] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 397.225601][ T29] usb 3-1: device descriptor read/64, error -71 [ 397.252401][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 397.380633][ T29] usb usb3-port1: attempt power cycle [ 397.465551][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 397.768188][ T24] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 397.847266][ T24] usb 5-1: config 0 has no interface number 0 [ 397.853655][ T24] usb 5-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 397.865955][ T24] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 397.878714][ T24] usb 5-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 397.892803][ T24] usb 5-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 397.909241][ T24] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 397.926602][ T24] usb 5-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.007160][ T24] usb 5-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 398.020095][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.032894][ T24] usb 5-1: Product: syz [ 398.047565][ T24] usb 5-1: Manufacturer: syz [ 398.061273][ T24] usb 5-1: SerialNumber: syz [ 398.075643][ T24] usb 5-1: config 0 descriptor?? [ 398.084435][ T8741] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 398.111140][ T8741] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 398.146763][ T24] ipaq 5-1:0.19: PocketPC PDA converter detected [ 398.176106][ T24] usb 5-1: active config #0 != 1 ?? [ 398.185719][ T29] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 398.265958][ T29] usb 3-1: device descriptor read/8, error -71 [ 398.402253][ T7956] usb 5-1: USB disconnect, device number 36 [ 398.557892][ T29] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 398.607866][ T29] usb 3-1: device descriptor read/8, error -71 [ 398.765650][ T29] usb usb3-port1: unable to enumerate USB device [ 398.781148][ T8757] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 398.801885][ T8757] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 398.817752][ T8757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.448621][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 400.448645][ T30] audit: type=1326 audit(1770780911.993:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.0.593" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x0 [ 400.850444][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 404.204188][ T8804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.600'. [ 404.221934][ T8804] netlink: 48 bytes leftover after parsing attributes in process `syz.1.600'. [ 407.202007][ T8834] usb usb8: usbfs: process 8834 (syz.1.608) did not claim interface 0 before use [ 407.237156][ T30] audit: type=1400 audit(1770780918.873:215): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=8822 comm="syz.1.608" [ 407.735956][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'. [ 407.853698][ T8835] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 409.818033][ T8865] capability: warning: `syz.4.617' uses deprecated v2 capabilities in a way that may be insecure [ 410.379627][ T8866] netlink: 28 bytes leftover after parsing attributes in process `syz.3.616'. [ 411.446564][ T8877] netlink: 'syz.3.619': attribute type 10 has an invalid length. [ 411.476669][ T8877] veth0_vlan: entered allmulticast mode [ 411.572805][ T8877] veth0_vlan: left promiscuous mode [ 411.591129][ T8877] veth0_vlan: entered promiscuous mode [ 411.645133][ T8877] team0: Device veth0_vlan failed to register rx_handler [ 411.983677][ T8887] futex_wake_op: syz.1.621 tries to shift op by -1; fix this program [ 413.075627][ T7936] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 413.324156][ T7936] usb 5-1: Using ep0 maxpacket: 16 [ 413.582483][ T7936] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 413.602906][ T7936] usb 5-1: config 0 has no interface number 0 [ 413.615589][ T7936] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.671039][ T7936] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.695617][ T7936] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 413.733977][ T7936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.768114][ T7936] usb 5-1: config 0 descriptor?? [ 413.865512][ T8896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.623'. [ 414.199662][ T8903] syz_tun: entered allmulticast mode [ 414.223180][ T8903] pimreg: entered allmulticast mode [ 414.523588][ T7936] usbhid 5-1:0.1: can't add hid device: -71 [ 414.550981][ T7936] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 414.614808][ T7936] usb 5-1: USB disconnect, device number 37 [ 417.115865][ T8934] F2FS-fs: Conflicting test_dummy_encryption options [ 419.761272][ T8954] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 421.605660][ T7956] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 421.654275][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.640'. [ 421.920239][ T7956] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 421.930546][ T7956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.974100][ T7956] usb 3-1: Product: syz [ 421.979110][ T7956] usb 3-1: Manufacturer: syz [ 421.990908][ T7956] usb 3-1: SerialNumber: syz [ 422.009788][ T7956] usb 3-1: config 0 descriptor?? [ 422.291237][ T7956] usb 3-1: USB disconnect, device number 33 [ 422.424920][ T7950] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 422.666459][ T7950] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 425.715596][ T7950] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 426.041208][ T7950] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 426.055631][ T7950] usb 2-1: config 0 has no interface number 0 [ 426.095782][ T7950] usb 2-1: config 0 interface 113 has no altsetting 0 [ 426.183010][ T7950] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 426.202706][ T7950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.225575][ T7950] usb 2-1: Product: syz [ 426.229909][ T7950] usb 2-1: Manufacturer: syz [ 426.258408][ T7950] usb 2-1: SerialNumber: syz [ 426.315247][ T7950] usb 2-1: config 0 descriptor?? [ 426.448373][ T7950] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 426.570893][ T7936] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 426.838881][ T7936] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 426.869577][ T7936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.894618][ T7936] usb 3-1: config 0 has no interface number 0 [ 427.445692][ T7936] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 427.490219][ T7936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.600798][ T7936] usb 3-1: config 0 descriptor?? [ 427.624993][ T7936] qmi_wwan 3-1:0.154: bogus CDC Union: master=0, slave=0 [ 427.632581][ T7936] qmi_wwan 3-1:0.154: probe with driver qmi_wwan failed with error -22 [ 427.989231][ T9013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.071377][ T9013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.149710][ T7950] usb 3-1: USB disconnect, device number 34 [ 428.273953][ T7936] usb 2-1: USB disconnect, device number 23 [ 428.946394][ T30] audit: type=1326 audit(1770780940.623:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 429.077315][ T30] audit: type=1326 audit(1770780940.643:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 429.281773][ T30] audit: type=1326 audit(1770780940.643:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 429.306225][ T30] audit: type=1326 audit(1770780940.643:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 429.329396][ T30] audit: type=1326 audit(1770780940.643:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 429.352984][ T30] audit: type=1326 audit(1770780940.653:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 429.378069][ T30] audit: type=1326 audit(1770780940.653:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 429.400650][ T30] audit: type=1326 audit(1770780940.653:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf718572b code=0x7ffc0000 [ 429.488709][ T30] audit: type=1326 audit(1770780940.653:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 429.515770][ T30] audit: type=1326 audit(1770780940.653:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 431.363360][ T9071] bond0: entered promiscuous mode [ 431.385663][ T9071] bond_slave_0: entered promiscuous mode [ 431.391628][ T9071] bond_slave_1: entered promiscuous mode [ 431.436497][ T9071] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 431.476162][ T9071] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 431.494767][ T9073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.176624][ T7950] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 432.477240][ T7950] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 432.530113][ T7950] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.655550][ T7950] usb 5-1: config 0 has no interface number 0 [ 432.682316][ T7950] usb 5-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 432.702281][ T7950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.747025][ T7950] usb 5-1: config 0 descriptor?? [ 432.769131][ T7950] qmi_wwan 5-1:0.154: bogus CDC Union: master=0, slave=0 [ 432.795297][ T7950] qmi_wwan 5-1:0.154: probe with driver qmi_wwan failed with error -22 [ 433.266961][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.328492][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.473078][ T5929] usb 5-1: USB disconnect, device number 38 [ 433.838993][ T7950] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 434.215682][ T7950] usb 3-1: Using ep0 maxpacket: 16 [ 434.244008][ T7950] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 434.252346][ T7950] usb 3-1: config 0 has no interface number 0 [ 434.277493][ T7950] usb 3-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 434.306845][ T7950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.339285][ T7950] usb 3-1: Product: syz [ 434.357731][ T7950] usb 3-1: Manufacturer: syz [ 434.367142][ T7950] usb 3-1: SerialNumber: syz [ 434.618620][ T7950] usb 3-1: config 0 descriptor?? [ 434.669934][ T9110] futex_wake_op: syz.3.671 tries to shift op by -1; fix this program [ 436.016146][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 436.076682][ T9125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.117068][ T9125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.685046][ T7956] usb 3-1: USB disconnect, device number 35 [ 437.232080][ T9133] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 437.399797][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 437.471896][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.676'. [ 438.555596][ T7956] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 438.851683][ T7956] usb 5-1: device descriptor read/64, error -71 [ 439.072955][ T9153] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 439.095590][ T7956] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 439.172685][ T9153] random: crng reseeded on system resumption [ 439.240297][ T7956] usb 5-1: device descriptor read/64, error -71 [ 439.247152][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.299112][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.388128][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 439.399112][ T7956] usb usb5-port1: attempt power cycle [ 439.775519][ T7956] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 439.877525][ T7956] usb 5-1: device descriptor read/8, error -71 [ 439.926022][ T24] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 439.989941][ T9164] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 439.997971][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.008530][ T24] usb 3-1: config 0 has no interface number 0 [ 440.014652][ T24] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 440.044289][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.077666][ T24] usb 3-1: config 0 descriptor?? [ 440.095314][ T24] qmi_wwan 3-1:0.154: bogus CDC Union: master=0, slave=0 [ 440.104026][ T24] qmi_wwan 3-1:0.154: probe with driver qmi_wwan failed with error -22 [ 440.125597][ T7956] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 440.147159][ T7956] usb 5-1: device descriptor read/8, error -71 [ 440.423774][ T9152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.433198][ T7956] usb usb5-port1: unable to enumerate USB device [ 440.439802][ T9152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.458561][ T24] usb 3-1: USB disconnect, device number 36 [ 441.298048][ T9181] netlink: 40 bytes leftover after parsing attributes in process `syz.4.685'. [ 441.326045][ T9181] netlink: 48 bytes leftover after parsing attributes in process `syz.4.685'. [ 442.497276][ T9196] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 442.545720][ T9196] only policy match revision 0 supported [ 442.545740][ T9196] unable to load match [ 442.568124][ T9196] syzkaller0: entered promiscuous mode [ 442.573825][ T9196] syzkaller0: entered allmulticast mode [ 443.225250][ T9204] input: syz1 as /devices/virtual/input/input18 [ 443.682115][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.691'. [ 444.175772][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.691'. [ 445.209942][ T5929] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 445.406047][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.414189][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.647553][ T5929] usb 2-1: config 0 has no interfaces? [ 445.666184][ T5929] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 445.685426][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.703729][ T5929] usb 2-1: Product: syz [ 445.904139][ T5929] usb 2-1: Manufacturer: syz [ 445.908926][ T5929] usb 2-1: SerialNumber: syz [ 445.920643][ T5929] usb 2-1: config 0 descriptor?? [ 446.285013][ T9227] pimreg: entered allmulticast mode [ 446.298130][ T9227] pimreg: left allmulticast mode [ 448.416355][ T24] IPVS: starting estimator thread 0... [ 448.504294][ T9252] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 448.715749][ T9259] IPVS: using max 28 ests per chain, 67200 per kthread [ 448.737292][ T5929] usb 2-1: USB disconnect, device number 24 [ 449.522699][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.533965][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.389246][ T9284] input: syz1 as /devices/virtual/input/input19 [ 451.981276][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.708'. [ 452.536416][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 452.931919][ T9316] ALSA: mixer_oss: invalid OSS volume '' [ 455.075923][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.714'. [ 455.740485][ T9342] input: syz1 as /devices/virtual/input/input20 [ 456.072079][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 456.329594][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.340493][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 456.882341][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 456.922974][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.982997][ T24] usb 5-1: config 0 descriptor?? [ 457.180914][ T9359] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 457.187577][ T9359] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 457.242746][ T9362] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 457.249500][ T9362] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 457.257386][ T9359] vhci_hcd vhci_hcd.0: Device attached [ 457.257601][ T9362] vhci_hcd vhci_hcd.0: Device attached [ 457.345775][ T9359] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 457.352647][ T9359] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 457.369330][ T9362] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 457.390737][ T9359] vhci_hcd vhci_hcd.0: Device attached [ 457.465764][ T9359] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 457.472436][ T9359] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 457.480829][ T9359] vhci_hcd vhci_hcd.0: Device attached [ 457.581911][ T9359] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(23) [ 457.588757][ T9359] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 457.667803][ T7956] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x6 [ 457.685574][ T7956] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 