last executing test programs: 40.127588532s ago: executing program 1 (id=5033): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000300004000"]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307211d) socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setpriority(0x2, 0x0, 0x6) syz_io_uring_setup(0x4d7, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="11002a00dd0b6362636465666768696a6b00000010002d8002020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000008021100000008021100000000000000000000000000640001000006020202"], 0x36) 36.403551579s ago: executing program 1 (id=5044): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff6}, {0xfff1, 0xffff}, {0x6}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 36.026610636s ago: executing program 1 (id=5047): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 34.479898124s ago: executing program 1 (id=5052): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000480)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 34.339439934s ago: executing program 1 (id=5053): r0 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x82, 0x1, 0x1, 0x6, 0xff, 0x3, 0x3e, 0x8, 0x3b6, 0x40, 0x2001df, 0x80, 0x3e, 0x38, 0x1, 0x7, 0x2, 0x1}, [{0x3, 0x0, 0x6, 0x5, 0x9, 0xb8, 0x7, 0x1}]}, 0x62) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./mnt\x00', 0x4) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 33.762785089s ago: executing program 1 (id=5057): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000001c0)="6ac3", 0x2) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x20050800) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r5}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, &(0x7f0000000380)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40701, 0x0) sendfile(r8, r8, 0x0, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 33.328178718s ago: executing program 32 (id=5057): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000001c0)="6ac3", 0x2) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x20050800) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r5}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, &(0x7f0000000380)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40701, 0x0) sendfile(r8, r8, 0x0, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 10.356080795s ago: executing program 0 (id=5110): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c2, 0x10, 0x1, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r1, 0xdb4, 0xdb9b, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x33, {0x4, 0x10001}, 0x6}, 0x1) 9.820539228s ago: executing program 2 (id=5114): arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private=0xa010101, @empty, {[@noop, @ssrr={0x89, 0x7, 0xe, [@multicast1]}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x7f, 0x0, {0x6, 0x4, 0x1, 0x22, 0x2, 0x64, 0x6, 0x1, 0x89, 0x1, @loopback, @loopback, {[@noop]}}, "285377b798685b33"}}}}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000040)='ip6tnl0\x00') setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32], 0x2c}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r8, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r8, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendto$inet6(r7, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x82, &(0x7f0000000200), 0x8) 9.199525748s ago: executing program 0 (id=5117): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x400) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 8.21588364s ago: executing program 3 (id=5120): read$FUSE(0xffffffffffffffff, 0x0, 0x0) unshare(0x2a020480) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x22) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x3, 0x2) getsockopt(r0, 0xff, 0x100000000000001, 0x0, 0x0) 7.676144973s ago: executing program 3 (id=5121): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="1aeb85d8831bf168723655d540d2cb55a5923644c1eff0d65878f9b9cc0ebb714ca6f1019a14d172ce0175902ae3e9d8d238b925e4cd401532a4272fdeeeabee90cb5942f27379fcfd28a12f05178030f72e2109c2568836621cbbc9917b23a419710a0059c1fb63033565d209ff70895062a6c8a34a0d0a2b314323fde10e800ff3cb82121a2da846699b84de67541d95966b8745", 0x95}], 0x1}, 0x40810) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x88000]}}) 7.161837153s ago: executing program 3 (id=5122): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b7000000001a0000bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000620a00fe000000007933000000000000b5030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fd21e3587b9d9e878c86ba9b66c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000001c0)="6ac3", 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x20050800) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r3}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000380)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x40) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40701, 0x0) sendfile(r7, r7, 0x0, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 6.933757791s ago: executing program 0 (id=5123): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 6.528423978s ago: executing program 2 (id=5124): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000300004000"]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307211d) socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setpriority(0x2, 0x0, 0x6) syz_io_uring_setup(0x4d7, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="050000000000000000", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="11002a00dd0b6362636465666768696a6b00000010002d8002020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000008021100000008021100000000000000000000000000640001000006020202"], 0x36) 6.433639679s ago: executing program 3 (id=5125): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000300004000"]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307211d) socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setpriority(0x2, 0x0, 0x6) syz_io_uring_setup(0x4d7, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0500000000000000000006000000", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="11002a00dd0b6362636465666768696a6b00000010002d8002020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000008021100000008021100000000000000000000000000640001000006020202"], 0x36) 6.221884227s ago: executing program 0 (id=5126): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r6, 0x0, &(0x7f0000000140)) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfdbf, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f00000002c0)="c2d611c89c220e25943fb0", 0xb}, {&(0x7f0000000300)="1744493947f3f194d945da4a5105056f0f665ecfbb449db768cb01290f9eaaf57ab4fd1b986e", 0x26}, {&(0x7f0000000440)="ec2795a51677975067161cd21531c57f6a1506eee2bfed36334025c28b0e2dd4ac6da428b42e6ec6930863de5c136e2902a53b730b2cb4b4a6f2053817b24a6db33afb4989a62e21a4b2e3c5b3dbef159a05793c13c5486f6d98b71687b115b6ac84b6e6e37d89a2235dbd527a2b7351738488fad302da544b4e5e2fb1e4a3a0cd467020e31cae9a3039751507", 0x8d}, {&(0x7f0000000340)="c8250af5859494ca246324a514b1f51f227767a5c28efeaa5b89fee2445002474fa6eff7cc7e3e577b4c4ce3b553972ad9b89278a2be6408a3f524f554c0d8882f9ca7a47d304cee20ff85409407ecd4c84acf0aefb53fa00de3b65261", 0x5d}, {&(0x7f0000000500)="7f0545478791604f5c2acabcf0c6c2700a63ff39", 0x14}, {&(0x7f00000005c0)="f4533216dd2e46b4f592e57d1ed2d8d17fbe8fe3b3fc9bf7237719adef8835bb0057948b94998e69cb87dea47f4f4ec934e5f2d9565ce4fc48a960739f5bf9bd616545f814d59382c975247f9e9e522c2a3d14a534562507be7a76ed3cfa8048c62cad08f12b88357957553f6d42079773f1f0594c25ca31", 0x78}], 0x6, &(0x7f0000000800)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x1}}], 0x10}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="81ef5108ef6a32b31a034a00935e753631576ba5273e4c5f21f9e092a7e94eeee2cb1c6da251f55c4476ec39ba572f3b9b7d47c1dfb073b6905a68bdd1cd5d6a996b5ed5eed836acdcdb5c36c2dd93f6641201ab3959d8eda706f2bde95d7507858c6aa16c1759ff8ca42f8313ef2e9704d8d1b5f24b141156ac9ee0ccf09fd24d63ef2ba3f7163784b1117acc11645cb5fe62f7beecf560a4efdd4295a1ac501faa1cb7b6ca02ffaf4c004990dc7f862e67aea6d22fa985bf5d2f93b4ad1df4134cc84ad370114a5074715f81dd66f533216ef00bca961536a3934059e7ba651ca471", 0xe3}, {&(0x7f0000000940)="cffbe8b77c07517094ff595ce2e6fc7df39bb1cd2b7b54ceb65f93f33461c79e4beeb23b829ecd342ea42deea38c0339f3d9e13ba7fce45912512546f2711e635111a891667849bd71ff049977a124893473e6e79a4af60dd15aaeedf0cb49da847591e4a5", 0x65}, {&(0x7f00000009c0)="7f", 0x1}], 0x3, &(0x7f0000000a40)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @remote}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @rr={0x7, 0x27, 0xd, [@remote, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @remote, @broadcast]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x99a}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r9, @local, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x8c}}], 0x2, 0x8080) sendfile(r3, r4, 0x0, 0x20000023896) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 6.177128393s ago: executing program 4 (id=5127): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000300004000"]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307211d) socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setpriority(0x2, 0x0, 0x6) syz_io_uring_setup(0x4d7, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="050000000000000000", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="11002a00dd0b6362636465666768696a6b00000010002d8002020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000008021100000008021100000000000000000000000000640001000006020202"], 0x36) 6.039941477s ago: executing program 5 (id=5128): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 5.162833513s ago: executing program 5 (id=5129): r0 = epoll_create(0x6) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x3}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 5.024863193s ago: executing program 0 (id=5130): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 4.980764655s ago: executing program 5 (id=5131): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x240000, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x100, 0x72) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) 4.681203607s ago: executing program 5 (id=5132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0xd, @empty, 0x9}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x20, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 4.120419582s ago: executing program 5 (id=5133): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', 0x0, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000300004000"]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307211d) socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setpriority(0x2, 0x0, 0x6) syz_io_uring_setup(0x4d7, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05000000000000000000060000", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="11002a00dd0b6362636465666768696a6b00000010002d8002020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000008021100000008021100000000000000000000000000640001000006020202"], 0x36) 2.771324142s ago: executing program 3 (id=5134): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\xdaL!\xe1\xdc\x1f\v\x04\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r1, &(0x7f0000000400)=""/63, 0xcad9286a271020d7) 2.665814536s ago: executing program 0 (id=5135): arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private=0xa010101, @empty, {[@noop, @ssrr={0x89, 0x7, 0xe, [@multicast1]}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x7f, 0x0, {0x6, 0x4, 0x1, 0x22, 0x2, 0x64, 0x6, 0x1, 0x89, 0x1, @loopback, @loopback, {[@noop]}}, "285377b798685b33"}}}}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000040)='ip6tnl0\x00') setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32], 0x2c}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r8, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r8, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendto$inet6(r7, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x82, &(0x7f0000000200), 0x8) 2.234076322s ago: executing program 4 (id=5136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 1.683243662s ago: executing program 3 (id=5137): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000"]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307211d) socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setpriority(0x2, 0x0, 0x6) syz_io_uring_setup(0x4d7, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="050000000000000000", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="11002a00dd0b6362636465666768696a6b00000010002d8002020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000008021100000008021100000000000000000000000000640001000006020202"], 0x36) 1.672377977s ago: executing program 4 (id=5138): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r1 = syz_io_uring_setup(0xc8f, &(0x7f0000000140)={0x0, 0xaee2, 0x2, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 1.54601154s ago: executing program 2 (id=5139): r0 = userfaultfd(0x80001) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.277692462s ago: executing program 2 (id=5140): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r0, &(0x7f0000001540)=[{&(0x7f0000001580)=""/4108, 0x100c}], 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x10, 0x4) 1.076439456s ago: executing program 4 (id=5141): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x9cc1, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000140)={'stack ', '}^-\x00'}, 0xa) 754.645311ms ago: executing program 5 (id=5142): madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 348.613805ms ago: executing program 4 (id=5143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r2, 0x900) r4 = dup3(r3, r2, 0x80000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r1, 0x917, 0x70bd28, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}]}, 0x3c}, 0x1, 0x620b}, 0x0) 253.641624ms ago: executing program 2 (id=5144): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4) 54.185386ms ago: executing program 4 (id=5145): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000300004000"]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307211d) socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setpriority(0x2, 0x0, 0x6) syz_io_uring_setup(0x4d7, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0500000000000000000006000000", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="11002a00dd0b6362636465666768696a6b00000010002d8002020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000008021100000008021100000000000000000000000000640001000006020202"], 0x36) 0s ago: executing program 2 (id=5146): arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private=0xa010101, @empty, {[@noop, @ssrr={0x89, 0x7, 0xe, [@multicast1]}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x7f, 0x0, {0x6, 0x4, 0x1, 0x22, 0x2, 0x64, 0x6, 0x1, 0x89, 0x1, @loopback, @loopback, {[@noop]}}, "285377b798685b33"}}}}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000040)='ip6tnl0\x00') setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r8, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r8, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendto$inet6(r7, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x82, &(0x7f0000000200), 0x8) kernel console output (not intermixed with test programs): ddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1779.993849][T16772] usb 5-1: USB disconnect, device number 109 [ 1780.337563][T23813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1780.872381][T23836] netlink: 'syz.4.4411': attribute type 27 has an invalid length. [ 1781.309831][T16774] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1781.470513][T16774] usb 2-1: Using ep0 maxpacket: 32 [ 1781.477791][T16774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.493302][T16774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1781.549642][T16774] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1781.568124][T16774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.581633][T16774] usb 