last executing test programs: 8m23.909094748s ago: executing program 2 (id=2572): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x8863}, @val={0x1, 0x0, 0x0, 0xfffe, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0x1, 0x5, 0x80, 0x2, 0x1}}}, 0x36) (async) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) (async) r6 = syz_open_dev$audion(&(0x7f00000000c0), 0x3ff, 0x12000) ioctl$SNDCTL_SEQ_CTRLRATE(r6, 0xc0045103, &(0x7f0000000100)=0xfffffbff) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x38c43, 0x0) (async) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r8, 0x7af, &(0x7f0000000080)={@local, 0xff}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r9, 0x0, &(0x7f0000000580)="371a137265f04e57520466c5d2126b43fe612df6e165226c6d2821e9dcfdbb35ed42f2f1b3ddaf6697c2cf0951732e9deb3aee4903752844892939f979416660e491a9a64c3cd6499c5cf312007bc864", 0xfffffffffffffe8a, 0xffffffff80000000}) 8m23.684481582s ago: executing program 2 (id=2573): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x840) recvmmsg(r1, &(0x7f0000000240)=[{{&(0x7f0000000180)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/85, 0x55}, {&(0x7f0000000640)=""/96, 0x60}, {&(0x7f00000006c0)=""/131, 0x83}, {&(0x7f0000000780)=""/223, 0xdf}, {&(0x7f0000000080)=""/6, 0x6}, {&(0x7f0000000880)=""/89, 0x59}], 0xa, &(0x7f00000009c0)=""/106, 0x6a}, 0x47}], 0x1, 0x2, 0x0) 8m22.80030913s ago: executing program 2 (id=2582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38000e"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40041}, 0x20048000) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x14, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x38}}, 0x0) sendto$packet(r3, &(0x7f0000000380)="b38f77946f8bc0c4fe6aafa565dcefabac58144509eabfc02957e031fa24c0189acfd9734f06519cbbb12ef5f40caa6429ed5a69f83b35d44367f2e50d5de24e0467694abffae54c153be7ce24731eb395cb1c08703080e3d6780fc7d271be3357e9b008397e2a5b2a9152ef965f96ad5e703569f05aa1981dbed65048718f3711cfd3555f138c2f44d5044505cbc01e874553cf9b94a955ce3c7f0b6444dae9704ef5d8390c477172efeb82b64b796e03c1b2f6f15a1181fafccba3a4013ebe3f852eb4208d23af58ca567591872518", 0xd0, 0x94, &(0x7f0000000480)={0x11, 0x1a, r6, 0x1, 0xe2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) socket$key(0xf, 0x3, 0x2) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f00000000c0), 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[], 0x118) r9 = syz_open_dev$vbi(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000280)={0x5, @vbi={0x6, 0xffffffff, 0x6, 0x34325241, [0x7, 0x6], [0x4, 0x80], 0x108}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f0000000200)={0x1, 0x7f}, 0x2) 8m22.484698644s ago: executing program 2 (id=2585): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x81001) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000002240)='./file0\x00', 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r4, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) sendmmsg$sock(r4, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000480), 0x0}, 0x20) shutdown(r4, 0x1) 8m21.647823344s ago: executing program 2 (id=2590): setresuid(0x0, 0xee01, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/pm_trace_dev_match', 0x0, 0x32) read$dsp(r0, &(0x7f0000000180)=""/131, 0x83) 8m20.829780923s ago: executing program 2 (id=2592): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) listen(r2, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x40844) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="e45f1826431b7ec7", 0x8}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x5c656f613d3ffcde}}], 0x2, 0x4000045) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) close(r4) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0x100000000, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x4, 0xfff, 0x4, {0x9, @sliced={0xd, [0x2, 0x9, 0x0, 0x7, 0x2, 0x3, 0xfff9, 0x3, 0x104d, 0x1, 0x4, 0x6a, 0x200, 0x8f, 0x7, 0x4, 0x4, 0x8022, 0x3, 0xd, 0x2, 0x1000, 0x50, 0x5, 0x1, 0x9, 0x1c61, 0x3, 0x9, 0x9, 0x9, 0x7, 0xbaab, 0x7, 0x21, 0x3e1f, 0x5, 0x7, 0x0, 0x9f, 0x5, 0xd, 0x4, 0x100, 0x1000, 0x4, 0x7d82, 0x7], 0x9}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="11002bbd7000fedbdf251b000000100002800600018008000100080000001800018014000200776c616e30"], 0x3c}}, 0x4000) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8b3c) 8m20.556436811s ago: executing program 32 (id=2592): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) listen(r2, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x40844) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="e45f1826431b7ec7", 0x8}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x5c656f613d3ffcde}}], 0x2, 0x4000045) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) close(r4) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0x100000000, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x4, 