last executing test programs: 10m54.909536665s ago: executing program 0 (id=1222): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname(r3, &(0x7f00000000c0)=@l2tp6, &(0x7f0000000000)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r5, 0x601}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x1, @local, 0x53b9}}, 0xfffffffd, 0x0, 0x400, 0x0, 0xb2}, 0x9c) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x110, 0x178, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unshare(0x42000000) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 10m50.600807151s ago: executing program 0 (id=1226): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') socket$inet(0x2, 0x80001, 0x84) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x2000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) dup3(0xffffffffffffffff, r2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86, 0x88be, 0x0, {{0x0, 0x1, 0x2}}}}}}}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) memfd_create(0x0, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x1}) 10m48.336259161s ago: executing program 0 (id=1231): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464d0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0xfffffffffffffffb, 0x7, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x3, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc, 0x5], [0x0, 0x4, 0x0, 0xfffe]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) r7 = getpgrp(0x0) r8 = syz_pidfd_open(r7, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xff06, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400040, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) ioctl$FIONCLEX(r9, 0x5450) 10m44.940682036s ago: executing program 0 (id=1235): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="9e", 0x1}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x2, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000040)={r10}) 10m42.365065673s ago: executing program 0 (id=1240): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x840) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ptrace$setopts(0x4206, r2, 0x99a, 0x40) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[], 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(0x0, 0x3) epoll_create1(0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xfff}) r4 = syz_io_uring_setup(0x186, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) r5 = socket(0x10, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 10m39.410532772s ago: executing program 0 (id=1244): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) syz_open_procfs(0x0, 0x0) r5 = fanotify_init(0x200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r5, 0x101, 0x8000011, r6, 0x0) ftruncate(r4, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x141400, 0x0) ioctl$FBIO_WAITFORVSYNC(r9, 0x40044620, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x37, 0x9, 0x2, 0x180, 0x4, 0xf, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x204000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 10m24.336367588s ago: executing program 32 (id=1244): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) syz_open_procfs(0x0, 0x0) r5 = fanotify_init(0x200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r5, 0x101, 0x8000011, r6, 0x0) ftruncate(r4, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x141400, 0x0) ioctl$FBIO_WAITFORVSYNC(r9, 0x40044620, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x37, 0x9, 0x2, 0x180, 0x4, 0xf, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x204000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 12.209350004s ago: executing program 5 (id=2289): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffff, r1, 0x0, 0x0, 0x1ff, 0x0, 0x2}]) 11.340000695s ago: executing program 5 (id=2294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 10.959713513s ago: executing program 5 (id=2297): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd29, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r9 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81) socket$netlink(0x10, 0x3, 0x0) 9.387339596s ago: executing program 3 (id=2304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) close(r3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r7 = socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$can_raw(r7, &(0x7f0000000080), 0x10) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0xff, 0xfd, 0x1, 0x80}}]}}]}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) shutdown(0xffffffffffffffff, 0x1) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000048}, 0x0) 8.539333063s ago: executing program 2 (id=2306): r0 = syz_usb_connect$hid(0x5, 0x6d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3804, 0xf, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.240585541s ago: executing program 1 (id=2308): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x47ffffa, 0x122c42) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 7.959932677s ago: executing program 1 (id=2311): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd2c, 0x25dfdbfb, {0x2, 0x20, 0xc1, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x40) 7.599588476s ago: executing program 1 (id=2312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0) 7.332839083s ago: executing program 1 (id=2314): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x1, 0xd6fe2, 0x1eed1a}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r5}) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/104], 0x68) r9 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) 6.338620418s ago: executing program 5 (id=2315): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2166994bd8d20fda, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0x1f}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ftruncate(r4, 0xffff) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000033c0)={0x0, 0x0, &(0x7f00000032c0)=[{0x0}, {0x0}], 0x2}, 0x4004004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8701, 0x8000, 0xffffffff, 0x7fffffff, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x64, 0x0, 0x6, 0x0, 0x0, @loopback, @remote}}}}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000004a0001eeffffffffaa0000000a00806e0800004000000000d66d3a503f7c5fbaa21e14315d8f634e48ffd340149d2c1c4746c4cb64d7d3dce475259cbea97f36b75b7566d51959dd609ed344d04690436a8cf19c13817e072fb56d1ed5ffa8595733c602ed73edd2dc8c06eb0a74b794c3f232d0bb5719e0b4fc56db8347d445b76efb33b30f2e3acc70c9d0ce7e7a681c0f108409ec4efc9d60c74e6aafadbbf7fc9613ec81b09690fd91db5bc9b9435ad290f3962c9c1847508b04873252024ade9bdf2f1c9f843c76f48201fd788611244f38eadfac739d24bdb931cac9887c7f16b3f1b54c"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', r8, 0x700, 0x8, 0x7, 0x401, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x6a, 0x0, 0x1, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0x11, "819ea9e51cb18056c063868c13812b"}]}}}}}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r8, 0x1, {0x0, 0x0, 0x2}, 0x1}, 0x18) 6.223789037s ago: executing program 2 (id=2316): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x2010, r3, 0x4493c000) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000fc0100000000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x23c}}, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x1, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000095, 0x0, 0x81}]}) 5.215143701s ago: executing program 3 (id=2317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000060a010400000000000000000a00000a0900010073797a31000000000900020073797a320000000034000000080a010200000000000000080a0000040900020073797a32000000000900010073797a310000000008000940000011"], 0x88}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 5.16125052s ago: executing program 2 (id=2318): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r1 = dup(r0) fallocate(r1, 0x0, 0x0, 0x72000) 4.886889015s ago: executing program 2 (id=2319): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000fc0100000000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x23c}}, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x1, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000095, 0x0, 0x81}]}) 4.77237973s ago: executing program 3 (id=2320): r0 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x9, {0x7f, 0xe7, 0xfffffff8, 0xfffff004}, {0x2, 0x3, 0xffff8001, 0xfff}, {0x40, 0x5}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 4.424298423s ago: executing program 3 (id=2332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x200, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffefffff}, {0x6789, 0x400ffff}, {}, {0x1}, {}, {0x0, 0x9}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0x3}], 0x12, 0x0, 0x0, 0x8000000}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x107, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, 0x0) 2.726875683s ago: executing program 1 (id=2323): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000880)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b000000000000002143ce554b6df654cb0173677c4e2eaa2eb5035d135958831197684b763f499a2fafc724413afe7af5b53e61532895bae8d3f0f02cc4e729883f078a2552275a1486218834476323059f91a91c500e035c5c70afee9d16b5acd7cd4b94e3600c9c69aeb79e259488e089b1c59bc6fca826d38a7b3229ccd5b1bde01e63f1edd3c0f933e5c02936de55f2a4ee254bbe8aed1d2260c97783b615850d488b7f0c4a80715bed3cf1adb2dafbb7672328e2300fa2623704da7b9889a57e23", 0x107}, {&(0x7f0000001280)="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", 0xd7c}, {&(0x7f0000000380)="2e1d3c8efefe2e618a784c02fc448542a101026a98e2cef4e0e58088d6ef0f766af586448db96c0a03314a0f9979a70f8e7fdf7230e28de87ad7ef6ab82e9c2083decdfb8a16b38ae6b774122acf186ab8c0803cdb9e186fd4adf78e25dff74bdd6cf08325635507af11de71a68ae2765d6bc33e28cf808da5ed7fdf73f3dc4ccf7270b2b97ed59e840f0895d7e7e9770daf06205659fe637cbf90a7e55f13d2441f993ab2fdbd301d40760c7b8159ef6550eed447ccee950259", 0xba}, {&(0x7f0000000540)="b8fcec3f9292458885c6254903", 0xd}], 0x4}, 0x800) 2.707477365s ago: executing program 5 (id=2324): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040850) 2.52387996s ago: executing program 1 (id=2325): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0) 2.423277731s ago: executing program 2 (id=2326): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x40, 0xe, 0xa7, {0xa7, 0xa, "028ce08120321fa3d010907901f8fa2d82467ba637ddda98493ac0d5e46fe9d6f93413214506f3b0d83b12759d59e778d41dedece575d0e6094a34cc9843e7916ed97024877634bb24ff22253587ef473e08a054e36930b347ec3946e0edd99b61d865999d8d04f8ffffff7ec73aa5816ad8ea3cfa94cad992c118746c3e88fea4ec48b853eb797d8fa615e59df4a1be095210883d47c3d4fc7a0c2482d6240ea7d04ea7b7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.220253151s ago: executing program 5 (id=2327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) close(r3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r7 = socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$can_raw(r7, &(0x7f0000000080), 0x10) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0xff, 0xfd, 0x1, 0x80}}]}}]}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) shutdown(0xffffffffffffffff, 0x1) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000048}, 0x0) 2.133311904s ago: executing program 4 (id=2328): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000680)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0xffff, @loopback, @remote}, "ffff07718e9bf703"}}}}}, 0x0) 1.785175429s ago: executing program 4 (id=2329): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.509741522s ago: executing program 4 (id=2330): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 1.172523756s ago: executing program 4 (id=2331): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000200000000000000000000bbfefa"], 0x0) 1.090782464s ago: executing program 3 (id=2333): unshare(0x2040400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000002c0)=0x8001, 0x4) 827.714025ms ago: executing program 3 (id=2334): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x40000) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e006000000000000e87fbb9ad809d5e1cace81b341139fe3cd40", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x22, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xa0}}, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r7, 0xc0403d08, 0x0) 644.744016ms ago: executing program 4 (id=2335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b1600000000000000000200000844000480100001800a000100726564697200000030000180080001006e6174002400028008000140000002000800054000000017080006400000001208000240000000020900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 130.755718ms ago: executing program 4 (id=2336): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000001080)={'filter\x00', 0x0, 0x4, 0xff2, [0x8, 0x800, 0x100000001, 0x5, 0xffffffffffffffff], 0x8, &(0x7f0000001240)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/4082}, &(0x7f0000001100)=0x78) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x41) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000001c0)=@generic={0x80}) 0s ago: executing program 2 (id=2337): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) kernel console output (not intermixed with test programs): [ 1273.367123][T15601] netlink: zone id is out of range [ 1273.372780][T15601] netlink: zone id is out of range [ 1273.378890][T15601] netlink: zone id is out of range [ 1273.385186][T15601] netlink: zone id is out of range [ 1273.411031][T15601] netlink: zone id is out of range [ 1273.418696][T15601] netlink: zone id is out of range [ 1273.424407][ T31] audit: type=1326 audit(1767015732.383:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15590 comm="syz.1.