457.733764][ T7956] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 457.735966][ T9359] vhci_hcd vhci_hcd.0: Device attached [ 457.782946][ T9362] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 457.805627][ T5919] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 457.814733][ T7956] hid-generic 00A0:0006:0003.000D: unknown main item tag 0x0 [ 457.830672][ T9376] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(25) [ 457.837349][ T9376] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 457.838804][ T7956] hid-generic 00A0:0006:0003.000D: hidraw0: HID v0.05 Device [syz1] on syz0 [ 457.863905][ T9376] vhci_hcd vhci_hcd.0: Device attached [ 457.925590][ T7950] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 457.957440][ T9382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.979303][ T9382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.026366][ T9359] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 458.092602][ T9369] vhci_hcd: connection closed [ 458.093715][ T9372] vhci_hcd: connection closed [ 458.098485][ T9360] vhci_hcd: connection reset by peer [ 458.098741][ T9363] vhci_hcd: connection closed [ 458.101539][ T9365] vhci_hcd: connection closed [ 458.113847][ T9377] vhci_hcd: connection closed [ 458.123540][ T13] vhci_hcd vhci_hcd.3: stop threads [ 458.144286][ T13] vhci_hcd vhci_hcd.3: release socket [ 458.154251][ T7950] usb 3-1: config 0 has no interfaces? [ 458.159917][ T7950] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 458.178539][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 458.186826][ T7950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.215972][ T7950] usb 3-1: config 0 descriptor?? [ 458.227604][ T13] vhci_hcd vhci_hcd.3: stop threads [ 458.270764][ T13] vhci_hcd vhci_hcd.3: release socket [ 458.279483][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 458.306548][ T13] vhci_hcd vhci_hcd.3: stop threads [ 458.312600][ T13] vhci_hcd vhci_hcd.3: release socket [ 458.322666][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 458.474634][ T13] vhci_hcd vhci_hcd.3: stop threads [ 458.480263][ T13] vhci_hcd vhci_hcd.3: release socket [ 458.561633][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 458.584503][ T13] vhci_hcd vhci_hcd.3: stop threads [ 458.602845][ T13] vhci_hcd vhci_hcd.3: release socket [ 458.609109][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 458.618467][ T13] vhci_hcd vhci_hcd.3: stop threads [ 458.625075][ T13] vhci_hcd vhci_hcd.3: release socket [ 458.633277][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 459.181072][ T7936] usb 5-1: USB disconnect, device number 43 [ 460.374060][ T9400] input: syz0 as /devices/virtual/input/input21 [ 460.793408][ T5929] usb 3-1: USB disconnect, device number 37 [ 461.494076][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'. [ 462.280096][ T9420] netlink: 56 bytes leftover after parsing attributes in process `syz.2.730'. [ 463.069801][ T5919] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 464.522100][ T24] usb usb40-port1: attempt power cycle [ 464.982828][ T9448] syz_tun: entered allmulticast mode [ 465.004810][ T9448] pimreg: entered allmulticast mode [ 465.106677][ T24] usb usb40-port1: unable to enumerate USB device [ 465.276843][ T7956] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 465.435594][ T5919] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 465.642478][ T7956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.673566][ T9456] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 465.705167][ T7956] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.724281][ T5919] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 465.735212][ T5919] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 465.758068][ T7956] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 465.777734][ T5919] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 465.788597][ T7956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.811437][ T5919] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 465.832220][ T7956] usb 2-1: config 0 descriptor?? [ 465.853508][ T5919] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 465.866058][ T7956] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 465.905809][ T5919] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 465.919357][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 465.944291][ T5919] usb 5-1: Product: syz [ 465.955547][ T5919] usb 5-1: Manufacturer: syz [ 466.010400][ T5919] cdc_wdm 5-1:1.0: skipping garbage [ 466.024080][ T5919] cdc_wdm 5-1:1.0: skipping garbage [ 466.287211][ T9451] netlink: 104 bytes leftover after parsing attributes in process `syz.4.736'. [ 466.309637][ T5919] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 466.340088][ T5919] cdc_wdm 5-1:1.0: Unknown control protocol [ 466.346894][ T9451] netlink: 104 bytes leftover after parsing attributes in process `syz.4.736'. [ 466.517947][ T24] usb 5-1: USB disconnect, device number 44 [ 466.887470][ T9462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.899205][ T9462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.366105][ T7956] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 467.516788][ T7948] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 467.550203][ T7956] usb 3-1: unable to get BOS descriptor or descriptor too short [ 467.559418][ T7956] usb 3-1: not running at top speed; connect to a high speed hub [ 467.583022][ T7956] usb 3-1: config 56 has an invalid interface number: 216 but max is 0 [ 467.591695][ T7956] usb 3-1: config 56 has no interface number 0 [ 467.646344][ T7956] usb 3-1: config 56 interface 216 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 467.657995][ T7956] usb 3-1: config 56 interface 216 has no altsetting 0 [ 467.670024][ T7956] usb 3-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 467.680638][ T7956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.692538][ T7948] usb 5-1: Using ep0 maxpacket: 16 [ 468.059216][ T7948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.073519][ T7956] usb 3-1: Product: syz [ 468.077942][ T7948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.088606][ T7956] usb 3-1: Manufacturer: syz [ 468.093336][ T7956] usb 3-1: SerialNumber: syz [ 468.100021][ T7948] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 468.110641][ T24] usb 2-1: USB disconnect, device number 25 [ 468.119510][ T7948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.171783][ T9467] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 468.182707][ T7948] usb 5-1: config 0 descriptor?? [ 468.343799][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'. [ 468.562977][ T9477] netlink: 72 bytes leftover after parsing attributes in process `syz.2.740'. [ 468.651884][ T7948] corsair 0003:1B1C:1B02.000E: item fetching failed at offset 2/5 [ 468.671322][ T7948] corsair 0003:1B1C:1B02.000E: parse failed [ 468.738643][ T7948] corsair 0003:1B1C:1B02.000E: probe with driver corsair failed with error -22 [ 468.759238][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'. [ 468.844638][ T9483] input: syz0 as /devices/virtual/input/input22 [ 469.819174][ T7948] usb 5-1: USB disconnect, device number 45 [ 469.977028][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'. [ 470.225052][ T9490] vhci_hcd vhci_hcd.0: port 0 already used [ 470.326855][ T9490] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 470.333538][ T9490] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 470.371045][ T9490] vhci_hcd vhci_hcd.0: Device attached [ 470.392980][ T9500] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 470.415587][ T9492] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 470.422263][ T9492] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 470.501591][ T9492] vhci_hcd vhci_hcd.0: Device attached [ 470.525668][ T9490] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 470.532311][ T9490] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 470.656788][ T9490] vhci_hcd vhci_hcd.0: Device attached [ 470.733574][ T9500] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(18) [ 470.740292][ T9500] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 470.779085][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'. [ 470.887073][ T9500] vhci_hcd vhci_hcd.0: Device attached [ 470.975626][ T9490] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 471.048952][ T9490] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(27) [ 471.055725][ T9490] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 471.152325][ T9492] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 471.154808][ T9490] vhci_hcd vhci_hcd.0: Device attached [ 471.563655][ T9508] vhci_hcd: connection closed [ 471.564448][ T9503] vhci_hcd: connection closed [ 471.566930][ T9495] vhci_hcd: connection closed [ 471.570222][ T9505] vhci_hcd: connection closed [ 471.579310][ T9499] vhci_hcd: connection closed [ 471.589560][ T13] vhci_hcd vhci_hcd.4: stop threads [ 471.665281][ T13] vhci_hcd vhci_hcd.4: release socket [ 471.673417][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 471.686109][ T13] vhci_hcd vhci_hcd.4: stop threads [ 471.700379][ T13] vhci_hcd vhci_hcd.4: release socket [ 471.710959][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 471.726741][ T13] vhci_hcd vhci_hcd.4: stop threads [ 471.736261][ T13] vhci_hcd vhci_hcd.4: release socket [ 471.753438][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 471.827015][ T13] vhci_hcd vhci_hcd.4: stop threads [ 471.832298][ T13] vhci_hcd vhci_hcd.4: release socket [ 471.868085][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 471.884290][ T13] vhci_hcd vhci_hcd.4: stop threads [ 471.979060][ T7956] hub 3-1:56.216: bad descriptor, ignoring hub [ 471.985927][ T7956] hub 3-1:56.216: probe with driver hub failed with error -5 [ 472.074900][ T7956] option 3-1:56.216: GSM modem (1-port) converter detected [ 472.135555][ T13] vhci_hcd vhci_hcd.4: release socket [ 472.163492][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 472.182491][ T7956] usb 3-1: USB disconnect, device number 38 [ 472.216838][ T7956] option 3-1:56.216: device disconnected [ 473.325600][ T7956] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 473.484395][ T7956] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 473.518410][ T7956] usb 5-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 473.535669][ T7956] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 473.545060][ T7956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.662163][ T7956] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 473.675885][ T7956] usb 5-1: invalid MIDI out EP 0 [ 473.793679][ T6697] udevd[6697]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.896603][ T7956] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 474.218645][ T9539] netlink: 68 bytes leftover after parsing attributes in process `syz.3.751'. [ 475.840764][ T9547] program syz.2.753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.115572][ T7936] usb 5-1: USB disconnect, device number 46 [ 476.235819][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.497373][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.566502][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.579510][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.761768][ T9554] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 477.129326][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 477.384651][ T30] audit: type=1326 audit(1770780988.803:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.4.755" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f75539 code=0x0 [ 477.986324][ T7956] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 478.006546][ T7956] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 478.024310][ T7956] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 478.044797][ T7956] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 478.427770][ T7956] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 478.440236][ T7956] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 478.526987][ T7956] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 478.542985][ T7956] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 478.565616][ T7956] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 478.573250][ T7956] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 478.635923][ T7956] hid-generic 0006:0004:0009.000F: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 479.376670][ T9579] fido_id[9579]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 482.318590][ T9608] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 482.353172][ T9604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.388798][ T9604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.455052][ T9604] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3394018074 (6788036148 ns) > initial count (6222627426 ns). Using initial count to start timer. [ 482.998461][ T9617] : renamed from bridge_slave_0 [ 485.571730][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.771'. [ 485.739420][ T7949] hid_parser_main: 7 callbacks suppressed [ 485.739444][ T7949] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 485.786661][ T7949] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 485.815387][ T7949] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 485.825560][ T7949] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 485.845336][ T7949] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 485.875965][ T7949] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 485.886030][ T7949] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 485.894453][ T7949] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 485.903494][ T7949] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 485.912035][ T7949] hid-generic 0006:0004:0009.0010: unknown main item tag 0x0 [ 485.933950][ T7949] hid-generic 0006:0004:0009.0010: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 486.041155][ T9643] fido_id[9643]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 486.251912][ T9654] bridge_slave_1: entered promiscuous mode [ 489.155558][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 489.786628][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.799511][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.834000][ T24] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 489.874204][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.942026][ T24] usb 3-1: config 0 descriptor?? [ 490.121545][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.785'. [ 490.286548][ T9697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.296076][ T9697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.373958][ T24] steelseries 0003:1038:12B6.0011: item fetching failed at offset 4/7 [ 490.393592][ T24] steelseries 0003:1038:12B6.0011: probe with driver steelseries failed with error -22 [ 490.585647][ T9683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.780'. [ 491.143284][ T30] audit: type=1804 audit(1770781002.813:273): pid=9706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.786" name="/newroot/150/file1" dev="fuse" ino=1 res=1 errno=0 [ 491.157914][ T9676] fuse: root generation should be zero [ 491.326169][ T7950] usb 3-1: USB disconnect, device number 39 [ 493.437951][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'. [ 493.665841][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'. [ 495.592518][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'. [ 496.151691][ T9766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'. [ 496.461224][ T5929] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 496.633312][ T5929] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 496.644665][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.682191][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.767361][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 496.792867][ T5929] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 496.803643][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.867151][ T5929] usb 2-1: config 0 descriptor?? [ 497.436061][ T5929] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 