2-1: config 0 descriptor?? [ 1781.776905][T13940] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1782.049909][T23837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1782.060039][T13940] usb 4-1: Using ep0 maxpacket: 32 [ 1782.076599][T13940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.088118][T13940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.101484][T13940] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1782.119012][T13940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.158221][T16774] savu 0003:1E7D:2D5A.005B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1782.226064][T13940] usb 4-1: config 0 descriptor?? [ 1782.461961][ T5893] usb 2-1: USB disconnect, device number 105 [ 1782.502518][T23853] fido_id[23853]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1782.682191][T13940] savu 0003:1E7D:2D5A.005C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1782.739277][T23858] netlink: 'syz.2.4419': attribute type 27 has an invalid length. [ 1782.971628][T16772] usb 4-1: USB disconnect, device number 114 [ 1783.982595][T23876] loop2: detected capacity change from 0 to 7 [ 1784.012567][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1784.021856][ C1] buffer_io_error: 315 callbacks suppressed [ 1784.021876][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1784.036233][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1784.045535][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1784.059950][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1784.069255][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1784.080391][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1784.089655][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1784.098505][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1784.107783][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1784.116243][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1784.125508][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1784.135903][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1784.145156][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1784.154353][ T5846] ldm_validate_partition_table(): Disk read failed. [ 1784.161559][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1784.170807][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1784.179634][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1784.188858][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1784.197212][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1784.206554][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1784.217140][ T5846] Dev loop2: unable to read RDB block 0 [ 1784.224669][ T5846] loop2: unable to read partition table [ 1784.249378][ T5846] loop2: partition table beyond EOD, truncated [ 1784.267065][T23876] ldm_validate_partition_table(): Disk read failed. [ 1784.282332][T23876] Dev loop2: unable to read RDB block 0 [ 1784.295862][T23876] loop2: unable to read partition table [ 1784.308433][T23876] loop2: partition table beyond EOD, truncated [ 1784.330429][T23876] loop_reread_partitions: partition scan of loop2 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 1784.394783][ T5200] ldm_validate_partition_table(): Disk read failed. [ 1784.412641][ T5200] Dev loop2: unable to read RDB block 0 [ 1784.423797][ T5200] loop2: unable to read partition table [ 1784.525622][ T5200] loop2: partition table beyond EOD, truncated [ 1784.537395][T23890] netlink: 'syz.1.4431': attribute type 27 has an invalid length. [ 1786.494725][T23922] netlink: 'syz.4.4443': attribute type 27 has an invalid length. [ 1786.587403][T23894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1788.019936][T16772] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1788.229685][T16771] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1788.240271][T16772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.256480][T16772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1788.275497][T16772] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1788.343720][T16772] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1788.355583][T16772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.543728][T16772] usb 4-1: config 0 descriptor?? [ 1788.560040][T16771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.596022][T23931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1788.606445][T16771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1788.620875][T16771] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1788.631112][T16771] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1788.670460][T16771] usb 5-1: Manufacturer: syz [ 1788.727219][T16771] usb 5-1: config 0 descriptor?? [ 1789.057678][T16772] plantronics 0003:047F:FFFF.005D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1789.108819][T13940] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1789.262954][T16771] pyra 0003:1E7D:2CF6.005E: unknown main item tag 0x0 [ 1789.263322][T13940] usb 1-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 1789.271323][T16771] pyra 0003:1E7D:2CF6.005E: unknown main item tag 0x0 [ 1789.311361][T16771] pyra 0003:1E7D:2CF6.005E: unknown main item tag 0x0 [ 1789.320162][T13940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.328532][T16771] pyra 0003:1E7D:2CF6.005E: unknown main item tag 0x0 [ 1789.347318][T16771] pyra 0003:1E7D:2CF6.005E: unknown main item tag 0x0 [ 1789.349827][T13940] usb 1-1: Product: syz [ 1789.367919][T13940] usb 1-1: Manufacturer: syz [ 1789.383416][T13940] usb 1-1: SerialNumber: syz [ 1789.394153][T16771] pyra 0003:1E7D:2CF6.005E: unknown main item tag 0x0 [ 1789.430319][T13940] usb 1-1: config 0 descriptor?? [ 1789.435481][T16771] pyra 0003:1E7D:2CF6.005E: unknown main item tag 0x0 [ 1789.450340][T16771] pyra 0003:1E7D:2CF6.005E: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1789.523145][T13940] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 1789.764852][T13940] pwc: Failed to set LED on/off time (-71) [ 1789.789265][T13940] pwc: send_video_command error -71 [ 1789.806260][T13940] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1789.829670][T13940] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1789.883870][T13940] usb 1-1: USB disconnect, device number 99 [ 1789.887437][T16771] pyra 0003:1E7D:2CF6.005E: couldn't init struct pyra_device [ 1789.930019][T16771] pyra 0003:1E7D:2CF6.005E: couldn't install mouse [ 1789.955172][T16771] pyra 0003:1E7D:2CF6.005E: probe with driver pyra failed with error -71 [ 1790.035796][T16771] usb 5-1: USB disconnect, device number 110 [ 1790.329961][ T5893] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1790.479267][T23975] 8021q: adding VLAN 0 to HW filter on device team0 [ 1790.492569][ T5893] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1790.505041][T23975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1790.521372][ T5893] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1790.535798][ T5893] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1790.546240][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.589967][T23976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1790.771880][ T5893] usb 3-1: usb_control_msg returned -32 [ 1790.795164][ T5893] usbtmc 3-1:16.0: can't read capabilities [ 1790.812673][T23987] netlink: 'syz.4.4464': attribute type 27 has an invalid length. [ 1791.438821][T16633] usb 4-1: reset high-speed USB device number 115 using dummy_hcd [ 1791.595615][T16633] usb 4-1: device firmware changed [ 1791.621477][ T5919] usb 4-1: USB disconnect, device number 115 [ 1791.821047][ T5919] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1791.992171][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1792.004215][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1792.010261][T16772] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1792.015581][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1792.033377][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1792.046669][ T5919] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1792.055800][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.066087][ T5919] usb 4-1: config 0 descriptor?? [ 1792.179962][T16772] usb 1-1: Using ep0 maxpacket: 16 [ 1792.191283][T16772] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1792.202006][T16772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.211204][T16772] usb 1-1: Product: syz [ 1792.215416][T16772] usb 1-1: Manufacturer: syz [ 1792.220739][T16772] usb 1-1: SerialNumber: syz [ 1792.228437][T16772] usb 1-1: config 0 descriptor?? [ 1792.231221][T16633] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1792.237457][T16772] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1792.398858][T16633] usb 2-1: Using ep0 maxpacket: 16 [ 1792.407300][T16633] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1792.416281][T16633] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.426851][T16633] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1792.440181][T16633] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1792.449637][T16633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.457762][T16633] usb 2-1: Product: syz [ 1792.462226][T16633] usb 2-1: Manufacturer: syz [ 1792.466922][T16633] usb 2-1: SerialNumber: syz [ 1792.490566][ T5919] plantronics 0003:047F:FFFF.005F: ignoring exceeding usage max [ 1792.511050][ T5919] plantronics 0003:047F:FFFF.005F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1792.888373][T16633] usb 2-1: 0:2 : does not exist [ 1793.070162][T16772] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 1793.087287][T16772] usb 1-1: USB disconnect, device number 100 [ 1793.127431][T16771] usb 3-1: USB disconnect, device number 109 [ 1793.513468][T16633] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1793.540805][T16771] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1793.545819][T16633] usb 2-1: USB disconnect, device number 106 [ 1793.585362][T18773] udevd[18773]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1793.710500][T16771] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1793.721168][T16771] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1793.734500][T16771] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1793.745681][T16771] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1793.758288][T16771] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1793.773115][T16771] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1793.783823][T16771] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1793.792479][T16771] usb 3-1: Product: syz [ 1793.796826][T16771] usb 3-1: Manufacturer: syz [ 1793.810914][T16771] cdc_wdm 3-1:1.0: skipping garbage [ 1793.816188][T16771] cdc_wdm 3-1:1.0: skipping garbage [ 1793.832072][T16771] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 1793.838256][T16771] cdc_wdm 3-1:1.0: Unknown control protocol [ 1794.333241][T24029] netlink: 'syz.1.4480': attribute type 27 has an invalid length. [ 1794.740814][T16772] usb 4-1: USB disconnect, device number 116 [ 1795.076377][T24021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1796.118085][T24066] netlink: 'syz.1.4493': attribute type 27 has an invalid length. [ 1796.322406][T16633] usb 3-1: USB disconnect, device number 110 [ 1796.968954][T16633] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1797.084445][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.091565][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.130805][T16633] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1797.143597][T16633] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1797.418213][T24082] netlink: 'syz.1.4498': attribute type 27 has an invalid length. [ 1797.466649][T16633] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1797.609195][T16633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.637984][T24072] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1797.668855][T16633] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1797.820535][T24058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1797.931773][T16771] usb 3-1: USB disconnect, device number 111 [ 1797.971809][T17976] udevd[17976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1798.307874][T24090] netlink: 'syz.0.4499': attribute type 27 has an invalid length. [ 1798.440360][T24091] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1799.758857][T16633] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1799.780143][ T5919] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1799.975282][T16633] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1799.992473][ T5919] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1800.001979][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.010368][T16633] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1800.035036][T16633] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1800.052241][ T5919] usb 2-1: config 0 descriptor?? [ 1800.166861][ T5919] cp210x 2-1:0.0: cp210x converter detected [ 1800.173855][T16633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.280833][T24113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1800.305953][T16633] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1800.582247][ T5919] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1800.811381][ T5919] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1800.897818][ T5919] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1800.924766][ T5919] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1801.051292][T16633] usb 3-1: USB disconnect, device number 112 [ 1801.065408][ T5919] usb 2-1: USB disconnect, device number 107 [ 1801.082999][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1801.096183][ T5919] cp210x 2-1:0.0: device disconnected [ 1801.148356][T18773] udevd[18773]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1801.760560][T24107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.359508][T16771] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1803.369632][ T5919] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1803.415481][T24144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.522173][T16771] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1803.618077][T16771] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1803.631333][ T5919] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1803.641046][T16771] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1803.650836][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.650871][ T5919] usb 3-1: Product: syz [ 1803.650888][ T5919] usb 3-1: Manufacturer: syz [ 1803.650904][ T5919] usb 3-1: SerialNumber: syz [ 1803.679414][T16772] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1803.680323][ T5919] usb 3-1: config 0 descriptor?? [ 1803.742569][T16771] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1803.757532][T16771] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1803.769840][T16771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.803226][T16771] usb 2-1: config 0 descriptor?? [ 1803.892234][T16772] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1803.923646][T16772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.938310][T16772] usb 4-1: config 0 descriptor?? [ 1803.969101][ T5919] hso 3-1:0.0: Failed to find INT IN ep [ 1804.014375][T24146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1804.090214][ T5919] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1804.239048][ T5919] usb 3-1: USB disconnect, device number 113 [ 1804.307865][T16771] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 1804.320173][T16771] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 1804.336374][T16771] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 1804.376555][T16771] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 1804.396401][T16771] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 1804.415915][T16771] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 1804.433155][T16771] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 1804.446208][T16771] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 