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1273.458113][T15601] netlink: zone id is out of range [ 1273.464348][T15601] netlink: zone id is out of range [ 1273.508812][ T5825] usb 6-1: reset full-speed USB device number 15 using dummy_hcd [ 1273.831905][T15606] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1274.143390][T13450] usb 4-1: USB disconnect, device number 61 [ 1275.041478][T15616] bond0: Caught tx_queue_len zero misconfig [ 1275.664409][T15621] bridge0: port 3(netdevsim0) entered disabled state [ 1275.671740][T15621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.679303][T15621] bridge0: port 1() entered disabled state [ 1276.006612][T13010] usb 6-1: USB disconnect, device number 15 [ 1276.723685][T15632] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1279.915211][T15657] binder: 15648:15657 ioctl c0306201 200000000080 returned -14 [ 1280.921629][T15657] binder: 15648:15657 ioctl d000941e 0 returned -22 [ 1281.278835][T15666] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1701'. [ 1282.193272][T15679] netlink: 'syz.5.1703': attribute type 4 has an invalid length. [ 1282.204835][T15679] netlink: 'syz.5.1703': attribute type 4 has an invalid length. [ 1285.355636][T15709] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1288.673842][ T5932] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1288.941165][ T5932] usb 3-1: not running at top speed; connect to a high speed hub [ 1288.961452][ T5932] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1289.046176][ T5932] usb 3-1: config 1 has no interface number 1 [ 1289.190388][ T5932] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 1289.332856][ T5932] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1289.550753][ T5932] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1289.854198][ T5932] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1289.864668][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.884388][ T5932] usb 3-1: Product: syz [ 1289.888646][ T5932] usb 3-1: Manufacturer: syz [ 1289.893302][ T5932] usb 3-1: SerialNumber: syz [ 1291.931828][T15756] Can't find ip_set type @ [ 1292.723161][ T5932] usb 3-1: failed to enable PITCH for EP 0x82 [ 1292.893096][ T5932] usb 3-1: USB disconnect, device number 52 [ 1292.980952][T14992] udevd[14992]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1293.297096][T15770] loop6: detected capacity change from 0 to 524288000 [ 1293.680698][T15770] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1719'. [ 1293.837533][T15765] bond7: option ad_user_port_key: invalid value (57807) [ 1293.847343][T15765] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 1293.962896][T15765] bond7 (unregistering): Released all slaves [ 1294.424905][T15777] IPVS: You probably need to specify IP address on multicast interface. [ 1294.492005][T15777] IPVS: Error connecting to the multicast addr [ 1295.821203][T15791] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1295.963724][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'. [ 1296.147628][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 1296.160823][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 1296.182274][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 1296.196762][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 1296.214963][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 1296.258033][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 1296.278577][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 1296.299858][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 1298.511933][T15808] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1298.518559][T15808] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1298.527884][T15808] vhci_hcd vhci_hcd.0: Device attached [ 1298.860926][ T5825] usb 44-1: SetAddress Request (2) to port 0 [ 1298.892889][ T5825] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1299.106528][T15809] vhci_hcd: connection reset by peer [ 1299.115527][T13202] vhci_hcd vhci_hcd.5: stop threads [ 1299.120824][T13202] vhci_hcd vhci_hcd.5: release socket [ 1299.142586][T13202] vhci_hcd vhci_hcd.5: disconnect device [ 1299.172003][T15813] tipc: Enabling of bearer rejected, already enabled [ 1299.219517][T15821] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1300.453938][T15833] __nla_validate_parse: 31 callbacks suppressed [ 1300.453962][T15833] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1730'. [ 1301.777946][T15848] netlink: 'syz.4.1732': attribute type 4 has an invalid length. [ 1301.951000][T15844] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1731'. [ 1302.187080][T13010] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1302.568818][T13010] usb 5-1: Using ep0 maxpacket: 16 [ 1302.586854][T13010] usb 5-1: config 0 has no interfaces? [ 1302.598864][T13010] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1302.614165][T13010] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1302.622290][T13010] usb 5-1: Manufacturer: syz [ 1302.648368][T13010] usb 5-1: config 0 descriptor?? [ 1303.997282][ T5825] usb 44-1: device descriptor read/8, error -110 [ 1304.384020][T15869] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1736'. [ 1304.452370][ T5825] usb usb44-port1: attempt power cycle [ 1305.195656][ T5825] usb usb44-port1: unable to enumerate USB device [ 1305.563966][ T5825] usb 5-1: USB disconnect, device number 57 [ 1305.679098][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.693980][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.041594][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1740'. [ 1306.128925][ T31] kauditd_printk_skb: 46 callbacks suppressed [ 1306.128948][ T31] audit: type=1400 audit(1767015765.663:1348): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=15879 comm="syz.4.1740" [ 1306.546742][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1741'. [ 1308.444543][T15900] geneve2: entered allmulticast mode [ 1308.602601][T15905] net_ratelimit: 46 callbacks suppressed [ 1308.602667][T15905] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1308.681591][T15905] fuse: Unknown parameter '0x000000000000000b' [ 1309.622664][T15916] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1309.913666][ T5825] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1310.079641][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 1310.116780][ T5825] usb 3-1: no configurations [ 1310.121535][ T5825] usb 3-1: can't read configurations, error -22 [ 1310.472361][T15923] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1747'. [ 1310.544881][ T5825] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1310.744102][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 1310.750133][ T5825] usb 3-1: no configurations [ 1310.776321][ T5825] usb 3-1: can't read configurations, error -22 [ 1310.814525][ T5825] usb usb3-port1: attempt power cycle [ 1311.174618][ T5825] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1311.304692][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 1311.324251][ T5825] usb 3-1: no configurations [ 1311.354320][ T5825] usb 3-1: can't read configurations, error -22 [ 1311.505509][ T5825] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1311.564816][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 1311.585800][ T5825] usb 3-1: no configurations [ 1311.590449][ T5825] usb 3-1: can't read configurations, error -22 [ 1311.637627][ T5825] usb usb3-port1: unable to enumerate USB device [ 1311.911854][T15931] program syz.1.1749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1313.042690][T15942] fuse: Bad value for 'fd' [ 1315.488424][T15958] netlink: 'syz.3.1753': attribute type 5 has an invalid length. [ 1319.395646][T15985] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1320.304340][T15996] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1323.568359][T16016] binder: 16011:16016 ioctl c0306201 200000000080 returned -14 [ 1325.711493][T16016] binder: 16011:16016 ioctl d000941e 0 returned -22 [ 1325.905861][ T5825] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1326.086362][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1326.098820][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1326.135657][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1326.223398][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1326.361938][T16031] : renamed from vlan0 (while UP) [ 1326.466172][ T5825] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1326.476666][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.529375][ T5825] usb 4-1: config 0 descriptor?? [ 1327.655189][T16046] kAFS: unable to lookup cell '' [ 1327.661559][T16046] kAFS: unable to lookup cell '(,c' [ 1327.888446][T16047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1770'. [ 1328.499600][ T5825] usbhid 4-1:0.0: can't add hid device: -71 [ 1328.537386][ T5825] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1330.138106][ T5825] usb 4-1: USB disconnect, device number 62 [ 1330.564360][ T5825] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1330.734574][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 1330.859632][ T5825] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1330.874899][ T5825] usb 3-1: config 0 has no interface number 0 [ 1330.903085][ T5825] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1330.929152][ T5825] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1330.939396][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.027290][ T5825] usb 3-1: Product: syz [ 1331.044208][ T5825] usb 3-1: Manufacturer: syz [ 1331.049101][ T5825] usb 3-1: SerialNumber: syz [ 1331.095317][ T5825] usb 3-1: config 0 descriptor?? [ 1331.106270][ T5825] smsc75xx v1.0.0 [ 1331.347384][T16061] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1773'. [ 1331.990159][T16071] kvm: pic: non byte read [ 1331.996575][T16071] kvm: pic: non byte read [ 1332.002373][T16071] kvm: pic: non byte read [ 1332.009096][T16071] kvm: pic: non byte read [ 1332.016383][T16071] kvm: pic: non byte read [ 1332.023104][T16071] kvm: pic: non byte read [ 1332.029503][T16071] kvm: pic: non byte read [ 1332.036367][T16071] kvm: pic: non byte read [ 1332.042175][T16071] kvm: pic: non byte read [ 1332.047906][T16071] kvm: pic: non byte read [ 1332.704840][T13450] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1332.896264][T13450] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.910972][T13450] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.006222][T13450] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1333.091021][T13450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.147153][T13450] usb 4-1: config 0 descriptor?? [ 1333.815515][T13450] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 1333.833354][T13450] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1334.013404][T13450] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 1334.868905][T16089] binder: BINDER_SET_CONTEXT_MGR already set [ 1334.876055][T16089] binder: 16086:16089 ioctl 4018620d 200000000040 returned -16 [ 1335.018697][T16089] syz.4.1777 (16089): drop_caches: 2 [ 1336.011520][ T5825] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1336.023154][ T5825] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1336.055130][ T5825] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1336.134684][ T5825] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1336.198657][ T5825] usb 3-1: USB disconnect, device number 57 [ 1336.434343][T13450] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71 [ 1336.480614][T13450] usb 4-1: USB disconnect, device number 63 [ 1337.064357][ T5825] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1337.090763][T16105] binder: BINDER_SET_CONTEXT_MGR already set [ 1337.096980][T16105] binder: 16093:16105 ioctl 4018620d 200000000040 returned -16 [ 1337.119490][T16105] syz.2.1779 (16105): drop_caches: 2 [ 1337.394721][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 1337.409368][ T5825] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1337.650487][ T5825] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1337.737450][ T5825] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1337.784719][ T5825] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1337.817725][ T5825] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1338.010580][ T5825] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1338.084414][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.440037][T16102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1780'. [ 1338.656371][T16102] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1780'. [ 1338.715513][ T5825] usb 2-1: GET_CAPABILITIES returned 0 [ 1338.723132][ T5825] usbtmc 2-1:16.0: can't read capabilities [ 1339.017721][T16111] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1782'. [ 1339.317825][T16113] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 1340.759793][T16129] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1340.766663][T16129] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1340.904583][T16130] vhci_hcd: connection closed [ 1340.904913][T16129] vhci_hcd vhci_hcd.0: Device attached [ 1340.919327][ T3516] vhci_hcd vhci_hcd.5: stop threads [ 1340.935583][ T3516] vhci_hcd vhci_hcd.5: release socket [ 1340.941154][ T3516] vhci_hcd vhci_hcd.5: disconnect device [ 1341.115257][T16136] netlink: 'syz.4.1786': attribute type 5 has an invalid length. [ 1341.859808][T13450] usb 2-1: USB disconnect, device number 62 [ 1343.461954][T16153] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1788'. [ 1343.564363][T13450] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1343.794557][T13450] usb 6-1: Using ep0 maxpacket: 32 [ 1343.838458][T13450] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1343.887434][T13450] usb 6-1: config 0 has no interface number 0 [ 1343.950969][T16160] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1791'. [ 1343.970334][T16160] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1791'. [ 1344.000486][T16160] syz.2.1791 (16160): drop_caches: 2 [ 1344.081406][T13450] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1344.109760][T13450] usb 6-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1344.210710][T13450] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1344.229749][T13450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.260513][T13450] usb 6-1: Product: syz [ 1344.351729][T13450] usb 6-1: Manufacturer: syz [ 1344.367032][T13450] usb 6-1: SerialNumber: syz [ 1344.393411][T13450] usb 6-1: config 0 descriptor?? [ 1344.489261][T16165] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1344.752451][T13450] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1344.854739][T13450] usb 6-1: qt2_setup_urbs - submit read urb failed -90 [ 1344.868310][T13450] quatech2 6-1:0.51: probe with driver quatech2 failed with error -90 [ 1345.595984][T16171] macsec0: Caught tx_queue_len zero misconfig [ 1346.931614][T16178] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1794'. [ 1348.136449][T16194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1796'. [ 1348.690561][T13450] usb 6-1: USB disconnect, device number 16 [ 1350.590653][T16225] random: crng reseeded on system resumption [ 1350.999373][T16230] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1351.257946][T16233] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1802'. [ 1352.219555][T16239] netlink: 'syz.5.1805': attribute type 10 has an invalid length. [ 1352.308597][T16240] netlink: 'syz.5.1805': attribute type 10 has an invalid length. [ 1352.610368][T16239] team0: Port device dummy0 added [ 1352.705049][T13450] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1352.822159][T16240] team0: Port device dummy0 removed [ 1352.836183][T16240] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1352.874205][T13450] usb 3-1: Using ep0 maxpacket: 8 [ 1352.916585][T13450] usb 3-1: config 1 has an invalid interface number: 6 but max is 0 [ 1352.960659][T13450] usb 3-1: config 1 has no interface number 0 [ 1352.990179][T13450] usb 3-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 1353.019501][ T31] audit: type=1326 audit(1767015812.593:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.4.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1353.211315][T13450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.211331][ T31] audit: type=1326 audit(1767015812.593:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.4.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1353.211433][ T31] audit: type=1326 audit(1767015812.593:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.4.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1353.324416][T13450] usb 3-1: Product: syz [ 1353.328788][T13450] usb 3-1: Manufacturer: syz [ 1353.344133][T13450] usb 3-1: SerialNumber: syz [ 1353.372215][T16253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1808'. [ 1353.744137][ T5932] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1353.778219][ T31] audit: type=1326 audit(1767015812.593:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.4.