0xfff, 0x4, {0x9, @sliced={0xd, [0x2, 0x9, 0x0, 0x7, 0x2, 0x3, 0xfff9, 0x3, 0x104d, 0x1, 0x4, 0x6a, 0x200, 0x8f, 0x7, 0x4, 0x4, 0x8022, 0x3, 0xd, 0x2, 0x1000, 0x50, 0x5, 0x1, 0x9, 0x1c61, 0x3, 0x9, 0x9, 0x9, 0x7, 0xbaab, 0x7, 0x21, 0x3e1f, 0x5, 0x7, 0x0, 0x9f, 0x5, 0xd, 0x4, 0x100, 0x1000, 0x4, 0x7d82, 0x7], 0x9}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="11002bbd7000fedbdf251b000000100002800600018008000100080000001800018014000200776c616e30"], 0x3c}}, 0x4000) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x8b3c) 6.995310049s ago: executing program 1 (id=4730): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010000104000000da738a8de6ad114a02", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x4c}}, 0x884) 6.632930437s ago: executing program 1 (id=4731): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0xd054, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00003e2dbdd195516d96f69c3ff7cd65450000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x19, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000000000000054ba2bd400181100008756d7ce69a4754db57d70355349c61f7c4107267668c921be69a72af6038f291281598367c0618e087662aa7f82642953ddaaa3d6435d019a9e43829e1bc1875500647a5a659b3326d6df3257edaa2d818c990cc5f2be311e327c30c8f449806c25b459eedb1169df803a5b9af586d3c5dcc4683d850d88a149fa41ed288534073ef3056ac37004cdf7000000", @ANYRES32=r6, @ANYRES32=r8], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX=r8, @ANYRESDEC=r7, @ANYBLOB="258223dad9e852244395452088999194967e12a8ec7eb137e5999406a87760f9c062aff902", @ANYRES64=r7, @ANYRES8=r9], 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001c00010029bd7019fedbdf2507000000", @ANYRES32=r10, @ANYBLOB="80007e010a000200aaaaaaaaaa1c0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c5, 0x800, 0x808, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280)) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) r12 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r12, 0x800c5012, &(0x7f0000000180)) fallocate(r11, 0x2, 0x100000000, 0x9c7) r13 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) getdents(r13, &(0x7f0000001fc0)=""/184, 0xb8) 5.647851238s ago: executing program 1 (id=4734): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r0, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) syz_clone3(&(0x7f0000001880)={0x100020200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7496, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000000)=0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@ll={0x11, 0x19, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) openat$cgroup_ro(r7, 0x0, 0x275a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000072089fb329bd7000ffdbdf2507000000a35d916e212924ba557bc4ccfecab0e32178bacac0e212ca278cb0b87f92ca0af8fb83f4715a5e6e058c4375319b9422e4d34f576b23b37a5c9a9b3df88199021cfc51f69da88df6862c506579a6625cf6004efecdf428f7f22bd6b0", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x28044010}, 0x20041040) socket$inet6_sctp(0xa, 0x1, 0x84) 3.525322536s ago: executing program 1 (id=4745): setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000140)=0x8000000d, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) 3.252633691s ago: executing program 1 (id=4747): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[], 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000100)=0x32) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000000c0)=0x2) 2.702535988s ago: executing program 3 (id=4753): r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x1, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x924) write$evdev(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.41103269s ago: executing program 3 (id=4756): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) fallocate(r1, 0x0, 0x0, 0x400001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r3 = syz_io_uring_setup(0x38a9, &(0x7f0000000480)={0x0, 0xffffffff, 0x10100, 0x0, 0x175}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r2}) io_uring_enter(r3, 0x44fd, 0x3, 0x1, 0x0, 0x0) fcntl$addseals(r1, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) 2.245214265s ago: executing program 0 (id=4758): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 2.18339949s ago: executing program 0 (id=4760): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) times(0x0) 1.371639267s ago: executing program 0 (id=4763): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 1.326430233s ago: executing program 3 (id=4764): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a8001200040001", 0x37}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100ac14143208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000180006801400038006"], 0x7c}}, 0x0) 