1804.454825][T16771] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 1804.463606][T16771] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 1804.525744][T16771] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1804.644046][ T5919] usb 2-1: USB disconnect, device number 108 [ 1804.703235][T24171] fido_id[24171]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1805.171885][T16772] pegasus 4-1:0.0: can't reset MAC [ 1805.177487][T16772] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 1805.196345][T16772] usb 4-1: USB disconnect, device number 117 [ 1806.831339][T24194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1806.963955][T24212] netlink: 'syz.4.4540': attribute type 27 has an invalid length. [ 1807.038946][T16633] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1807.528931][T16633] usb 2-1: Using ep0 maxpacket: 32 [ 1807.541449][T16633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1807.561968][T16633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1807.599822][T16633] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1807.612246][T16633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.628336][T16633] usb 2-1: config 0 descriptor?? [ 1807.651943][T16633] hub 2-1:0.0: USB hub found [ 1807.870291][T16633] hub 2-1:0.0: 1 port detected [ 1807.924139][T24203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1808.497084][T16633] hub 2-1:0.0: activate --> -90 [ 1809.044571][T16633] usb 2-1-port1: config error [ 1809.045310][T16771] usb 2-1: USB disconnect, device number 109 [ 1809.109102][T24242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4548'. [ 1809.288886][T13940] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1809.483357][T13940] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1809.493225][T13940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.503863][T13940] usb 5-1: Product: syz [ 1809.508080][T13940] usb 5-1: Manufacturer: syz [ 1809.544102][T13940] usb 5-1: SerialNumber: syz [ 1809.544305][T24250] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4551'. [ 1809.562186][T13940] usb 5-1: config 0 descriptor?? [ 1809.787271][T13940] hso 5-1:0.0: Failed to find INT IN ep [ 1809.794339][T13940] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1809.997576][T13940] usb 5-1: USB disconnect, device number 111 [ 1810.539969][T16772] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1810.714923][T16772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1810.727528][T16772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1810.740606][T16772] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1810.760527][T16772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.802354][T16772] usb 1-1: config 0 descriptor?? [ 1811.254528][T16772] hid_parser_main: 5 callbacks suppressed [ 1811.254553][T16772] cm6533_jd 0003:0D8C:0022.0061: unknown main item tag 0x0 [ 1811.283327][T16772] cm6533_jd 0003:0D8C:0022.0061: unknown main item tag 0x0 [ 1811.387272][T16772] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0061/input/input103 [ 1811.438859][T13940] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1811.502984][T16772] cm6533_jd 0003:0D8C:0022.0061: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 1811.599206][T13940] usb 5-1: Using ep0 maxpacket: 32 [ 1811.611490][T16772] usb 1-1: USB disconnect, device number 101 [ 1811.611927][T13940] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1811.658767][T13940] usb 5-1: config 0 has no interface number 0 [ 1811.756870][T13940] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1811.804019][T24271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1811.840861][T13940] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1811.894518][T13940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.914557][T13940] usb 5-1: Product: syz [ 1811.924692][T13940] usb 5-1: Manufacturer: syz [ 1811.934854][T13940] usb 5-1: SerialNumber: syz [ 1811.946972][T24285] fido_id[24285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1811.966262][T13940] usb 5-1: config 0 descriptor?? [ 1811.990344][T13940] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1812.022458][T13940] em28xx 5-1:0.132: Video interface 132 found: [ 1812.385321][T13940] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1812.540245][T16772] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1812.699602][T16772] usb 1-1: Using ep0 maxpacket: 32 [ 1812.714251][T16772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.741948][T16772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1812.754750][T16772] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1812.766953][T16772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.788018][T16772] usb 1-1: config 0 descriptor?? [ 1812.803540][T16772] hub 1-1:0.0: USB hub found [ 1813.011330][T13940] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1813.029667][T16771] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1813.035069][T13940] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 1813.038444][T16772] hub 1-1:0.0: 1 port detected [ 1813.092225][T13940] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1813.158858][T13940] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1813.174413][T13940] em28xx 5-1:0.132: analog set to bulk mode. [ 1813.181747][ T5919] em28xx 5-1:0.132: Registering V4L2 extension [ 1813.199273][T13940] usb 5-1: USB disconnect, device number 112 [ 1813.199949][T16771] usb 3-1: Using ep0 maxpacket: 8 [ 1813.207962][T13940] em28xx 5-1:0.132: Disconnecting em28xx [ 1813.413504][T16771] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1813.459896][T16771] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1813.490700][T16771] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1813.506129][T16771] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1813.533712][T16771] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1813.682191][T16771] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1813.729854][T16771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.853409][ T5919] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1813.882526][ T5919] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1813.910253][ T5919] em28xx 5-1:0.132: No AC97 audio processor [ 1813.942274][ T5919] usb 5-1: Decoder not found [ 1813.967750][ T5919] em28xx 5-1:0.132: failed to create media graph [ 1813.980511][T16771] usb 3-1: GET_CAPABILITIES returned 0 [ 1813.998924][ T5919] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1814.024282][ T5919] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1814.053904][T16771] usbtmc 3-1:16.0: can't read capabilities [ 1814.081417][T13940] em28xx 5-1:0.132: Closing input extension [ 1814.182631][T13940] em28xx 5-1:0.132: Freeing device [ 1814.225785][T24302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.282874][T16772] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 1814.290978][T24302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.317268][T16633] usb 3-1: USB disconnect, device number 114 [ 1814.360437][T16772] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 1814.401953][T16772] usbhid 1-1:0.0: can't add hid device: -32 [ 1814.415566][T16772] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1814.503648][T16772] usb 1-1: USB disconnect, device number 102 [ 1814.538927][ T5919] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1814.607089][ T30] audit: type=1326 audit(1762617323.335:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24322 comm="syz.4.4577" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d539 code=0x0 [ 1814.708963][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 1814.715776][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1814.727831][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1814.738102][ T5919] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1814.747429][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.758478][ T5919] usb 4-1: config 0 descriptor?? [ 1814.958941][T24332] netlink: 'syz.1.4579': attribute type 27 has an invalid length. [ 1815.125794][T24335] netlink: 'syz.2.4580': attribute type 27 has an invalid length. [ 1815.304352][ T5919] ft260 0003:0403:6030.0062: unknown main item tag 0x7 [ 1815.488332][ T5919] ft260 0003:0403:6030.0062: chip code: 6424 8183 [ 1815.800145][ T5919] ft260 0003:0403:6030.0062: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1815.899648][T16633] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 1816.061006][T16633] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1816.091357][T16633] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1816.144344][T16633] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1816.175392][ T5919] ft260 0003:0403:6030.0062: failed to retrieve status: -71 [ 1816.196603][T16633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.210050][ T5919] ft260 0003:0403:6030.0062: failed to reset I2C controller: -71 [ 1816.369556][ T5919] usb 4-1: USB disconnect, device number 118 [ 1816.524311][T16633] usb 5-1: usb_control_msg returned -32 [ 1816.530047][T16633] usbtmc 5-1:16.0: can't read capabilities [ 1816.665532][T24353] macvlan0: entered promiscuous mode [ 1816.672390][T24353] macvlan0: entered allmulticast mode [ 1816.677822][T24353] gretap0: entered allmulticast mode [ 1816.881665][T24359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4587'. [ 1817.516057][T24367] veth0: entered promiscuous mode [ 1817.542471][T24367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4591'. [ 1817.604140][T24370] netlink: 'syz.1.4589': attribute type 27 has an invalid length. [ 1818.009960][T24367] veth0 (unregistering): left promiscuous mode [ 1818.374016][T24377] input: syz1 as /devices/virtual/input/input104 [ 1818.400605][T24378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4593'. [ 1818.554023][T16771] usb 5-1: USB disconnect, device number 113 [ 1819.044769][T24390] netlink: 'syz.2.4596': attribute type 27 has an invalid length. [ 1819.103597][T16771] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1819.343040][T16771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.355532][T16771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1819.367579][T16771] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1819.415558][T16771] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1819.470035][T16771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.530439][T16771] usb 4-1: config 0 descriptor?? [ 1819.583747][T24373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1819.593778][T16633] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1819.845657][T16633] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1819.860003][T16633] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1819.889646][T16633] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1819.994147][T16633] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 1820.003829][T16633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1820.012586][T16633] usb 2-1: Product: syz [ 1820.017020][T16633] usb 2-1: Manufacturer: syz [ 1820.022783][T16633] usb 2-1: SerialNumber: syz [ 1820.156661][T16771] plantronics 0003:047F:FFFF.0063: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1820.269441][T16633] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 110 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1820.500296][T16633] usb 2-1: USB disconnect, device number 110 [ 1820.528810][T16633] usblp1: removed [ 1820.551733][ T5919] usb 4-1: USB disconnect, device number 119 [ 1820.611996][T24380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1821.437452][T24411] netlink: 'syz.0.4600': attribute type 27 has an invalid length. [ 1821.524093][T24411] macvlan0: left promiscuous mode [ 1821.527474][T24412] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1821.596890][T24411] macvlan0: left allmulticast mode [ 1821.876296][T24422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4604'. [ 1822.424146][T24441] input: syz1 as /devices/virtual/input/input105 [ 1823.077824][ T5919] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1823.259042][ T5919] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1823.309612][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.317844][ T5919] usb 5-1: Product: syz [ 1823.325276][ T5919] usb 5-1: Manufacturer: syz [ 1823.330608][ T5919] usb 5-1: SerialNumber: syz [ 1823.362367][ T5919] usb 5-1: config 0 descriptor?? [ 1823.617945][ T5919] usb 5-1: USB disconnect, device number 114 [ 1823.697525][T24443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1824.463490][T24453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1824.810010][T16771] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1824.822481][T24479] netlink: 'syz.4.4623': attribute type 27 has an invalid length. [ 1824.983539][T16771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.027572][T16771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.040722][T16771] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1825.146485][T16771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.220837][T16771] usb 4-1: config 0 descriptor?? [ 1825.762354][T16771] cm6533_jd 0003:0D8C:0022.0064: unknown main item tag 0x0 [ 1825.780151][T16771] cm6533_jd 0003:0D8C:0022.0064: unknown main item tag 0x0 [ 1825.808913][T24473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1825.876671][T16771] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0064/input/input106 [ 1825.986869][T16771] cm6533_jd 0003:0D8C:0022.0064: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 1826.100523][T16771] usb 4-1: USB disconnect, device number 120 [ 1826.226829][T24488] fido_id[24488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1827.040555][T24504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4628'. [ 1827.790955][T16772] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1827.970029][T16772] usb 5-1: Using ep0 maxpacket: 8 [ 1827.993210][T16772] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1828.003819][T16772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.019855][T16772] usb 5-1: Product: syz [ 1828.030980][T16772] usb 5-1: Manufacturer: syz [ 1828.041819][T16772] usb 5-1: SerialNumber: syz [ 1828.068040][T16772] usb 5-1: config 0 descriptor?? [ 1828.308062][T16772] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1828.412837][T16771] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1828.510614][T16776] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1828.570030][T16771] usb 4-1: Using ep0 maxpacket: 32 [ 1828.578524][T16771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1828.594097][T16771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1828.619856][T16771] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1828.639964][T16771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.649899][T16774] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1828.673846][T16771] usb 4-1: config 0 descriptor?? [ 1828.689546][T16776] usb 2-1: Using ep0 maxpacket: 8 [ 1828.702040][T16776] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1828.711468][T16776] usb 2-1: config 0 has no interface number 0 [ 1828.717643][T16776] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1828.785811][T16776] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1828.799719][T16776] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1828.812230][T16776] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1828.826638][T16776] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1828.837022][T16776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.862114][T16774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1828.873826][T16776] usb 2-1: config 0 descriptor?? [ 1828.879663][T16774] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1828.900230][T16774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.916795][T16774] usb 3-1: config 0 descriptor?? [ 1828.925923][T16776] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1828.986169][T24511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1829.142983][T16771] savu 