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1353.896722][T16255] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1806'. [ 1353.924165][ T31] audit: type=1326 audit(1767015812.593:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.4.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1354.068931][T16256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.079451][T16256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.144275][ T5932] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 1354.162172][ T5932] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1354.202423][ T31] audit: type=1326 audit(1767015812.593:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.4.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1354.231365][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.271322][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 1354.307635][ T31] audit: type=1326 audit(1767015812.593:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.4.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1354.338918][ T5932] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1354.353073][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.424244][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 1354.533573][ T31] audit: type=1326 audit(1767015812.593:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.4.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1354.577288][ T5932] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1354.716530][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.806827][ T31] audit: type=1326 audit(1767015812.593:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.4.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1354.854149][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 1354.957739][ T31] audit: type=1326 audit(1767015812.593:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16245 comm="syz.4.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1355.028429][ T5932] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1355.040433][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.069150][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 1355.275744][ T5932] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1355.300734][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.383748][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 1355.471996][ T5932] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1355.515158][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.612007][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 1355.676368][ T5932] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1355.733649][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.763627][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 1355.885995][ T5932] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1355.947581][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.994234][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 1356.059070][ T5932] usb 2-1: New USB device found, idVendor=0079, idProduct=9e43, bcdDevice= 0.00 [ 1356.090216][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.115719][ T5932] usb 2-1: config 0 descriptor?? [ 1357.827906][T13450] usb 3-1: palm_os_4_probe - error -71 getting connection info [ 1357.876787][T13450] visor 3-1:1.6: Handspring Visor / Palm OS converter detected [ 1357.984466][T13450] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1358.051698][T13450] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1358.098013][T13450] usb 3-1: USB disconnect, device number 58 [ 1358.254052][ T5932] usbhid 2-1:0.0: can't add hid device: -71 [ 1358.271631][ T5932] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1358.287642][T16281] fuse: Unknown parameter 'grou8q00000000000000000000' [ 1358.405722][T13450] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1358.720629][T13450] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1358.799803][T13450] visor 3-1:1.6: device disconnected [ 1358.826258][T16265] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1810'. [ 1358.904455][ T5932] usb 2-1: USB disconnect, device number 63 [ 1360.716744][ T5932] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1360.973589][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 1361.024338][ T5932] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.065778][ T5932] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1361.085182][ T5932] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1361.153043][ T5932] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1361.190178][ T5932] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1361.244918][T16303] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1361.286768][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.323740][T16308] random: crng reseeded on system resumption [ 1361.473626][ T5932] hub 3-1:1.0: bad descriptor, ignoring hub [ 1361.480018][ T5932] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1361.546269][ T5932] cdc_wdm 3-1:1.0: skipping garbage [ 1361.551666][ T5932] cdc_wdm 3-1:1.0: skipping garbage [ 1361.564783][ T5932] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1361.570850][ T5932] cdc_wdm 3-1:1.0: Unknown control protocol [ 1362.886505][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 1362.886521][ T31] audit: type=1326 audit(1767015822.473:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1362.954061][ T31] audit: type=1326 audit(1767015822.503:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1362.984212][ T31] audit: type=1326 audit(1767015822.503:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1363.074728][ T31] audit: type=1326 audit(1767015822.503:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1363.147839][ T31] audit: type=1326 audit(1767015822.503:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1363.333287][ T31] audit: type=1326 audit(1767015822.513:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1363.392651][ T31] audit: type=1326 audit(1767015822.513:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1363.498456][ T31] audit: type=1326 audit(1767015822.513:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1363.661741][ T31] audit: type=1326 audit(1767015822.513:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1363.691473][ T31] audit: type=1326 audit(1767015822.513:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1364.897582][T16342] netlink: 'syz.5.1823': attribute type 5 has an invalid length. [ 1365.230663][ T5932] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1365.395423][T13346] usb 3-1: USB disconnect, device number 59 [ 1365.405039][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 1365.445867][ T5932] usb 5-1: config 0 has no interfaces? [ 1365.553697][ T5932] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1365.581443][ T5932] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1365.590177][ T5932] usb 5-1: Manufacturer: syz [ 1365.599927][ T5932] usb 5-1: config 0 descriptor?? [ 1367.234426][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.240912][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.851532][T16348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1825'. [ 1368.618941][T12434] usb 5-1: USB disconnect, device number 58 [ 1369.002012][T16370] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1827'. [ 1369.253095][T16369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1828'. [ 1369.804917][T16368] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1830'. [ 1371.212044][T16393] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1371.701838][T16397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1834'. [ 1372.141126][T16403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1835'. [ 1372.184282][T16403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1835'. [ 1373.166509][T16414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1837'. [ 1373.343760][T16411] netlink: 'syz.5.1836': attribute type 12 has an invalid length. [ 1373.463946][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 1373.463971][ T31] audit: type=1400 audit(1767015832.943:1423): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=16407 comm="syz.5.1836" [ 1373.857957][T16411] set match dimension is over the limit! [ 1374.485421][ T31] audit: type=1326 audit(1767015834.063:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16417 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1374.640727][T16430] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1839'. [ 1374.721389][ T31] audit: type=1326 audit(1767015834.063:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16417 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1374.787265][ T31] audit: type=1326 audit(1767015834.063:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16417 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1374.826809][ T31] audit: type=1326 audit(1767015834.063:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16417 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1374.923006][ T31] audit: type=1326 audit(1767015834.063:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16417 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1375.638134][ T31] audit: type=1326 audit(1767015834.063:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16417 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1376.003564][ T31] audit: type=1326 audit(1767015834.063:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16417 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1376.126011][ T31] audit: type=1326 audit(1767015834.063:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16417 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1376.210677][T16439] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1842'. [ 1378.978652][T16472] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1379.941352][T16479] netlink: 'syz.5.1849': attribute type 27 has an invalid length. [ 1382.003157][T16479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1382.020749][T16479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.028336][ T5917] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1382.266273][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 1382.312178][T16499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1851'. [ 1382.428009][ T5917] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1382.490221][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.542256][ T5917] usb 5-1: config 0 descriptor?? [ 1382.978432][ T5917] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1383.066397][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.102456][ T5917] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1383.136299][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.197388][ T5917] dib0700: firmware download failed at 7 with -22 [ 1383.366149][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.409444][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.833972][T16527] usb usb8: usbfs: process 16527 (syz.5.1856) did not claim interface 0 before use [ 1383.881356][ T31] audit: type=1326 audit(1767015843.413:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16522 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1384.100205][ T31] audit: type=1326 audit(1767015843.413:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16522 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc53d8df90 code=0x7ffc0000 [ 1384.303396][ T31] audit: type=1326 audit(1767015843.413:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16522 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1384.444230][T16521] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1854'. [ 1384.462940][ T31] audit: type=1326 audit(1767015843.413:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16522 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1384.538662][ T31] audit: type=1326 audit(1767015843.423:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16522 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1384.619631][ T31] audit: type=1326 audit(1767015843.433:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16522 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1384.936129][ T31] audit: type=1326 audit(1767015843.433:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16522 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1385.394155][ T31] audit: type=1326 audit(1767015843.433:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16522 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1385.474210][ T31] audit: type=1326 audit(1767015843.433:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16522 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1385.548083][ T31] audit: type=1326 audit(1767015843.433:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16522 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1385.908775][T16514] usb 5-1: USB disconnect, device number 59 [ 1386.733879][T16551] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1386.780142][T16514] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1386.954276][T16514] usb 5-1: Using ep0 maxpacket: 32 [ 1386.964351][T16514] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1387.004226][T16514] usb 5-1: config 0 has no interface number 0 [ 1387.014728][T16514] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1387.060546][T16514] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1387.196834][T16514] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1387.246914][T16514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.268139][T16514] usb 5-1: Product: syz [ 1387.308868][T16514] usb 5-1: Manufacturer: syz [ 1387.339465][T16514] usb 5-1: SerialNumber: syz [ 1387.383135][T16514] usb 5-1: config 0 descriptor?? [ 1387.620276][T16514] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1387.854605][T16514] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 1387.861810][T16514] quatech2 5-1:0.51: probe with driver quatech2 failed with error -90 [ 1390.622886][T16575] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1865'. [ 1390.899143][T16574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1864'. [ 1391.054183][T16514] usb 5-1: USB disconnect, device number 60 [ 1392.113638][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1392.363829][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1392.407624][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1392.510453][ T10] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1392.763543][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.794462][ T10] usb 6-1: Product: syz [ 1392.798727][ T10] usb 6-1: Manufacturer: syz [ 1392.842046][ T10] usb 6-1: SerialNumber: syz [ 1392.869877][ T10] usb 6-1: config 0 descriptor?? [ 1393.035515][ T10] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1393.364681][T16513] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1393.479211][T16602] syzkaller0: entered promiscuous mode [ 1393.494863][T16602] syzkaller0: entered allmulticast mode [ 1393.540160][T16513] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1393.558505][T16513] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1393.570223][T16513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.609218][T16513] usb 3-1: Product: syz [ 1393.622838][T16513] usb 3-1: Manufacturer: syz [ 1393.654425][T16513] usb 3-1: SerialNumber: syz [ 1393.692446][T16513] usb 3-1: config 0 descriptor?? [ 1393.983599][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1394.137715][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1394.161432][ T3469] usb 6-1: Failed to submit usb control message: -110 [ 1394.228951][ T3469] usb 6-1: unable to send the bmi data to the device: -110 [ 1394.252333][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1394.295282][ T3469] usb 6-1: unable to get target info from device [ 1394.300576][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1394.347531][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1394.370830][ T10] usb 2-1: Product: syz [ 1394.383379][ T10] usb 2-1: Manufacturer: syz [ 1394.396658][ T10] usb 2-1: SerialNumber: syz [ 1394.408523][ T3469] usb 6-1: could not get target info (-110) [ 1394.430785][ T3469] usb 6-1: could not probe fw (-110) [ 1394.523991][ T10] usb 2-1: config 0 descriptor?? [ 1394.605521][ T10] usb 2-1: selecting invalid altsetting 0 [ 1395.048437][T16615] tipc: Enabling of bearer rejected, failed to enable media [ 1395.062910][T16615] tipc: Enabled bearer , priority 0 [ 1395.183772][ T10] usb 2-1: USB disconnect, device number 64 [ 1395.651556][ T10] usb 6-1: USB disconnect, device number 17 [ 1397.008438][ T10] usb 3-1: USB disconnect, device number 60 [ 1397.134611][T16624] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1874'. [ 1397.840344][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1875'. [ 1398.052014][T16639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1876'. [ 1398.279188][T16642] fuse: Unknown parameter ' ߋG#LBR͞wtF)rFX CiUR_t/fϐLF!q' [ 1398.350237][T16642] binder: 16638:16642 unknown command 527554 [ 1398.366077][T16642] binder: 16638:16642 ioctl c0306201 200000000080 returned -22 [ 1400.563341][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 1400.563366][ T31] audit: type=1326 audit(1767015860.093:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16652 comm="syz.3.1880" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44b518f749 code=0x0 [ 1400.638886][T16657] kAFS: unable to lookup cell '' [ 1400.687170][T16657] kAFS: unable to lookup cell '(,c' [ 1401.849245][T16666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1881'. [ 1402.655493][T16671] input: syz0 as /devices/virtual/input/input47 [ 1404.054505][T16686] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 1404.602829][T16691] ip6gretap0: entered promiscuous mode [ 1404.623241][T16691] macsec2: entered promiscuous mode [ 1404.635313][T16691] ip6gretap0: left promiscuous mode [ 1404.889164][T16692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 1404.913806][T16692] netlink: 'syz.2.1887': attribute type 18 has an invalid length. [ 1404.981457][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 1406.537547][T16703] netlink: 'syz.3.1890': attribute type 2 has an invalid length. [ 1406.550825][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1890'. [ 1406.884153][T16514] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1406.969940][T16712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1892'. [ 1407.021113][T16713] netlink: 'syz.1.1891': attribute type 4 has an invalid length. [ 1407.034545][T16514] usb 4-1: Using ep0 maxpacket: 8 [ 1407.224603][T16514] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1407.238948][T16514] usb 4-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 1407.278314][T16514] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1407.319560][T16514] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1407.343259][T16514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.654662][T16514] usb 4-1: config 0 descriptor?? [ 1407.984602][T16512] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1408.144250][T16512] usb 2-1: Using ep0 maxpacket: 16 [ 1408.154309][T16512] usb 2-1: config 0 has no interfaces? [ 1408.166363][T16512] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1408.186502][T16512] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1408.240916][T16703] bond1: left promiscuous mode [ 1408.249675][T16703] bond3: left promiscuous mode [ 1408.256086][T16703] bond4: left promiscuous mode [ 1408.275786][T16703] gre1: left promiscuous mode [ 1408.281268][T16512] usb 2-1: Manufacturer: syz [ 1408.301072][T16512] usb 2-1: config 0 descriptor?? [ 1408.328278][T16703] ipip0: left promiscuous mode [ 1408.369981][T16514] usb 4-1: string descriptor 0 read error: -71 [ 1408.387595][T16514] usb 4-1: USB disconnect, device number 64 [ 1408.781758][T16723] netlink: 'syz.2.1893': attribute type 5 has an invalid length. [ 1410.331251][ T10] usb 2-1: USB disconnect, device number 65 [ 1411.315580][T16744] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1897'. [ 1411.907245][T16746] loop6: detected capacity change from 0 to 524287487 [ 1411.918202][T16746] Buffer I/O error on dev loop6, logical block 0, async page read [ 1411.946625][T16746] Buffer I/O error on dev loop6, logical block 0, async page read [ 1411.987585][T16746] Buffer I/O error on dev loop6, logical block 0, async page read [ 1412.014454][T16746] Buffer I/O error on dev loop6, logical block 0, async page read [ 1412.229946][T16746] Buffer I/O error on dev loop6, logical block 0, async page read [ 1412.239437][T16746] Buffer I/O error on dev loop6, logical block 0, async page read [ 1412.248238][T16746] Buffer I/O error on dev loop6, logical block 0, async page read [ 1412.257009][T16746] Buffer I/O error on dev loop6, logical block 0, async page read [ 1412.265626][T16746] ldm_validate_partition_table(): Disk read failed. [ 1412.275583][T16746] Buffer I/O error on dev loop6, logical block 0, async page read [ 1412.284301][T16746] Buffer I/O error on dev loop6, logical block 0, async page read [ 1412.292504][T16746] Dev loop6: unable to read RDB block 0 [ 1412.299239][T16746] loop6: unable to read partition table [ 1412.305986][T16746] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1413.194790][ T31] audit: type=1326 audit(1767015872.773:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16757 comm="syz.3.1901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44b518f749 code=0x0 [ 1413.389252][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1902'. [ 1413.582357][T16772] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1413.728994][T16774] netlink: 'syz.4.1904': attribute type 4 has an invalid length. [ 1413.739539][T16774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1904'. [ 1419.291780][T16811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1912'. [ 1419.318439][T16811] netlink: 'syz.1.1912': attribute type 10 has an invalid length. [ 1419.334812][T16811] bond0: (slave wlan1): Opening slave failed [ 1419.346001][T16811] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 1420.335459][T16820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1914'. [ 1422.505758][T16847] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1919'. [ 1423.228673][T16848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.236076][T16848] bridge0: port 2(bridge_slave_1) entered listening state [ 1423.243557][T16848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.250877][T16848] bridge0: port 1(bridge_slave_0) entered listening state [ 1423.382972][T16848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1423.563346][T16848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1423.745958][T16852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1920'. [ 1423.821250][T16848] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1424.253319][T16860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1921'. [ 1424.349791][T16861] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1424.523986][T16860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1921'. [ 1426.169928][T16884] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1426.194754][T16876] team0: Device gtp0 is of different type [ 1426.880069][T16883] bond_slave_0: entered promiscuous mode [ 1426.886299][T16883] bond_slave_1: entered promiscuous mode [ 1426.892058][T16883] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1426.965011][T16883] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1427.162651][T16883] bond5: (slave macvlan3): Enslaving as an active interface with an up link [ 1428.614773][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.621282][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.087897][T16938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1934'. [ 1432.757263][T16940] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1432.979760][T16940] File: /dev/nullb0 PID: 16940 Comm: syz.4.1934 [ 1433.156945][T16951] fuse: Bad value for 'fd' [ 1436.270047][ T31] audit: type=1326 audit(1767015895.813:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1436.330798][ T31] audit: type=1326 audit(1767015895.813:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1436.370360][T16970] sch_fq: defrate 0 ignored. [ 1436.503930][ T31] audit: type=1326 audit(1767015895.813:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1436.602848][ T31] audit: type=1326 audit(1767015895.813:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1436.664145][ T31] audit: type=1326 audit(1767015895.813:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1436.766913][ T31] audit: type=1326 audit(1767015895.813:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1436.864439][ T31] audit: type=1326 audit(1767015895.813:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1437.084983][ T31] audit: type=1326 audit(1767015895.813:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1437.307784][ T31] audit: type=1326 audit(1767015895.813:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1437.456294][ T31] audit: type=1326 audit(1767015895.813:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.5.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc53d8f749 code=0x7ffc0000 [ 1437.970901][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 1437.983815][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 1438.000878][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 1438.022987][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 1438.091029][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 1438.821721][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 1438.832627][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 1438.842686][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 1438.853008][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 1438.876198][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 1439.688057][T17011] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1439.814307][T17013] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 1440.209816][T17017] netlink: 'syz.3.1948': attribute type 4 has an invalid length. [ 1442.899865][ T31] kauditd_printk_skb: 40 callbacks suppressed [ 1442.899885][ T31] audit: type=1326 audit(1767015902.483:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1443.040252][ T31] audit: type=1326 audit(1767015902.513:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1443.193235][ T31] audit: type=1326 audit(1767015902.523:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1443.413639][ T31] audit: type=1326 audit(1767015902.523:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1443.455277][T17032] __nla_validate_parse: 38 callbacks suppressed [ 1443.455310][T17032] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1952'. [ 1443.563600][ T31] audit: type=1326 audit(1767015902.523:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1443.748692][ T31] audit: type=1326 audit(1767015902.523:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1443.843297][ T31] audit: type=1326 audit(1767015902.523:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1443.929907][ T31] audit: type=1326 audit(1767015902.523:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1444.008945][ T31] audit: type=1326 audit(1767015902.523:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1444.270677][ T31] audit: type=1326 audit(1767015902.523:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17025 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1444.464626][ T10] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1444.682987][ T10] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18432, setting to 64 [ 1444.697106][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1445.062664][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1445.082074][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1445.111568][ T10] usb 6-1: Product: syz [ 1445.157975][ T10] usb 6-1: Manufacturer: syz [ 1445.268194][ T10] usb 6-1: SerialNumber: syz [ 1445.299675][ T10] usb 6-1: config 0 descriptor?? [ 1445.360712][ T10] usb 6-1: selecting invalid altsetting 0 [ 1445.881433][T17043] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1447.773585][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1448.078986][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1448.090289][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1448.133968][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1448.177224][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1448.213689][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.226983][T16514] usb 6-1: USB disconnect, device number 18 [ 1448.409848][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1448.773065][T17072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.788856][T17072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.874341][T17072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.888225][T17072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.904701][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1448.921596][T17046] udevd[17046]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1448.937681][ T31] kauditd_printk_skb: 38 callbacks suppressed [ 1448.937698][ T31] audit: type=1326 audit(1767015908.453:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28178f749 code=0x7ffc0000 [ 1449.106677][ T31] audit: type=1326 audit(1767015908.453:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe28178df90 code=0x7ffc0000 [ 1449.223861][ T31] audit: type=1326 audit(1767015908.453:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe28178f34b code=0x7ffc0000 [ 1449.415553][ T31] audit: type=1326 audit(1767015908.453:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe28178f34b code=0x7ffc0000 [ 1449.488417][T16514] usb 3-1: USB disconnect, device number 61 [ 1449.585657][ T31] audit: type=1326 audit(1767015908.673:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28178f749 code=0x7ffc0000 [ 1449.750334][ T31] audit: type=1326 audit(1767015908.853:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fe28178f749 code=0x7ffc0000 [ 1449.900920][ T31] audit: type=1326 audit(1767015908.853:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28178f749 code=0x7ffc0000 [ 1450.031743][ T31] audit: type=1326 audit(1767015908.853:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28178f749 code=0x7ffc0000 [ 1450.125585][ T31] audit: type=1326 audit(1767015908.953:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fe28178f749 code=0x7ffc0000 [ 1450.273716][ T31] audit: type=1326 audit(1767015908.953:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28178f749 code=0x7ffc0000 [ 1452.709552][T17108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1968'. [ 1453.164508][T17114] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1969'. [ 