last executing test programs: 9m24.486085458s ago: executing program 1 (id=416): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1_vlan\x00', {0x2, 0x4e25, @remote}}) 9m24.484946845s ago: executing program 1 (id=417): fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000380)=ANY=[], 0xfce7, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = syz_open_procfs(r0, &(0x7f0000002180)='timers\x00') fchdir(r1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='F'], 0x8) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='cgroup2\x00', 0x392b848, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000003100000058007a801c000200579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a1c00020024cf4713299967bd15bf44cad1f4d266b29e2a4135a483c64cd3a84071cea6782c4612b21c0002007282cdb224050171ea757aea781d4160e9223cc0312d38d668007a801c0002005f3b5d542091777612684837dbc0ec47ea67acb692453dd20c0003005bd58c80a1143827140002009811fc13fbf66d28b02a7f7bff7ddc3414000100204183f74d05c885801d03a2488d3fd41400020032c5877eef25cfd5a4dd14ad077490051c007a800c000300b27375"], 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b4, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1ec, 0x202, 0x225, 0x1ec, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1e, 0x22, 0x80, 'syz0\x00', {0x944}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, [], [0x0, 0xff], 'dvmrp1\x00', 'ip6tnl0\x00', {}, {0xff}, 0x2f, 0x0, 0x0, 0x41}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@empty, [0x0, 0xff, 0x0, 0xff], 0x4e22, 0x4e24, 0x4e23, 0x4e21, 0xfffffeff, 0xfffb, 0x7, 0x3, 0x100008}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x310) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1f8, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x1dc, 0x2, 0x0, 0x1, [@nested={0x91, 0x86, 0x0, 0x1, [@typed={0x8, 0x11b, 0x0, 0x0, @pid=r0}, @generic="51f37bc60c8e80b591e9e74a02212a15dafdbd6c7929a516a1b3a3a6ba26df449e5827819c73e21ad5de2a2432ace34b950c8131aacb7a84c54f04679c5c290d4c89ea2d1880a4fe1bb5d309963a2dc6c99f691b251a747c9ea0a8e4e88787976d04a5e80f208063edbea4cab6316d639ce9e88f378f76184a9b21c37409743da4df924f4e"]}, @nested={0x144, 0x139, 0x0, 0x1, [@typed={0x8, 0x11b, 0x0, 0x0, @fd=r1}, @nested={0x138, 0xe0, 0x0, 0x1, [@generic="c05b86622f10d369a5bc9327eb81369e5f385bd6ce7a9342301197ab5b5c96f42de86a94fbb346aa0e4186ccb59c2418892085487b76af2e540d109a8c27797ec89fac5db8345632a08392dc541eda357e55ae937db53a720fbdda3526c38b6603a198ebc37dc61782b558f96b4c43fd556ea2c8fefb2ffe087b787fbe6ac2f7e18032f3983765b66ceee3539d66f6c7297ff551ed39b0f90dd6098f610cc4228c", @generic="c1cf915ad8a13cc9899f221c25219e01a1d08ea3792de145bd9c998ebf5acf7df718e6823203fa81d798954fda82a43261e82e7e63a7f05737821b06cdf92581dcabe7f661a07ffdafd86a65da7e7467e4ba64ea369ef0e02c2978ecf9d677e87ff4a8", @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xed}, @nested={0x4, 0xf}, @typed={0x14, 0x64, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}}]}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010d90472a0000000000001090224000100008000090400000003010000002100000001220000090581030000"], 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_open_procfs(r6, &(0x7f0000000100)='mounts\x00') 9m23.646521279s ago: executing program 1 (id=419): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket(0x39, 0x2, 0x3a) rseq(0x0, 0x0, 0x1, 0x0) msgget$private(0x0, 0x3ac) setrlimit(0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffffd}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c, 0x0}}], 0x1, 0x40010) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00#\f!\x00'}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001040000000000000000beb126a300400000", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700200100000000000000000000000000001400350077673100"/56], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00020000000000400000000000000000000800010002"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x100) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 9m22.577222724s ago: executing program 1 (id=421): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000000)=""/43) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {&(0x7f00000001c0)="ee641681c41fd678", 0x8}], 0x2) close(0x3) 9m20.801953021s ago: executing program 1 (id=427): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap,']) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000037}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x86}}}, 0x104) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r9 = syz_clone(0x11, 0x0, 0xfffffffffffffede, 0x0, 0x0, 0x0) r10 = syz_open_procfs(r9, &(0x7f0000000100)='oom_score\x00') pread64(r10, &(0x7f0000000500)=""/31, 0x1f, 0x6677) read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) 9m19.026627964s ago: executing program 1 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f5120007f51010049f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x102d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="019d2cbd7000fbdbdf251b00000008009a0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x28000}, 0x40) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) 9m3.220169833s ago: executing program 32 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f5120007f51010049f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x102d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="019d2cbd7000fbdbdf251b00000008009a0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x28000}, 0x40) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) 6.552101606s ago: executing program 3 (id=2103): socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x28, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 5.602439742s ago: executing program 3 (id=2105): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) io_setup(0x5, &(0x7f0000000e80)=0x0) io_pgetevents(r3, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3f, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f001, 0x1}) io_getevents(r3, 0x3, 0x0, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r4, 0x0}]) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000040)={0x0, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x400, 0x3, 0x5, 0x2, 0x3, 0xfffffff9, 0x6}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x0, 0x4, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f000008c000/0x3000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000002240), 0x0) 4.609389647s ago: executing program 3 (id=2108): openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20000050) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000180)={0x0, 0x1}) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2825) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) r6 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {0x0}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) 4.122142208s ago: executing program 0 (id=2112): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32], 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) 4.041704456s ago: executing program 0 (id=2113): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x154, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x130, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}, [{0xdd, 0x24, "8a70254dad90829ddb18be62e84e877606f1bb15aaeda7b68c72bb816a45e603389a3d1c"}, {0xdd, 0x94, "a9b8e8b2e8815dfdd27ddf0d9e1cb4fa1bbb67c1e564d75e01a3568e885b2ad15a99d00b7ffdeb02eebcc7545ca67fcad48c79ee89e03a97f892233201e08cb02c084d6cc9e65633c4f51e62e7d245088db7b2a0857ec4e5f911cb353d191498218794a9bd9095865f05de5722159704b56e4dd354369f3480578abd5a8f408dc04f90e5953feace89747961bbd24dac7393ae66"}, {0xdd, 0x6, "844485144ae3"}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.982474539s ago: executing program 0 (id=2114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000, 0x4000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x0, 0x0, 0x1}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x7, 0x0, 0xfffffffc}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x80000}, {0x82}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x1, 0xfffffffc, 0x200}, {0x5, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x3}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x100000, 0x0, 0x0, 0xec33, 0x0, 0x4}, {0x0, 0x0, 0xe}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x1000}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000001, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x10001}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000, 0x2}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x5}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 3.982239589s ago: executing program 2 (id=2115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0xfc, 0x1}, 0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = creat(&(0x7f0000000380)='./file1\x00', 0xecf86c37d53049c5) syz_clone3(&(0x7f0000001240)={0x200200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 3.981873637s ago: executing program 0 (id=2116): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) socket$packet(0x11, 0x2, 0x300) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x7, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x26, 0x1, 0x5, 0x1, 0x6, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x100800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x7, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x5, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x6, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x0, 0x5, 0x3, 0x9bb, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xfd, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0xa, ')'}, @global=@item_4={0x3, 0x1, 0xa, "5803e390"}]}}, 0x0}, 0x0) 3.442351258s ago: executing program 4 (id=2118): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 3.042438224s ago: executing program 2 (id=2119): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) io_setup(0x5, &(0x7f0000000e80)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3f, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f001, 0x1}) 2.572294056s ago: executing program 4 (id=2120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x33}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 2.571843926s ago: executing program 4 (id=2121): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2b", 0x10, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.032219586s ago: executing program 2 (id=2122): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x6, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 2.031879821s ago: executing program 2 (id=2123): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x138) socket(0x2, 0x3, 0x67) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.662600169s ago: executing program 4 (id=2124): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) memfd_secret(0x80000) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) 1.662350282s ago: executing program 4 (id=2125): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom(r4, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 1.52090503s ago: executing program 3 (id=2126): move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f000008c000/0x3000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000002240), 0x0) 1.52028465s ago: executing program 3 (id=2127): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) 1.042064982s ago: executing program 2 (id=2128): r0 = socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0xfffffffc) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000018000100fc0f00000000000002100000000000050000000006001500060000000c001680"], 0x30}}, 0x44890) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x6, 0x90, "fbcf64b61465c1f55e1db1d6267c5527b966ea88adc6ae83e85cca8489eeba7a903469d598307b9f487ce48768fa9c1b67b0c80eee3625c3be40acdab1b6ffb5a42dd1bb22a16f2bf125aa48f99ac2c39f348459fae2f3cd9cc076e8079a6025c8dcae7c00b7a52535ce279978832df8dc54a23474d34a1def59b5bcae1aa1afc09a34c6301c14c521d00acf2ce06a24"}, 0x98) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'ip6gretap0\x00', {}, 0xff}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc25c4110, &(0x7f0000000080)={0x0, [[0x7fff], [0x0, 0xfffffff9], [0x403]], '\x00', [{0x7, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}], '\x00', 0x100}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0x8008af26, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_usb_connect(0x2, 0x46, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x1e, 0xba, 0xd7, 0x8, 0xeb1a, 0x2801, 0x217a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x5}}]}}, 0x0) 921.697687ms ago: executing program 0 (id=2129): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 712.300039ms ago: executing program 4 (id=2130): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r4) poll(0x0, 0x0, 0x7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x8811) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r10, 0x0, 0x41}, 0x38) read$FUSE(r9, &(0x7f0000002d80)={0x2020}, 0x2025) 453.070075ms ago: executing program 2 (id=2131): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) io_setup(0x5, &(0x7f0000000e80)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3f, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f001, 0x1}) 172.417047ms ago: executing program 3 (id=2132): syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0xc, 0xf0, 0x3}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0xf, &(0x7f0000000780)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x7, 0x6}]}, 0x4, [{0x0, 0x0}, {0x2, &(0x7f0000000900)=@string={0x2}}, {0x0, 0x0}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x80c}}]}) 0s ago: executing program 0 (id=2133): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83000000000b0900"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040) kernel console output (not intermixed with test programs): in process `syz.0.1566'. [ 616.844818][ T40] audit: type=1326 audit(1772276208.041:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 616.851757][ T40] audit: type=1326 audit(1772276208.041:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 617.332290][T16227] netlink: 'syz.3.1565': attribute type 1 has an invalid length. [ 617.344963][T16227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.396418][ T40] audit: type=1326 audit(1772276208.671:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 617.411472][ T40] audit: type=1326 audit(1772276208.681:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 617.766727][ T40] audit: type=1326 audit(1772276209.041:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16229 comm="syz.4.1570" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700ef6c code=0x0 [ 618.423668][T16227] bond1: (slave veth3): Enslaving as an active interface with a down link [ 619.038774][T16240] overlay: ./file1 is not a directory [ 619.073392][ T40] audit: type=1326 audit(1772276210.341:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.3.