0003:1E7D:2D5A.0065: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1829.166037][ T5919] usb 2-1: USB disconnect, device number 111 [ 1829.172182][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 1829.188517][T16774] usbhid 3-1:0.0: can't add hid device: -71 [ 1829.203605][T16774] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1829.213861][ T5919] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1829.221286][T16774] usb 3-1: USB disconnect, device number 115 [ 1829.320352][T16772] gspca_sunplus: reg_w_riv err -71 [ 1829.327994][T16772] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1829.333258][T16633] usb 4-1: USB disconnect, device number 121 [ 1829.394744][T16772] usb 5-1: USB disconnect, device number 115 [ 1829.668834][ T5919] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1829.801666][T24535] netlink: 'syz.0.4640': attribute type 27 has an invalid length. [ 1829.814554][T24535] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1829.859324][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 1829.911531][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1829.933046][ T5919] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1829.943567][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.956318][ T5919] usb 3-1: config 0 descriptor?? [ 1829.971025][ T5919] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1829.995426][ T5919] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1830.383309][ C1] ldusb 3-1:0.0: Ring buffer overflow, 8 bytes dropped [ 1830.460874][T16771] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1830.590293][T16772] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1830.619893][T16771] usb 2-1: Using ep0 maxpacket: 32 [ 1830.627264][T16771] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1830.637056][T16771] usb 2-1: config 0 has no interface number 0 [ 1830.644545][T16771] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1830.695069][T16771] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1830.705891][T16771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.717783][ C0] ldusb 3-1:0.0: Ring buffer overflow, 8 bytes dropped [ 1830.726605][T16771] usb 2-1: Product: syz [ 1830.731527][T16771] usb 2-1: Manufacturer: syz [ 1830.736266][T16771] usb 2-1: SerialNumber: syz [ 1830.745017][T16771] usb 2-1: config 0 descriptor?? [ 1830.765336][T16771] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1830.778560][T16772] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.789930][T16772] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.802269][T16771] em28xx 2-1:0.132: Video interface 132 found: [ 1830.815803][T16772] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1830.826518][T16772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.837512][T16772] usb 4-1: Product: syz [ 1830.843117][T16772] usb 4-1: Manufacturer: syz [ 1830.847890][T16772] usb 4-1: SerialNumber: syz [ 1830.881920][T16772] cdc_mbim 4-1:1.0: skipping garbage [ 1831.271020][T16771] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1831.431229][T24537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1831.598989][ T5919] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1831.760320][T16633] usb 3-1: USB disconnect, device number 116 [ 1831.797365][ T5919] usb 1-1: config 0 has no interfaces? [ 1831.804172][T16633] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1831.824476][ T5919] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1831.848847][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.875595][ T5919] usb 1-1: Product: syz [ 1831.887567][ T5919] usb 1-1: Manufacturer: syz [ 1831.896667][ T5919] usb 1-1: SerialNumber: syz [ 1831.930326][T16772] cdc_mbim 4-1:1.0: bind() failure [ 1831.931348][ T5919] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1831.935715][T16771] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1831.965744][T16772] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1831.978201][T16771] em28xx 2-1:0.132: failed to read eeprom (err=-5) [ 1831.995771][T16772] cdc_ncm 4-1:1.1: bind() failure [ 1832.002624][T16771] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1832.019874][ T5919] r8152-cfgselector 1-1: config 0 descriptor?? [ 1832.100065][T16771] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1832.108049][T16771] em28xx 2-1:0.132: analog set to bulk mode. [ 1832.120353][T16772] em28xx 2-1:0.132: Registering V4L2 extension [ 1832.226429][T16774] usb 4-1: USB disconnect, device number 122 [ 1832.602447][T16633] r8152-cfgselector 1-1: USB disconnect, device number 103 [ 1832.909307][T16771] usb 2-1: USB disconnect, device number 112 [ 1832.948379][T16771] em28xx 2-1:0.132: Disconnecting em28xx [ 1833.223092][T16772] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1833.245067][T16772] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1833.280210][T16772] em28xx 2-1:0.132: No AC97 audio processor [ 1833.297086][T16772] usb 2-1: Decoder not found [ 1833.311327][T16772] em28xx 2-1:0.132: failed to create media graph [ 1833.317744][T16772] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1833.334698][T16772] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1833.367340][T16771] em28xx 2-1:0.132: Closing input extension [ 1833.396934][T16771] em28xx 2-1:0.132: Freeing device [ 1833.612004][T16772] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1833.783513][T16772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.805879][T16772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.835326][T16772] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1833.981082][T16772] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1834.011438][T16772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.026498][T24583] netlink: 'syz.1.4655': attribute type 27 has an invalid length. [ 1834.078446][T16772] usb 5-1: config 0 descriptor?? [ 1834.431868][T24562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1834.489884][T16771] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1834.552599][T16772] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1834.739897][T16771] usb 4-1: Using ep0 maxpacket: 16 [ 1834.747033][T16771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1834.831252][T16771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1834.875143][T16771] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1834.914675][T24595] netlink: 'syz.0.4658': attribute type 27 has an invalid length. [ 1834.929255][T24595] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1834.959952][T16771] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1834.990051][T16771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.038305][T16771] usb 4-1: config 0 descriptor?? [ 1835.498066][T16771] HID 045e:07da: Invalid code 65791 type 1 [ 1835.586685][T16771] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0067/input/input107 [ 1835.619883][T16633] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1835.711083][T16771] microsoft 0003:045E:07DA.0067: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1835.784263][T16633] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1835.828115][T16633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.830543][T16771] usb 4-1: USB disconnect, device number 123 [ 1835.884264][T16633] usb 2-1: Product: syz [ 1835.920153][T16633] usb 2-1: Manufacturer: syz [ 1835.938781][T16633] usb 2-1: SerialNumber: syz [ 1835.979499][T16633] usb 2-1: config 0 descriptor?? [ 1836.026388][T24601] fido_id[24601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1836.344509][T24604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4660'. [ 1836.422036][T16633] airspy 2-1:0.0: Board ID: 00 [ 1836.438994][T16633] airspy 2-1:0.0: Firmware version: [ 1836.633037][T13940] usb 5-1: USB disconnect, device number 116 [ 1836.708039][T24612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4662'. [ 1836.901740][T24617] pim6reg1: entered promiscuous mode [ 1836.932612][T24617] pim6reg1: entered allmulticast mode [ 1837.458537][T16633] airspy 2-1:0.0: usb_control_msg() failed -71 request 0f [ 1837.484180][T16633] airspy 2-1:0.0: Registered as swradio24 [ 1837.538865][T16633] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1837.568996][T16633] usb 2-1: USB disconnect, device number 113 [ 1838.002316][T24603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1838.334252][T24628] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4666'. [ 1838.479076][T16633] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1838.628867][T16633] usb 4-1: Using ep0 maxpacket: 16 [ 1838.823548][T16633] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.848254][T16633] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1838.880648][T16633] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1838.890346][T16633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.909988][T16633] usb 4-1: Product: syz [ 1838.931158][T16633] usb 4-1: Manufacturer: syz [ 1838.942820][T24637] netlink: 'syz.1.4667': attribute type 27 has an invalid length. [ 1838.994438][T16633] usb 4-1: SerialNumber: syz [ 1839.246104][T16633] usb 4-1: 0:2 : does not exist [ 1839.270937][T16633] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1839.310606][T16633] usb 4-1: USB disconnect, device number 124 [ 1839.403505][T18773] udevd[18773]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1839.421440][T16772] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1839.649539][T16772] usb 5-1: Using ep0 maxpacket: 8 [ 1839.661637][T16772] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1839.671332][T16772] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1839.682499][T16772] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1839.704086][T16772] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1839.725630][T16772] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1839.749909][T16772] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1839.769804][T16772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.820824][T16771] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1840.012116][T16772] usb 5-1: GET_CAPABILITIES returned 0 [ 1840.023363][T16771] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1840.040034][T16771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.049949][T16772] usbtmc 5-1:16.0: can't read capabilities [ 1840.110766][T16771] usb 2-1: config 0 descriptor?? [ 1840.130632][T16771] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1840.319528][T24643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1840.329625][T16633] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1840.402208][T24642] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 1840.402771][T13940] usb 5-1: USB disconnect, device number 117 [ 1840.424268][T24660] usb 5-1: usbtmc_ioctl_clear_out_halt returned -19 [ 1840.490663][T16633] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1840.550602][T16633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1840.551317][T16771] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 1840.575543][T16633] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1840.587551][T16633] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1840.610359][T16633] usb 1-1: Manufacturer: syz [ 1840.688604][T24665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4678'. [ 1841.019028][T16633] usb 1-1: config 0 descriptor?? [ 1841.170149][T16633] rc_core: IR keymap rc-hauppauge not found [ 1841.177903][T16633] Registered IR keymap rc-empty [ 1841.200301][T16633] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1841.221587][T16633] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input108 [ 1841.257439][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 1841.355255][T16772] usb 1-1: USB disconnect, device number 104 [ 1841.402902][T16771] gspca_cpia1: usb_control_msg 05, error -71 [ 1841.434899][T16771] cpia1 2-1:0.0: unexpected systemstate: 00 [ 1841.501938][T16771] usb 2-1: USB disconnect, device number 114 [ 1842.229789][T16774] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 1842.319715][T16771] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1842.391498][T16774] usb 3-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 1842.404457][T16774] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 1842.447953][T16774] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64 [ 1842.472201][T16774] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 5853, setting to 64 [ 1842.472245][T16633] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1842.484629][T16771] usb 4-1: Using ep0 maxpacket: 8 [ 1842.501243][T16774] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1842.532662][T16774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.545081][T16771] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1842.560190][T16771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.571338][T16771] usb 4-1: Product: syz [ 1842.572909][T24676] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1842.575584][T16771] usb 4-1: Manufacturer: syz [ 1842.606318][T24676] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1842.613908][T16771] usb 4-1: SerialNumber: syz [ 1842.622817][T16774] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1842.639776][T16633] usb 2-1: Using ep0 maxpacket: 16 [ 1842.643020][T16774] usb 3-1: invalid MIDI in EP 0 [ 1842.648483][T16633] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1842.664440][T16633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1842.780460][T16633] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1842.790399][T16633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.803995][T16633] usb 2-1: Product: syz [ 1842.814741][T16633] usb 2-1: Manufacturer: syz [ 1842.853883][T16633] usb 2-1: SerialNumber: syz [ 1842.872352][T16633] usb 2-1: config 0 descriptor?? [ 1842.873014][T16771] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 125 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1842.915156][T16633] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1842.964492][T24681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1843.045446][T16633] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1843.064766][T18804] udevd[18804]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1843.093601][T16774] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1843.230183][T16774] usb 3-1: USB disconnect, device number 117 [ 1843.519147][T16633] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1843.538736][T16633] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1843.740928][T13940] usb 4-1: USB disconnect, device number 125 [ 1843.759207][T13940] usblp0: removed [ 1843.766386][T16633] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1843.774249][T16633] em28xx 2-1:0.0: No AC97 audio processor [ 1843.862346][T16633] usb 2-1: USB disconnect, device number 115 [ 1843.901082][T24700] netlink: 'syz.0.4689': attribute type 27 has an invalid length. [ 1843.919157][T24700] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1843.969813][T16633] em28xx 2-1:0.0: Disconnecting em28xx [ 1844.000256][T16633] em28xx 2-1:0.0: Freeing device [ 1844.358850][T13940] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1844.521236][T13940] usb 3-1: Using ep0 maxpacket: 8 [ 1844.551183][T13940] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1844.561363][T13940] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1844.570922][T13940] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1844.589988][T13940] usb 3-1: config 250 has no interface number 0 [ 1844.618856][T13940] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1844.649549][T13940] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1844.693526][T13940] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1844.729920][T16771] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1844.734722][T13940] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1844.799944][T13940] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1844.851664][T13940] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1844.876936][T13940] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1844.888104][T13940] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1844.892027][T16771] usb 