1453.518435][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1453.532614][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1454.450923][T17126] kernel profiling enabled (shift: 9) [ 1455.376907][T17131] netlink: 'syz.5.1973': attribute type 13 has an invalid length. [ 1456.014090][T16512] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1456.252141][T16512] usb 4-1: Using ep0 maxpacket: 16 [ 1456.342604][T16512] usb 4-1: config 0 has no interfaces? [ 1456.361771][T16512] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1456.414289][T16512] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1456.436430][T16512] usb 4-1: Manufacturer: syz [ 1456.564797][T16512] usb 4-1: config 0 descriptor?? [ 1457.678782][T17157] binder: BINDER_SET_CONTEXT_MGR already set [ 1457.685247][T17157] binder: 17151:17157 ioctl 4018620d 200000000040 returned -16 [ 1457.938403][T17157] syz.2.1977 (17157): drop_caches: 2 [ 1458.664346][T17163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1978'. [ 1459.605536][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 1460.267736][T16512] usb 4-1: USB disconnect, device number 65 [ 1464.341710][T17217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1988'. [ 1465.853559][T16514] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1467.535609][T17243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'. [ 1468.152906][T17257] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2005'. [ 1468.321545][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 1468.994726][T16512] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1469.351344][T16512] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1469.363264][T16512] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1469.373863][T16512] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1469.387536][T16512] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1469.404315][T16512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.516712][T16512] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1470.263967][T17255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.276752][T17255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.438442][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 1470.438462][ T31] audit: type=1326 audit(1767015930.023:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17244 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1470.529617][T16512] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1470.543900][T17255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.604811][ T31] audit: type=1326 audit(1767015930.023:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17244 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1470.707619][ T31] audit: type=1326 audit(1767015930.053:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17244 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8cea38df90 code=0x7ffc0000 [ 1470.753921][T17255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.810062][ T31] audit: type=1326 audit(1767015930.053:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17244 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8cea38f34b code=0x7ffc0000 [ 1471.014125][ T31] audit: type=1326 audit(1767015930.053:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17244 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8cea38f34b code=0x7ffc0000 [ 1471.234319][ T31] audit: type=1326 audit(1767015930.363:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17244 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1471.261264][T16512] usb 2-1: USB disconnect, device number 66 [ 1471.448443][ T31] audit: type=1326 audit(1767015930.383:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17244 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1471.582423][ T31] audit: type=1326 audit(1767015930.553:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17244 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1471.672330][ T31] audit: type=1326 audit(1767015930.553:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17244 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1471.815672][ T31] audit: type=1326 audit(1767015930.563:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17244 comm="syz.1.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1472.047827][T17276] program syz.3.2000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1472.493658][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1472.740433][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1473.072275][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1473.099144][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.124297][ T10] usb 4-1: Product: syz [ 1473.154491][ T10] usb 4-1: Manufacturer: syz [ 1473.159190][ T10] usb 4-1: SerialNumber: syz [ 1473.216884][ T10] usb 4-1: config 0 descriptor?? [ 1474.460997][T17276] mac80211_hwsim hwsim4 wlan1: Caught tx_queue_len zero misconfig [ 1475.191291][T17293] sctp: [Deprecated]: syz.2.2003 (pid 17293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1475.191291][T17293] Use struct sctp_sack_info instead [ 1477.252934][T16512] usb 4-1: USB disconnect, device number 66 [ 1477.765355][T17314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2008'. [ 1480.212889][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'. [ 1480.580553][T17341] fuse: Bad value for 'fd' [ 1482.208342][T17350] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1482.942950][T17362] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2016'. [ 1483.250377][T17362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1483.374302][T17362] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1483.554936][T17368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'. [ 1483.595317][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1483.602678][ C1] bridge0: topology change detected, propagating [ 1483.609442][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1483.616747][ C1] bridge0: topology change detected, propagating [ 1486.332162][T17395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2022'. [ 1486.450866][T16512] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1486.626433][T16512] usb 4-1: Using ep0 maxpacket: 32 [ 1486.649436][T16512] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1486.662024][T16512] usb 4-1: config 9 has no interface number 0 [ 1486.673241][T16512] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1486.702823][T16512] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1486.721899][T16512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.754411][T16512] usb 4-1: Product: syz [ 1486.774998][T17390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2021'. [ 1486.832387][T16512] usb 4-1: Manufacturer: syz [ 1486.852983][T16512] usb 4-1: SerialNumber: syz [ 1489.629254][T16512] gspca_main: spca506-2.14.0 probing 0734:043b [ 1489.764650][T16514] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1489.924276][T16514] usb 5-1: Using ep0 maxpacket: 16 [ 1490.006952][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.015153][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.205732][T16514] usb 5-1: config 0 has no interfaces? [ 1490.235635][T16514] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1490.398309][T16514] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1490.418943][T16514] usb 5-1: Manufacturer: syz [ 1490.449375][T17423] xt_nat: multiple ranges no longer supported [ 1490.506686][T16514] usb 5-1: config 0 descriptor?? [ 1490.532998][T16512] usb 4-1: USB disconnect, device number 67 [ 1491.235570][T17428] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1491.243252][T17428] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1491.494471][T17411] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1491.580277][T17411] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1491.678748][T17439] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1493.478623][ T5147] Bluetooth: hci5: command 0x0406 tx timeout [ 1493.554631][ T10] usb 5-1: USB disconnect, device number 61 [ 1493.970902][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1493.970920][ T31] audit: type=1326 audit(1767015953.533:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17447 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1494.133128][ T31] audit: type=1326 audit(1767015953.543:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17447 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1494.267415][ T31] audit: type=1326 audit(1767015953.543:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17447 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1494.292557][ T31] audit: type=1326 audit(1767015953.543:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17447 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1494.511945][T17455] delete_channel: no stack [ 1494.643532][ T31] audit: type=1326 audit(1767015953.543:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17447 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1494.727271][ T31] audit: type=1326 audit(1767015953.543:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17447 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1494.964773][ T31] audit: type=1326 audit(1767015953.543:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17447 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1495.153584][ T31] audit: type=1326 audit(1767015953.543:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17447 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1495.212258][ T31] audit: type=1326 audit(1767015953.543:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17447 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1495.270334][T17464] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1495.463125][ T31] audit: type=1326 audit(1767015953.543:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17447 comm="syz.4.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1496.171794][T17471] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2035'. [ 1497.287716][ T5147] Bluetooth: hci5: command 0x0406 tx timeout [ 1498.656942][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1498.893838][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1498.947512][ T10] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1498.962279][ T10] usb 4-1: config 0 has no interface number 0 [ 1499.009026][ T10] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1499.194600][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1499.204501][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.253513][ T10] usb 4-1: Product: syz [ 1499.273621][ T10] usb 4-1: Manufacturer: syz [ 1499.280936][ T10] usb 4-1: SerialNumber: syz [ 1499.322279][ T10] usb 4-1: config 0 descriptor?? [ 1500.062007][T17518] tipc: Enabling of bearer rejected, failed to enable media [ 1500.082250][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 1500.082269][ T31] audit: type=1326 audit(1767015959.623:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1500.189421][ T31] audit: type=1326 audit(1767015959.623:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1500.290700][ T31] audit: type=1326 audit(1767015959.633:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1500.525690][ T31] audit: type=1326 audit(1767015959.633:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1500.810354][ T31] audit: type=1326 audit(1767015959.633:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1500.940783][ T10] ipheth 4-1:0.196: Unable to find endpoints [ 1500.990609][ T10] usb 4-1: USB disconnect, device number 68 [ 1501.004568][ T31] audit: type=1326 audit(1767015959.633:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x7ffc0000 [ 1501.029896][ T31] audit: type=1326 audit(1767015959.633:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cea391667 code=0x7ffc0000 [ 1501.057127][ T31] audit: type=1326 audit(1767015959.633:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8cea3915dc code=0x7ffc0000 [ 1501.139073][T17526] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2042'. [ 1501.160855][T17527] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2041'. [ 1501.410274][ T31] audit: type=1326 audit(1767015959.633:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8cea391514 code=0x7ffc0000 [ 1501.452669][ T31] audit: type=1326 audit(1767015959.643:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8cea391514 code=0x7ffc0000 [ 1501.576162][T17534] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1502.666383][T17531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.686841][T17531] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.742937][T17531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1503.274316][T16513] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1503.455941][T16513] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1503.476290][T16513] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1503.616455][T16513] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1503.630274][T16513] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1503.640256][T16513] usb 4-1: Product: syz [ 1503.654269][T16513] usb 4-1: Manufacturer: syz [ 1503.659081][T16513] usb 4-1: SerialNumber: syz [ 1503.719544][T16513] usb 4-1: config 0 descriptor?? [ 1503.777831][T16513] usb 4-1: selecting invalid altsetting 0 [ 1504.540809][T17557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2046'. [ 1504.705630][T13347] usb 4-1: USB disconnect, device number 69 [ 1505.093689][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1505.264465][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1505.278764][ T10] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1505.289751][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.319412][ T10] usb 2-1: Product: syz [ 1505.346836][ T10] usb 2-1: Manufacturer: syz [ 1505.456255][ T10] usb 2-1: SerialNumber: syz [ 1505.494970][ T10] usb 2-1: config 0 descriptor?? [ 1505.557362][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1505.618221][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1505.663650][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1505.684359][T17567] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2049'. [ 1505.700578][T17567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1505.707951][T17567] IPv6: NLM_F_CREATE should be set when creating new route [ 1505.715507][T17567] IPv6: NLM_F_CREATE should be set when creating new route [ 1505.722810][T17567] IPv6: NLM_F_CREATE should be set when creating new route [ 1505.807590][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1505.816514][ T10] usb 2-1: media controller created [ 1505.854785][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1505.877115][ T10] usb 2-1: selecting invalid altsetting 7 [ 1505.882919][ T10] cxusb: set interface failed [ 1505.887687][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1505.964916][T17561] dvb-usb: bulk message failed: -22 (42/0) [ 1505.972000][T17561] dvb-usb: bulk message failed: -22 (6/0) [ 1506.450248][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 1506.456681][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1506.706963][ T10] rc_core: IR keymap rc-dvico-portable not found [ 1506.731309][ T10] Registered IR keymap rc-empty [ 1506.761002][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1506.798205][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input48 [ 1506.842355][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 