1.125161831s ago: executing program 3 (id=4766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 1.027843791s ago: executing program 3 (id=4769): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000008}) 759.909103ms ago: executing program 4 (id=4772): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 728.575851ms ago: executing program 5 (id=4773): unshare(0x2a020480) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCCONS(r0, 0x541d) 621.055832ms ago: executing program 4 (id=4774): socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x200000000003, 0x87) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 578.036518ms ago: executing program 5 (id=4775): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0xfc, 0x8, 0xfffff00c}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6c, 0x0, @remote}}}}}}, 0x0) 543.682727ms ago: executing program 4 (id=4776): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x3f, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 436.707782ms ago: executing program 5 (id=4777): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000160ffffffffffffe6000a"], 0x24}}, 0x40000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 433.230651ms ago: executing program 4 (id=4778): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x1405, 0x621, 0x4}, 0x10}, 0x1, 0x0, 0x0, 0x40085}, 0x0) 355.548015ms ago: executing program 5 (id=4779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000000900020073797a32000000000900010073797a3100000000300004802c0001800b000100736f636b657400001c0002800800024000000000080003000000001d08000140000000a2"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 288.622752ms ago: executing program 4 (id=4780): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 265.52369ms ago: executing program 5 (id=4781): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)="c8fa4c94", 0x4}], 0x2) 252.552742ms ago: executing program 0 (id=4782): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r1, 0x100000}, &(0x7f0000000340)=0x8) 184.179554ms ago: executing program 0 (id=4783): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001800010028bd7000ffdbdf251d01020015000400", @ANYRES16, @ANYBLOB="08000e00", @ANYRES32, @ANYBLOB="0800fc00", @ANYRES32, @ANYBLOB="1500040001"], 0x84}}, 0x4008040) 100.507072ms ago: executing program 1 (id=4784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, 0xc568}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0xffff6866}}]}]}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c041}, 0x200088c4) 100.311325ms ago: executing program 3 (id=4785): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 84.192632ms ago: executing program 5 (id=4786): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 80.996423ms ago: executing program 4 (id=4787): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x20940, 0x1de) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 0s ago: executing program 0 (id=4788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000035}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4084) kernel console output (not intermixed with test programs): 4499] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 1005.282474][T24497] macvlan2: entered promiscuous mode [ 1005.304685][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 1005.312617][ T5918] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1005.321666][ T5918] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1005.385638][ T5918] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1005.396251][ T5918] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1005.400209][T24497] macvlan2: entered allmulticast mode [ 1005.417940][T24497] bond3: entered promiscuous mode [ 1005.425307][T24497] bridge6: entered promiscuous mode [ 1005.431843][T24497] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1005.445250][T24497] bond3: left promiscuous mode [ 1005.446523][ T5918] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1005.463365][T24497] bridge6: left promiscuous mode [ 1005.492934][ T5918] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1005.520016][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.677202][T24509] fuse: Bad value for 'group_id' [ 1005.694471][T24509] fuse: Bad value for 'group_id' [ 1005.756204][ T5918] usb 6-1: GET_CAPABILITIES returned d7 [ 1005.761805][ T5918] usbtmc 6-1:16.0: can't read capabilities [ 1005.920517][T24521] netlink: 'syz.3.4237': attribute type 1 has an invalid length. [ 1005.995721][T24521] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 1006.022787][T24521] macvlan4: entered promiscuous mode [ 1006.028373][T24521] macvlan4: entered allmulticast mode [ 1006.034649][T24521] bond4: entered promiscuous mode [ 1006.040169][T24521] bridge5: entered promiscuous mode [ 1006.063182][T24521] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1006.084289][T24521] bond4: left promiscuous mode [ 1006.099174][T24521] bridge5: left promiscuous mode [ 1006.316173][T24538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.351409][T24533] loop8: detected capacity change from 0 to 7 [ 1006.374015][ T30] kauditd_printk_skb: 1135 callbacks suppressed [ 1006.374033][ T30] audit: type=1326 audit(1771152565.072:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.4.