4-1: Using ep0 maxpacket: 8 [ 1844.897577][T13940] usb 3-1: Product: syz [ 1844.906276][T13940] usb 3-1: SerialNumber: syz [ 1844.912405][T16771] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1844.925718][T16771] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1844.937612][T13940] hub 3-1:250.228: bad descriptor, ignoring hub [ 1844.945574][T13940] hub 3-1:250.228: probe with driver hub failed with error -5 [ 1844.950235][T16771] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1844.965268][T16771] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1844.977527][T16771] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1844.992479][T16771] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1845.003143][T16771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.145837][T13940] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 118 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1845.226469][T16771] usb 4-1: usb_control_msg returned -32 [ 1845.233619][T16771] usbtmc 4-1:16.0: can't read capabilities [ 1845.291913][T24717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4696'. [ 1846.242380][T13940] usb 3-1: reset high-speed USB device number 118 using dummy_hcd [ 1846.372321][T24704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1847.041861][T16772] usb 3-1: USB disconnect, device number 118 [ 1847.052236][T16772] usblp0: removed [ 1847.191515][T16774] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1847.278447][T24721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1847.383339][T16774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.406215][T16774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1847.426553][T16774] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1847.458779][ T30] audit: type=1326 audit(1762617356.175:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24706 comm="syz.3.4693" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7fc00000 [ 1847.501145][T13940] usb 4-1: USB disconnect, device number 126 [ 1847.507399][T16774] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1847.527497][T16774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.631256][T16774] usb 1-1: config 0 descriptor?? [ 1848.201685][T16774] plantronics 0003:047F:FFFF.0068: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1848.439817][T13940] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1848.610842][T13940] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1848.627235][T13940] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1848.653669][T13940] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1848.677684][T13940] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1848.687235][T13940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.705412][T13940] usb 3-1: Product: syz [ 1848.715353][T13940] usb 3-1: Manufacturer: syz [ 1848.730521][T13940] usb 3-1: SerialNumber: syz [ 1849.768106][T13940] cdc_ncm 3-1:1.0: bind() failure [ 1849.785601][T13940] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1849.804865][T13940] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1849.824604][T13940] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1849.842372][ T30] audit: type=1326 audit(1762617358.575:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24763 comm="syz.4.4714" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x0 [ 1849.851345][T13940] usb 3-1: USB disconnect, device number 119 [ 1850.251762][T16772] usb 1-1: USB disconnect, device number 105 [ 1850.258897][T16633] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1850.428892][T16633] usb 2-1: Using ep0 maxpacket: 8 [ 1850.439008][T16633] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1850.453729][T16633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.472884][T16633] usb 2-1: Product: syz [ 1850.477129][T16633] usb 2-1: Manufacturer: syz [ 1850.488288][T16633] usb 2-1: SerialNumber: syz [ 1850.496301][T16633] usb 2-1: config 0 descriptor?? [ 1850.505673][T16633] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1850.629505][T16772] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1850.801634][T16772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1850.819849][T16772] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1850.849876][T16772] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1850.860390][T16772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.930282][T16772] usb 1-1: config 0 descriptor?? [ 1851.396657][T24777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.405180][T16772] kovaplus 0003:1E7D:2D50.0069: unknown main item tag 0x0 [ 1851.440567][T16772] kovaplus 0003:1E7D:2D50.0069: unknown main item tag 0x0 [ 1851.453261][T16772] kovaplus 0003:1E7D:2D50.0069: unknown main item tag 0x0 [ 1851.462548][T16772] kovaplus 0003:1E7D:2D50.0069: unknown main item tag 0x0 [ 1851.481895][T16772] kovaplus 0003:1E7D:2D50.0069: unknown main item tag 0x0 [ 1851.496137][T16772] kovaplus 0003:1E7D:2D50.0069: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 1851.897944][T16633] gspca_sonixj: reg_w1 err -71 [ 1851.908955][T16633] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1851.938417][T16633] usb 2-1: USB disconnect, device number 116 [ 1852.032096][T16772] kovaplus 0003:1E7D:2D50.0069: couldn't init struct kovaplus_device [ 1852.048343][T16772] kovaplus 0003:1E7D:2D50.0069: couldn't install mouse [ 1852.165101][T16772] kovaplus 0003:1E7D:2D50.0069: probe with driver kovaplus failed with error -71 [ 1852.267015][T16772] usb 1-1: USB disconnect, device number 106 [ 1852.853234][T24807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4728'. [ 1853.379959][T16772] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1853.543543][T16772] usb 1-1: Using ep0 maxpacket: 8 [ 1853.653485][T16772] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1853.689878][T16772] usb 1-1: config 179 has no interface number 0 [ 1853.719887][T16772] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1853.755765][T16772] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1853.804212][T16772] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1853.854182][T16772] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1853.892266][T24840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4741'. [ 1853.966104][T24840] netlink: 'syz.4.4741': attribute type 18 has an invalid length. [ 1854.084086][T16772] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1854.162822][T16772] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1854.197187][T24817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1854.236392][T16772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.247623][T24840] vxlan0: entered promiscuous mode [ 1854.519212][T24822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1854.535302][T23797] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1854.545759][T23797] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1854.634159][T23797] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1854.764800][T23797] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1854.797749][T16633] usb 1-1: USB disconnect, device number 107 [ 1854.797872][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1854.813641][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 1855.059184][T24832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1857.198958][T16633] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1857.379434][T16633] usb 4-1: Using ep0 maxpacket: 16 [ 1857.401290][T16633] usb 4-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 1857.418773][T16633] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.458792][T16633] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1857.500717][T16633] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1857.502296][T24880] syzkaller1: entered promiscuous mode [ 1857.507411][T16633] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1857.522968][T24880] syzkaller1: entered allmulticast mode [ 1857.555078][T16633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.595396][T16633] usb 4-1: config 0 descriptor?? [ 1857.979366][ T5919] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1858.044564][T16633] sony 0003:054C:024B.006A: hiddev0,hidraw0: USB HID v0.03 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 1858.079337][T16633] sony 0003:054C:024B.006A: failed to claim input [ 1858.176722][T24902] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1858.189757][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1858.270125][ T5919] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1858.284544][T16774] usb 4-1: USB disconnect, device number 127 [ 1858.295827][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.323882][ T5919] usb 5-1: config 0 descriptor?? [ 1858.565437][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.571934][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.614101][ T5919] usbhid 5-1:0.0: can't add hid device: -71 [ 1858.623669][ T5919] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1858.635709][T24900] fido_id[24900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1858.687396][ T5919] usb 5-1: USB disconnect, device number 118 [ 1859.074094][T24909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4763'. [ 1859.198879][ T5919] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1859.576788][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 1859.591685][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.787499][ T5919] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1859.835075][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.884968][T24895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1860.015712][ T5919] usb 5-1: config 0 descriptor?? [ 1860.035791][ T5919] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1860.073813][ T5919] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1860.265415][T24920] netlink: 'syz.0.4764': attribute type 27 has an invalid length. [ 1860.287502][T24920] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1860.418819][ T5919] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1860.516798][T16772] usb 5-1: USB disconnect, device number 119 [ 1860.528406][T16772] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1860.578845][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 1860.671335][ T5919] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1860.691605][ T5919] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1860.749247][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1860.774190][ T5919] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1860.811579][ T5919] usb 4-1: Product: syz [ 1860.828802][ T5919] usb 4-1: Manufacturer: syz [ 1860.846485][ T5919] hub 4-1:4.0: USB hub found [ 1861.053971][ T5919] hub 4-1:4.0: 2 ports detected [ 1861.767652][ T5919] hub 4-1:4.0: set hub depth failed [ 1861.785241][ T5919] usb 4-1: USB disconnect, device number 2 [ 1862.509839][T24923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1863.942505][T24968] input: syz1 as /devices/virtual/input/input109 [ 1864.133688][T24973] macvlan0: entered promiscuous mode [ 1864.181840][T24942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1864.249288][ T5919] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1864.423366][ T5919] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.435641][ T5919] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1864.459751][ T5919] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1864.479328][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1864.487375][ T5919] usb 5-1: SerialNumber: syz [ 1864.741794][ T5919] usb 5-1: 0:2 : does not exist [ 1864.764404][ T5919] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1864.991047][T24964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1865.189490][ T5919] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1865.304561][ T5919] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1865.348573][ T5919] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1865.568627][T24993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4784'. [ 1865.903637][T24976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1865.931124][T16774] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1866.109667][ T5919] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1866.165231][T16774] usb 2-1: Using ep0 maxpacket: 32 [ 1866.188430][T16774] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1866.189857][ T5919] usb 5-1: USB disconnect, device number 120 [ 1866.209857][T16774] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1866.276810][T16774] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1866.313579][T16774] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1866.346926][T16774] usb 2-1: Product: syz [ 1866.364975][T16774] usb 2-1: Manufacturer: syz [ 1866.385164][T16774] hub 2-1:4.0: USB hub found [ 1866.591295][T16774] hub 2-1:4.0: 2 ports detected [ 1866.993235][T16774] hub 2-1:4.0: set hub depth failed [ 1867.003880][T16774] usb 2-1: USB disconnect, device number 117 [ 1867.018853][ T5919] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1867.199038][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 1867.207379][ T5919] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1867.226103][ T5919] usb 1-1: config 0 has no interface number 0 [ 1867.254148][ T5919] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1867.276586][ T5919] usb 1-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=da.9a [ 1867.298133][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.319235][ T5919] usb 1-1: Product: syz [ 1867.323506][ T5919] usb 1-1: Manufacturer: syz [ 1867.328141][ T5919] usb 1-1: SerialNumber: syz [ 1867.434058][ T5919] usb 1-1: config 0 descriptor?? [ 1867.471968][T25006] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1867.692966][ T5919] snd-usb-audio 1-1:0.1: probe with driver snd-usb-audio failed with error -22 [ 1867.740131][ T5919] usb 1-1: USB disconnect, device number 108 [ 1867.812844][T18773] udevd[18773]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1867.857888][T25013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4791'. [ 1868.828996][T25031] netlink: 'syz.1.4796': attribute type 27 has an invalid length. [ 1868.838225][T25031] macvlan0: left promiscuous mode [ 1869.346524][ T30] audit: type=1326 audit(1762617378.075:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.2.4799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1869.544887][ T30] audit: type=1326 audit(1762617378.075:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.2.4799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1869.721135][ T30] audit: type=1326 audit(1762617378.105:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.2.4799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1869.868907][ T30] audit: type=1326 audit(1762617378.105:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.2.4799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1869.891064][ C1] vkms_vblank_simulate: vblank timer overrun [ 1870.090017][ T30] audit: type=1326 audit(1762617378.105:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.2.4799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1870.114991][ T30] audit: type=1326 audit(1762617378.105:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.2.4799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1870.141180][ T30] audit: type=1326 audit(1762617378.105:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.2.4799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1870.191027][T25024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1870.201680][ T30] audit: type=1326 audit(1762617378.105:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.2.4799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1870.270190][ T30] audit: type=1326 