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 619.330606][T16243] Cache volume key already in use (9p,syz,) [ 619.645581][T16251] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 619.659958][T16251] random: crng reseeded on system resumption [ 619.840414][T16258] netlink: 'syz.4.1578': attribute type 1 has an invalid length. [ 619.843326][T16258] netlink: 'syz.4.1578': attribute type 2 has an invalid length. [ 619.846499][T16258] netlink: 'syz.4.1578': attribute type 1 has an invalid length. [ 619.852506][T16258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1578'. [ 620.513436][T16268] 9pnet_virtio: no channels available for device syz [ 620.519355][T16268] overlayfs: failed to resolve './file1': -2 [ 621.872865][T16274] binder: 16272:16274 ioctl d000943e 80116cc0 returned -22 [ 622.057899][T16283] binder: 16279:16283 ioctl d000943e 80116cc0 returned -22 [ 623.157217][T12142] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 623.176590][T12142] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 623.588678][T16292] Bluetooth: hci0: too big key_count value 9038 [ 623.592241][T16292] netlink: 'syz.3.1588': attribute type 1 has an invalid length. [ 623.595817][T16292] netlink: 'syz.3.1588': attribute type 2 has an invalid length. [ 623.599095][T16292] netlink: 'syz.3.1588': attribute type 1 has an invalid length. [ 623.602393][T16292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1588'. [ 624.498776][ T39] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 624.564856][T16303] overlay: ./file1 is not a directory [ 624.584171][ T40] kauditd_printk_skb: 94 callbacks suppressed [ 624.586977][ T40] audit: type=1326 audit(1772276215.851:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.4.1594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 624.597921][ T40] audit: type=1326 audit(1772276215.851:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.4.1594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 624.611772][ T40] audit: type=1326 audit(1772276215.861:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.4.1594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 624.622230][ T40] audit: type=1326 audit(1772276215.861:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.4.1594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 624.632573][ T40] audit: type=1326 audit(1772276215.861:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.4.1594" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 624.654075][ T40] audit: type=1326 audit(1772276215.861:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.4.1594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 624.664600][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 624.670289][ T40] audit: type=1326 audit(1772276215.861:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.4.1594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 624.671132][ T39] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 624.677708][ T40] audit: type=1326 audit(1772276215.861:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.4.1594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 624.679066][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'. [ 624.682510][ T39] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 624.687660][ T40] audit: type=1326 audit(1772276215.861:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.4.1594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 624.691340][ T39] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 624.693698][ T40] audit: type=1326 audit(1772276215.871:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16306 comm="syz.4.1594" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 624.700851][ T39] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 624.700868][ T39] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.700895][ T39] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 624.700908][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.710166][ T39] usbtmc 5-1:16.0: bulk endpoints not found [ 624.734798][T16312] cifs: Unknown parameter '' [ 624.737656][T16312] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 624.740616][T16312] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1592'. [ 624.744972][T16312] netlink: 658 bytes leftover after parsing attributes in process `syz.3.1592'. [ 624.750319][T16312] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1592'. [ 624.981134][T16296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 625.139147][T16319] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 625.744400][ T72] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 625.894386][ T72] usb 7-1: Using ep0 maxpacket: 8 [ 625.898528][ T72] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 625.902300][ T72] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 625.908105][ T72] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 625.911637][ T72] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 625.916922][ T72] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.922168][ T72] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 625.926570][ T72] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.935334][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1598'. [ 625.945368][ T72] usbtmc 7-1:16.0: bulk endpoints not found [ 626.004859][T16336] cifs: Unknown parameter '' [ 626.031109][T16335] netlink: 'syz.3.1598': attribute type 1 has an invalid length. [ 626.033896][T16335] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1598'. [ 626.037133][T16335] netlink: 658 bytes leftover after parsing attributes in process `syz.3.1598'. [ 626.040305][T16335] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1598'. [ 626.113556][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1599'. [ 626.161429][T16328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.395481][T16339] cifs: Unknown parameter '' [ 626.400431][T16339] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 626.403459][T16339] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1599'. [ 626.406703][T16339] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1599'. [ 626.409919][T16339] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1599'. [ 627.016523][T16347] Bluetooth: hci0: too big key_count value 9038 [ 627.019857][T16347] netlink: 'syz.3.1600': attribute type 1 has an invalid length. [ 627.022592][T16347] netlink: 'syz.3.1600': attribute type 2 has an invalid length. [ 627.032339][T16347] netlink: 'syz.3.1600': attribute type 1 has an invalid length. [ 627.035847][T16347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1600'. [ 627.244327][ T50] usb 5-1: USB disconnect, device number 55 [ 627.609338][T16364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1603'. [ 628.342821][T16369] cifs: Unknown parameter '' [ 628.438604][T16369] netlink: 'syz.3.1606': attribute type 1 has an invalid length. [ 628.550920][ T50] usb 7-1: USB disconnect, device number 74 [ 628.729847][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 629.052893][T16383] /dev/nullb0: Can't lookup blockdev [ 629.068104][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.070546][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.129320][T16392] cifs: Unknown parameter '' [ 629.178616][T16388] netlink: 'syz.2.1608': attribute type 1 has an invalid length. [ 629.374474][ T39] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 629.513835][T16399] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 629.517739][T16399] netlink: 'syz.4.1614': attribute type 2 has an invalid length. [ 629.520443][T16399] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 629.537689][ T39] usb 8-1: Using ep0 maxpacket: 8 [ 629.547190][ T39] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 629.549922][ T39] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 629.555077][ T39] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 629.559095][ T39] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 629.563531][ T39] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.568446][ T39] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 629.571769][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.580085][ T39] usbtmc 8-1:16.0: bulk endpoints not found [ 629.796650][T16394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.117077][T16434] binder: 16430:16434 ioctl d000943e 80116cc0 returned -22 [ 632.428901][T16420] __nla_validate_parse: 9 callbacks suppressed [ 632.428914][T16420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1617'. [ 632.472314][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1620'. [ 632.952929][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 633.031447][T16463] cifs: Unknown parameter '' [ 633.047023][T16463] netlink: 'syz.4.1626': attribute type 1 has an invalid length. [ 633.057827][T16463] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1626'. [ 633.147935][ T50] usb 8-1: USB disconnect, device number 64 [ 633.150536][T16463] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1626'. [ 633.171348][T16463] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1626'. [ 633.524386][ T50] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 633.564369][ T72] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 633.644355][ T6026] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 633.684321][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 633.689319][ T50] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 633.693036][ T50] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 633.697982][ T50] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 633.702324][ T50] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 633.707350][ T50] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.713193][ T50] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 633.733813][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.734420][ T72] usb 7-1: Using ep0 maxpacket: 8 [ 633.740714][ T72] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 633.743431][ T72] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 633.746953][ T50] usbtmc 8-1:16.0: bulk endpoints not found [ 633.749065][ T72] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 633.752531][ T72] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 633.756303][ T72] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.760632][ T72] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 633.763703][ T72] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.769549][ T72] usbtmc 7-1:16.0: bulk endpoints not found [ 633.824709][ T6026] usb 5-1: Using ep0 maxpacket: 8 [ 633.828868][ T6026] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 633.832596][ T6026] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 633.836612][ T6026] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 633.839907][ T6026] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 633.843391][ T6026] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.847803][ T6026] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 633.850830][ T6026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.859205][ T6026] usbtmc 5-1:16.0: bulk endpoints not found [ 633.955740][T16466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.030126][T16477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.061582][T16479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1632'. [ 634.076052][T16470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 635.609864][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1634'. [ 636.218633][ T6026] usb 8-1: USB disconnect, device number 65 [ 636.350344][ T39] usb 7-1: USB disconnect, device number 75 [ 636.368875][T16511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.522943][ T9040] usb 5-1: USB disconnect, device number 56 [ 636.867440][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 636.867452][ T40] audit: type=1326 audit(1772276228.141:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.2.1640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 636.879039][ T40] audit: type=1326 audit(1772276228.141:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.2.1640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 636.887416][ T40] audit: type=1326 audit(1772276228.141:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.2.1640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 636.895444][ T40] audit: type=1326 audit(1772276228.141:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.2.1640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 636.903815][ T40] audit: type=1326 audit(1772276228.141:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.2.1640" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 636.912324][ T40] audit: type=1326 audit(1772276228.141:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.2.1640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 636.922417][ T40] audit: type=1326 audit(1772276228.141:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.2.1640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 636.932479][ T40] audit: type=1326 audit(1772276228.151:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.2.1640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 636.942806][ T40] audit: type=1326 audit(1772276228.151:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.2.1640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 636.951927][ T40] audit: type=1326 audit(1772276228.151:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.2.1640" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 637.711361][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'. [ 637.812518][T16532] cifs: Unknown parameter '' [ 637.874757][T16531] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 637.878291][T16531] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1639'. [ 637.881792][T16531] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1639'. [ 637.886428][T16531] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1639'. [ 637.908084][T16537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.042638][T16543] netlink: 'syz.2.1644': attribute type 11 has an invalid length. [ 638.046339][T16543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1644'. [ 639.085462][T12142] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 639.234492][T12142] usb 7-1: Using ep0 maxpacket: 8 [ 639.238649][T12142] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 639.241976][T12142] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 639.245403][T12142] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 639.249600][T12142] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 639.253296][T12142] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.258962][T12142] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 639.262299][T12142] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.274150][T12142] usbtmc 7-1:16.0: bulk endpoints not found [ 639.480301][T16559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.827815][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 640.841272][T16586] cifs: Unknown parameter '' [ 640.927850][T16585] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.930644][T16585] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.257238][T16585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.270256][T16585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.304968][T16586] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 641.360444][T16586] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1653'. [ 641.378437][T16586] netlink: 658 bytes leftover after parsing attributes in process `syz.3.1653'. [ 641.426539][T16586] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1653'. [ 641.813516][T16592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1656'. [ 642.414340][ T50] usb 7-1: USB disconnect, device number 76 [ 642.475760][ T197] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.478944][ T197] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.483409][ T197] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.486771][ T197] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.603350][T16596] policy can only be matched on NF_INET_PRE_ROUTING [ 642.603363][T16596] unable to load match [ 642.611177][T16603] Bluetooth: hci0: too big key_count value 9038 [ 642.614030][T16603] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 642.617441][T16603] netlink: 'syz.0.1660': attribute type 2 has an invalid length. [ 642.619979][T16603] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 642.884431][ T50] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 643.075625][T16615] overlayfs: failed to clone upperpath [ 643.424398][ T72] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 643.586931][ T72] usb 7-1: config 0 has an invalid descriptor of length 66, skipping remainder of the config [ 643.591316][ T72] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 643.600358][ T72] usb 7-1: config 0 interface 0 has no altsetting 0 [ 643.605136][ T72] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 643.608896][ T72] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 643.612721][ T72] usb 7-1: Product: syz [ 643.616535][ T72] usb 7-1: Manufacturer: syz [ 643.618686][ T72] usb 7-1: SerialNumber: syz [ 643.626569][ T72] usb 7-1: config 0 descriptor?? [ 643.933713][T16629] __nla_validate_parse: 2 callbacks suppressed [ 643.933751][T16629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1666'. [ 643.997030][ T50] usb 5-1: device descriptor read/64, error -71 [ 643.999530][T16630] cifs: Unknown parameter '' [ 644.013008][T16630] netlink: 'syz.3.1666': attribute type 1 has an invalid length. [ 644.018524][T16630] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1666'. [ 644.022666][T16630] netlink: 658 bytes leftover after parsing attributes in process `syz.3.1666'. [ 644.026645][T16630] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1666'. [ 644.119501][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 644.132367][T16632] cifs: Unknown parameter '' [ 644.139572][T16632] netlink: 'syz.4.1667': attribute type 1 has an invalid length. [ 644.142964][T16632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1667'. [ 644.146970][T16632] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1667'. [ 644.150537][T16632] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1667'. [ 644.234594][ T50] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 644.384287][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 644.387576][ T50] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 644.390373][ T50] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 644.393755][ T50] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 644.397097][ T50] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 644.400695][ T50] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.405076][ T50] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 644.408259][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.415785][ T50] usbtmc 5-1:16.0: bulk endpoints not found [ 644.622575][T16623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 644.663415][T16636] 9p: Bad value for 'rfdno' [ 645.609765][ T40] kauditd_printk_skb: 962 callbacks suppressed [ 645.609777][ T40] audit: type=1326 audit(1772276236.881:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16652 comm="syz.3.1671" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 645.619641][ T40] audit: type=1326 audit(1772276236.881:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16652 comm="syz.3.1671" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 645.627231][ T40] audit: type=1326 audit(1772276236.901:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16652 comm="syz.3.1671" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 645.635123][ T40] audit: type=1326 audit(1772276236.901:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16652 comm="syz.3.1671" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 645.642208][ T40] audit: type=1326 audit(1772276236.901:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16652 comm="syz.3.1671" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 645.649539][ T40] audit: type=1326 audit(1772276236.901:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16652 comm="syz.3.1671" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 645.657382][ T40] audit: type=1326 audit(1772276236.901:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16652 comm="syz.3.1671" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 645.659512][T16651] Cannot find add_set index 2 as target [ 645.667146][ T40] audit: type=1326 audit(1772276236.901:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16652 comm="syz.3.1671" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 645.708532][T16657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1671'. [ 645.849938][ T72] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 645.852978][ T40] audit: type=1326 audit(1772276237.121:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16661 comm="syz.4.1673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 645.861888][ T72] usb 7-1: USB disconnect, device number 77 [ 645.871327][ T40] audit: type=1326 audit(1772276237.121:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16661 comm="syz.4.1673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 645.881120][T15061] udevd[15061]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.029910][T16668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.699578][ T50] usb 5-1: USB disconnect, device number 58 [ 647.694151][T16692] netlink: 'syz.3.1683': attribute type 1 has an invalid length. [ 647.712008][T16692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 647.736535][T16692] bond2: (slave dummy0): making interface the new active one [ 647.741353][T16692] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 647.894771][T16698] binder: 16697:16698 ioctl 8927 80000140 returned -22 [ 647.934844][T16702] : renamed from vlan0 [ 648.412865][ T39] kernel read not supported for file /dsp (pid: 39 comm: kworker/2:1) [ 648.607430][T16710] block nbd3: shutting down sockets [ 648.844494][T16717] Bluetooth: hci0: too big key_count value 9038 [ 648.847979][T16717] netlink: 'syz.0.1690': attribute type 1 has an invalid length. [ 648.850878][T16717] netlink: 'syz.0.1690': attribute type 2 has an invalid length. [ 648.853585][T16717] netlink: 'syz.0.1690': attribute type 1 has an invalid length. [ 648.856141][T16717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1690'. [ 649.264412][ T39] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 649.414832][ T39] usb 8-1: Using ep0 maxpacket: 8 [ 649.419259][ T39] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 649.422762][ T39] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 649.427355][ T39] usb 8-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 649.431015][ T39] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 649.434862][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.569402][T16740] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1697'. [ 649.653613][T16723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.024377][ T9040] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 650.154440][ T9040] usb 5-1: device descriptor read/64, error -71 [ 650.404887][ T9040] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 650.564287][ T9040] usb 5-1: device descriptor read/64, error -71 [ 650.684447][ T9040] usb usb5-port1: attempt power cycle [ 651.024309][ T9040] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 651.045769][ T9040] usb 5-1: device descriptor read/8, error -71 [ 651.284446][ T9040] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 651.304794][ T9040] usb 5-1: device descriptor read/8, error -71 [ 651.414493][ T9040] usb usb5-port1: unable to enumerate USB device [ 652.179922][T16759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.268763][ T40] kauditd_printk_skb: 116 callbacks suppressed [ 652.268777][ T40] audit: type=1326 audit(1772276243.541:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16761 comm="syz.2.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 652.281034][ T40] audit: type=1326 audit(1772276243.541:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16761 comm="syz.2.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 652.288254][ T40] audit: type=1326 audit(1772276243.541:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16761 comm="syz.2.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 652.295367][ T40] audit: type=1326 audit(1772276243.541:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16761 comm="syz.2.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 652.303583][ T40] audit: type=1326 audit(1772276243.541:5460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16761 comm="syz.2.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 652.311917][ T40] audit: type=1326 audit(1772276243.541:5461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16761 comm="syz.2.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 652.321923][ T40] audit: type=1326 audit(1772276243.541:5462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16761 comm="syz.2.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 652.331377][ T40] audit: type=1326 audit(1772276243.541:5463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16761 comm="syz.2.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 652.338917][ T40] audit: type=1326 audit(1772276243.541:5464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16761 comm="syz.2.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 652.353011][ T40] audit: type=1326 audit(1772276243.541:5465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16761 comm="syz.2.1702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 652.377517][T16766] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1703'. [ 652.802369][T16772] Bluetooth: hci0: too big key_count value 9038 [ 652.805634][T16772] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 652.808180][T16772] netlink: 'syz.0.1705': attribute type 2 has an invalid length. [ 652.810746][T16772] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 652.813220][T16772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1705'. [ 653.420470][ T6026] usb 8-1: USB disconnect, device number 66 [ 655.111824][ T6026] IPVS: starting estimator thread 0... [ 655.224498][T16789] IPVS: using max 25 ests per chain, 60000 per kthread [ 655.237710][T16798] tmpfs: Unknown parameter 'uq' [ 655.245651][T16798] overlayfs: workdir and upperdir must reside under the same mount [ 655.259793][T16798] syzkaller0: entered promiscuous mode [ 655.261667][T16798] syzkaller0: entered allmulticast mode [ 655.654350][ T72] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 655.804251][ T72] usb 5-1: Using ep0 maxpacket: 8 [ 655.807647][ T72] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 655.810413][ T72] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 655.813693][ T72] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 655.819106][ T72] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 655.822170][ T72] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.828672][ T72] usbtmc 5-1:16.0: bulk endpoints not found [ 656.033470][T16810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.243596][T16841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1722'. [ 659.444364][ T6270] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 659.594374][ T6270] usb 8-1: Using ep0 maxpacket: 8 [ 659.598242][ T6270] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 659.601279][ T6270] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 659.604970][ T6270] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 659.608186][ T6270] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 659.612304][ T6270] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.617909][ T6270] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 659.620991][ T6270] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.630267][ T6270] usbtmc 8-1:16.0: bulk endpoints not found [ 659.826467][ T72] usb 5-1: USB disconnect, device number 63 [ 659.844134][T16839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.754007][T16871] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1728'. [ 661.561484][T16883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 661.580843][T16883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1732'. [ 661.594483][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1732'. [ 661.635412][T16883] team0: Port device dummy0 removed [ 661.641049][T16883] bridge_slave_0: left allmulticast mode [ 661.643712][T16883] bridge_slave_0: left promiscuous mode [ 661.648952][T16883] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.658062][T16883] bridge_slave_1: left allmulticast mode [ 661.660641][T16883] bridge_slave_1: left promiscuous mode [ 661.663432][T16883] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.674003][T16883] bond0: (slave bond_slave_0): Releasing backup interface [ 661.681517][T16883] bond0: (slave bond_slave_1): Releasing backup interface [ 661.693132][T16883] team0: Port device team_slave_0 removed [ 661.745370][T16883] team0: Port device team_slave_1 removed [ 661.774385][T16883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.807844][T16883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.813034][T16883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.852636][T16883] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 662.744867][ T6026] usb 8-1: USB disconnect, device number 67 [ 663.048515][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 663.157014][T16893] cifs: Unknown parameter '' [ 663.175425][T16893] netlink: 'syz.4.1733': attribute type 1 has an invalid length. [ 663.181659][T16893] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1733'. [ 663.204950][T16893] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1733'. [ 663.222237][T16893] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1733'. [ 663.276063][T16895] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 663.435093][T16898] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1735'. [ 663.694370][T16901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1736'. [ 664.074265][ T6270] usb 8-1: new full-speed USB device number 68 using dummy_hcd [ 664.161729][T16916] binder: 16915:16916 ioctl c0306201 80000180 returned -22 [ 664.235612][ T6270] usb 8-1: config 0 has an invalid descriptor of length 66, skipping remainder of the config [ 664.239363][ T6270] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 664.244085][ T6270] usb 8-1: config 0 interface 0 has no altsetting 0 [ 664.249464][ T6270] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 664.252548][ T6270] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 664.256522][ T6270] usb 8-1: Product: syz [ 664.258104][ T6270] usb 8-1: Manufacturer: syz [ 664.259741][ T6270] usb 8-1: SerialNumber: syz [ 664.262699][ T6270] usb 8-1: config 0 descriptor?? [ 664.489926][ T6270] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 664.496805][ T6270] usb 8-1: USB disconnect, device number 68 [ 664.505670][T15061] udevd[15061]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.079697][T16929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1743'. [ 667.959094][T16955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1748'. [ 668.495268][T16961] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 668.516750][T16961] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 668.878659][T16952] cgroup: fork rejected by pids controller in /syz4 [ 669.015620][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1753'. [ 669.036931][T17137] autofs: Unknown parameter 'fd0x0000000000000000' [ 669.096163][T17197] cifs: Unknown parameter '' [ 669.174910][T17197] netlink: 'syz.0.1753': attribute type 1 has an invalid length. [ 669.178207][T17197] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1753'. [ 669.187314][T17197] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1753'. [ 669.191148][T17197] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1753'. [ 669.534367][ T72] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 669.685633][ T72] usb 7-1: config 0 has an invalid descriptor of length 66, skipping remainder of the config [ 669.689111][ T72] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 669.693474][ T72] usb 7-1: config 0 interface 0 has no altsetting 0 [ 669.697521][ T72] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 669.700522][ T72] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 669.703250][ T72] usb 7-1: Product: syz [ 669.706549][ T72] usb 7-1: Manufacturer: syz [ 669.708084][ T72] usb 7-1: SerialNumber: syz [ 669.710992][ T72] usb 7-1: config 0 descriptor?? [ 669.893059][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 669.893072][ T40] audit: type=1326 audit(1772276261.161:5474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17947 comm="syz.0.1757" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x0 [ 669.937244][ T72] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 669.941225][ T72] usb 7-1: USB disconnect, device number 78 [ 669.947920][T15061] udevd[15061]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.016561][ T40] audit: type=1804 audit(1772276261.291:5475): pid=17950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1758" name="/newroot/432/file0" dev="fuse" ino=1 res=1 errno=0 [ 670.479394][T17961] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.482586][T17961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.486383][T17961] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.489091][T17961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.533427][T17961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.873590][T17980] binder: 17971:17980 ioctl c0306201 0 returned -14 [ 670.932840][ T40] audit: type=1326 audit(1772276262.201:5476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17979 comm="syz.4.1767" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x0 [ 671.961491][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1774'. [ 671.964517][T18003] netlink: 'syz.4.1774': attribute type 30 has an invalid length. [ 671.976269][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.979411][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.982862][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.986074][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.129472][T18007] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20002 [ 672.716661][T18020] gre0: entered allmulticast mode [ 673.594345][ T72] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 673.734389][ T6270] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 673.764341][ T72] usb 8-1: Using ep0 maxpacket: 8 [ 673.768467][ T72] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 673.771700][ T72] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 673.775387][ T72] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 673.778646][ T72] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 673.782384][ T72] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.787511][ T72] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 673.790466][ T72] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.797356][ T72] usbtmc 8-1:16.0: bulk endpoints not found [ 673.894316][ T6270] usb 7-1: Using ep0 maxpacket: 8 [ 673.897526][ T6270] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 673.900193][ T6270] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 673.903662][ T6270] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 673.907336][ T6270] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 673.910487][ T6270] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 673.914879][ T6270] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 673.917960][ T6270] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.924010][ T6270] usbtmc 7-1:16.0: bulk endpoints not found [ 674.011399][T18031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.125793][T18033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.346054][T18057] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 676.402647][ T6019] usb 8-1: USB disconnect, device number 69 [ 676.602610][ T50] usb 7-1: USB disconnect, device number 79 [ 676.806224][T18084] CIFS mount error: No usable UNC path provided in device string! [ 676.806224][T18084] [ 676.809741][T18084] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 676.813600][T18084] netlink: 'syz.3.1793': attribute type 1 has an invalid length. [ 676.816457][T18084] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1793'. [ 676.819866][T18084] netlink: 658 bytes leftover after parsing attributes in process `syz.3.1793'. [ 676.822953][T18084] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1793'. [ 676.988479][T18089] overlay: ./file1 is not a directory [ 676.997360][T18090] CIFS mount error: No usable UNC path provided in device string! [ 676.997360][T18090] [ 677.001887][T18090] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 677.034648][T18090] netlink: 'syz.0.1795': attribute type 1 has an invalid length. [ 677.038128][T18090] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1795'. [ 677.042113][T18090] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1795'. [ 677.050813][T18090] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1795'. [ 677.459195][T18098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'. [ 677.565345][T18102] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 677.669431][T18108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 678.587714][T18124] CIFS mount error: No usable UNC path provided in device string! [ 678.587714][T18124] [ 678.592105][T18124] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 678.597635][T18124] netlink: 'syz.0.1810': attribute type 1 has an invalid length. [ 678.601340][T18124] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1810'. [ 678.605450][T18124] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1810'. [ 678.608704][T18124] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1810'. [ 679.058343][T18129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1812'. [ 680.978462][T18146] netlink: 'syz.4.1817': attribute type 1 has an invalid length. [ 680.982017][T18146] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1817'. [ 680.986928][T18146] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1817'. [ 681.003832][T18153] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 681.008237][T18153] overlayfs: failed to set xattr on upper [ 681.166046][T18153] overlayfs: ...falling back to redirect_dir=nofollow. [ 681.169232][T18153] overlayfs: ...falling back to index=off. [ 681.171794][T18153] overlayfs: ...falling back to uuid=null. [ 681.193806][T18155] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 681.196632][T18155] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 681.203932][T18155] vhci_hcd vhci_hcd.0: Device attached [ 681.474989][ T39] usb 44-1: SetAddress Request (10) to port 0 [ 681.477258][ T39] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 682.097055][T18156] vhci_hcd: connection reset by peer [ 682.099309][ T1174] vhci_hcd vhci_hcd.3: stop threads [ 682.101205][ T1174] vhci_hcd vhci_hcd.3: release socket [ 682.103394][ T1174] vhci_hcd vhci_hcd.3: disconnect device [ 682.367322][T18168] CIFS mount error: No usable UNC path provided in device string! [ 682.367322][T18168] [ 682.375383][T18168] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 682.381466][T18168] netlink: 'syz.4.1822': attribute type 1 has an invalid length. [ 682.384596][T18168] __nla_validate_parse: 2 callbacks suppressed [ 682.384640][T18168] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1822'. [ 682.389871][T18168] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1822'. [ 682.393195][T18168] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1822'. [ 682.775425][T18172] 9p: Bad value for 'wfdno' [ 682.925723][ T40] audit: type=1326 audit(1772276274.201:5477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18169 comm="syz.0.1823" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4f6c code=0x0 [ 684.994385][ T9040] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 685.144319][ T9040] usb 5-1: Using ep0 maxpacket: 8 [ 685.147858][ T9040] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 685.151123][ T9040] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 685.155627][ T9040] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 685.160105][ T9040] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 685.164529][ T9040] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 685.169717][ T9040] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 685.173432][ T9040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.182126][ T9040] usbtmc 5-1:16.0: bulk endpoints not found [ 685.383723][T18192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 685.387039][T18200] overlayfs: failed to resolve './file1': -2 [ 686.014389][ T54] usb 8-1: new full-speed USB device number 70 using dummy_hcd [ 686.030497][T18233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1832'. [ 686.175741][ T54] usb 8-1: config 0 has an invalid descriptor of length 66, skipping remainder of the config [ 686.181778][ T54] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 686.187433][ T54] usb 8-1: config 0 interface 0 has no altsetting 0 [ 686.193308][ T54] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 686.198382][ T54] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 686.202266][ T54] usb 8-1: Product: syz [ 686.204311][ T54] usb 8-1: Manufacturer: syz [ 686.206376][ T54] usb 8-1: SerialNumber: syz [ 686.220451][ T54] usb 8-1: config 0 descriptor?? [ 686.231668][T18235] netlink: 'syz.4.1834': attribute type 10 has an invalid length. [ 686.248479][T18235] veth0_vlan: left promiscuous mode [ 686.252984][T18235] veth0_vlan: entered promiscuous mode [ 686.261181][T18235] team0: Device veth0_vlan failed to register rx_handler [ 686.497126][ T54] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 686.503215][ T54] usb 8-1: USB disconnect, device number 70 [ 686.515797][T18195] udevd[18195]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.574301][ T39] usb 44-1: device descriptor read/8, error -110 [ 686.694589][T18241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1835'. [ 686.974848][ T39] usb usb44-port1: attempt power cycle [ 687.314346][ T6270] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 687.464297][ T6270] usb 8-1: Using ep0 maxpacket: 8 [ 687.468263][ T6270] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.473341][ T6270] usb 8-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 687.476315][ T6270] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.478837][ T6270] usb 8-1: Product: syz [ 687.480193][ T6270] usb 8-1: Manufacturer: syz [ 687.481900][ T6270] usb 8-1: SerialNumber: syz [ 687.555189][ T39] usb usb44-port1: unable to enumerate USB device [ 687.683826][ T6019] usb 5-1: USB disconnect, device number 64 [ 687.698766][ T6270] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 687.705738][ T6270] usb 8-1: USB disconnect, device number 71 [ 688.024284][ T6019] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 688.175290][ T6019] usb 5-1: not running at top speed; connect to a high speed hub [ 688.179092][ T6019] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.182796][ T6019] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 688.186263][ T6019] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 688.189907][ T6019] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 688.195301][ T6019] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 688.198519][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.201249][ T6019] usb 5-1: Product: syz [ 688.202713][ T6019] usb 5-1: Manufacturer: syz [ 688.204536][ T6019] usb 5-1: SerialNumber: syz [ 688.420951][ T6019] usb 5-1: 0:2 : does not exist [ 688.447380][ T6019] usb 5-1: USB disconnect, device number 65 [ 688.471853][T18195] udevd[18195]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.851467][T18268] netlink: 'syz.4.1843': attribute type 2 has an invalid length. [ 688.855650][T18268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.955550][ T40] audit: type=1326 audit(1772276280.231:5478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18270 comm="syz.0.1844" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4f6c code=0x0 [ 690.344337][ T9118] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 690.496734][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.498130][ T9118] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.498984][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.502265][ T9118] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 690.507679][ T9118] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 690.510700][ T9118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.515181][ T9118] usb 5-1: config 0 descriptor?? [ 691.396207][T18289] bond3: option miimon: invalid value (18446744073709551615) [ 691.399533][T18289] bond3: option miimon: allowed values 0 - 2147483647 [ 691.404131][T18289] bond3 (unregistering): Released all slaves [ 691.574800][T18302] xt_nat: multiple ranges no longer supported [ 691.616991][T18299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1854'. [ 691.619899][T18299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1854'. [ 691.623572][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1854'. [ 691.694353][ T9118] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 691.864677][ T9118] usb 8-1: Using ep0 maxpacket: 8 [ 691.868509][ T9118] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.871989][ T9118] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 691.877345][ T9118] usb 8-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 691.880602][ T9118] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.883410][ T9118] usb 8-1: Product: syz [ 691.884969][ T9118] usb 8-1: Manufacturer: syz [ 691.886651][ T9118] usb 8-1: SerialNumber: syz [ 691.890002][ T9118] usb 8-1: config 0 descriptor?? [ 692.099736][ T6019] usb 8-1: USB disconnect, device number 72 [ 692.835053][ T6270] usb 5-1: USB disconnect, device number 66 [ 692.894338][ T9118] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 693.044434][ T9118] usb 8-1: Using ep0 maxpacket: 32 [ 693.047636][ T9118] usb 8-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 693.050994][ T9118] usb 8-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 693.056070][ T9118] usb 8-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=da.59 [ 693.059254][ T9118] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.061963][ T9118] usb 8-1: Product: syz [ 693.063534][ T9118] usb 8-1: Manufacturer: syz [ 693.065427][ T9118] usb 8-1: SerialNumber: syz [ 693.194352][ T6270] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 693.278562][ T9118] usb 8-1: USB disconnect, device number 73 [ 693.345625][ T6270] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.349270][ T6270] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 693.353010][ T6270] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 693.356048][ T6270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 693.358630][ T6270] usb 5-1: SerialNumber: syz [ 693.569299][ T6270] usb 5-1: invalid UAC_HEADER (v1) [ 693.588279][ T6270] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 693.593911][ T6270] usb 5-1: USB disconnect, device number 67 [ 693.603912][T18195] udevd[18195]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.054341][ T6270] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 694.204377][ T6270] usb 8-1: Using ep0 maxpacket: 16 [ 694.208162][ T6270] usb 8-1: unable to get BOS descriptor or descriptor too short [ 694.211665][ T6270] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 694.215411][ T6270] usb 8-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 694.220443][ T6270] usb 8-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=ea.ae [ 694.223652][ T6270] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.226830][ T6270] usb 8-1: Product: syz [ 694.228328][ T6270] usb 8-1: Manufacturer: syz [ 694.229959][ T6270] usb 8-1: SerialNumber: syz [ 694.374482][ T72] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 694.440144][ T6270] usb 8-1: USB disconnect, device number 74 [ 694.536482][ T72] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 694.539272][ T72] usb 5-1: config 1 has no interface number 0 [ 694.541615][ T72] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 694.545538][ T72] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 694.549783][ T72] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 694.559101][ T72] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 694.562930][ T72] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.566310][ T72] usb 5-1: Product: syz [ 694.568136][ T72] usb 5-1: Manufacturer: syz [ 694.570163][ T72] usb 5-1: SerialNumber: syz [ 694.578357][ T72] usb 5-1: Expected 3 endpoints, found: 0 [ 695.284335][ T50] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 695.434390][ T50] usb 8-1: Using ep0 maxpacket: 32 [ 695.441137][ T50] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.446193][ T50] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 695.452455][ T50] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 695.456168][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.459368][ T50] usb 8-1: Product: syz [ 695.461240][ T50] usb 8-1: Manufacturer: syz [ 695.463218][ T50] usb 8-1: SerialNumber: syz [ 695.469412][ T50] usb 8-1: config 0 descriptor?? [ 695.684930][ T39] usb 8-1: USB disconnect, device number 75 [ 696.594328][ T72] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 696.754354][ T72] usb 8-1: Using ep0 maxpacket: 32 [ 696.758061][ T72] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.761761][ T72] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 696.766450][ T72] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 696.769512][ T72] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.772212][ T72] usb 8-1: Product: syz [ 696.773692][ T72] usb 8-1: Manufacturer: syz [ 696.775567][ T72] usb 8-1: SerialNumber: syz [ 696.780021][ T72] usb 8-1: config 0 descriptor?? [ 697.165492][ T39] usb 5-1: USB disconnect, device number 68 [ 697.554315][ T39] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 697.707389][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.711515][ T39] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 697.712520][T18351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.715620][ T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 697.720526][T18351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.726703][ T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 697.732731][ T39] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 697.737041][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.740376][ T39] usb 5-1: Product: 큐熞疴赹ᠷޯ뼿垠瑾馄⵺鋇Թ颳䊛暰亙뮐ᑚ⶘붊⟳㪢溥霊घ͜ﱕﷆ䇙颓뙙㉎렵㒞䇠㉃짤ਾ쵫農镼⩳酐皥ᇛ멬竉쾀쒊霓犌扟춺넛唞＠닗뛳戠괷誴풂詪箰밑坴ⶥὂ䎪헒쬺②晛눥㖘⫼ [ 697.750879][ T39] usb 5-1: Manufacturer: 䐊 [ 697.752829][ T39] usb 5-1: SerialNumber: щ [ 697.972161][ T39] usb 5-1: 0:2 : does not exist [ 698.005985][ T39] usb 5-1: USB disconnect, device number 69 [ 698.924343][ T39] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 699.075840][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.079234][ T39] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a1d, bcdDevice= 0.00 [ 699.082415][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.087952][ T39] usb 5-1: config 0 descriptor?? [ 699.096687][ T39] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 699.294951][ T6019] usb 8-1: USB disconnect, device number 76 [ 700.080126][T18386] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 700.584526][ T39] usb 8-1: new full-speed USB device number 77 using dummy_hcd [ 700.735510][ T39] usb 8-1: not running at top speed; connect to a high speed hub [ 700.739139][ T39] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 700.742557][ T39] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 700.745703][ T39] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 700.749251][ T39] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 700.756837][ T39] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 700.762963][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.768412][ T39] usb 8-1: Product: syz [ 700.769925][ T39] usb 8-1: Manufacturer: syz [ 700.771451][ T39] usb 8-1: SerialNumber: syz [ 701.001459][ T39] usb 8-1: 0:2 : does not exist [ 701.020473][ T39] usb 8-1: USB disconnect, device number 77 [ 701.039300][T18195] udevd[18195]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 701.527263][ T72] usb 5-1: USB disconnect, device number 70 [ 701.573643][T18402] ptrace attach of "/syz-executor exec"[9234] was attempted by "/syz-executor exec"[18402] [ 701.864304][ T72] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 702.014654][ T72] usb 5-1: Using ep0 maxpacket: 32 [ 702.021628][ T72] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 702.026462][ T72] usb 5-1: config 0 has no interface number 0 [ 702.029173][ T72] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 702.033405][ T72] usb 5-1: config 0 interface 1 has no altsetting 0 [ 702.037866][ T72] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 702.041236][ T72] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.044312][ T72] usb 5-1: Product: syz [ 702.046002][ T72] usb 5-1: Manufacturer: syz [ 702.047797][ T72] usb 5-1: SerialNumber: syz [ 702.051885][ T72] usb 5-1: config 0 descriptor?? [ 702.184395][ T39] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 702.265842][ T72] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 702.271480][ T72] cx231xx 5-1:0.1: Failed to read PCB config [ 702.274437][ T72] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 702.280679][ T72] usb 5-1: USB disconnect, device number 71 [ 702.334304][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 702.337512][ T39] usb 8-1: config 0 has no interfaces? [ 702.340303][ T39] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 702.343681][ T39] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 702.346400][ T39] usb 8-1: Manufacturer: syz [ 702.349475][ T39] usb 8-1: config 0 descriptor?? [ 702.560270][T18407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.563307][T18407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.714451][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 702.864382][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 702.867892][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 702.870596][ T9] usb 5-1: config 0 has no interface number 0 [ 702.872663][ T9] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 702.876393][ T9] usb 5-1: config 0 interface 1 has no altsetting 0 [ 702.880246][ T9] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 702.883128][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.886002][ T9] usb 5-1: Product: syz [ 702.887429][ T9] usb 5-1: Manufacturer: syz [ 702.888950][ T9] usb 5-1: SerialNumber: syz [ 702.892720][ T9] usb 5-1: config 0 descriptor?? [ 703.100310][ T9] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 703.104956][ T9] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 703.214862][ T9] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 703.218284][ T9] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 703.221878][ T9] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 703.225589][ T9] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 703.229340][ T9] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 703.232274][ T9] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -32 [ 703.248128][ T9] i2c i2c-3: Added multiplexed i2c bus 5 [ 703.251592][ T9] i2c i2c-3: Added multiplexed i2c bus 6 [ 703.254149][ T9] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 703.257085][ T9] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 703.274783][ T9] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -32 [ 704.170560][T18421] macvtap0: entered allmulticast mode [ 704.172439][T18421] veth0_macvtap: entered allmulticast mode [ 704.575358][ T72] usb 5-1: USB disconnect, device number 72 [ 704.796290][ T1324] usb 8-1: USB disconnect, device number 78 [ 704.914300][ T72] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 705.064506][ T72] usb 5-1: Using ep0 maxpacket: 32 [ 705.067743][ T72] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.073316][ T72] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 705.076528][ T72] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.079275][ T72] usb 5-1: Product: syz [ 705.080631][ T72] usb 5-1: Manufacturer: syz [ 705.082125][ T72] usb 5-1: SerialNumber: syz [ 705.293547][ T72] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 705.299909][ T72] usb 5-1: USB disconnect, device number 73 [ 705.624341][ T6019] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 705.774295][ T6019] usb 8-1: Using ep0 maxpacket: 16 [ 705.778659][ T6019] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.782701][ T6019] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 705.785999][ T6019] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 705.789660][ T6019] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 705.795274][ T6019] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 705.798418][ T6019] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.801373][ T6019] usb 8-1: Product: syz [ 705.803238][ T6019] usb 8-1: Manufacturer: syz [ 705.805021][ T6019] usb 8-1: SerialNumber: syz [ 706.013877][ T6019] usb 8-1: 0:2 : does not exist [ 706.033220][ T6019] usb 8-1: USB disconnect, device number 79 [ 706.104376][ T6026] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 706.232980][T18446] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.236861][T18446] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.258314][ T6026] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.266839][ T6026] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 706.274885][ T6026] usb 5-1: New USB device found, idVendor=7d15, idProduct=31b2, bcdDevice=57.4b [ 706.283459][ T6026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.295308][ T6026] usb 5-1: config 0 descriptor?? [ 706.310944][T18446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.320659][T18446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.359925][T18446] veth0_macvtap: left allmulticast mode [ 706.394283][ T1192] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.398643][ T1192] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.403016][ T1192] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.407542][ T1192] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.694469][T18442] fuse: root generation should be zero [ 706.844376][ T72] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 707.024254][ T72] usb 8-1: Using ep0 maxpacket: 8 [ 707.028393][ T72] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.032910][ T72] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 707.037365][ T72] usb 8-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 707.041689][ T72] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.047308][ T72] usb 8-1: config 0 descriptor?? [ 707.256803][ T1324] usb 8-1: USB disconnect, device number 80 [ 707.703981][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1903'. [ 708.204353][ T6026] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 708.354335][ T6026] usb 8-1: Using ep0 maxpacket: 32 [ 708.357573][ T6026] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.361169][ T6026] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 708.364390][ T6026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.370011][ T6026] usb 8-1: config 0 descriptor?? [ 708.375094][ T6026] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 708.832807][ T1324] usb 5-1: USB disconnect, device number 74 [ 710.044384][ T1324] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 710.215865][ T1324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.219431][ T1324] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 710.222613][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.226605][ T1324] usb 5-1: config 0 descriptor?? [ 710.231252][ T1324] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 710.434628][T18477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.438977][T18477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.444022][ T1324] usb 5-1: USB disconnect, device number 75 [ 710.895569][ T1324] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 710.911129][T18487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1912'. [ 711.044386][ T1324] usb 5-1: Using ep0 maxpacket: 32 [ 711.048632][ T1324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.053239][ T1324] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 711.058474][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.064077][ T1324] usb 5-1: config 0 descriptor?? [ 711.069128][ T1324] hub 5-1:0.0: bad descriptor, ignoring hub [ 711.071559][ T1324] hub 5-1:0.0: probe with driver hub failed with error -5 [ 711.075670][ T1324] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 711.399040][ T9] usb 8-1: USB disconnect, device number 81 [ 711.672925][T18498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.680315][T18498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.734431][ T9] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 711.884370][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 711.888811][ T9] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 711.893503][ T9] usb 8-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 711.900811][ T9] usb 8-1: string descriptor 0 read error: -22 [ 711.903688][ T9] usb 8-1: New USB device found, idVendor=a156, idProduct=e35a, bcdDevice=74.ff [ 711.907760][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.121730][ T9] usb 8-1: USB disconnect, device number 82 [ 713.004685][ T6026] usb 5-1: USB disconnect, device number 76 [ 713.284301][ T9] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 713.436024][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.442034][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 713.446725][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 713.450720][ T9] usb 5-1: SerialNumber: syz [ 713.467687][ T9] usb 5-1: bad CDC descriptors [ 713.784336][ T6019] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 713.946347][ T6019] usb 8-1: Using ep0 maxpacket: 32 [ 713.965928][ T6019] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 713.975287][ T6019] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 713.978388][ T6019] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 713.981206][ T6019] usb 8-1: Product: syz [ 713.982440][T18513] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1920'. [ 713.982783][ T6019] usb 8-1: Manufacturer: syz [ 713.989120][ T6019] usb 8-1: SerialNumber: syz [ 713.992003][ T6019] usb 8-1: config 0 descriptor?? [ 713.994301][T18511] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 713.997905][ T6019] hub 8-1:0.0: bad descriptor, ignoring hub [ 714.000226][T18513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1920'. [ 714.004014][ T6019] hub 8-1:0.0: probe with driver hub failed with error -5 [ 714.606317][T18511] usb 8-1: reset high-speed USB device number 83 using dummy_hcd [ 714.761429][T18511] usb 8-1: device firmware changed [ 714.766306][ T9] usb 8-1: USB disconnect, device number 83 [ 714.904303][ T9] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 715.054370][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 715.058588][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 715.066538][ T9] usb 8-1: string descriptor 0 read error: -22 [ 715.069459][ T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 715.073494][ T9] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 715.078156][ T9] usb 8-1: config 0 descriptor?? [ 715.083795][T18517] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 715.087500][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 715.089626][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 715.404960][ T9] usb 8-1: USB disconnect, device number 84 [ 715.936521][ T6019] usb 5-1: USB disconnect, device number 77 [ 716.304307][ T1324] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 716.304348][ T6019] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 716.455361][ T1324] usb 8-1: Using ep0 maxpacket: 16 [ 716.470044][ T1324] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.474403][ T6019] usb 5-1: Using ep0 maxpacket: 16 [ 716.474946][ T1324] usb 8-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 716.480847][ T1324] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.486033][ T6019] usb 5-1: unable to get BOS descriptor or descriptor too short [ 716.486093][ T1324] usb 8-1: config 0 descriptor?? [ 716.489754][ T6019] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 716.494045][ T6019] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 716.501728][ T1324] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 716.506225][ T6019] usb 5-1: New USB device found, idVendor=0729, idProduct=1284, bcdDevice=fe.b7 [ 716.509566][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.512732][ T6019] usb 5-1: Product: syz [ 716.519543][ T6019] usb 5-1: Manufacturer: syz [ 716.521175][ T6019] usb 5-1: SerialNumber: syz [ 716.736636][ T6019] usb 5-1: USB disconnect, device number 78 [ 717.422638][ T40] audit: type=1326 audit(1772276308.691:5479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18535 comm="syz.3.1929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 717.434279][ T40] audit: type=1326 audit(1772276308.691:5480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18535 comm="syz.3.1929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 717.443319][ T40] audit: type=1326 audit(1772276308.701:5481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18535 comm="syz.3.1929" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 717.451559][ T40] audit: type=1326 audit(1772276308.701:5482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18535 comm="syz.3.1929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 717.459040][ T40] audit: type=1326 audit(1772276308.701:5483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18535 comm="syz.3.1929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 717.466334][ T40] audit: type=1326 audit(1772276308.701:5484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18535 comm="syz.3.1929" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 717.473320][ T40] audit: type=1326 audit(1772276308.701:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18535 comm="syz.3.1929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 717.482668][ T40] audit: type=1326 audit(1772276308.701:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18535 comm="syz.3.1929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 717.574347][ T72] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 717.726129][ T72] usb 5-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 717.730590][ T72] usb 5-1: config 136 has 0 interfaces, different from the descriptor's value: 3 [ 717.736953][ T72] usb 5-1: New USB device found, idVendor=19d2, idProduct=1270, bcdDevice=69.0b [ 717.739995][ T72] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.742685][ T72] usb 5-1: Product: syz [ 717.744068][ T72] usb 5-1: Manufacturer: syz [ 717.746004][ T72] usb 5-1: SerialNumber: syz [ 717.961662][ T72] usb 5-1: USB disconnect, device number 79 [ 718.744328][ T1324] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 718.896167][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 718.912166][ T1324] usb 5-1: unable to get BOS descriptor or descriptor too short [ 718.922338][ T1324] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 718.927650][ T72] usb 8-1: USB disconnect, device number 85 [ 718.927835][ T1324] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 718.937263][ T1324] usb 5-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=f4.d9 [ 718.943186][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.947104][ T1324] usb 5-1: Product: syz [ 718.949105][ T1324] usb 5-1: Manufacturer: syz [ 718.951178][ T1324] usb 5-1: SerialNumber: syz [ 719.163830][T18571] syzkaller1: entered promiscuous mode [ 719.165789][T18571] syzkaller1: entered allmulticast mode [ 719.329199][ T1324] usb 5-1: USB disconnect, device number 80 [ 719.594394][ T9] usb 8-1: new full-speed USB device number 86 using dummy_hcd [ 719.746150][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.750376][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 719.753538][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 719.757088][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.764140][ T9] usb 8-1: config 0 descriptor?? [ 720.274347][ T1324] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 720.434285][ T1324] usb 5-1: Using ep0 maxpacket: 32 [ 720.442719][ T1324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.451635][ T1324] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 720.462239][ T1324] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 720.471524][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.483411][ T1324] usb 5-1: config 0 descriptor?? [ 722.069957][ T72] usb 8-1: USB disconnect, device number 86 [ 722.424326][ T72] usb 8-1: new full-speed USB device number 87 using dummy_hcd [ 722.606294][ T72] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.613360][ T72] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 722.625142][ T72] usb 8-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=1e.1f [ 722.631317][ T72] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.636649][ T72] usb 8-1: Product: syz [ 722.639573][ T72] usb 8-1: Manufacturer: syz [ 722.642722][ T72] usb 8-1: SerialNumber: syz [ 722.853933][ T72] usb 8-1: USB disconnect, device number 87 [ 723.106232][ T1324] usb 5-1: USB disconnect, device number 81 [ 723.464756][ T1324] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 723.624371][ T9] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 723.640092][ T1324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.646287][ T1324] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 723.652514][ T1324] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 723.656866][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.664373][ T1324] usb 5-1: Product: syz [ 723.668238][ T1324] usb 5-1: Manufacturer: syz [ 723.674422][ T1324] usb 5-1: SerialNumber: syz [ 723.679190][ T1324] usb 5-1: config 0 descriptor?? [ 723.784403][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 723.789122][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 723.793768][ T9] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 723.798652][ T9] usb 8-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 723.805142][ T9] usb 8-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 723.809107][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.812581][ T9] usb 8-1: Product: syz [ 723.814812][ T9] usb 8-1: Manufacturer: syz [ 723.816849][ T9] usb 8-1: SerialNumber: syz [ 723.893954][ T9118] usb 5-1: USB disconnect, device number 82 [ 724.031578][ T9] usb 8-1: USB disconnect, device number 88 [ 724.924262][ T72] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 725.724383][ T9] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 725.874326][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 725.878893][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.883283][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 725.889255][ T9] usb 8-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 725.893300][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.896706][ T9] usb 8-1: Product: syz [ 725.898604][ T9] usb 8-1: Manufacturer: syz [ 725.900649][ T9] usb 8-1: SerialNumber: syz [ 725.905117][ T9] usb 8-1: config 0 descriptor?? [ 726.156615][T18655] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1967'. [ 727.459560][ T72] usb 5-1: unable to get BOS descriptor or descriptor too short [ 727.465697][ T72] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 727.468296][ T72] usb 5-1: can't read configurations, error -71 [ 727.874465][ T72] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 728.034288][ T72] usb 5-1: Using ep0 maxpacket: 32 [ 728.040584][ T72] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 728.046532][ T72] usb 5-1: config 0 has no interface number 0 [ 728.051313][ T72] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 728.058995][ T72] usb 5-1: config 0 interface 1 has no altsetting 0 [ 728.066292][ T72] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 728.072829][ T72] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.078674][ T72] usb 5-1: Product: syz [ 728.081625][ T72] usb 5-1: Manufacturer: syz [ 728.085220][ T72] usb 5-1: SerialNumber: syz [ 728.092064][ T72] usb 5-1: config 0 descriptor?? [ 728.311450][ T72] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 728.316420][ T72] cx231xx 5-1:0.1: Failed to read PCB config [ 728.318996][ T72] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 728.324294][ T72] usb 5-1: USB disconnect, device number 84 [ 728.474318][T12142] usb 8-1: USB disconnect, device number 89 [ 728.754323][ T6019] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 728.874333][T12142] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 728.904312][ T6019] usb 5-1: Using ep0 maxpacket: 32 [ 728.907986][ T6019] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 728.910894][ T6019] usb 5-1: config 0 has no interface number 0 [ 728.913126][ T6019] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 728.916979][ T6019] usb 5-1: config 0 interface 1 has no altsetting 0 [ 728.921181][ T6019] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 728.924533][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.927262][ T6019] usb 5-1: Product: syz [ 728.928714][ T6019] usb 5-1: Manufacturer: syz [ 728.930277][ T6019] usb 5-1: SerialNumber: syz [ 728.933458][ T6019] usb 5-1: config 0 descriptor?? [ 729.036303][T12142] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.040758][T12142] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 729.044812][T12142] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.050116][T12142] usb 8-1: config 0 descriptor?? [ 729.056274][T12142] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 729.141563][ T6019] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 729.145448][ T6019] cx231xx 5-1:0.1: bad scenario!!!!! [ 729.145448][ T6019] config_info=0 [ 729.148461][ T6019] cx231xx 5-1:0.1: Failed to read PCB config [ 729.255260][T12142] usb 8-1: USB disconnect, device number 90 [ 729.346113][ T39] usb 5-1: USB disconnect, device number 85 [ 729.911874][ T40] audit: type=1326 audit(1772276321.181:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18683 comm="syz.0.1978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 729.924355][ T40] audit: type=1326 audit(1772276321.181:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18683 comm="syz.0.1978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 729.944430][ T40] audit: type=1326 audit(1772276321.201:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18683 comm="syz.0.1978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 729.955050][ T40] audit: type=1326 audit(1772276321.201:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18683 comm="syz.0.1978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 729.967492][ T40] audit: type=1326 audit(1772276321.201:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18683 comm="syz.0.1978" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 729.979851][ T40] audit: type=1326 audit(1772276321.201:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18683 comm="syz.0.1978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 729.988450][ T40] audit: type=1326 audit(1772276321.201:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18683 comm="syz.0.1978" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 729.996285][ T40] audit: type=1326 audit(1772276321.231:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18683 comm="syz.0.1978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 730.003733][ T40] audit: type=1326 audit(1772276321.231:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18683 comm="syz.0.1978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x7ffc0000 [ 730.174260][T12142] usb 8-1: new full-speed USB device number 91 using dummy_hcd [ 730.304355][ T9118] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 730.355710][T12142] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.360590][T12142] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 730.363781][T12142] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 730.366666][T12142] usb 8-1: SerialNumber: syz [ 730.372111][T12142] usb 8-1: bad CDC descriptors [ 730.456290][ T9118] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.459693][ T9118] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 730.462871][ T9118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.468822][ T9118] usb 5-1: config 0 descriptor?? [ 730.473823][ T9118] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 731.377274][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1979'. [ 732.007131][T18703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'. [ 732.012176][T18703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'. [ 732.801042][ T39] usb 8-1: USB disconnect, device number 91 [ 733.075024][ T9118] usb 5-1: USB disconnect, device number 86 [ 733.154380][ T39] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 733.304496][ T39] usb 8-1: Using ep0 maxpacket: 32 [ 733.308902][ T39] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.313314][ T39] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 733.319637][ T39] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 733.323595][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.326704][ T39] usb 8-1: Product: syz [ 733.328204][ T39] usb 8-1: Manufacturer: syz [ 733.329967][ T39] usb 8-1: SerialNumber: syz [ 733.333205][ T39] usb 8-1: config 0 descriptor?? [ 733.574363][ T39] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 733.744278][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 733.747337][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.750729][ T39] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 733.755583][ T39] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 733.758631][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.761445][ T39] usb 5-1: Product: syz [ 733.762911][ T39] usb 5-1: Manufacturer: syz [ 733.764750][ T39] usb 5-1: SerialNumber: syz [ 733.768342][ T39] usb 5-1: config 0 descriptor?? [ 734.052306][ T40] audit: type=1326 audit(1772276325.321:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18706 comm="syz.0.1985" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f6c code=0x0 [ 734.650388][T12142] usb 5-1: USB disconnect, device number 87 [ 735.714385][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 735.854599][ T39] usb 8-1: USB disconnect, device number 92 [ 735.865367][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 735.873025][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.877565][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 735.883723][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 735.887910][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.890559][ T9] usb 5-1: Product: syz [ 735.891949][ T9] usb 5-1: Manufacturer: syz [ 735.893509][ T9] usb 5-1: SerialNumber: syz [ 735.897906][ T9] usb 5-1: config 0 descriptor?? [ 736.109871][T18739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.113791][T18739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.118659][T18739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.121939][T18739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.128762][T18739] i2c i2c-1: dtv_property_process_set: SET cmd 0x72657470 undefined [ 736.141559][ T6075] usb 5-1: USB disconnect, device number 88 [ 736.274579][ T9] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 736.424494][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 736.428841][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.432180][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 736.436779][ T9] usb 8-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 736.439944][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.442561][ T9] usb 8-1: Product: syz [ 736.443952][ T9] usb 8-1: Manufacturer: syz [ 736.445609][ T9] usb 8-1: SerialNumber: syz [ 736.448767][ T9] usb 8-1: config 0 descriptor?? [ 737.824363][T12142] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 737.976172][T12142] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.980728][T12142] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 737.984776][T12142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.990258][T12142] usb 5-1: config 0 descriptor?? [ 737.995821][T12142] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 738.250998][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2002'. [ 738.976754][T12142] usb 8-1: USB disconnect, device number 93 [ 