1506.860927][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1507.010581][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1507.144720][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1507.274390][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1507.421300][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1507.617156][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1507.743661][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1507.915935][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1508.023985][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1508.164385][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1508.341286][ T10] usb 2-1: USB disconnect, device number 67 [ 1508.907377][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 1508.907399][ T31] audit: type=1326 audit(1767015968.493:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17587 comm="syz.1.2053" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cea38f749 code=0x0 [ 1509.051645][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1509.731957][T17585] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2052'. [ 1510.653715][ T10] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1510.835810][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1510.996255][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1511.084939][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1511.094766][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1511.135402][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1511.145524][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1511.301683][ T10] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1511.311158][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.319320][ T10] usb 6-1: Product: syz [ 1511.324453][ T10] usb 6-1: Manufacturer: syz [ 1511.329276][ T10] usb 6-1: SerialNumber: syz [ 1511.337030][ T10] usb 6-1: config 0 descriptor?? [ 1511.372726][ T10] ti_usb_3410_5052 6-1:0.0: TI USB 5052 2 port adapter converter detected [ 1511.426866][T16512] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1511.492619][ T10] ti_usb_3410_5052 6-1:0.0: missing endpoints [ 1511.684542][T16512] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 1511.712912][T16512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.733855][T16512] usb 4-1: config 0 has no interface number 0 [ 1511.740138][T16512] usb 4-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1511.757821][T16512] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1511.770561][T16513] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1511.888205][T16512] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1511.900452][T16512] usb 4-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 1511.925157][T16512] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 1511.938396][T16513] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1511.952150][T16513] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 1511.968095][T16512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.982754][T16513] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1512.001381][T16513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.018869][T16513] usb 3-1: Product: syz [ 1512.027068][T16513] usb 3-1: Manufacturer: syz [ 1512.032780][T16513] usb 3-1: SerialNumber: syz [ 1512.038085][T16512] usb 4-1: Product: syz [ 1512.047276][T16512] usb 4-1: Manufacturer: syz [ 1512.053117][T16513] usb 3-1: config 0 descriptor?? [ 1512.069138][T16512] usb 4-1: SerialNumber: syz [ 1512.088721][T16513] em28xx 3-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 1512.100365][T16513] em28xx 3-1:0.0: Device initialization failed. [ 1512.133360][T16513] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 1512.212334][T16512] usb 4-1: config 0 descriptor?? [ 1512.277444][T16512] symbolserial 4-1:0.175: symbol converter detected [ 1512.301518][T16512] usb 4-1: symbol converter now attached to ttyUSB0 [ 1512.614827][ T10] usb 4-1: USB disconnect, device number 70 [ 1512.665450][ T10] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 1512.675767][ T10] symbolserial 4-1:0.175: device disconnected [ 1513.590179][ T10] usb 6-1: USB disconnect, device number 20 [ 1515.749508][T13347] usb 3-1: USB disconnect, device number 62 [ 1516.006906][T17646] netlink: 'syz.2.2065': attribute type 10 has an invalid length. [ 1516.073044][T17649] netlink: 'syz.2.2065': attribute type 10 has an invalid length. [ 1516.127076][T17646] team0: Port device dummy0 added [ 1516.224477][T17649] team0: Port device dummy0 removed [ 1516.240827][T17649] dummy0: entered promiscuous mode [ 1516.272846][T17649] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1516.911409][T17655] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2066'. [ 1517.004839][T13347] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1517.194538][ T31] audit: type=1326 audit(1767015976.673:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17641 comm="syz.4.2063" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e4998f749 code=0x0 [ 1517.244245][T13347] usb 2-1: Using ep0 maxpacket: 32 [ 1517.415780][T13347] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1517.443535][T13347] usb 2-1: config 0 has no interface number 0 [ 1517.476191][T13347] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1517.490885][T17660] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2067'. [ 1517.626430][T13347] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1517.665283][T13347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.695997][T13347] usb 2-1: Product: syz [ 1517.713626][T13347] usb 2-1: Manufacturer: syz [ 1517.731693][T13347] usb 2-1: SerialNumber: syz [ 1517.810270][T13347] usb 2-1: config 0 descriptor?? [ 1518.124263][T16512] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1518.296550][T16512] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1518.316702][T16512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1518.384227][T16512] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1518.430597][T16512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1518.478709][T16512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1518.555136][T16512] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1518.565187][T16512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.573255][T16512] usb 4-1: Product: syz [ 1518.599727][T16512] usb 4-1: Manufacturer: syz [ 1518.621191][T16512] usb 4-1: SerialNumber: syz [ 1518.670553][T16512] usb 4-1: config 0 descriptor?? [ 1518.707036][T16512] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 1518.924980][T16512] usb 4-1: USB disconnect, device number 71 [ 1519.066382][T13347] ipheth 2-1:0.196: Unable to find endpoints [ 1519.088900][T13347] usb 2-1: USB disconnect, device number 68 [ 1520.120316][T17703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2078'. [ 1520.412748][T17701] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2071'. [ 1520.985793][T17706] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2080'. [ 1522.304172][T16514] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1522.456012][T16514] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 1522.464861][T16514] usb 2-1: config 0 has no interface number 0 [ 1522.477433][T16514] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1522.498554][T16514] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1522.509090][T16514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.536330][T16514] usb 2-1: Product: syz [ 1522.540801][T16514] usb 2-1: Manufacturer: syz [ 1522.547417][T16514] usb 2-1: SerialNumber: syz [ 1522.569607][T16514] usb 2-1: config 0 descriptor?? [ 1522.594356][T13347] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1522.596566][T17723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1522.615370][T16514] usb-storage 2-1:0.20: USB Mass Storage device detected [ 1522.648590][T16514] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1522.693651][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1522.759618][T13347] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.779788][T13347] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1522.861200][T16514] scsi host1: usb-storage 2-1:0.20 [ 1522.937183][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1522.979707][ T10] usb 3-1: config 3 has an invalid interface number: 19 but max is 0 [ 1522.992324][T13347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.008986][ T10] usb 3-1: config 3 has an invalid interface number: 4 but max is 0 [ 1523.027819][T13347] usb 6-1: config 0 descriptor?? [ 1523.042069][ T10] usb 3-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 1523.067372][ T5917] usb 2-1: USB disconnect, device number 69 [ 1523.101067][ T10] usb 3-1: config 3 has no interface number 0 [ 1523.138810][ T10] usb 3-1: config 3 has no interface number 1 [ 1523.172862][ T10] usb 3-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 1523.193082][ T10] usb 3-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1523.249451][ T10] usb 3-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 1523.300825][ T10] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 1523.341225][ T10] usb 3-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 1523.362590][ T10] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 1523.393146][ T10] usb 3-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 1523.427599][ T10] usb 3-1: config 3 interface 19 has no altsetting 0 [ 1523.451546][ T10] usb 3-1: config 3 interface 4 has no altsetting 0 [ 1523.467324][ T10] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 1523.477241][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.497735][ T10] usb 3-1: Product: syz [ 1523.502014][ T10] usb 3-1: Manufacturer: syz [ 1523.507086][T17743] xt_bpf: check failed: parse error [ 1523.515207][ T5917] usb 6-1: USB disconnect, device number 21 [ 1523.522681][ T10] usb 3-1: SerialNumber: syz [ 1523.785045][ T10] pl2303 3-1:3.19: required endpoints missing [ 1523.899116][ T10] pl2303 3-1:3.4: required interrupt-in endpoint missing [ 1523.943357][ T10] usb 3-1: USB disconnect, device number 63 [ 1524.229455][T13347] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1524.438104][T13347] usb 2-1: Using ep0 maxpacket: 32 [ 1524.446144][T13347] usb 2-1: config 8 has an invalid interface number: 134 but max is 0 [ 1524.477009][T13347] usb 2-1: config 8 has no interface number 0 [ 1524.495148][T13347] usb 2-1: config 8 interface 134 has no altsetting 0 [ 1524.529028][T13347] usb 2-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= 4.15 [ 1524.541038][T13347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.552051][T13347] usb 2-1: Product: syz [ 1524.560453][T13347] usb 2-1: Manufacturer: syz [ 1524.570668][T13347] usb 2-1: SerialNumber: syz [ 1524.830655][T17751] netlink: 'syz.1.2094': attribute type 46 has an invalid length. [ 1524.854668][T17751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.895821][T17751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.386930][T17751] tmpfs: Unknown parameter 'J b]jV0A;0< arڶ˵;')?EX' [ 1525.600171][T17774] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2102'. [ 1525.706715][T17774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2102'. [ 1525.728299][T17774] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2102'. [ 1525.818291][T13347] gspca_main: benq-2.14.0 probing 04a5:3035 [ 1525.851403][T13347] usb 2-1: USB disconnect, device number 70 [ 1526.225279][T16514] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1526.423536][T16514] usb 6-1: device descriptor read/64, error -71 [ 1526.624268][T16513] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1526.664097][T16514] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1526.774205][T16513] usb 4-1: Using ep0 maxpacket: 16 [ 1526.784653][T16513] usb 4-1: config 0 has an invalid interface number: 60 but max is 0 [ 1526.793274][T16513] usb 4-1: config 0 has no interface number 0 [ 1526.804217][T16514] usb 6-1: device descriptor read/64, error -71 [ 1526.831065][T16513] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 1526.858816][T16513] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.879815][T16513] usb 4-1: Product: syz [ 1526.909226][T16513] usb 4-1: Manufacturer: syz [ 1526.915014][T16514] usb usb6-port1: attempt power cycle [ 1526.936483][T16513] usb 4-1: SerialNumber: syz [ 1526.978136][T16513] usb 4-1: config 0 descriptor?? [ 1526.999247][T16513] gspca_main: spca500-2.14.0 probing 046d:0900 [ 1527.210085][T16513] gspca_spca500: reg write: error -71 [ 1527.226069][T16513] gspca_spca500: reg write: error -71 [ 1527.245531][T16513] gspca_spca500: reg write: error -71 [ 1527.254483][T16514] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1527.289430][T16513] gspca_spca500: reg write: error -71 [ 1527.302104][T16513] gspca_spca500: reg write: error -71 [ 1527.324315][T16513] gspca_spca500: reg write: error -71 [ 1527.331146][T16513] gspca_spca500: reg write: error -71 [ 1527.341016][T16514] usb 6-1: device descriptor read/8, error -71 [ 1527.356360][T16513] gspca_spca500: reg write: error -71 [ 1527.369613][T16513] gspca_spca500: reg write: error -71 [ 1527.386726][T16513] gspca_spca500: reg write: error -71 [ 1527.405476][T16513] gspca_spca500: reg write: error -71 [ 1527.411512][T16513] gspca_spca500: reg write: error -71 [ 1527.427249][T16513] gspca_spca500: reg write: error -71 [ 1527.440230][T16513] gspca_spca500: reg write: error -71 [ 1527.478603][T16513] usb 4-1: USB disconnect, device number 72 [ 1527.532804][T17796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2109'. [ 1527.571987][T17799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2112'. [ 1527.612531][T16514] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1527.652301][T16514] usb 6-1: device descriptor read/8, error -71 [ 1527.850244][T16514] usb usb6-port1: unable to enumerate USB device [ 1531.011695][T17833] program syz.5.2120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1531.623509][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1531.644226][T16513] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1531.869571][T16513] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1531.880923][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1531.888973][ T10] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1531.897440][ T10] usb 6-1: config 0 has no interface number 0 [ 1531.906180][T16513] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24 [ 1531.917832][T16513] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.917900][ T10] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1531.944347][T16514] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1531.974213][ T10] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1531.974246][T16513] usb 5-1: Product: syz [ 1532.027168][T16513] usb 5-1: Manufacturer: syz [ 1532.046980][T16513] usb 5-1: SerialNumber: syz [ 1532.051726][ T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1532.087608][T16513] usb 5-1: config 0 descriptor?? [ 1532.091949][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.133625][ T10] usb 6-1: Product: syz [ 1532.146175][ T10] usb 6-1: Manufacturer: syz [ 1532.165570][ T10] usb 6-1: SerialNumber: syz [ 1532.170314][T16514] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1532.201341][T16514] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.203286][ T10] usb 6-1: config 0 descriptor?? [ 1532.257601][T16514] usb 4-1: Product: syz [ 1532.268452][T16514] usb 4-1: Manufacturer: syz [ 1532.280526][T16514] usb 4-1: SerialNumber: syz [ 1532.404988][T16514] usb 4-1: config 0 descriptor?? [ 1532.656336][ T10] radio-si470x 6-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 1532.662255][T16514] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1532.707817][ T10] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 1532.774549][ T10] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 1532.838396][ T10] usb 6-1: USB disconnect, device number 26 [ 1532.861619][T17849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.877701][T17849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.550723][T16513] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1533.588266][T17045] udevd[17045]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1533.616822][T16513] usb 5-1: USB disconnect, device number 62 [ 1534.163579][T16512] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1534.214088][T16513] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1534.235814][T16514] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1534.314581][T16512] usb 6-1: Using ep0 maxpacket: 8 [ 1534.325936][T16512] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1534.345045][T16512] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1534.374442][T16513] usb 5-1: Using ep0 maxpacket: 16 [ 1534.381319][T16512] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1534.395640][T16513] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1534.420288][T16512] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.466785][T16513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1534.483892][T16512] usb 6-1: Product: syz [ 1534.494708][T16512] usb 6-1: Manufacturer: syz [ 1534.505473][T16512] usb 6-1: SerialNumber: syz [ 1534.511421][T16513] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1534.530889][T16513] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.545363][T16512] usb 6-1: config 0 descriptor?? [ 1534.560198][T16513] usb 5-1: Product: syz [ 1534.584141][T16513] usb 5-1: Manufacturer: syz [ 1534.594427][T16513] usb 5-1: SerialNumber: syz [ 1534.627377][T16513] usb 5-1: config 0 descriptor?? [ 1534.668418][T16513] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1534.711334][T16513] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1535.015178][T16512] usb 6-1: USB disconnect, device number 27 [ 1535.310919][T16513] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1535.320978][T16513] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1535.386277][T13347] usb 4-1: USB disconnect, device number 73 [ 1535.461217][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1535.538404][T16513] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1535.556035][T16513] em28xx 5-1:0.0: No AC97 audio processor [ 1535.622034][T16512] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1535.633589][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1535.671301][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1535.687733][ T10] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 1535.703316][ T10] usb 2-1: config 7 has no interface number 0 [ 1535.775884][T17880] ALSA: mixer_oss: invalid OSS volume 'MONI' [ 1535.802298][ T10] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1535.829091][ T10] usb 2-1: config 7 interface 187 has no altsetting 0 [ 1535.853537][ T10] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1535.863046][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.874038][T16512] usb 3-1: Using ep0 maxpacket: 8 [ 1535.912651][ T10] usb 2-1: Product: syz [ 1535.930761][T16512] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1535.946934][ T10] usb 2-1: Manufacturer: syz [ 1535.951950][ T10] usb 2-1: SerialNumber: syz [ 1535.964568][T16512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.987864][T16512] usb 3-1: Product: syz [ 1535.992841][T16512] usb 3-1: Manufacturer: syz [ 1536.010759][T16512] usb 3-1: SerialNumber: syz [ 1536.121938][T16512] usb 3-1: config 0 descriptor?? [ 1536.135251][T16512] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1536.172768][ T10] usb 2-1: Unknown endpoint type found, address 0x07 [ 1536.191648][ T10] usb 2-1: Unknown endpoint type found, address 0x03 [ 1536.227643][ T10] usb 2-1: Not enough endpoints found in device, aborting! [ 1536.452867][ T10] usb 2-1: USB disconnect, device number 71 [ 1536.573531][T13347] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1536.654967][T16512] gspca_sq930x: ucbus_write failed -71 [ 1536.743488][T13347] usb 6-1: Using ep0 maxpacket: 16 [ 1536.761660][T13347] usb 6-1: config 0 has no interfaces? [ 1536.794769][T13347] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1536.804446][T13347] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1536.966917][T16512] gspca_sq930x: Sensor ov9630 not yet treated [ 1536.987798][T16512] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 1537.022719][T16512] usb 3-1: USB disconnect, device number 64 [ 1537.107661][T13347] usb 6-1: Manufacturer: syz [ 1537.148039][T13347] usb 6-1: config 0 descriptor?? [ 1537.714843][T13347] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1537.784406][T17902] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2141'. [ 1537.912981][T13347] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1537.922645][T13347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.958093][T13347] usb 2-1: Product: syz [ 1537.982040][T13347] usb 2-1: Manufacturer: syz [ 1538.017533][T13347] usb 2-1: SerialNumber: syz [ 1538.050337][T13347] usb 2-1: config 0 descriptor?? [ 1538.072994][T13347] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1538.101753][T13347] usb 2-1: setting power ON [ 1538.109847][ T5917] usb 5-1: USB disconnect, device number 63 [ 1538.118135][ T5917] em28xx 5-1:0.0: Disconnecting em28xx [ 1538.131878][ T5917] em28xx 5-1:0.0: Freeing device [ 1538.169622][T13347] dvb-usb: bulk message failed: -22 (2/0) [ 1538.211201][T13347] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1538.324274][T13347] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 1538.345285][T13347] dvb_usb_cxusb 2-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 1538.390602][T13347] usb 2-1: USB disconnect, device number 72 [ 1538.592173][T17911] misc userio: No port type given on /dev/userio [ 1538.948846][T17917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2147'. [ 1539.471176][T13347] usb 6-1: USB disconnect, device number 28 [ 1539.539740][T17927] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2150'. [ 1540.617192][T17932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2151'. [ 1541.937342][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2157'. [ 1542.261505][T17954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2154'. [ 1542.617506][T17953] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2159'. [ 1542.899381][T17970] kAFS: unable to lookup cell '' [ 1542.906292][T17970] kAFS: unable to lookup cell '(,c' [ 1545.874316][T17998] batman_adv: batadv0: Adding interface: dummy0 [ 1545.957234][T17998] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1546.005561][T17998] batman_adv: batadv0: Interface activated: dummy0 [ 1546.027425][T18001] batadv0: mtu less than device minimum [ 1546.036161][T18001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1546.048576][T18001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1546.060560][T18001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1546.072517][T18001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1546.084545][T18001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1546.096142][T18001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1546.107575][T18001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1546.118939][T18001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1546.130418][T18001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1546.521989][T18012] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1547.066694][T18025] usb usb8: usbfs: process 18025 (syz.2.2181) did not claim interface 0 before use [ 1547.482586][T18020] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2178'. [ 1548.551760][T16512] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1549.033305][T16512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1549.398035][T16512] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1549.446070][T16512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.495590][T16512] usb 4-1: Product: syz [ 1549.512935][T16512] usb 4-1: Manufacturer: syz [ 1549.538830][T16512] usb 4-1: SerialNumber: syz [ 1549.577046][T16512] usb 4-1: config 0 descriptor?? [ 1551.485318][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.546289][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.760258][T16512] usb 4-1: USB disconnect, device number 74 [ 1551.937878][ T31] audit: type=1326 audit(1767016011.523:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.4.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1552.119071][ T31] audit: type=1326 audit(1767016011.553:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.4.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1552.236738][ T31] audit: type=1326 audit(1767016011.563:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.4.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1552.385871][ T31] audit: type=1326 audit(1767016011.563:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.4.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1552.481767][ T31] audit: type=1326 audit(1767016011.573:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18087 comm="syz.4.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4998f749 code=0x7ffc0000 [ 1552.609292][T18101] netlink: 'syz.2.2206': attribute type 3 has an invalid length. [ 1552.657080][T18101] netlink: 'syz.2.2206': attribute type 3 has an invalid length. [ 1552.708715][T18101] netlink: 'syz.2.2206': attribute type 3 has an invalid length. [ 1552.761587][T18101] netlink: 'syz.2.2206': attribute type 3 has an invalid length. [ 1552.802585][T18101] netlink: 'syz.2.2206': attribute type 3 has an invalid length. [ 1552.829067][T18101] netlink: 'syz.2.2206': attribute type 3 has an invalid length. [ 1552.847170][T18101] netlink: 'syz.2.2206': attribute type 3 has an invalid length. [ 1552.858750][T18101] netlink: 'syz.2.2206': attribute type 3 has an invalid length. [ 1552.875302][T18101] netlink: 'syz.2.2206': attribute type 3 has an invalid length. [ 1552.885187][T18101] netlink: 'syz.2.2206': attribute type 3 has an invalid length. [ 1553.828240][T18122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2215'. [ 1554.045706][T13347] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1554.233646][T13347] usb 4-1: Using ep0 maxpacket: 32 [ 1554.241180][T13347] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1554.320372][ T5917] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1554.340719][T13347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.377991][T13347] usb 4-1: config 0 descriptor?? [ 1554.396611][T13347] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1554.618075][ T5917] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1554.630290][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.655031][ T5917] usb 2-1: Product: syz [ 1554.659656][ T5917] usb 2-1: Manufacturer: syz [ 1554.669310][ T5917] usb 2-1: SerialNumber: syz [ 1554.686615][ T5917] usb 2-1: config 0 descriptor?? [ 1554.854642][T13347] gspca_sunplus: reg_w_riv err -71 [ 1554.863728][T13347] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1554.881821][T13347] usb 4-1: USB disconnect, device number 75 [ 1554.936281][ T5917] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1555.162018][T18139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.173748][T18139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.504445][T18169] usb usb1: usbfs: process 18169 (syz.4.2233) did not claim interface 0 before use [ 1555.611993][T18172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1555.619388][T18172] IPv6: NLM_F_CREATE should be set when creating new route [ 1555.626912][T18172] IPv6: NLM_F_CREATE should be set when creating new route [ 1555.634407][T18172] IPv6: NLM_F_CREATE should be set when creating new route [ 1556.489258][ T5917] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1556.761448][T18186] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2239'. [ 1557.159879][T16512] usb 2-1: USB disconnect, device number 73 [ 1558.164341][T18219] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1558.553575][T16513] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1558.734508][T16513] usb 4-1: Using ep0 maxpacket: 32 [ 1558.871352][T16513] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1558.964756][T16513] usb 4-1: config 0 has no interface number 0 [ 1558.974374][T16513] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1558.985180][T16513] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.004128][T16513] usb 4-1: Product: syz [ 1559.020198][T16513] usb 4-1: Manufacturer: syz [ 1559.036520][T16513] usb 4-1: SerialNumber: syz [ 1559.053598][T18244] team0: Caught tx_queue_len zero misconfig [ 1559.086305][T16513] usb 4-1: config 0 descriptor?? [ 1559.120160][T16513] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input51 [ 1559.194480][T16514] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1559.354383][T16514] usb 2-1: Using ep0 maxpacket: 16 [ 1559.493708][T16514] usb 2-1: config 0 has no interfaces? [ 1559.518515][T16514] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1559.574884][T16514] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1559.625865][T16514] usb 2-1: Manufacturer: syz [ 1559.626345][T18250] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2265'. [ 1559.637127][T16513] usb 4-1: USB disconnect, device number 76 [ 1559.740481][T16514] usb 2-1: config 0 descriptor?? [ 1560.006811][T18241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2263'. [ 1560.564383][T16513] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1560.714635][T16513] usb 5-1: Using ep0 maxpacket: 32 [ 1560.722409][T16513] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1560.745114][T16513] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1560.765760][T16513] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1560.797778][T16513] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1560.812273][T16513] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1560.969188][T16513] usb 5-1: Product: syz [ 1560.975836][T16513] usb 5-1: Manufacturer: syz [ 1560.980815][T16513] usb 5-1: SerialNumber: syz [ 1561.004921][T16513] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input52 [ 1561.388942][T16513] usb 5-1: USB disconnect, device number 64 [ 1561.414175][T16513] appletouch 5-1:1.0: input: appletouch disconnected [ 1561.906840][T18283] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1562.094463][T18286] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1562.950239][T16514] usb 2-1: USB disconnect, device number 74 [ 1563.962974][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 1564.088173][T18305] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2291'. [ 1564.694641][T18310] kAFS: unable to lookup cell '' [ 1564.771177][T18313] kAFS: unable