audit(1762617378.105:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.2.4799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1870.394997][ T30] audit: type=1326 audit(1762617378.105:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25039 comm="syz.2.4799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1871.099491][T16774] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1871.290382][T16774] usb 5-1: Using ep0 maxpacket: 32 [ 1871.300832][T16774] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 1871.322129][T16774] usb 5-1: config 0 has no interface number 0 [ 1871.352681][T16774] usb 5-1: config 0 interface 230 has no altsetting 0 [ 1871.383121][T16774] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1871.416606][T16774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.436043][T16774] usb 5-1: Product: syz [ 1871.446845][T16774] usb 5-1: Manufacturer: syz [ 1871.457993][T16774] usb 5-1: SerialNumber: syz [ 1871.522491][T16774] usb 5-1: config 0 descriptor?? [ 1871.536154][T16774] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 1871.574085][T16774] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1871.688819][ T5919] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1871.859367][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 1871.869640][ T5919] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1871.878167][ T5919] usb 1-1: config 179 has no interface number 0 [ 1871.909674][ T5919] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1871.969732][ T5919] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1872.114362][ T5919] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 1872.225986][T25071] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1872.390131][ T5919] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 1872.423073][ T5919] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1872.440313][ T5919] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1872.460569][ T5919] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1872.485958][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.508316][T25074] syzkaller1: entered promiscuous mode [ 1872.514408][T25074] syzkaller1: entered allmulticast mode [ 1872.543627][ T5919] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input110 [ 1872.609086][ T5185] input input110: unable to receive magic message: -110 [ 1872.666743][ T5185] input input110: unable to receive magic message: -32 [ 1872.692527][ T5185] input input110: unable to receive magic message: -32 [ 1872.829703][ T5185] input input110: unable to receive magic message: -32 [ 1872.980712][ T5919] usb 1-1: USB disconnect, device number 109 [ 1872.986832][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1874.118009][T25101] netlink: 'syz.0.4815': attribute type 27 has an invalid length. [ 1874.132039][T25101] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1875.112687][T25083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1875.507357][T25115] loop6: detected capacity change from 0 to 2640 [ 1875.530366][T25115] buffer_io_error: 35 callbacks suppressed [ 1875.530380][T25115] Buffer I/O error on dev loop6, logical block 0, async page read [ 1875.680367][T25115] Buffer I/O error on dev loop6, logical block 0, async page read [ 1875.739163][T25115] Buffer I/O error on dev loop6, logical block 0, async page read [ 1875.764126][T25115] Buffer I/O error on dev loop6, logical block 0, async page read [ 1875.766277][T16774] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 1875.902906][T16774] usb 5-1: USB disconnect, device number 121 [ 1875.909247][T25115] Buffer I/O error on dev loop6, logical block 0, async page read [ 1875.909395][T25115] Buffer I/O error on dev loop6, logical block 0, async page read [ 1875.909515][T25115] Buffer I/O error on dev loop6, logical block 0, async page read [ 1875.909620][T25115] Buffer I/O error on dev loop6, logical block 0, async page read [ 1875.909691][T25115] ldm_validate_partition_table(): Disk read failed. [ 1875.909740][T25115] Buffer I/O error on dev loop6, logical block 0, async page read [ 1875.909842][T25115] Buffer I/O error on dev loop6, logical block 0, async page read [ 1875.910087][T25115] Dev loop6: unable to read RDB block 0 [ 1875.910787][T25115] loop6: unable to read partition table [ 1876.081340][T25115] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1876.379563][ T5200] ldm_validate_partition_table(): Disk read failed. [ 1876.413720][ T5200] Dev loop6: unable to read RDB block 0 [ 1876.440889][ T5200] loop6: unable to read partition table [ 1876.876683][T25135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1877.619930][T16774] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1877.779798][T16774] usb 5-1: Using ep0 maxpacket: 32 [ 1877.787480][T16774] usb 5-1: config 0 has no interfaces? [ 1877.794469][T16774] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1877.805674][T16774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.843178][T16774] usb 5-1: config 0 descriptor?? [ 1878.070651][T25155] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4835'. [ 1878.187291][T25157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4836'. [ 1878.263398][T16774] usb 5-1: USB disconnect, device number 122 [ 1878.289100][ T5919] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1878.317225][T25157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1878.364304][T25161] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 1878.398322][T25157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4836'. [ 1878.450941][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1878.468718][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1878.485131][ T5919] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1878.498835][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1878.519334][ T5919] usb 2-1: SerialNumber: syz [ 1879.095769][ T5919] usb 2-1: 0:2 : does not exist [ 1879.102366][ T5919] usb 2-1: unit 5: unexpected type 0x09 [ 1879.161747][ T5919] usb 2-1: USB disconnect, device number 118 [ 1879.252056][T18773] udevd[18773]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1879.254196][T25178] trusted_key: syz.4.4840 sent an empty control message without MSG_MORE. [ 1879.521935][T25157] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 1879.537428][T25157] bond1 (unregistering): Released all slaves [ 1879.779943][T25158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1881.081677][T25179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1882.195547][T25221] netlink: 'syz.2.4854': attribute type 27 has an invalid length. [ 1882.730224][T16774] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1882.889926][T16774] usb 1-1: Using ep0 maxpacket: 8 [ 1882.903305][T16774] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1882.913075][T16774] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1882.944760][T16774] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1882.976090][T16774] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1883.009317][T16774] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1883.029609][T25216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1883.040418][T16774] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1883.052136][T16774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.328101][T16774] usb 1-1: usb_control_msg returned -32 [ 1883.335136][T16774] usbtmc 1-1:16.0: can't read capabilities [ 1883.341089][T25244] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4862'. [ 1883.342865][T25244] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4862'. [ 1883.366608][T25244] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4862'. [ 1883.424222][T25244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4862'. [ 1884.041135][T25256] usbtmc 1-1:16.0: CHECK_CLEAR_STATUS returned 3 [ 1884.193957][T25232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1884.247839][ T5919] usb 1-1: USB disconnect, device number 110 [ 1885.573895][T25261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1886.867119][T25285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4871'. [ 1887.536974][T25291] netlink: 'syz.2.4872': attribute type 27 has an invalid length. [ 1887.754345][T25266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1888.440081][T16772] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1888.599903][T16772] usb 3-1: Using ep0 maxpacket: 32 [ 1888.611580][T16772] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1888.632396][T16772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.657988][T16772] usb 3-1: Product: syz [ 1888.670268][T16772] usb 3-1: Manufacturer: syz [ 1888.677796][T16772] usb 3-1: SerialNumber: syz [ 1888.698474][T16772] usb 3-1: config 0 descriptor?? [ 1888.717660][T16772] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1888.970578][T25309] loop4: detected capacity change from 0 to 7 [ 1889.011136][T25309] Dev loop4: unable to read RDB block 7 [ 1889.016798][T25309] loop4: unable to read partition table [ 1889.063071][T25309] loop4: partition table beyond EOD, truncated [ 1889.164499][T25309] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1889.279488][ T5919] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1889.520015][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 1889.538899][ T5919] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1889.550154][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.581632][ T5919] usb 1-1: config 0 descriptor?? [ 1889.847575][ T5919] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1889.869885][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1889.939971][ T5919] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1889.958247][ T5919] usb 1-1: media controller created [ 1890.035154][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1890.188273][T16772] gspca_stk1135: reg_w 0xf err -71 [ 1890.196249][T16772] gspca_stk1135: serial bus timeout: status=0x00 [ 1890.227249][T16772] gspca_stk1135: Sensor write failed [ 1890.235543][T16772] gspca_stk1135: serial bus timeout: status=0x00 [ 1890.244927][T16772] gspca_stk1135: Sensor write failed [ 1890.363469][ T5919] az6027: usb out operation failed. (-71) [ 1890.376478][ T5919] az6027: usb out operation failed. (-71) [ 1890.382495][ T5919] stb0899_attach: Driver disabled by Kconfig [ 1890.389365][ T5919] az6027: no front-end attached [ 1890.389365][ T5919] [ 1890.421056][T16772] gspca_stk1135: serial bus timeout: status=0x00 [ 1890.428418][T16772] gspca_stk1135: Sensor read failed [ 1890.436579][T16772] gspca_stk1135: serial bus timeout: status=0x00 [ 1890.438841][ T5919] az6027: usb out operation failed. (-71) [ 1890.445611][T16772] gspca_stk1135: Sensor read failed [ 1890.464083][T16772] gspca_stk1135: Detected sensor type unknown (0x0) [ 1890.531757][ T5919] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1890.547075][T16772] gspca_stk1135: serial bus timeout: status=0x00 [ 1890.554576][T16772] gspca_stk1135: Sensor read failed [ 1890.559300][ T5919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input111 [ 1890.589446][T16772] gspca_stk1135: serial bus timeout: status=0x00 [ 1890.601689][ T5919] dvb-usb: schedule remote query interval to 400 msecs. [ 1890.616320][ T5919] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1890.637750][ T5919] usb 1-1: USB disconnect, device number 111 [ 1890.674412][T16772] gspca_stk1135: Sensor read failed [ 1890.687115][T25326] netlink: 'syz.1.4883': attribute type 33 has an invalid length. [ 1890.696811][T16772] gspca_stk1135: serial bus timeout: status=0x00 [ 1890.771438][T25305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1890.821968][T16772] gspca_stk1135: Sensor write failed [ 1890.827540][T16772] gspca_stk1135: serial bus timeout: status=0x00 [ 1890.835235][T25326] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4883'. [ 1890.845796][T16772] gspca_stk1135: Sensor write failed [ 1890.884479][T16772] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1890.914122][T16772] usb 3-1: USB disconnect, device number 120 [ 1890.925194][T25326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4883'. [ 1891.018083][ T5919] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1891.360148][T25335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4887'. [ 1891.479751][T16772] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1891.642518][T16772] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1891.715175][T16772] usb 3-1: not running at top speed; connect to a high speed hub [ 1891.880934][T16772] usb 3-1: config 1 has an invalid interface descriptor of length 5, skipping [ 1891.880966][T16772] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1891.880988][T16772] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 1891.881058][T16772] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 1891.881100][T16772] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1891.883776][T16772] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1891.946940][T16772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.960353][T16772] usb 3-1: Product: syz [ 1891.964686][T16772] usb 3-1: Manufacturer: syz [ 1892.009292][T16772] usb 3-1: SerialNumber: syz [ 1892.213815][T25352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4893'. [ 1892.267364][T25352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1892.283236][T16772] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1892.292244][T25352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4893'. [ 1892.302605][T25352] bond0: option resend_igmp: invalid value (262144) [ 1892.311239][T25352] bond0: option resend_igmp: allowed values 0 - 255 [ 1892.435032][T25358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4895'. [ 1892.467151][T16772] usb 3-1: USB disconnect, device number 121 [ 1892.537974][T18773] udevd[18773]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1893.648432][T25343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1893.914009][T25382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4901'. [ 1894.335190][T25366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1894.598347][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4902'. [ 1894.620403][T25385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4902'. [ 1894.639316][T25385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4902'. [ 1895.845421][T25377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1896.108606][T25410] input: syz1 as /devices/virtual/input/input112 [ 1896.188873][ T5919] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1896.412440][ T5919] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1896.421734][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.429874][ T5919] usb 2-1: Product: syz [ 1896.434134][ T5919] usb 2-1: Manufacturer: syz [ 1896.439375][ T5919] usb 2-1: SerialNumber: syz [ 1896.465849][ T5919] usb 2-1: config 0 descriptor?? [ 1896.477483][ T5919] hub 2-1:0.0: bad descriptor, ignoring hub [ 1896.483683][ T5919] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1896.803375][T25418] __nla_validate_parse: 1 callbacks suppressed [ 1896.803396][T25418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4911'. [ 1897.143335][ T5919] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1897.189912][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1897.209732][ T5919] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1897.235135][ T5919] usb 2-1: media controller created [ 1897.278002][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1897.286545][T16633] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1897.492607][T16633] usb 1-1: Using ep0 maxpacket: 8 [ 1897.503507][T16633] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1897.571409][T16633] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1897.611372][T16633] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1897.641679][ T5919] DVB: Unable to find symbol dib7000p_attach() [ 1897.649658][T16633] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1897.663874][ T5919] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1897.675942][T16633] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1897.688701][T16633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.768270][T25424] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1897.828751][ T5919] rc_core: IR keymap rc-dib0700-rc5 not found [ 1897.855486][ T5919] Registered IR keymap rc-empty [ 1897.867336][T25424] bond1: (slave lo): Enslaving as a backup interface with an up link [ 1897.868262][ T5919] dvb-usb: could not initialize remote control. [ 1897.882888][ T5919] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1897.915108][ T5919] usb 2-1: USB disconnect, device number 119 [ 1897.935708][T25424] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1897.936723][T16633] usb 1-1: GET_CAPABILITIES returned 0 [ 1898.092155][T16633] usbtmc 1-1:16.0: can't read capabilities [ 1898.195406][ T5919] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1898.215634][T16633] usb 1-1: USB disconnect, device number 112 [ 1900.227113][T25439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1901.645200][T25492] netlink: 'syz.1.4934': attribute type 2 has an invalid length. [ 1901.697071][T25463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1901.814706][T25492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1901.861139][T25492] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1901.900142][T25494] netlink: 'syz.1.4934': attribute type 2 has an invalid length. [ 1901.908405][T25494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1902.166373][T25505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1905.582580][T25527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1906.322580][T25558] netlink: zone id is out of range [ 1906.351063][T25558] netlink: zone id is out of range [ 1906.451188][T25558] netlink: zone id is out of range [ 1906.484258][T25534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1906.498788][T25558] netlink: zone id is out of range [ 1906.607151][T25536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1906.709879][T25558] netlink: zone id is out of range [ 1906.715206][T25558] netlink: zone id is out of range [ 1906.722314][T25558] netlink: zone id is out of range [ 1906.727896][T25558] netlink: zone id is out of range [ 1906.744710][T25558] netlink: zone id is out of range [ 1906.753200][T25558] netlink: zone id is out of range [ 1907.560275][T16771] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1907.739871][T16771] usb 4-1: Using ep0 maxpacket: 8 [ 1907.747414][T16771] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1907.761729][T16771] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1907.774160][T16771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.800070][T16771] usb 4-1: Product: syz [ 1907.807711][T16771] usb 4-1: Manufacturer: syz [ 1907.819995][T16771] usb 4-1: SerialNumber: syz [ 1907.837984][T16771] usb 4-1: config 0 descriptor?? [ 1907.863325][T16771] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1907.940078][T16771] usb 4-1: setting power ON [ 1907.944683][T16771] dvb-usb: bulk message failed: -22 (2/0) [ 1907.969456][T16771] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1907.990628][T16771] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1908.001436][T16771] usb 4-1: media controller created [ 1908.091709][T25571] dvb-usb: bulk message failed: -22 (3/0) [ 1908.099763][T25571] dvb-usb: bulk message failed: -22 (4/0) [ 1908.148839][T25571] cxusb: i2c read failed [ 1908.171895][T25582] dvb-usb: bulk message failed: -22 (4/0) [ 1908.177820][T25582] cxusb: i2c read failed [ 1908.213398][T16771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1908.272416][T16771] usb 4-1: selecting invalid altsetting 6 [ 1908.293007][T16771] usb 4-1: digital interface selection failed (-22) [ 1908.312651][T16771] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1908.343892][T16771] usb 4-1: setting power OFF [ 1908.375356][T16771] dvb-usb: bulk message failed: -22 (2/0) [ 1908.400392][T16771] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1908.423401][T16771] (NULL device *): no alternate interface [ 1908.692090][T16771] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1908.720016][T16771] usb 4-1: USB disconnect, device number 3 [ 1909.523052][T25600] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1909.610269][T25601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4966'. [ 1911.013838][T25588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1912.516268][T25635] vlan0: entered promiscuous mode [ 1912.600576][T25635] gretap0: entered promiscuous mode [ 1912.863203][T25620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1913.364481][T25653] net_ratelimit: 345 callbacks suppressed [ 1913.364498][T25653] netlink: zone id is out of range [ 1913.402148][T25654] netlink: 'syz.0.4981': attribute type 27 has an invalid length. [ 1913.432401][T25654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1913.474512][T25653] netlink: zone id is out of range [ 1913.503835][T25653] netlink: zone id is out of range [ 1913.553502][T25653] netlink: zone id is out of range [ 1913.679732][T25653] netlink: zone id is out of range [ 1913.685291][T25653] netlink: zone id is out of range [ 1913.691989][T25653] netlink: zone id is out of range [ 1913.708000][T25653] netlink: zone id is out of range [ 1913.739791][T25653] netlink: zone id is out of range [ 1913.747240][T25653] netlink: zone id is out of range [ 1914.910129][T16772] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1915.140135][T16772] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1915.207507][T16772] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1915.215089][T16772] usb 3-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 1915.231584][T16772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.250744][T16774] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1915.310851][T16772] usb 3-1: config 0 descriptor?? [ 1915.410064][T16774] usb 5-1: Using ep0 maxpacket: 8 [ 1915.418146][T16774] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1915.432267][T16774] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1915.447318][T16774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.509363][T16774] usb 5-1: Product: syz [ 1915.526550][T16774] usb 5-1: Manufacturer: syz [ 1915.541985][T16772] usbhid 3-1:0.0: can't add hid device: -71 [ 1915.548028][T16772] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1915.571613][T25695] netlink: 'syz.0.4996': attribute type 27 has an invalid length. [ 1915.583328][T25695] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1915.616073][T16774] usb 5-1: SerialNumber: syz [ 1915.628495][T16772] usb 3-1: USB disconnect, device number 122 [ 1915.660516][T16774] usb 5-1: config 0 descriptor?? [ 1915.675542][T16774] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1915.685180][T16774] usb 5-1: setting power ON [ 1915.692976][T16774] dvb-usb: bulk message failed: -22 (2/0) [ 1915.731493][T16774] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1915.792609][T25671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1915.803154][T16774] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1915.813184][T16774] usb 5-1: media controller created [ 1915.846943][T16774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1915.873078][T25684] dvb-usb: bulk message failed: -22 (3/0) [ 1915.881625][T25684] dvb-usb: bulk message failed: -22 (4/0) [ 1915.892283][T25684] cxusb: i2c read failed [ 1915.898361][T16774] usb 5-1: selecting invalid altsetting 6 [ 1915.906595][T16774] usb 5-1: digital interface selection failed (-22) [ 1916.010103][T25684] dvb-usb: bulk message failed: -22 (4/0) [ 1916.015999][T25684] cxusb: i2c read failed [ 1916.021648][T16774] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1916.037194][T16774] usb 5-1: setting power OFF [ 1916.045856][T16774] dvb-usb: bulk message failed: -22 (2/0) [ 1916.063548][T16774] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1916.110382][T16774] (NULL device *): no alternate interface [ 1916.151462][T16774] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1916.222045][T25685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1916.241321][T16774] usb 5-1: USB disconnect, device number 123 [ 1918.300239][T25706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1918.871617][T25715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1919.666728][T25742] netlink: 'syz.1.5010': attribute type 27 has an invalid length. [ 1919.688554][T25742] vlan0: left promiscuous mode [ 1919.706829][T25742] gretap0: left promiscuous mode [ 1919.974001][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.980480][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.496380][T25763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5016'. [ 1920.517593][T25763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1920.676696][T25767] netlink: 'syz.1.5019': attribute type 4 has an invalid length. [ 1920.711515][T25767] netlink: 'syz.1.5019': attribute type 4 has an invalid length. [ 1921.665861][T25754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1922.926922][T25777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1923.851253][T25785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1924.545839][T25818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5031'. [ 1924.611838][T25812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5030'. [ 1926.540983][T25821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1927.174283][T25835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1928.382341][T25859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5044'. [ 1928.450687][T25840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1928.593713][ T5919] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 1928.618402][ T5919] hid-generic 0000:0000:0000.006B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1928.816060][T25866] fido_id[25866]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1929.463440][T25884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5049'. [ 1930.677884][T25892] input: syz1 as /devices/virtual/input/input114 [ 1932.160560][T25893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1932.557390][T25895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1932.707977][T25918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5063'. [ 1933.367287][T25921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5061'. [ 1933.590071][T25908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1933.839682][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1933.852136][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1933.861843][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1933.873368][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1933.884172][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1934.913747][T25925] chnl_net:caif_netlink_parms(): no params data found [ 1935.436941][T25950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5067'. [ 1935.989961][ T5840] Bluetooth: hci4: command tx timeout [ 1936.104716][T25935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1936.200037][T25925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1936.210858][T25925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.240741][T25925] bridge_slave_0: entered allmulticast mode [ 1936.272755][T25925] bridge_slave_0: entered promiscuous mode [ 1936.288350][T25925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1936.311823][T25925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.325125][T25925] bridge_slave_1: entered allmulticast mode [ 1936.339409][T25925] bridge_slave_1: entered promiscuous mode [ 1936.511040][T25925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1936.708281][T25925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1937.081653][T25961] netlink: 'syz.3.5070': attribute type 27 has an invalid length. [ 1937.158044][T25962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1937.382713][T25925] team0: Port device team_slave_0 added [ 1937.447915][T25925] team0: Port device team_slave_1 added [ 1938.048933][ T5840] Bluetooth: hci4: command tx timeout [ 1938.123932][T25925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1938.133229][T25925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1938.159176][ C1] vkms_vblank_simulate: vblank timer overrun [ 1938.188876][T25925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1938.221241][T25925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1938.228248][T25925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1938.254377][ C1] vkms_vblank_simulate: vblank timer overrun [ 1938.299529][T25925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1938.680714][T25925] hsr_slave_0: entered promiscuous mode [ 1938.707980][T25925] hsr_slave_1: entered promiscuous mode [ 1938.734740][T25925] debugfs: 'hsr0' already exists in 'hsr' [ 1938.759655][T25925] Cannot create hsr debugfs directory [ 1940.103863][T26001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5076'. [ 1940.120072][ T5840] Bluetooth: hci4: command tx timeout [ 1940.188472][T25973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1940.891812][T23795] bond1 (unregistering): (slave gretap2): Releasing active interface [ 1941.671657][T23795] bond3 (unregistering): (slave bridge7): Releasing backup interface [ 1941.725457][T23795] bond1 (unregistering): Released all slaves [ 1941.935163][T23795]  (unregistering): Released all slaves [ 1942.130923][T23795] bond2 (unregistering): Released all slaves [ 1942.209943][ T5840] Bluetooth: hci4: command tx timeout [ 1942.352305][T23795] bond3 (unregistering): Released all slaves [ 1942.581434][T23795] bond0 (unregistering): Released all slaves [ 1942.889980][T23795] : left promiscuous mode [ 1943.101412][T23795] tipc: Disabling bearer [ 1943.122927][T23795] tipc: Disabling bearer [ 1943.138402][T23795] tipc: Left network mode [ 1943.178956][T26018] only policy match revision 0 supported [ 1943.178985][T26018] unable to load match [ 1943.309630][T23795] IPVS: stopping backup sync thread 15646 ... [ 1943.335823][T26023] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5082'. [ 1945.242565][T23795] hsr_slave_0: left promiscuous mode [ 1945.261051][T23795] hsr_slave_1: left promiscuous mode [ 1945.267702][T23795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1945.412572][T23795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1945.442410][T26014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1945.593112][T26051] netlink: 'syz.3.5086': attribute type 27 has an invalid length. [ 1945.799624][T26053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1946.903546][T26067] usb usb2: usbfs: process 26067 (syz.4.5091) did not claim interface 0 before use [ 1946.924123][ T30] kauditd_printk_skb: 981 callbacks suppressed [ 1946.924144][ T30] audit: type=1326 audit(1762617455.655:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26066 comm="syz.4.5091" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x0 [ 1946.952060][ C1] vkms_vblank_simulate: vblank timer overrun [ 1947.236925][T23795] team0 (unregistering): Port device team_slave_1 removed [ 1947.492290][T26061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1947.631523][T23795] team0 (unregistering): Port device team_slave_0 removed [ 1948.030763][T26079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5092'. [ 1949.343676][T26086] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1949.530448][T25925] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1949.575714][T25925] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1949.605933][T25925] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1949.671821][T26090] kvm: MWAIT instruction emulated as NOP! [ 1949.720438][T25925] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1950.220712][T25925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1950.292979][T25925] 8021q: adding VLAN 0 to HW filter on device team0 [ 