739.354292][T12142] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 739.514285][T12142] usb 8-1: Using ep0 maxpacket: 16 [ 739.517839][T12142] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.522030][T12142] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 739.528109][T12142] usb 8-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 739.531613][T12142] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.535744][T12142] usb 8-1: Product: syz [ 739.537779][T12142] usb 8-1: Manufacturer: syz [ 739.539797][T12142] usb 8-1: SerialNumber: syz [ 739.544660][T12142] usb 8-1: config 0 descriptor?? [ 740.618708][ T9118] usb 5-1: USB disconnect, device number 89 [ 741.054350][ T6075] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 741.173860][T18805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2015'. [ 741.177163][T18805] 8021q: VLANs not supported on caif0 [ 741.214269][ T6075] usb 5-1: Using ep0 maxpacket: 32 [ 741.217382][ T6075] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 741.220765][ T6075] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 741.226269][ T6075] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=c3.55 [ 741.229337][ T6075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.232008][ T6075] usb 5-1: Product: syz [ 741.233448][ T6075] usb 5-1: Manufacturer: syz [ 741.235209][ T6075] usb 5-1: SerialNumber: syz [ 741.447792][T18802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.453603][T18802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.462064][ T6075] usb 5-1: USB disconnect, device number 90 [ 742.054277][ T39] usb 8-1: USB disconnect, device number 94 [ 742.234373][ T6075] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 742.353238][T18819] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2020'. [ 742.394318][ T6075] usb 5-1: Using ep0 maxpacket: 32 [ 742.403763][ T6075] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.410316][ T6075] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 742.427178][ T6075] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 742.433887][ T6075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.442477][ T6075] usb 5-1: Product: syz [ 742.443916][ T6075] usb 5-1: Manufacturer: syz [ 742.448474][ T6075] usb 5-1: SerialNumber: syz [ 742.455818][ T6075] usb 5-1: config 0 descriptor?? [ 742.667014][T18809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.670881][T18809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.678613][T18809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.684076][T18809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.694849][T18809] i2c i2c-1: dtv_property_process_set: SET cmd 0x72657470 undefined [ 742.705449][ T6019] usb 5-1: USB disconnect, device number 91 [ 742.944319][ T39] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 743.104770][ T39] usb 8-1: Using ep0 maxpacket: 8 [ 743.108327][ T39] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.112473][ T39] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 743.117390][ T39] usb 8-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 743.120352][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.124570][ T39] usb 8-1: config 0 descriptor?? [ 743.329306][ T6019] usb 8-1: USB disconnect, device number 95 [ 743.504479][ T6075] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 743.656623][ T6075] usb 5-1: unable to get BOS descriptor or descriptor too short [ 743.660733][ T6075] usb 5-1: not running at top speed; connect to a high speed hub [ 743.664719][ T6075] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 743.668809][ T6075] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 743.676135][ T6075] usb 5-1: New USB device found, idVendor=d26f, idProduct=e881, bcdDevice=d0.cb [ 743.680075][ T6075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.683079][ T6075] usb 5-1: Product: syz [ 743.685017][ T6075] usb 5-1: Manufacturer: syz [ 743.686509][ T6075] usb 5-1: SerialNumber: syz [ 743.902607][ T6075] usb 5-1: USB disconnect, device number 92 [ 744.424315][T12142] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 744.494114][T18843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2026'. [ 744.515243][T18843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2026'. [ 744.553833][T18843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2026'. [ 744.594363][T12142] usb 8-1: Using ep0 maxpacket: 8 [ 744.597761][T12142] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.601676][T12142] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 744.612640][T12142] usb 8-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 744.616145][T12142] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.619007][T12142] usb 8-1: Product: syz [ 744.620498][T12142] usb 8-1: Manufacturer: syz [ 744.622147][T12142] usb 8-1: SerialNumber: syz [ 744.626550][T12142] usb 8-1: config 0 descriptor?? [ 744.784419][ T9118] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 744.966057][ T9118] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 744.969995][ T9118] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 744.975797][ T9118] usb 5-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice= e.5d [ 744.979302][ T9118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.982826][ T9118] usb 5-1: Product: syz [ 744.985047][ T9118] usb 5-1: Manufacturer: syz [ 744.987122][ T9118] usb 5-1: SerialNumber: syz [ 745.030167][ T40] audit: type=1326 audit(1772276336.301:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18834 comm="syz.3.2024" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x0 [ 745.196874][ T6075] usb 5-1: USB disconnect, device number 93 [ 745.758797][T18863] program syz.0.2030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 746.074291][T12142] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 746.244267][T12142] usb 5-1: Using ep0 maxpacket: 8 [ 746.247824][T12142] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.251163][T12142] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 746.256516][T12142] usb 5-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 746.259673][T12142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.262339][T12142] usb 5-1: Product: syz [ 746.263799][T12142] usb 5-1: Manufacturer: syz [ 746.265477][T12142] usb 5-1: SerialNumber: syz [ 746.268837][T12142] usb 5-1: config 0 descriptor?? [ 746.832739][T18866] netlink: 'syz.0.2031': attribute type 10 has an invalid length. [ 746.837552][T18866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.843313][T18866] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 746.849872][T18866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.853417][T18866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.863544][T18866] bond0: (slave batadv0): Releasing backup interface [ 746.969169][ T39] usb 8-1: USB disconnect, device number 96 [ 747.464382][ T39] usb 8-1: new low-speed USB device number 97 using dummy_hcd [ 747.635827][ T39] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.641850][ T39] usb 8-1: string descriptor 0 read error: -22 [ 747.643985][ T39] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 747.647182][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.654564][ T39] usb 8-1: bad CDC descriptors [ 747.857027][T12142] usb 8-1: USB disconnect, device number 97 [ 748.406558][T18872] tun0: tun_chr_ioctl cmd 1074025675 [ 748.409165][T18872] tun0: persist enabled [ 748.411502][T18872] tun0: tun_chr_ioctl cmd 1074025675 [ 748.413928][T18872] tun0: persist disabled [ 748.426721][T18872] netlink: 'syz.3.2034': attribute type 1 has an invalid length. [ 748.433949][T18872] netlink: 'syz.3.2034': attribute type 2 has an invalid length. [ 748.784461][ T6075] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 748.850274][ T39] usb 5-1: USB disconnect, device number 94 [ 748.936469][ T6075] usb 8-1: config 86 has an invalid descriptor of length 0, skipping remainder of the config [ 748.940190][ T6075] usb 8-1: config 86 has 0 interfaces, different from the descriptor's value: 2 [ 748.947193][ T6075] usb 8-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 748.950373][ T6075] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.952965][ T6075] usb 8-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 749.163664][ T6075] usb 8-1: USB disconnect, device number 98 [ 749.195254][ T39] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 749.305072][T18886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2039'. [ 749.366254][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.370478][ T39] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 749.375209][ T39] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 749.378266][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.381145][ T39] usb 5-1: Product: syz [ 749.382549][ T39] usb 5-1: Manufacturer: syz [ 749.384094][ T39] usb 5-1: SerialNumber: syz [ 749.390818][ T39] usb 5-1: config 0 descriptor?? [ 749.974405][ T9118] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 750.134408][ T9118] usb 8-1: Using ep0 maxpacket: 32 [ 750.138642][ T9118] usb 8-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 750.143149][ T9118] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 750.149779][ T9118] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 750.153769][ T9118] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.157370][ T9118] usb 8-1: Product: syz [ 750.158998][ T9118] usb 8-1: Manufacturer: syz [ 750.161044][ T9118] usb 8-1: SerialNumber: syz [ 750.166447][ T9118] usb 8-1: config 0 descriptor?? [ 751.078792][ T39] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 751.082123][ T39] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 751.089420][ T39] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 751.891671][ T6026] usb 5-1: USB disconnect, device number 95 [ 751.938421][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.941228][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.148435][T18906] geneve2: entered promiscuous mode [ 752.374314][ T9118] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 752.525639][ T9118] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.529058][ T9118] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 752.535039][ T9118] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 752.538481][ T9118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.541248][ T9118] usb 5-1: Product: syz [ 752.542778][ T9118] usb 5-1: Manufacturer: syz [ 752.544946][ T9118] usb 5-1: SerialNumber: syz [ 752.548259][ T9118] usb 5-1: config 0 descriptor?? [ 752.812969][ T9118] usb 5-1: USB disconnect, device number 96 [ 753.184558][ T39] usb 8-1: USB disconnect, device number 99 [ 753.744311][ T9118] usb 8-1: new full-speed USB device number 100 using dummy_hcd [ 753.899942][ T9118] usb 8-1: unable to get BOS descriptor or descriptor too short [ 753.905408][ T9118] usb 8-1: not running at top speed; connect to a high speed hub [ 753.915312][ T9118] usb 8-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 753.919800][ T9118] usb 8-1: config 12 has 0 interfaces, different from the descriptor's value: 1 [ 753.928106][ T9118] usb 8-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=4e.fa [ 753.932189][ T9118] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.936338][ T9118] usb 8-1: Product: syz [ 753.938657][ T9118] usb 8-1: Manufacturer: syz [ 753.941190][ T9118] usb 8-1: SerialNumber: syz [ 756.321360][ T9118] usb 8-1: USB disconnect, device number 100 [ 756.652175][ T40] audit: type=1326 audit(1772276347.921:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.3.2060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 756.666318][ T40] audit: type=1326 audit(1772276347.921:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.3.2060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 756.675612][ T40] audit: type=1326 audit(1772276347.941:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.3.2060" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 756.685291][ T40] audit: type=1326 audit(1772276347.941:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.3.2060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 756.693875][ T40] audit: type=1326 audit(1772276347.941:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.3.2060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 756.704650][ T40] audit: type=1326 audit(1772276347.941:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.3.2060" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 756.713531][ T40] audit: type=1326 audit(1772276347.941:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.3.2060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 756.750017][ T40] audit: type=1326 audit(1772276347.941:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.3.2060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 756.764415][ T40] audit: type=1326 audit(1772276347.941:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.3.2060" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 756.779458][ T40] audit: type=1326 audit(1772276347.941:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.3.2060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 756.865438][ T5947] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 756.974284][T12142] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 757.124337][T12142] usb 8-1: Using ep0 maxpacket: 32 [ 757.129025][T12142] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.132335][T12142] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 757.135535][T12142] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.142825][T12142] usb 8-1: config 0 descriptor?? [ 757.148815][T12142] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 757.841013][T18983] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 757.852475][T18983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2066'. [ 758.784446][ T6075] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 758.935862][ T6075] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.939271][ T6075] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 758.942396][ T6075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.947701][ T6075] usb 5-1: config 0 descriptor?? [ 758.954136][ T6075] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 759.598821][T18962] delete_channel: no stack [ 759.602471][T12142] usb 8-1: USB disconnect, device number 101 [ 759.758326][T19007] netlink: 'syz.4.2075': attribute type 2 has an invalid length. [ 759.761140][T19007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 759.769343][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2075'. [ 759.984438][T12142] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 760.144353][T12142] usb 8-1: Using ep0 maxpacket: 16 [ 760.147565][T12142] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.151013][T12142] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 760.154015][T12142] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.158323][T12142] usb 8-1: config 0 descriptor?? [ 760.166202][T12142] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 760.370029][ T6075] usb 8-1: USB disconnect, device number 102 [ 760.840984][T19016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'. [ 760.846669][T19016] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 761.144369][ T6075] usb 8-1: new full-speed USB device number 103 using dummy_hcd [ 761.301639][ T6075] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.305126][ T6075] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 761.309690][ T6075] usb 8-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 761.312752][ T6075] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.315626][ T6075] usb 8-1: Product: syz [ 761.316985][ T6075] usb 8-1: Manufacturer: syz [ 761.318671][ T6075] usb 8-1: SerialNumber: syz [ 761.321490][ T6075] usb 8-1: config 0 descriptor?? [ 761.492689][T19029] tipc: Started in network mode [ 761.495562][T19029] tipc: Node identity ac14140f, cluster identity 4711 [ 761.498354][T19029] tipc: New replicast peer: 255.255.255.255 [ 