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1006.423874][T24538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.426627][T24537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.475042][T24537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.483526][ T30] audit: type=1326 audit(1771152565.072:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.4.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1006.486017][T24533] Dev loop8: unable to read RDB block 7 [ 1006.519346][T24533] loop8: unable to read partition table [ 1006.587061][T24533] loop8: partition table beyond EOD, truncated [ 1006.604800][T24533] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1006.632804][ T30] audit: type=1326 audit(1771152565.112:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.4.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1006.743385][ T30] audit: type=1326 audit(1771152565.112:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.4.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1006.799906][ T30] audit: type=1326 audit(1771152565.112:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.4.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1006.964732][ T30] audit: type=1326 audit(1771152565.112:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.4.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1006.992214][ T30] audit: type=1326 audit(1771152565.122:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.4.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1007.016240][ T30] audit: type=1326 audit(1771152565.122:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.4.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1007.052567][ T30] audit: type=1326 audit(1771152565.122:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.4.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1007.232804][ T30] audit: type=1326 audit(1771152565.122:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24528 comm="syz.4.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd3275c84e code=0x7ffc0000 [ 1007.848180][ T5918] usb 6-1: USB disconnect, device number 100 [ 1008.128840][T24557] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 1008.196489][T24554] macvlan2: entered promiscuous mode [ 1008.201897][T24554] macvlan2: entered allmulticast mode [ 1008.209674][T24554] bond5: entered promiscuous mode [ 1008.228662][T24554] bridge6: entered promiscuous mode [ 1008.259203][T24554] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1008.298445][T24554] bond5: left promiscuous mode [ 1008.317484][T24554] bridge6: left promiscuous mode [ 1008.874568][ T5915] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1009.079880][ T5915] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1009.092806][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.103813][ T5915] usb 2-1: Product: syz [ 1009.111717][ T5915] usb 2-1: Manufacturer: syz [ 1009.120842][ T5915] usb 2-1: SerialNumber: syz [ 1009.151534][ T5915] usb 2-1: config 0 descriptor?? [ 1009.179533][ T5915] usb 2-1: selecting invalid altsetting 1 [ 1009.185416][ T5915] technisat-usb2: could not set alternate setting to 0 [ 1009.322766][T24574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.336102][T24574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.375814][ T5915] technisat-usb2: firmware version: 0.0 [ 1009.381556][ T5915] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1009.596239][ T5915] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1009.632142][ T5915] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 1009.671500][ T5915] usb 2-1: USB disconnect, device number 84 [ 1009.988110][T24583] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4252'. [ 1010.000576][T24585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4253'. [ 1010.029152][T24585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4253'. [ 1010.235435][T24600] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4258'. [ 1010.644620][ T5915] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1010.748720][T24610] netlink: 'syz.3.4272': attribute type 29 has an invalid length. [ 1010.774825][ T5915] usb 2-1: device descriptor read/64, error -71 [ 1010.803561][T24614] IPv6: A: Disabled Multicast RS [ 1011.064708][ T5915] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1011.143362][T24621] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4265'. [ 1011.209391][ T5915] usb 2-1: device descriptor read/64, error -71 [ 1011.219001][T24621] netlink: 496 bytes leftover after parsing attributes in process `syz.5.4265'. [ 1011.335149][ T5915] usb usb2-port1: attempt power cycle [ 1011.344772][T19811] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1011.544550][T19811] usb 4-1: Using ep0 maxpacket: 32 [ 1011.551514][T19811] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1011.696873][T19811] usb 4-1: config 0 has no interface number 0 [ 1011.735712][ T5915] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1011.799189][T19811] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1011.811709][T19811] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1011.821982][ T5915] usb 2-1: device descriptor read/8, error -71 [ 1011.823931][T19811] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1011.838522][T19811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.850858][T19811] usb 4-1: Product: syz [ 1011.858868][T19811] usb 4-1: Manufacturer: syz [ 1011.863509][T19811] usb 4-1: SerialNumber: syz [ 1011.876539][T19811] usb 4-1: config 0 descriptor?? [ 1011.892051][T19811] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1011.909854][T19811] em28xx 4-1:0.89: Video interface 89 found: [ 1012.055859][T24630] FAULT_INJECTION: forcing a failure. [ 1012.055859][T24630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1012.069958][ T5915] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1012.104570][T24630] CPU: 0 UID: 0 PID: 24630 Comm: syz.0.4267 Tainted: G L syzkaller #0 PREEMPT(full) [ 1012.104600][T24630] Tainted: [L]=SOFTLOCKUP [ 1012.104607][T24630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1012.104619][T24630] Call Trace: [ 1012.104628][T24630] [ 1012.104636][T24630] dump_stack_lvl+0xe8/0x150 [ 1012.104668][T24630] should_fail_ex+0x412/0x560 [ 1012.104700][T24630] _copy_from_user+0x2d/0xb0 [ 1012.104722][T24630] xsk_setsockopt+0x43d/0x990 [ 1012.104751][T24630] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1012.104781][T24630] ? __fget_files+0x2a/0x420 [ 1012.104803][T24630] ? aa_sock_opt_perm+0xff/0x1a0 [ 1012.104877][T24630] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1012.104897][T24630] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1012.104922][T24630] do_sock_setsockopt+0x17c/0x1b0 [ 1012.104956][T24630] __x64_sys_setsockopt+0x13d/0x1b0 [ 1012.104989][T24630] do_syscall_64+0x14d/0xf80 [ 1012.105007][T24630] ? trace_irq_disable+0x3b/0x150 [ 1012.105032][T24630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.105051][T24630] ? clear_bhb_loop+0x40/0x90 [ 1012.105073][T24630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.105093][T24630] RIP: 0033:0x7fae40d9bf79 [ 1012.105112][T24630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.105129][T24630] RSP: 002b:00007fae41c5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1012.105149][T24630] RAX: ffffffffffffffda RBX: 00007fae41015fa0 RCX: 00007fae40d9bf79 [ 1012.105164][T24630] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 1012.105175][T24630] RBP: 00007fae41c5f090 R08: 0000000000000020 R09: 0000000000000000 [ 1012.105188][T24630] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1012.105200][T24630] R13: 00007fae41016038 R14: 00007fae41015fa0 R15: 00007fae4113fa48 [ 1012.105239][T24630] [ 1012.338710][ T5915] usb 2-1: device descriptor read/8, error -71 [ 1012.379920][T24634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4269'. [ 1012.434907][T19811] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1012.446895][T24636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.449635][T24638] netlink: 'syz.0.4271': attribute type 1 has an invalid length. [ 1012.458316][T24636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.494734][ T5915] usb usb2-port1: unable to enumerate USB device [ 1012.505818][T24638] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 1012.517564][T19811] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1012.524254][T24638] macvlan2: entered promiscuous mode [ 1012.526857][T19811] em28xx 4-1:0.89: board has no eeprom [ 1012.531257][T24638] macvlan2: entered allmulticast mode [ 1012.543589][T24638] bond4: entered promiscuous mode [ 1012.548952][T24638] bridge7: entered promiscuous mode [ 1012.555021][T24638] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1012.562618][T24638] bond4: left promiscuous mode [ 1012.568196][T24638] bridge7: left promiscuous mode [ 1012.595214][T19811] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1012.602496][T19811] em28xx 4-1:0.89: analog set to bulk mode. [ 1012.608660][ T5906] em28xx 4-1:0.89: Registering V4L2 extension [ 1012.639209][T19811] usb 