1950.336449][T23797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.343714][T23797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1950.378959][T16633] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1950.396212][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1950.403460][ T4512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1950.480438][ T5893] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1950.543752][T16633] usb 3-1: Using ep0 maxpacket: 32 [ 1950.552308][T16633] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1950.576661][T16633] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1950.608701][T16633] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1950.632761][T16633] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1950.651096][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 1950.653751][T25925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1950.767891][ T5893] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1950.812590][T16633] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1950.823075][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.830929][T25925] veth0_vlan: entered promiscuous mode [ 1950.858977][T26124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1950.869854][T16633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.910512][ T5893] usb 5-1: Product: syz [ 1950.917162][T16633] usb 3-1: Product: syz [ 1950.922191][ T5893] usb 5-1: Manufacturer: syz [ 1950.935162][T16633] usb 3-1: Manufacturer: syz [ 1950.935339][T25925] veth1_vlan: entered promiscuous mode [ 1950.941855][ T5893] usb 5-1: SerialNumber: syz [ 1950.970316][T16633] usb 3-1: SerialNumber: syz [ 1950.981990][ T5893] usb 5-1: config 0 descriptor?? [ 1951.015992][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1951.068744][T16633] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input115 [ 1951.180326][T25925] veth0_macvtap: entered promiscuous mode [ 1951.207645][T25925] veth1_macvtap: entered promiscuous mode [ 1951.226145][ T5893] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1951.239737][T16633] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1951.254279][T16633] (id 0x00) [ 1951.287287][T25925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1951.335376][T25925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1951.490070][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.514401][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.545024][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.615905][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.628856][T16633] rc_core: IR keymap rc-imon-pad not found [ 1951.634961][T16633] Registered IR keymap rc-empty [ 1951.648824][T16633] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1951.706246][T23795] IPVS: stop unused estimator thread 0... [ 1951.726435][T16633] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1951.850904][T16633] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1951.962662][T16633] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input116 [ 1952.036599][T16633] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:123> initialized [ 1952.112002][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1952.128952][T16633] usb 3-1: USB disconnect, device number 123 [ 1952.154196][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1952.406793][T23795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1952.417052][T23795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1952.493531][ T5893] gspca_sunplus: reg_w_riv err -71 [ 1952.499151][ T5893] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1952.536651][ T5893] usb 5-1: USB disconnect, device number 124 [ 1952.560824][T26145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5104'. [ 1953.480168][T26158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5106'. [ 1955.133696][T26190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5114'. [ 1955.830087][T26203] mmap: syz.3.5118 (26203): VmData 37511168 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1955.870287][T16774] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1956.188028][T16774] usb 1-1: Using ep0 maxpacket: 32 [ 1956.202393][T16774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1956.215213][T16774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1956.226391][T16774] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1956.248583][T16774] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1956.260468][T16774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.322528][T16774] usb 1-1: config 0 descriptor?? [ 1957.044530][T16774] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.006C/input/input117 [ 1957.091283][T26197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1957.130112][T26220] loop6: detected capacity change from 0 to 7 [ 1957.153323][T26220] Dev loop6: unable to read RDB block 7 [ 1957.194265][T16774] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.006C/input/input118 [ 1957.232435][T26220] loop6: AHDI p2 p3 [ 1957.269989][T26220] loop6: partition table partially beyond EOD, truncated [ 1957.281492][T26220] loop6: p2 size 98 extends beyond EOD, truncated [ 1957.362287][T26184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1957.503499][T16774] kye 0003:0458:5011.006C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 1957.523807][T18773] udevd[18773]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1957.623683][T16774] usb 1-1: USB disconnect, device number 113 [ 1958.243562][T26221] fido_id[26221]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1958.773740][T26238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5126'. [ 1959.329901][T26237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5128'. [ 1959.959950][T16772] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1960.182765][T26256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5125'. [ 1960.338433][T26229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1960.400289][T16772] usb 1-1: Using ep0 maxpacket: 16 [ 1960.425251][T16772] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1960.485535][T16772] usb 1-1: config 0 has no interface number 0 [ 1960.523016][T16772] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1960.555417][T16772] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1960.658574][T16772] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1960.688479][T16772] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1960.719757][T16772] usb 1-1: Product: syz [ 1960.825941][T16772] usb 1-1: SerialNumber: syz [ 1960.834322][T16772] usb 1-1: config 0 descriptor?? [ 1960.846676][T16772] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1960.857349][T16772] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input119 [ 1961.228211][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1961.236230][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1961.244215][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1961.252191][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1961.260168][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1961.267321][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1961.275228][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1961.283173][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1961.291166][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1961.298319][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1961.307181][T16772] usb 1-1: USB disconnect, device number 114 [ 1961.314357][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1961.360876][T26233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1961.471986][T16772] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1961.488223][T26226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1962.410318][T26278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5135'. [ 1962.518007][T26276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5133'. [ 1962.679339][T26262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1962.948580][T26278] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1965.209479][T26282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1965.299124][T26319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5146'. [ 1967.394201][T26349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5145'. [ 1967.668214][T26310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1969.016399][T26358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5150'. [ 1969.202200][T26335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1970.603410][T26351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1970.704839][T26377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5156'. [ 1970.742751][T26377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5156'. [ 1971.824007][T26373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1981.403108][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.410004][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.841993][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.848448][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2060.278784][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 2104.282229][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.289736][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2111.958869][ T31] INFO: task kworker/1:0:11818 blocked for more than 143 seconds. [ 2111.966748][ T31] Not tainted syzkaller #0 [ 2111.971808][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2111.980589][ T31] task:kworker/1:0 state:D stack:21296 pid:11818 tgid:11818 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2111.992814][ T31] Workqueue: usb_hub_wq hub_event [ 2111.997883][ T31] Call Trace: [ 2112.001293][ T31] [ 2112.004253][ T31] __schedule+0x1798/0x4cc0 [ 2112.008972][ T31] ? __pfx___schedule+0x10/0x10 [ 2112.013875][ T31] ? schedule+0x91/0x360 [ 2112.018135][ T31] schedule+0x165/0x360 [ 2112.022391][ T31] usb_kill_urb+0x1be/0x2d0 [ 2112.026936][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2112.032121][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2112.038240][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2112.043444][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2112.049112][ T31] ? usb_alloc_urb+0x46/0x150 [ 2112.053839][ T31] usb_control_msg+0x232/0x3e0 [ 2112.058703][ T31] hub_port_init+0xbf9/0x2800 [ 2112.063448][ T31] hub_event+0x2532/0x4a20 [ 2112.067950][ T31] ? __pfx_hub_event+0x10/0x10 [ 2112.072905][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2112.078766][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2112.084002][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2112.089859][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2112.095702][ T31] process_scheduled_works+0xae1/0x17b0 [ 2112.101386][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2112.107432][ T31] worker_thread+0x8a0/0xda0 [ 2112.112184][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2112.118731][ T31] ? __kthread_parkme+0x7b/0x200 [ 2112.123716][ T31] kthread+0x711/0x8a0 [ 2112.127810][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2112.133016][ T31] ? __pfx_kthread+0x10/0x10 [ 2112.137645][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2112.142951][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2112.148189][ T31] ? __pfx_kthread+0x10/0x10 [ 2112.152944][ T31] ret_from_fork+0x4bc/0x870 [ 2112.157579][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2112.162814][ T31] ? __switch_to_asm+0x39/0x70 [ 2112.167608][ T31] ? __switch_to_asm+0x33/0x70 [ 2112.172467][ T31] ? __pfx_kthread+0x10/0x10 [ 2112.177096][ T31] ret_from_fork_asm+0x1a/0x30 [ 2112.181986][ T31] [ 2112.185092][ T31] [ 2112.185092][ T31] Showing all locks held in the system: [ 2112.192968][ T31] 1 lock held by khungtaskd/31: [ 2112.197836][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2112.208191][ T31] 2 locks held by getty/5590: [ 2112.212972][ T31] #0: ffff88814d64d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2112.222847][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2112.233109][ T31] 5 locks held by kworker/1:0/11818: [ 2112.238419][ T31] #0: ffff88823be1c148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2112.249836][ T31] #1: ffffc9001af17ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2112.261772][ T31] #2: ffff888028b3f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2112.270786][ T31] #3: ffff888028bb3518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2112.280843][ T31] #4: ffff8881453b0168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2112.290705][ T31] 4 locks held by kworker/u8:0/23792: [ 2112.296133][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2112.306251][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2112.315318][ T31] #2: ffff8880b8825958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 2112.324447][ T31] #3: ffffffff99a97ec8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 2112.334857][ T31] [ 2112.337193][ T31] ============================================= [ 2112.337193][ T31] [ 2112.345691][ T31] NMI backtrace for cpu 1 [ 2112.345709][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2112.345732][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2112.345744][ T31] Call Trace: [ 2112.345753][ T31] [ 2112.345760][ T31] dump_stack_lvl+0x189/0x250 [ 2112.345795][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2112.345823][ T31] ? __pfx__printk+0x10/0x10 [ 2112.345855][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2112.345882][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2112.345907][ T31] ? __pfx__printk+0x10/0x10 [ 2112.345931][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2112.345968][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2112.345996][ T31] watchdog+0xf60/0xfa0 [ 2112.346024][ T31] ? watchdog+0x1e2/0xfa0 [ 2112.346051][ T31] kthread+0x711/0x8a0 [ 2112.346085][ T31] ? __pfx_watchdog+0x10/0x10 [ 2112.346105][ T31] ? __pfx_kthread+0x10/0x10 [ 2112.346136][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2112.346164][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2112.346192][ T31] ? __pfx_kthread+0x10/0x10 [ 2112.346221][ T31] ret_from_fork+0x4bc/0x870 [ 2112.346247][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2112.346276][ T31] ? __switch_to_asm+0x39/0x70 [ 2112.346293][ T31] ? __switch_to_asm+0x33/0x70 [ 2112.346346][ T31] ? __pfx_kthread+0x10/0x10 [ 2112.346376][ T31] ret_from_fork_asm+0x1a/0x30 [ 2112.346413][ T31] [ 2112.346422][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2112.492356][ C0] NMI backtrace for cpu 0 [ 2112.492375][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2112.492396][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2112.492408][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2112.492437][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 e1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2112.492453][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2112.492469][ C0] RAX: b472da1c985faf00 RBX: ffffffff81967bf7 RCX: b472da1c985faf00 [ 2112.492483][ C0] RDX: 0000000000000001 RSI: ffffffff8d70db89 RDI: ffffffff8bbf0760 [ 2112.492496][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 2112.492509][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce270 [ 2112.492523][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 2112.492534][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 2112.492555][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2112.492567][ C0] CR2: 00005557608d7418 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 2112.492583][ C0] Call Trace: [ 2112.492590][ C0] [ 2112.492597][ C0] default_idle+0x13/0x20 [ 2112.492614][ C0] default_idle_call+0x73/0xb0 [ 2112.492631][ C0] do_idle+0x1e7/0x510 [ 2112.492654][ C0] ? __pfx_do_idle+0x10/0x10 [ 2112.492681][ C0] cpu_startup_entry+0x44/0x60 [ 2112.492700][ C0] rest_init+0x2de/0x300 [ 2112.492718][ C0] start_kernel+0x3ae/0x410 [ 2112.492737][ C0] x86_64_start_reservations+0x24/0x30 [ 2112.492760][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2112.492782][ C0] common_startup_64+0x13e/0x147 [ 2112.492814][ C0]