761.500719][T19029] tipc: Enabled bearer , priority 10 [ 761.531782][ T39] usb 8-1: USB disconnect, device number 103 [ 761.549676][ T6075] usb 5-1: USB disconnect, device number 97 [ 762.085372][ T39] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 762.100250][T19043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2087'. [ 762.235039][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 762.240491][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.245362][ T39] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 762.251530][ T39] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 762.255968][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.259657][ T39] usb 5-1: Product: syz [ 762.261682][ T39] usb 5-1: Manufacturer: syz [ 762.263925][ T39] usb 5-1: SerialNumber: syz [ 762.269476][ T39] usb 5-1: config 0 descriptor?? [ 762.274627][T19047] bond3 (unregistering): Released all slaves [ 762.604428][ T39] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 762.626093][ T1324] tipc: Node number set to 2886997007 [ 762.754334][ T39] usb 8-1: Using ep0 maxpacket: 32 [ 762.757586][ T39] usb 8-1: config 188 has an invalid descriptor of length 0, skipping remainder of the config [ 762.761269][ T39] usb 8-1: config 188 has 0 interfaces, different from the descriptor's value: 1 [ 762.766416][ T39] usb 8-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=4f.54 [ 762.769360][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.772121][ T39] usb 8-1: Product: syz [ 762.773506][ T39] usb 8-1: Manufacturer: syz [ 762.775189][ T39] usb 8-1: SerialNumber: syz [ 764.681328][ T1324] usb 5-1: USB disconnect, device number 98 [ 765.044267][ T1324] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 765.115808][ T39] usb 8-1: USB disconnect, device number 104 [ 765.195625][ T1324] usb 5-1: LPM exit latency is zeroed, disabling LPM. [ 765.199660][ T1324] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.206176][ T1324] usb 5-1: string descriptor 0 read error: -22 [ 765.208418][ T1324] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 765.211300][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.219825][ T1324] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 765.425023][ T9040] usb 5-1: USB disconnect, device number 99 [ 765.505154][ T39] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 765.654303][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 765.658177][ T39] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 765.664418][ T39] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 765.667563][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.670341][ T39] usb 8-1: Product: syz [ 765.671827][ T39] usb 8-1: Manufacturer: syz [ 765.673398][ T39] usb 8-1: SerialNumber: syz [ 766.073615][T19070] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 766.937430][T19078] batadv_slave_0: left promiscuous mode [ 768.044404][ T9118] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 768.205043][ T9118] usb 5-1: Using ep0 maxpacket: 32 [ 768.207907][ T9] usb 8-1: USB disconnect, device number 105 [ 768.213242][ T9118] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.216907][ T9118] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 768.222695][ T9118] usb 5-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 768.225523][ T9118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.228026][ T9118] usb 5-1: Product: syz [ 768.229436][ T9118] usb 5-1: Manufacturer: syz [ 768.231055][ T9118] usb 5-1: SerialNumber: syz [ 768.233761][ T9118] usb 5-1: config 0 descriptor?? [ 770.556937][T19112] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 770.721134][ T9040] usb 5-1: USB disconnect, device number 100 [ 771.700684][T19132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2112'. [ 771.843195][T19141] input: syz0 as /devices/virtual/input/input22 [ 772.104371][T15464] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 772.256331][T15464] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.260593][T15464] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 772.264561][T15464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.269841][T15464] usb 5-1: config 0 descriptor?? [ 772.276451][T15464] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 773.944441][ T9118] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 773.944581][ T5947] Bluetooth: hci1: command 0x0406 tx timeout [ 773.947192][ T9118] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 774.790139][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'. [ 774.852670][ T9040] usb 5-1: USB disconnect, device number 101 [ 775.884391][ T9040] usb 8-1: new low-speed USB device number 106 using dummy_hcd [ 776.014364][ T9118] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 776.016988][ T9118] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 776.024424][ T6075] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 776.024569][ C2] ------------[ cut here ]------------ [ 776.030057][ C2] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 776.032209][ C2] WARNING: kernel/workqueue.c:2270 at __queue_work+0xd08/0x1150, CPU#2: syz.4.2130/19194 [ 776.035718][ C2] Modules linked in: [ 776.037422][ C2] CPU: 2 UID: 0 PID: 19194 Comm: syz.4.2130 Not tainted syzkaller #0 PREEMPT(full) [ 776.040923][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 776.044399][ C2] RIP: 0010:__queue_work+0xd0c/0x1150 [ 776.046419][ C2] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d d8 52 0d 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 95 a6 38 00 90 0f 0b 90 e9 b2 f5 [ 776.053385][ C2] RSP: 0000:ffffc90000538be8 EFLAGS: 00010046 [ 776.055553][ C2] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11009887951 [ 776.058264][ C2] RDX: ffff88804fd4e178 RSI: ffffffff8a80bc50 RDI: ffffffff90dca6d0 [ 776.061326][ C2] RBP: ffff88804c43ca70 R08: 0000000000000005 R09: 0000000000000000 [ 776.064118][ C2] R10: 0000000000000100 R11: 0000000000000000 R12: ffff88804fd4e000 [ 776.067102][ C2] R13: 1ffff920000a718f R14: ffffffff81cf6510 R15: 0000000000000001 [ 776.069992][ C2] FS: 0000000000000000(0000) GS:ffff88809734e000(0000) knlGS:0000000000000000 [ 776.073135][ C2] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 776.075567][ C2] CR2: 0000000080150018 CR3: 00000000560dc000 CR4: 0000000000352ef0 [ 776.078277][ C2] Call Trace: [ 776.079464][ C2] [ 776.080515][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 776.082678][ C2] call_timer_fn+0x19a/0x670 [ 776.084488][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 776.086365][ C2] ? __run_timers+0x560/0xb30 [ 776.088227][ C2] ? __run_timers+0x560/0xb30 [ 776.090080][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 776.092159][ C2] __run_timers+0x570/0xb30 [ 776.093707][ C2] ? __pfx___run_timers+0x10/0x10 [ 776.095583][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 776.097371][ C2] run_timer_base+0x114/0x190 [ 776.098998][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 776.100817][ C2] run_timer_softirq+0x1a/0x50 [ 776.102607][ C2] handle_softirqs+0x1eb/0x9e0 [ 776.104367][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 776.106454][ C2] __irq_exit_rcu+0xef/0x150 [ 776.108423][ C2] irq_exit_rcu+0x9/0x30 [ 776.109916][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 776.111930][ C2] [ 776.112943][ C2] [ 776.113926][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 776.115883][ C2] RIP: 0010:mas_find+0x4/0x740 [ 776.117952][ C2] Code: ee 4c 89 e7 e8 5d e5 ff ff 48 89 c5 eb ae e8 33 fa 06 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 56 41 55 41 54 49 89 f4 55 53 48 89 fb 4c 8d 6b 48 e8 e5 fb 81 [ 776.124425][ C2] RSP: 0000:ffffc90007c0f778 EFLAGS: 00000246 [ 776.126534][ C2] RAX: 1ffff92000f81f2b RBX: ffff888023c12f00 RCX: ffffffff82574d0b [ 776.129688][ C2] RDX: ffff888025fe0000 RSI: fffffffffffffffe RDI: ffffc90007c0f9c8 [ 776.132456][ C2] RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000000 [ 776.135122][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 776.138575][ C2] R13: ffffffffffffffff R14: ffff888023c12f20 R15: ffffc90007c0f958 [ 776.141544][ C2] ? unmap_vmas+0x2bb/0x590 [ 776.143604][ C2] unmap_vmas+0x2fd/0x590 [ 776.145584][ C2] ? __pfx_unmap_vmas+0x10/0x10 [ 776.147435][ C2] ? mas_next_slot+0x1003/0x18b0 [ 776.149555][ C2] exit_mmap+0x1ef/0xa30 [ 776.151253][ C2] ? __pfx_exit_mmap+0x10/0x10 [ 776.153169][ C2] ? trace_contention_end+0x140/0x180 [ 776.154990][ C2] ? uprobe_clear_state+0x5f/0x360 [ 776.156805][ C2] ? uprobe_clear_state+0x5f/0x360 [ 776.158571][ C2] ? __lock_acquire+0x4a5/0x2630 [ 776.160840][ C2] ? arch_uprobe_clear_state+0x107/0x150 [ 776.163400][ C2] __mmput+0x12a/0x410 [ 776.165290][ C2] mmput+0x67/0x80 [ 776.166955][ C2] do_exit+0x78a/0x2aa0 [ 776.168923][ C2] ? __pfx_do_exit+0x10/0x10 [ 776.170890][ C2] ? do_raw_spin_lock+0x128/0x260 [ 776.172772][ C2] ? find_held_lock+0x2b/0x80 [ 776.174849][ C2] ? get_signal+0x7e0/0x21e0 [ 776.176695][ C2] do_group_exit+0xd5/0x2a0 [ 776.178403][ C2] get_signal+0x1ec7/0x21e0 [ 776.180481][ C2] ? __pfx_get_signal+0x10/0x10 [ 776.182683][ C2] ? do_futex+0x192/0x350 [ 776.184662][ C2] arch_do_signal_or_restart+0x91/0x770 [ 776.187118][ C2] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 776.189848][ C2] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 776.192580][ C2] exit_to_user_mode_loop+0x86/0x4a0 [ 776.194827][ C2] __do_fast_syscall_32+0x578/0x8c0 [ 776.197018][ C2] do_fast_syscall_32+0x32/0x70 [ 776.199341][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 776.202191][ C2] RIP: 0023:0xf700ef6c [ 776.203786][ C2] Code: Unable to access opcode bytes at 0xf700ef42. [ 776.206553][ C2] RSP: 002b:00000000f53bb5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 776.210238][ C2] RAX: fffffffffffffe00 RBX: 00000000f74050b8 RCX: 0000000000000080 [ 776.213831][ C2] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74050bc [ 776.215121][ T6075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 776.217532][ C2] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 776.217551][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.217564][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 776.217592][ C2] [ 776.217603][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 776.217620][ C2] CPU: 2 UID: 0 PID: 19194 Comm: syz.4.2130 Not tainted syzkaller #0 PREEMPT(full) [ 776.217643][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 776.217655][ C2] Call Trace: [ 776.217663][ C2] [ 776.217671][ C2] dump_stack_lvl+0x100/0x190 [ 776.217704][ C2] vpanic+0x552/0x970 [ 776.217724][ C2] ? __pfx_vpanic+0x10/0x10 [ 776.217751][ C2] panic+0xd1/0xe0 [ 776.217771][ C2] ? __pfx_panic+0x10/0x10 [ 776.217800][ C2] ? check_panic_on_warn+0x1f/0x90 [ 776.217831][ C2] check_panic_on_warn.cold+0x19/0x34 [ 776.217853][ C2] ? __queue_work+0xd08/0x1150 [ 776.217881][ C2] __warn.cold+0x191/0x348 [ 776.217905][ C2] __report_bug+0x296/0x3d0 [ 776.217934][ C2] ? __queue_work+0xd08/0x1150 [ 776.217961][ C2] ? __pfx___report_bug+0x10/0x10 [ 776.217980][ C2] ? sk_skb_reason_drop+0x114/0x1b0 [ 776.218008][ C2] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 776.218045][ C2] ? look_up_lock_class+0x55/0x120 [ 776.218069][ C2] report_bug_entry+0xe1/0x290 [ 776.218088][ C2] ? __queue_work+0xd0c/0x1150 [ 776.218112][ C2] handle_bug+0x1c9/0x2a0 [ 776.218134][ C2] exc_invalid_op+0x17/0x50 [ 776.218151][ C2] asm_exc_invalid_op+0x1a/0x20 [ 776.218163][ C2] RIP: 0010:__queue_work+0xd0c/0x1150 [ 776.218181][ C2] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d d8 52 0d 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 95 a6 38 00 90 0f 0b 90 e9 b2 f5 [ 776.218193][ C2] RSP: 0000:ffffc90000538be8 EFLAGS: 00010046 [ 776.218203][ C2] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11009887951 [ 776.218211][ C2] RDX: ffff88804fd4e178 RSI: ffffffff8a80bc50 RDI: ffffffff90dca6d0 [ 776.218219][ C2] RBP: ffff88804c43ca70 R08: 0000000000000005 R09: 0000000000000000 [ 776.218226][ C2] R10: 0000000000000100 R11: 0000000000000000 R12: ffff88804fd4e000 [ 776.218233][ C2] R13: 1ffff920000a718f R14: ffffffff81cf6510 R15: 0000000000000001 [ 776.218241][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 776.218262][ C2] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 776.218282][ C2] ? __queue_work+0xcda/0x1150 [ 776.218302][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 776.218328][ C2] call_timer_fn+0x19a/0x670 [ 776.218350][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 776.218375][ C2] ? __run_timers+0x560/0xb30 [ 776.218396][ C2] ? __run_timers+0x560/0xb30 [ 776.218423][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 776.218452][ C2] __run_timers+0x570/0xb30 [ 776.218481][ C2] ? __pfx___run_timers+0x10/0x10 [ 776.218514][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 776.218541][ C2] run_timer_base+0x114/0x190 [ 776.218563][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 776.218590][ C2] run_timer_softirq+0x1a/0x50 [ 776.218611][ C2] handle_softirqs+0x1eb/0x9e0 [ 776.218636][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 776.218664][ C2] __irq_exit_rcu+0xef/0x150 [ 776.218686][ C2] irq_exit_rcu+0x9/0x30 [ 776.218705][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 776.218728][ C2] [ 776.218736][ C2] [ 776.218745][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 776.218767][ C2] RIP: 0010:mas_find+0x4/0x740 [ 776.218791][ C2] Code: ee 4c 89 e7 e8 5d e5 ff ff 48 89 c5 eb ae e8 33 fa 06 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 56 41 55 41 54 49 89 f4 55 53 48 89 fb 4c 8d 6b 48 e8 e5 fb 81 [ 776.218810][ C2] RSP: 0000:ffffc90007c0f778 EFLAGS: 00000246 [ 776.218827][ C2] RAX: 1ffff92000f81f2b RBX: ffff888023c12f00 RCX: ffffffff82574d0b [ 776.218841][ C2] RDX: ffff888025fe0000 RSI: fffffffffffffffe RDI: ffffc90007c0f9c8 [ 776.218855][ C2] RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000000 [ 776.218868][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 776.218881][ C2] R13: ffffffffffffffff R14: ffff888023c12f20 R15: ffffc90007c0f958 [ 776.218902][ C2] ? unmap_vmas+0x2bb/0x590 [ 776.218934][ C2] unmap_vmas+0x2fd/0x590 [ 776.218959][ C2] ? __pfx_unmap_vmas+0x10/0x10 [ 776.218983][ C2] ? mas_next_slot+0x1003/0x18b0 [ 776.219019][ C2] exit_mmap+0x1ef/0xa30 [ 776.219042][ C2] ? __pfx_exit_mmap+0x10/0x10 [ 776.219063][ C2] ? trace_contention_end+0x140/0x180 [ 776.219094][ C2] ? uprobe_clear_state+0x5f/0x360 [ 776.219123][ C2] ? uprobe_clear_state+0x5f/0x360 [ 776.219155][ C2] ? __lock_acquire+0x4a5/0x2630 [ 776.219190][ C2] ? arch_uprobe_clear_state+0x107/0x150 [ 776.219223][ C2] __mmput+0x12a/0x410 [ 776.219246][ C2] mmput+0x67/0x80 [ 776.219266][ C2] do_exit+0x78a/0x2aa0 [ 776.219295][ C2] ? __pfx_do_exit+0x10/0x10 [ 776.219320][ C2] ? do_raw_spin_lock+0x128/0x260 [ 776.219348][ C2] ? find_held_lock+0x2b/0x80 [ 776.219366][ C2] ? get_signal+0x7e0/0x21e0 [ 776.219389][ C2] do_group_exit+0xd5/0x2a0 [ 776.219415][ C2] get_signal+0x1ec7/0x21e0 [ 776.219446][ C2] ? __pfx_get_signal+0x10/0x10 [ 776.219468][ C2] ? do_futex+0x192/0x350 [ 776.219496][ C2] arch_do_signal_or_restart+0x91/0x770 [ 776.219522][ C2] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 776.219554][ C2] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 776.219589][ C2] exit_to_user_mode_loop+0x86/0x4a0 [ 776.219617][ C2] __do_fast_syscall_32+0x578/0x8c0 [ 776.219644][ C2] do_fast_syscall_32+0x32/0x70 [ 776.219764][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 776.219789][ C2] RIP: 0023:0xf700ef6c [ 776.219806][ C2] Code: Unable to access opcode bytes at 0xf700ef42. [ 776.219815][ C2] RSP: 002b:00000000f53bb5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 776.219836][ C2] RAX: fffffffffffffe00 RBX: 00000000f74050b8 RCX: 0000000000000080 [ 776.219850][ C2] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74050bc [ 776.219862][ C2] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 776.219874][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.219886][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 776.219910][ C2] [ 776.223032][ C2] Kernel Offset: disabled