497.599170][ T5929] usb 2-1: USB disconnect, device number 26 [ 497.957993][ T9780] fido_id[9780]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 498.688687][ T9785] block device autoloading is deprecated and will be removed. [ 498.870506][ T9788] netlink: 136 bytes leftover after parsing attributes in process `syz.2.802'. [ 500.776711][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 501.241354][ T9814] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 503.288577][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.811'. [ 504.192428][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'. [ 504.411313][ T9849] netlink: 68 bytes leftover after parsing attributes in process `syz.1.812'. [ 504.800713][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'. [ 505.308975][ T9856] netlink: 56 bytes leftover after parsing attributes in process `syz.4.813'. [ 505.570636][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'. [ 506.808954][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.816882][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.280170][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.819'. [ 509.729072][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.825'. [ 510.567394][ T9916] netlink: 68 bytes leftover after parsing attributes in process `syz.2.828'. [ 511.933583][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 512.089825][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.834'. [ 514.576022][ T9960] netlink: 'syz.2.839': attribute type 2 has an invalid length. [ 514.695251][ T9958] netlink: 'syz.2.839': attribute type 2 has an invalid length. [ 514.720448][ T9960] !: entered promiscuous mode [ 514.729287][ T9958] !: left promiscuous mode [ 516.083489][ T9968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.115241][ T9968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.155066][ T9968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.185233][ T9968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.539565][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.846'. [ 517.719173][ T9989] libceph: resolve '0..' (ret=-3): failed [ 518.821492][T10006] syz_tun: entered promiscuous mode [ 518.828248][T10006] macsec1: entered allmulticast mode [ 518.833618][T10006] syz_tun: entered allmulticast mode [ 519.124448][T10006] syz_tun: left allmulticast mode [ 519.131935][T10006] syz_tun: left promiscuous mode [ 522.875601][ T7941] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 523.178415][ T7941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.303780][ T7941] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 523.340798][ T7941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.379090][ T7941] usb 2-1: config 0 descriptor?? [ 523.410504][ T7941] usbhid 2-1:0.0: can't add hid device: -22 [ 523.456949][ T7941] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 525.075944][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'. [ 525.763273][T10086] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 526.131777][ T5929] usb 2-1: USB disconnect, device number 27 [ 527.126908][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.865'. [ 529.094808][T10132] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 530.558785][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'. [ 532.570034][T10182] sctp: [Deprecated]: syz.0.876 (pid 10182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 532.570034][T10182] Use struct sctp_sack_info instead [ 532.649763][T10181] syz.4.874 (10181): drop_caches: 2 [ 532.971954][ T7941] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 533.266573][T10192] syz_tun: entered allmulticast mode [ 533.286826][T10192] pimreg: entered allmulticast mode [ 533.438719][ T7941] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 533.454588][ T7941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.474347][T10185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.876'. [ 533.691173][ T7941] usb 3-1: config 0 has no interface number 0 [ 533.698347][ T7941] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 533.728135][ T7941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.044637][T10184] syz_tun: left allmulticast mode [ 534.189745][ T7941] usb 3-1: config 0 descriptor?? [ 534.228151][ T7941] qmi_wwan 3-1:0.154: bogus CDC Union: master=0, slave=0 [ 534.295872][ T7941] qmi_wwan 3-1:0.154: probe with driver qmi_wwan failed with error -22 [ 534.427489][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.606706][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.755133][ T7950] usb 3-1: USB disconnect, device number 40 [ 536.187749][T10229] netlink: 32 bytes leftover after parsing attributes in process `syz.1.883'. [ 536.788889][T10233] netlink: 'syz.2.882': attribute type 2 has an invalid length. [ 536.850218][T10233] !: entered promiscuous mode [ 538.248232][T10241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 539.989140][T10271] pim6reg: entered allmulticast mode [ 540.020223][T10271] pim6reg: left allmulticast mode [ 541.573856][T10281] sctp: [Deprecated]: syz.4.891 (pid 10281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 541.573856][T10281] Use struct sctp_sack_info instead [ 541.979021][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 542.197212][ T24] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 542.211307][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.242085][ T24] usb 2-1: config 0 has no interface number 0 [ 542.253903][ T24] usb 2-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 542.268963][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.313886][ T24] usb 2-1: config 0 descriptor?? [ 542.358298][ T24] qmi_wwan 2-1:0.154: bogus CDC Union: master=0, slave=0 [ 542.366779][ T24] qmi_wwan 2-1:0.154: probe with driver qmi_wwan failed with error -22 [ 542.528515][T10287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'. [ 542.621827][T10284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.649232][T10284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.707550][ T7950] usb 2-1: USB disconnect, device number 28 [ 543.230436][T10306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.896'. [ 544.585579][ T7941] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 544.727438][T10317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.745547][ T7941] usb 2-1: Using ep0 maxpacket: 8 [ 544.753619][ T7941] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 544.774755][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 544.796884][ T7941] usb 2-1: config 179 has no interface number 0 [ 544.814523][ T7941] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 544.837394][T10317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.895319][ T7941] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 545.033923][T10317] vlan2: left promiscuous mode [ 545.039200][T10317] bridge0: left promiscuous mode [ 545.049169][T10317] vxlan0: left promiscuous mode [ 545.074862][ T7941] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 545.105906][ T7941] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 545.205642][ T7941] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 545.242621][ T7941] usb 2-1: config 179 interface 65 has no altsetting 0 [ 545.258933][ T7941] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 545.325318][ T7941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.447854][ T7941] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input23 [ 545.519564][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.900'. [ 545.627752][ T5178] input input23: unable to receive magic message: -110 [ 545.775285][ T5178] input input23: unable to receive magic message: -32 [ 546.518004][ T7950] usb 2-1: USB disconnect, device number 29 [ 546.518194][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 546.533298][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 547.888545][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 547.949943][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.905'. [ 548.628712][T10351] input: syz0 as /devices/virtual/input/input24 [ 549.695601][ T7941] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 549.941449][ T7941] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 549.950089][ T7941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.960320][ T7941] usb 3-1: config 0 has no interface number 0 [ 549.995657][ T7941] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 550.050773][ T7941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.081626][ T7941] usb 3-1: config 0 descriptor?? [ 550.110230][ T7941] qmi_wwan 3-1:0.154: bogus CDC Union: master=0, slave=0 [ 550.135951][ T7941] qmi_wwan 3-1:0.154: probe with driver qmi_wwan failed with error -22 [ 550.328627][T10367] syz.1.909 (10367): drop_caches: 2 [ 550.352194][T10357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.386260][T10357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.455091][ T5929] usb 3-1: USB disconnect, device number 41 [ 551.491706][T10377] sit1: entered allmulticast mode [ 552.435995][ T30] audit: type=1326 audit(1770781064.053:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 552.511762][ T30] audit: type=1326 audit(1770781064.053:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 552.574907][ T30] audit: type=1326 audit(1770781064.053:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 552.636287][ T30] audit: type=1326 audit(1770781064.053:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 552.735334][T10390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 552.742675][T10390] IPv6: NLM_F_CREATE should be set when creating new route [ 552.750108][T10390] IPv6: NLM_F_CREATE should be set when creating new route [ 552.757428][T10390] IPv6: NLM_F_CREATE should be set when creating new route [ 553.240212][ T30] audit: type=1326 audit(1770781064.053:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 553.339659][ T30] audit: type=1326 audit(1770781064.053:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 553.460193][ T30] audit: type=1326 audit(1770781064.053:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 553.536022][ T30] audit: type=1326 audit(1770781064.053:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 553.631624][ T30] audit: type=1326 audit(1770781064.053:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 553.785557][ T30] audit: type=1326 audit(1770781064.053:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10379 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 554.364852][T10399] netlink: 32 bytes leftover after parsing attributes in process `syz.4.916'. [ 554.597159][T10408] fuse: Bad value for 'fd' [ 556.778296][T10434] netlink: 'syz.0.923': attribute type 4 has an invalid length. [ 556.786169][T10434] netlink: 17 bytes leftover after parsing attributes in process `syz.0.923'. [ 556.884250][T10436] delete_channel: no stack [ 559.969255][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 559.969278][ T30] audit: type=1326 audit(1770781071.603:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 560.054345][T10466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.930'. [ 560.109516][ T30] audit: type=1326 audit(1770781071.603:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 560.295205][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 560.313744][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 560.516108][ T30] audit: type=1326 audit(1770781071.603:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 560.615223][ T30] audit: type=1326 audit(1770781071.603:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 561.056186][ T30] audit: type=1326 audit(1770781071.603:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 561.166954][ T30] audit: type=1326 audit(1770781071.603:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 561.312065][ T30] audit: type=1326 audit(1770781072.673:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 561.405676][ T30] audit: type=1326 audit(1770781072.673:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 561.675184][ T30] audit: type=1326 audit(1770781073.223:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 561.766096][ T30] audit: type=1326 audit(1770781073.223:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 562.316286][ T5929] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 562.603427][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.672255][ T5929] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 562.714107][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.818709][ T5929] usb 3-1: config 0 descriptor?? [ 562.834173][ T5929] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 563.102806][T10484] blktrace: Concurrent blktraces are not allowed on nullb0 [ 564.206093][T10499] syz_tun: entered allmulticast mode [ 564.229693][T10499] pimreg: entered allmulticast mode [ 564.250188][T10491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.455955][T10491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.948691][T10489] syz_tun: left allmulticast mode [ 565.370233][T10504] vivid-007: disconnect [ 565.640596][ T7950] usb 3-1: USB disconnect, device number 42 [ 566.154250][T10501] vivid-007: reconnect [ 566.369900][T10516] netlink: 'syz.4.941': attribute type 4 has an invalid length. [ 566.377997][T10516] netlink: 17 bytes leftover after parsing attributes in process `syz.4.941'. [ 566.436111][T10516] delete_channel: no stack [ 567.752808][T10525] fuse: Bad value for 'fd' [ 568.249595][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.264672][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.292356][T10532] macsec0: entered allmulticast mode [ 568.303399][T10532] syz_tun: entered allmulticast mode [ 568.447039][T10532] syz_tun: left allmulticast mode [ 568.781357][T10542] netlink: 32 bytes leftover after parsing attributes in process `syz.2.945'. [ 569.463907][T10545] fuse: Bad value for 'fd' [ 571.476167][T10565] netlink: 'syz.0.947': attribute type 2 has an invalid length. [ 571.505984][T10565] !: entered promiscuous mode [ 571.537931][T10565] netlink: 'syz.0.947': attribute type 2 has an invalid length. [ 571.622366][T10564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.639609][T10564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.696558][T10564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.713952][T10564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.030939][T10574] : renamed from bridge_slave_0 (while UP) [ 573.358403][T10579] fuse: Bad value for 'fd' [ 574.333841][T10591] vivid-007: disconnect [ 574.562712][T10581] vivid-007: reconnect [ 574.641491][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'. [ 574.787157][T10588] vlan2: entered promiscuous mode [ 574.794692][T10588] bridge0: entered promiscuous mode [ 576.531782][T10606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.958'. [ 577.114305][T10607] random: crng reseeded on system resumption [ 577.441320][T10616] syz_tun: entered promiscuous mode [ 577.609204][T10616] macsec0: entered allmulticast mode [ 577.755627][T10616] syz_tun: left promiscuous mode [ 578.286836][T10629] netlink: 'syz.1.961': attribute type 10 has an invalid length. [ 578.346648][T10630] netlink: 'syz.1.961': attribute type 10 has an invalid length. [ 578.377661][T10629] team0: Port device netdevsim0 added [ 578.522527][T10630] team0: Port device netdevsim0 removed [ 578.551544][T10630] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 579.159301][T10612] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 579.169210][T10612] IPv6: NLM_F_CREATE should be set when creating new route [ 579.178816][T10612] IPv6: NLM_F_CREATE should be set when creating new route [ 579.188227][T10612] IPv6: NLM_F_CREATE should be set when creating new route [ 581.017307][T10637] pim6reg: entered allmulticast mode [ 581.025608][T10638] pim6reg: left allmulticast mode [ 582.410042][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.966'. [ 583.552767][T10650] netlink: 5040 bytes leftover after parsing attributes in process `syz.1.975'. [ 584.386411][T10675] vivid-007: disconnect [ 585.723670][T10669] vivid-007: reconnect [ 587.746317][T10695] random: crng