to lookup cell '(,c' [ 1564.930941][T16514] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1565.083569][ T5917] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1565.162800][T16514] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1565.204637][T16514] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1565.230630][T16514] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1565.280948][T16514] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.304076][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 1565.325819][ T5917] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1565.335672][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.362153][T16514] usb 3-1: config 0 descriptor?? [ 1565.558045][ T5917] usb 5-1: Product: syz [ 1565.582653][ T5917] usb 5-1: Manufacturer: syz [ 1565.652529][ T5917] usb 5-1: SerialNumber: syz [ 1565.720499][ T5917] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1565.744539][ T5917] r8152-cfgselector 5-1: config 0 descriptor?? [ 1566.215445][ T5917] r8152-cfgselector 5-1: USB disconnect, device number 65 [ 1566.992362][T18332] syz.5.2289 (18332): drop_caches: 2 [ 1567.387213][T16512] usb 3-1: USB disconnect, device number 65 [ 1568.195195][ T5917] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1568.324825][T18354] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2298'. [ 1568.387460][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1568.463037][ T5917] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1568.546745][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.587800][ T5917] usb 6-1: Product: syz [ 1568.604392][ T5917] usb 6-1: Manufacturer: syz [ 1568.651563][ T5917] usb 6-1: SerialNumber: syz [ 1568.684876][ T5917] usb 6-1: config 0 descriptor?? [ 1568.894511][T18361] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 5, id = 0 [ 1568.906963][T18360] IPVS: stopping backup sync thread 18361 ... [ 1570.283696][ T5917] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1570.473517][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 1570.484208][ T5917] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1570.494462][ T5917] usb 4-1: config 0 has no interface number 0 [ 1570.500743][ T5917] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1570.514392][T16513] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1570.553843][ T5917] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1570.581338][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.595614][ T5917] usb 4-1: Product: syz [ 1570.611405][ T5917] usb 4-1: Manufacturer: syz [ 1570.629428][ T5917] usb 4-1: SerialNumber: syz [ 1570.658088][ T5917] usb 4-1: config 0 descriptor?? [ 1570.674129][T16513] usb 3-1: Using ep0 maxpacket: 8 [ 1570.681301][T16513] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1570.698677][T16513] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1570.773233][T16513] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1570.932570][T16513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.027110][T16513] usb 3-1: config 0 descriptor?? [ 1571.469078][T16513] elecom 0003:056E:00FB.0007: unknown main item tag 0x0 [ 1571.673939][T16513] elecom 0003:056E:00FB.0007: unknown main item tag 0x0 [ 1571.745035][T16513] elecom 0003:056E:00FB.0007: unknown main item tag 0x0 [ 1571.752103][T16513] elecom 0003:056E:00FB.0007: unknown main item tag 0x0 [ 1571.769401][T16513] elecom 0003:056E:00FB.0007: unknown main item tag 0x0 [ 1571.910975][T13347] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1571.950588][T16513] elecom 0003:056E:00FB.0007: hidraw0: USB HID v38.04 Device [HID 056e:00fb] on usb-dummy_hcd.2-1/input0 [ 1572.005161][T16513] usb 3-1: USB disconnect, device number 66 [ 1572.028615][T12434] usb 6-1: USB disconnect, device number 29 [ 1572.118258][T18393] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2313'. [ 1572.172605][T13347] usb 2-1: Using ep0 maxpacket: 16 [ 1572.281305][ T5917] ipheth 4-1:0.196: Unable to find endpoints [ 1572.293476][ T5917] usb 4-1: USB disconnect, device number 77 [ 1572.325541][T13347] usb 2-1: config 0 has no interfaces? [ 1572.452562][T13347] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1572.523177][T13347] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1572.648088][T18408] validate_nla: 37 callbacks suppressed [ 1572.648127][T18408] netlink: 'syz.5.2315': attribute type 10 has an invalid length. [ 1572.687527][T13347] usb 2-1: Manufacturer: syz [ 1572.735162][T18408] bond0: (slave dummy0): Releasing backup interface [ 1572.749653][T18408] team0: Port device dummy0 added [ 1572.756253][T18410] netlink: 'syz.5.2315': attribute type 10 has an invalid length. [ 1572.796332][T13347] usb 2-1: config 0 descriptor?? [ 1572.885187][T18400] fido_id[18400]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1572.902555][T18410] team0: Port device dummy0 removed [ 1573.003657][T18410] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1573.601831][T18397] net_ratelimit: 11 callbacks suppressed [ 1573.601855][T18397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1573.857694][T18398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.865030][T18398] bridge0: port 2(bridge_slave_1) entered listening state [ 1573.872520][T18398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.879847][T18398] bridge0: port 1(bridge_slave_0) entered listening state [ 1573.948603][T18398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.980775][T18398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1575.808890][T13347] usb 2-1: USB disconnect, device number 75 [ 1576.463920][ T5917] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1576.524968][T13347] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1576.759847][T13347] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 1576.768518][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1576.781315][T13347] usb 2-1: config 0 has no interface number 0 [ 1576.796680][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1576.926365][T13347] usb 2-1: config 0 interface 98 has no altsetting 0 [ 1576.951643][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1576.967725][T12434] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1576.996770][T13347] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1577.016577][T13347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.025262][ T5917] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1577.043561][T13347] usb 2-1: Product: syz [ 1577.047841][T13347] usb 2-1: Manufacturer: syz [ 1577.052551][T13347] usb 2-1: SerialNumber: syz [ 1577.057792][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.084792][ T5917] usb 3-1: config 0 descriptor?? [ 1577.094298][T13347] usb 2-1: config 0 descriptor?? [ 1577.209704][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'. [ 1577.265325][T12434] usb 6-1: Using ep0 maxpacket: 32 [ 1577.324204][T12434] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 1577.333560][T12434] usb 6-1: config 0 has no interface number 0 [ 1577.341910][T12434] usb 6-1: config 0 interface 196 has no altsetting 0 [ 1577.377150][T13347] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1577.415002][T12434] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1577.438331][T12434] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.463614][T12434] usb 6-1: Product: syz [ 1577.467925][T12434] usb 6-1: Manufacturer: syz [ 1577.472886][T12434] usb 6-1: SerialNumber: syz [ 1577.516780][T12434] usb 6-1: config 0 descriptor?? [ 1577.528840][ T5917] dragonrise 0003:0079:0011.0008: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.2-1/input0 [ 1577.726374][ T5917] usb 3-1: USB disconnect, device number 67 [ 1577.859351][T18457] fido_id[18457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1577.908077][T13347] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 1578.424139][T18468] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2334'. [ 1578.665569][T13347] usb 2-1: failed to restore interface 98 altsetting 4 (error=-71) [ 1578.720447][T13347] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1578.737652][T13347] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1578.750653][ T5917] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1578.778875][T13347] usb 2-1: USB disconnect, device number 76 [ 1578.788610][ T5917] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1578.837871][T18473] veth1_macvtap: left promiscuous mode [ 1578.861529][T18473] macsec0: entered allmulticast mode [ 1578.916832][ T5917] ------------[ cut here ]------------ [ 1578.923128][ T5917] WARNING: fs/kernfs/dir.c:537 at kernfs_get+0x72/0x90, CPU#0: kworker/0:4/5917 [ 1578.932351][ T5917] Modules linked in: [ 1578.937029][ T5917] CPU: 0 UID: 0 PID: 5917 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1578.948351][ T5917] Tainted: [L]=SOFTLOCKUP [ 1578.952928][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1578.963201][ T5917] Workqueue: events request_firmware_work_func [ 1578.969473][ T5917] RIP: 0010:kernfs_get+0x72/0x90 [ 1578.974685][ T5917] Code: e8 e3 9f 5d ff 48 89 df be 04 00 00 00 e8 e6 c2 c3 ff f0 ff 03 eb 05 e8 cc 9f 5d ff 5b 5d c3 cc cc cc cc cc e8 bf 9f 5d ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 e5 [ 1578.994799][ T5917] RSP: 0018:ffffc900046ef600 EFLAGS: 00010293 [ 1579.000998][ T5917] RAX: ffffffff82635641 RBX: ffff8880677df960 RCX: ffff88802a258000 [ 1579.009222][ T5917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1579.017430][ T5917] RBP: 0000000000000000 R08: ffff8880677df963 R09: 1ffff1100cefbf2c [ 1579.025642][ T5917] R10: dffffc0000000000 R11: ffffed100cefbf2d R12: ffff88807cdf2528 [ 1579.033889][ T5917] R13: 1ffff1100f9be4a6 R14: ffff88807cdf2530 R15: dffffc0000000000 [ 1579.042194][ T5917] FS: 0000000000000000(0000) GS:ffff888125e21000(0000) knlGS:0000000000000000 [ 1579.051255][ T5917] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1579.057977][ T5917] CR2: 00002000001d3030 CR3: 0000000041648000 CR4: 00000000003526f0 [ 1579.066131][ T5917] Call Trace: [ 1579.069513][ T5917] [ 1579.072536][ T5917] kobject_add_internal+0x72b/0xcc0 [ 1579.078097][ T5917] kobject_add+0x155/0x220 [ 1579.082620][ T5917] ? __pfx_kobject_add+0x10/0x10 [ 1579.087680][ T5917] ? __kasan_kmalloc+0x93/0xb0 [ 1579.092553][ T5917] ? kobject_init+0x83/0x1e0 [ 1579.097310][ T5917] get_device_parent+0x316/0x3a0 [ 1579.102384][ T5917] device_add+0x2e1/0xb80 [ 1579.106818][ T5917] firmware_fallback_sysfs+0x2e4/0xa40 [ 1579.112456][ T5917] ? kmem_cache_free+0x197/0x620 [ 1579.118021][ T5917] _request_firmware+0xfa4/0x1680 [ 1579.123165][ T5917] ? __pfx__request_firmware+0x10/0x10 [ 1579.128806][ T5917] ? process_scheduled_works+0x9ef/0x1770 [ 1579.134856][ T5917] ? process_scheduled_works+0x9ef/0x1770 [ 1579.140785][ T5917] request_firmware_work_func+0xaf/0x1c0 [ 1579.146517][ T5917] ? process_scheduled_works+0x9ef/0x1770 [ 1579.152299][ T5917] process_scheduled_works+0xad1/0x1770 [ 1579.158083][ T5917] ? __pfx_process_scheduled_works+0x10/0x10 [ 1579.164131][ T5917] ? do_raw_spin_lock+0x121/0x290 [ 1579.169280][ T5917] worker_thread+0x8a0/0xda0 [ 1579.174074][ T5917] kthread+0x711/0x8a0 [ 1579.178239][ T5917] ? __pfx_worker_thread+0x10/0x10 [ 1579.183495][ T5917] ? __pfx_kthread+0x10/0x10 [ 1579.188260][ T5917] ? _raw_spin_unlock_irq+0x23/0x50 [ 1579.193901][ T5917] ? __pfx_kthread+0x10/0x10 [ 1579.198627][ T5917] ret_from_fork+0x510/0xa50 [ 1579.203261][ T5917] ? __pfx_ret_from_fork+0x10/0x10 [ 1579.208543][ T5917] ? __switch_to+0xc9e/0x1480 [ 1579.213279][ T5917] ? __pfx_kthread+0x10/0x10 [ 1579.217997][ T5917] ret_from_fork_asm+0x1a/0x30 [ 1579.222985][ T5917] [ 1579.226190][ T5917] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1579.233685][ T5917] CPU: 0 UID: 0 PID: 5917 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1579.244979][ T5917] Tainted: [L]=SOFTLOCKUP [ 1579.249671][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1579.259966][ T5917] Workqueue: events request_firmware_work_func [ 1579.266155][ T5917] Call Trace: [ 1579.269455][ T5917] [ 1579.272428][ T5917] vpanic+0x1e0/0x670 [ 1579.276467][ T5917] panic+0xb9/0xc0 [ 1579.280307][ T5917] ? __pfx_panic+0x10/0x10 [ 1579.284852][ T5917] ? ret_from_fork_asm+0x1a/0x30 [ 1579.289868][ T5917] __warn+0x317/0x4b0 [ 1579.293885][ T5917] ? kernfs_get+0x72/0x90 [ 1579.298257][ T5917] ? kernfs_get+0x72/0x90 [ 1579.302604][ T5917] __report_bug+0x288/0x500 [ 1579.307274][ T5917] ? kernfs_get+0x72/0x90 [ 1579.311713][ T5917] ? __pfx___report_bug+0x10/0x10 [ 1579.316754][ T5917] ? kernfs_add_one+0x46f/0x5c0 [ 1579.321632][ T5917] ? up_write+0x1ac/0x410 [ 1579.326015][ T5917] ? kernfs_get+0x72/0x90 [ 1579.330369][ T5917] report_bug+0x16a/0x220 [ 1579.334725][ T5917] ? kernfs_get+0x72/0x90 [ 1579.339090][ T5917] ? kernfs_get+0x74/0x90 [ 1579.343530][ T5917] handle_bug+0x98/0x200 [ 1579.347896][ T5917] exc_invalid_op+0x1a/0x50 [ 1579.352433][ T5917] asm_exc_invalid_op+0x1a/0x20 [ 1579.357304][ T5917] RIP: 0010:kernfs_get+0x72/0x90 [ 1579.362258][ T5917] Code: e8 e3 9f 5d ff 48 89 df be 04 00 00 00 e8 e6 c2 c3 ff f0 ff 03 eb 05 e8 cc 9f 5d ff 5b 5d c3 cc cc cc cc cc e8 bf 9f 5d ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 e5 [ 1579.381894][ T5917] RSP: 0018:ffffc900046ef600 EFLAGS: 00010293 [ 1579.387989][ T5917] RAX: ffffffff82635641 RBX: ffff8880677df960 RCX: ffff88802a258000 [ 1579.396279][ T5917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1579.404378][ T5917] RBP: 0000000000000000 R08: ffff8880677df963 R09: 1ffff1100cefbf2c [ 1579.412680][ T5917] R10: dffffc0000000000 R11: ffffed100cefbf2d R12: ffff88807cdf2528 [ 1579.420761][ T5917] R13: 1ffff1100f9be4a6 R14: ffff88807cdf2530 R15: dffffc0000000000 [ 1579.428939][ T5917] ? kernfs_get+0x71/0x90 [ 1579.433301][ T5917] kobject_add_internal+0x72b/0xcc0 [ 1579.438566][ T5917] kobject_add+0x155/0x220 [ 1579.443010][ T5917] ? __pfx_kobject_add+0x10/0x10 [ 1579.447983][ T5917] ? __kasan_kmalloc+0x93/0xb0 [ 1579.452772][ T5917] ? kobject_init+0x83/0x1e0 [ 1579.457380][ T5917] get_device_parent+0x316/0x3a0 [ 1579.462342][ T5917] device_add+0x2e1/0xb80 [ 1579.466693][ T5917] firmware_fallback_sysfs+0x2e4/0xa40 [ 1579.472281][ T5917] ? kmem_cache_free+0x197/0x620 [ 1579.477309][ T5917] _request_firmware+0xfa4/0x1680 [ 1579.482387][ T5917] ? __pfx__request_firmware+0x10/0x10 [ 1579.488017][ T5917] ? process_scheduled_works+0x9ef/0x1770 [ 1579.493903][ T5917] ? process_scheduled_works+0x9ef/0x1770 [ 1579.499693][ T5917] request_firmware_work_func+0xaf/0x1c0 [ 1579.505363][ T5917] ? process_scheduled_works+0x9ef/0x1770 [ 1579.511119][ T5917] process_scheduled_works+0xad1/0x1770 [ 1579.516704][ T5917] ? __pfx_process_scheduled_works+0x10/0x10 [ 1579.522962][ T5917] ? do_raw_spin_lock+0x121/0x290 [ 1579.528023][ T5917] worker_thread+0x8a0/0xda0 [ 1579.532660][ T5917] kthread+0x711/0x8a0 [ 1579.536771][ T5917] ? __pfx_worker_thread+0x10/0x10 [ 1579.541981][ T5917] ? __pfx_kthread+0x10/0x10 [ 1579.546614][ T5917] ? _raw_spin_unlock_irq+0x23/0x50 [ 1579.551845][ T5917] ? __pfx_kthread+0x10/0x10 [ 1579.556647][ T5917] ret_from_fork+0x510/0xa50 [ 1579.561260][ T5917] ? __pfx_ret_from_fork+0x10/0x10 [ 1579.566395][ T5917] ? __switch_to+0xc9e/0x1480 [ 1579.571129][ T5917] ? __pfx_kthread+0x10/0x10 [ 1579.575768][ T5917] ret_from_fork_asm+0x1a/0x30 [ 1579.580596][ T5917] [ 1579.584245][ T5917] Kernel Offset: disabled [ 1579.588588][ T5917] Rebooting in 86400 seconds..