reseeded on system resumption [ 588.381071][T10717] netlink: 'syz.2.974': attribute type 2 has an invalid length. [ 588.465256][T10707] netlink: 'syz.2.974': attribute type 2 has an invalid length. [ 589.519697][T10714] input: syz0 as /devices/virtual/input/input27 [ 591.080681][T10737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.090181][T10737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.611026][T10741] could not allocate digest TFM handle crc32-pclmul [ 594.953587][T10765] random: crng reseeded on system resumption [ 596.181470][T10788] sit1: entered allmulticast mode [ 596.635568][ T7949] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 596.815606][ T7949] usb 3-1: Using ep0 maxpacket: 8 [ 596.833350][ T7949] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.920235][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.932758][ T7949] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 596.978314][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.003294][ T7949] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 597.050337][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.078265][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.101902][ T7949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.121427][ T7949] usb 3-1: Product: syz [ 597.137214][ T7949] usb 3-1: Manufacturer: syz [ 597.148199][ T7949] usb 3-1: SerialNumber: syz [ 597.332577][ T7949] usb 3-1: config 0 descriptor?? [ 597.646460][T10803] input: syz0 as /devices/virtual/input/input28 [ 598.732973][T10808] tipc: Enabled bearer , priority 0 [ 598.769052][T10809] syzkaller0: entered promiscuous mode [ 598.778598][T10809] syzkaller0: entered allmulticast mode [ 598.992443][T10808] tipc: Resetting bearer [ 599.036421][T10806] tipc: Resetting bearer [ 599.294904][T10806] tipc: Disabling bearer [ 600.000195][T10825] Cannot find add_set index 3 as target [ 600.394911][ T5929] usb 3-1: USB disconnect, device number 43 [ 603.715574][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 604.008862][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.034870][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.075541][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 604.098820][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.172641][ T24] usb 2-1: config 0 descriptor?? [ 604.622230][T10858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.664303][T10858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.280007][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 605.310519][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 605.447827][ T24] usb 2-1: USB disconnect, device number 30 [ 605.914890][T10864] pim6reg: entered allmulticast mode [ 605.931843][T10864] pim6reg: left allmulticast mode [ 606.571847][T10879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 606.579955][T10879] IPv6: NLM_F_CREATE should be set when creating new route [ 606.589378][T10879] IPv6: NLM_F_CREATE should be set when creating new route [ 606.598403][T10879] IPv6: NLM_F_CREATE should be set when creating new route [ 607.935934][T10894] usb usb8: usbfs: process 10894 (syz.1.1021) did not claim interface 0 before use [ 612.546147][T10943] netlink: 'syz.1.1020': attribute type 2 has an invalid length. [ 612.580117][T10943] !: entered promiscuous mode [ 612.594309][T10943] netlink: 'syz.1.1020': attribute type 2 has an invalid length. [ 613.667532][T10952] netlink: 'syz.4.1022': attribute type 21 has an invalid length. [ 613.676223][T10952] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1022'. [ 617.515465][T10985] sit1: entered allmulticast mode [ 617.805531][ T7949] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 617.967020][ T7949] usb 3-1: Using ep0 maxpacket: 8 [ 618.083894][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 618.083920][ T30] audit: type=1326 audit(1770781129.693:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 618.168945][ T7949] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.184871][ T7949] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 618.394749][ T7949] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 618.409624][ T7949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.422671][ T7949] usb 3-1: Product: syz [ 618.435483][ T7949] usb 3-1: Manufacturer: syz [ 618.452757][ T7949] usb 3-1: SerialNumber: syz [ 618.452768][ T30] audit: type=1326 audit(1770781129.693:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 618.655279][ T30] audit: type=1326 audit(1770781129.693:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 618.720526][ T30] audit: type=1326 audit(1770781129.693:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 618.747354][ T7949] usb 3-1: config 0 descriptor?? [ 618.834981][ T30] audit: type=1326 audit(1770781129.693:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 618.905545][ T30] audit: type=1326 audit(1770781129.693:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 618.928088][ T30] audit: type=1326 audit(1770781129.693:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 618.950227][ T30] audit: type=1326 audit(1770781129.693:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 618.973187][ T30] audit: type=1326 audit(1770781129.693:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 618.995823][ T30] audit: type=1326 audit(1770781129.693:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 619.544907][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'. [ 620.877680][ T7949] usb 3-1: USB disconnect, device number 44 [ 624.368350][T11042] pim6reg: entered allmulticast mode [ 624.382268][T11042] pim6reg: left allmulticast mode [ 627.311180][T11063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.621764][T11073] ip6t_REJECT: ECHOREPLY is not supported [ 628.147840][T10995] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 628.445938][T10995] usb 2-1: Using ep0 maxpacket: 16 [ 628.521921][T10995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.535470][T10995] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 628.554775][T10995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.596443][T10995] usb 2-1: config 0 descriptor?? [ 629.380827][ T7941] usb 2-1: USB disconnect, device number 31 [ 629.693077][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.699590][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.597456][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 631.597476][ T30] audit: type=1326 audit(1770781143.243:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 631.757514][ T30] audit: type=1326 audit(1770781143.243:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 631.923938][ T30] audit: type=1326 audit(1770781143.253:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 632.173198][ T30] audit: type=1326 audit(1770781143.253:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 632.286245][ T30] audit: type=1326 audit(1770781143.253:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 632.545337][ T30] audit: type=1326 audit(1770781143.253:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 632.605781][ T30] audit: type=1326 audit(1770781143.253:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 632.665577][ T30] audit: type=1326 audit(1770781143.253:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 632.715498][ T30] audit: type=1326 audit(1770781143.253:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 632.778652][ T30] audit: type=1326 audit(1770781143.253:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 633.172795][T11115] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1055'. [ 634.085625][ T7950] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 634.173170][ T31] INFO: task kworker/0:12:7948 blocked for more than 143 seconds. [ 634.228810][ T31] Tainted: G L syzkaller #0 [ 634.252569][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.334608][ T31] task:kworker/0:12 state:D stack:22400 pid:7948 tgid:7948 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 634.370731][ T31] Workqueue: usb_hub_wq hub_event [ 634.380312][ T31] Call Trace: [ 634.445307][ T31] [ 634.463290][ T7950] usb 3-1: Using ep0 maxpacket: 32 [ 634.521059][ T31] __schedule+0x1568/0x5260 [ 634.541543][ T7950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.559567][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 634.598070][ T31] ? __pfx___schedule+0x10/0x10 [ 634.615339][ T7950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.635314][ T31] ? schedule+0x90/0x360 [ 634.688438][ T31] schedule+0x164/0x360 [ 634.705187][ T7950] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 634.714557][ T31] schedule_preempt_disabled+0x13/0x30 [ 634.756029][ T31] __mutex_lock+0x7fe/0x1300 [ 634.781512][ T7950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.790748][ T31] ? __mutex_lock+0x5ac/0x1300 [ 634.800022][ T31] ? hub_event+0x21a2/0x4f30 [ 634.907473][ T7950] usb 3-1: config 0 descriptor?? [ 634.912698][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 635.063658][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 635.235692][ T31] hub_event+0x21a2/0x4f30 [ 635.247147][ T31] ? __pfx_hub_event+0x10/0x10 [ 635.303510][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 635.332143][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 635.418197][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 635.448521][ T31] process_scheduled_works+0xaec/0x17a0 [ 635.475758][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 635.539677][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 635.567287][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 635.604060][ T31] worker_thread+0xda6/0x1360 [ 635.619548][ T31] kthread+0x388/0x470 [ 635.627598][ T31] ? __pfx_worker_thread+0x10/0x10 [ 635.660507][ T31] ? __pfx_kthread+0x10/0x10 [ 635.718951][ T31] ret_from_fork+0x51e/0xb90 [ 635.745821][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 635.782541][T11142] pim6reg: entered allmulticast mode [ 635.801032][T11142] pim6reg: left allmulticast mode [ 636.098862][ T31] ? __switch_to+0xc82/0x1410 [ 636.109750][ T31] ? __pfx_kthread+0x10/0x10 [ 636.120122][ T31] ret_from_fork_asm+0x1a/0x30 [ 636.132360][ T31] [ 636.228361][ T31] [ 636.228361][ T31] Showing all locks held in the system: [ 636.305631][ T31] 1 lock held by khungtaskd/31: [ 636.367522][ T31] #0: ffffffff8e55dd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 636.405872][ T31] 2 locks held by getty/5579: [ 636.428241][ T31] #0: ffff888030b280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 636.565556][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 636.629683][ T31] 1 lock held by syz-executor/5810: [ 636.651419][ T31] #0: ffff8880b863a9e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 636.674204][ T31] 5 locks held by kworker/0:4/5828: [ 636.684171][ T31] #0: ffff8881422ab548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 636.739459][ T31] #1: ffffc90003f3fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 636.766090][ T31] #2: ffff8881457a7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 636.791248][ T31] #3: ffff8881457ba518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 636.875964][ T31] #4: ffff8881457d2b68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 636.913769][ T31] 5 locks held by kworker/0:12/7948: [ 636.919309][ T31] #0: ffff8881422ab548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 636.936709][ T31] #1: ffffc9000b93fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 636.953108][ T31] #2: ffff888145be1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 636.974245][ T31] #3: ffff888145be4518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 636.999587][ T31] #4: ffff8881457d2b68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 637.045422][ T31] 5 locks held by kworker/0:14/7950: [ 637.077092][ T31] #0: ffff8881422ab548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 637.140360][ T31] #1: ffffc9000bac7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 637.187308][ T31] #2: ffff888144729198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 637.264146][ T31] #3: ffff888027927198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 637.295453][ T31] #4: ffff888075474160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 637.325520][ T31] 2 locks held by syz.1.1056/11142: [ 637.345513][ T31] #0: ffffffff8f9ba248 (rtnl_mutex){+.+.}-{4:4}, at: ip6_mroute_setsockopt+0xa72/0xf90 [ 637.390934][ T31] #1: ffffffff8e563ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 637.409522][ T31] 2 locks held by dhcpcd/11144: [ 637.427562][ T31] #0: ffff8880761f07c8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 637.463713][ T31] #1: ffffffff8e563ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 637.490199][ T31] [ 637.492602][ T31] ============================================= [ 637.492602][ T31] [ 637.528693][ T31] NMI backtrace for cpu 1 [ 637.528723][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 637.528751][ T31] Tainted: [L]=SOFTLOCKUP [ 637.528758][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 637.528771][ T31] Call Trace: [ 637.528778][ T31] [ 637.528787][ T31] dump_stack_lvl+0xe8/0x150 [ 637.528820][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 637.528843][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 637.528867][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 637.528903][ T31] sys_info+0x135/0x170 [ 637.528933][ T31] watchdog+0xf90/0xfe0 [ 637.528963][ T31] ? watchdog+0x209/0xfe0 [ 637.528993][ T31] kthread+0x388/0x470 [ 637.529021][ T31] ? __pfx_watchdog+0x10/0x10 [ 637.529042][ T31] ? __pfx_kthread+0x10/0x10 [ 637.529072][ T31] ret_from_fork+0x51e/0xb90 [ 637.529097][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 637.529118][ T31] ? __switch_to+0xc82/0x1410 [ 637.529152][ T31] ? __pfx_kthread+0x10/0x10 [ 637.529179][ T31] ret_from_fork_asm+0x1a/0x30 [ 637.529224][ T31] [ 637.529231][ T31] Sending NMI from CPU 1 to CPUs 0: [ 637.645702][ C0] NMI backtrace for cpu 0 [ 637.645724][ C0] CPU: 0 UID: 0 PID: 5810 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 637.645750][ C0] Tainted: [L]=SOFTLOCKUP [ 637.645756][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 637.645776][ C0] RIP: 0023:0xf71d6dd2 [ 637.645794][ C0] Code: ec 04 89 4c 24 28 89 54 24 2c 68 0b 01 00 00 6a 00 6a 00 8d 54 24 2c 52 8d 54 24 38 52 ff 74 24 6c 50 e8 c1 8b f7 ff 83 c4 20 <3d> 00 f0 ff ff 76 37 83 f8 fc 75 32 85 db 74 2e f6 44 24 54 01 75 [ 637.645811][ C0] RSP: 002b:00000000ff813fe0 EFLAGS: 00000282 [ 637.645828][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 637.645839][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 637.645850][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 637.645860][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 637.645871][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 637.645882][ C0] FS: 0000000000000000 GS: 0000000058529480 [ 637.776099][ T7950] usbhid 3-1:0.0: can't add hid device: -71 [ 637.782207][ T7950] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 637.802639][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 637.809563][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 637.820272][ T31] Tainted: [L]=SOFTLOCKUP [ 637.824604][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 637.834670][ T31] Call Trace: [ 637.837956][ T31] [ 637.840939][ T31] vpanic+0x1e0/0x670 [ 637.844943][ T31] panic+0xc5/0xd0 [ 637.848678][ T31] ? __pfx_panic+0x10/0x10 [ 637.853106][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 637.858489][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 637.864657][ T31] watchdog+0xfda/0xfe0 [ 637.868830][ T31] ? watchdog+0x209/0xfe0 [ 637.873175][ T31] kthread+0x388/0x470 [ 637.877257][ T31] ? __pfx_watchdog+0x10/0x10 [ 637.881939][ T31] ? __pfx_kthread+0x10/0x10 [ 637.886536][ T31] ret_from_fork+0x51e/0xb90 [ 637.891129][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 637.896237][ T31] ? __switch_to+0xc82/0x1410 [ 637.900934][ T31] ? __pfx_kthread+0x10/0x10 [ 637.905536][ T31] ret_from_fork_asm+0x1a/0x30 [ 637.910344][ T31] [ 637.913983][ T31] Kernel Offset: disabled [ 637.918311][ T31] Rebooting in 86400 seconds..