4-1: USB disconnect, device number 117 [ 1012.655772][ T929] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1012.668024][T19811] em28xx 4-1:0.89: Disconnecting em28xx [ 1012.694151][ T5906] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1012.701433][ T5906] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1012.711978][ T5906] em28xx 4-1:0.89: No AC97 audio processor [ 1012.719543][ T5906] usb 4-1: Decoder not found [ 1012.724373][ T5906] em28xx 4-1:0.89: failed to create media graph [ 1012.730750][ T5906] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1012.743464][ T5906] em28xx 4-1:0.89: Registering snapshot button... [ 1012.758459][ T5906] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input82 [ 1012.771572][ T5906] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1012.776981][ T30] kauditd_printk_skb: 1368 callbacks suppressed [ 1012.776999][ T30] audit: type=1326 audit(1771152571.552:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24641 comm="syz.0.4273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae40d9bf79 code=0x0 [ 1012.785722][T19811] em28xx 4-1:0.89: Closing input extension [ 1012.816101][T19811] em28xx 4-1:0.89: Deregistering snapshot button [ 1012.834574][ T929] usb 6-1: Using ep0 maxpacket: 8 [ 1012.847076][ T929] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.864180][ T929] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 1012.878314][T19811] em28xx 4-1:0.89: Freeing device [ 1012.887212][ T929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1012.902061][ T929] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1012.913380][ T929] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1012.930676][ T929] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1012.944640][ T929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1012.952654][ T929] usb 6-1: SerialNumber: syz [ 1012.977372][ T929] usb 6-1: config 0 descriptor?? [ 1013.011191][ T929] hso 6-1:0.0: Can't find BULK OUT endpoint [ 1013.111623][T24649] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1013.137611][T24649] veth1_to_bridge: entered promiscuous mode [ 1013.145978][T24649] veth1_to_bridge: left promiscuous mode [ 1013.188642][T19811] usb 6-1: USB disconnect, device number 101 [ 1014.180020][T24677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1014.260728][T24679] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1014.279981][ T929] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1014.529521][ T929] usb 6-1: device descriptor read/64, error -71 [ 1014.804535][ T929] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1014.944577][ T929] usb 6-1: device descriptor read/64, error -71 [ 1015.057207][ T929] usb usb6-port1: attempt power cycle [ 1015.172530][T24685] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 1015.230475][T24685] macvlan2: entered promiscuous mode [ 1015.254586][T24685] macvlan2: entered allmulticast mode [ 1015.282921][T24685] bond6: entered promiscuous mode [ 1015.302712][T24685] bridge6: entered promiscuous mode [ 1015.315413][T24685] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1015.343022][T24685] bond6: left promiscuous mode [ 1015.375865][T24685] bridge6: left promiscuous mode [ 1015.406003][ T929] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1015.438784][ T929] usb 6-1: device descriptor read/8, error -71 [ 1015.520627][T24693] netlink: 'syz.3.4287': attribute type 3 has an invalid length. [ 1015.559370][T24693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4287'. [ 1015.705088][ T929] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1015.823535][T24705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1015.875674][ T929] usb 6-1: device descriptor read/8, error -71 [ 1015.997170][ T929] usb usb6-port1: unable to enumerate USB device [ 1016.096070][T24709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.108523][T24709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.221668][ T30] audit: type=1326 audit(1771152574.982:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.4.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1016.363292][ T30] audit: type=1326 audit(1771152574.982:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.4.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1016.426914][ T30] audit: type=1326 audit(1771152574.982:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.4.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1016.559273][ T30] audit: type=1326 audit(1771152574.982:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.4.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1016.654553][ T30] audit: type=1326 audit(1771152574.982:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.4.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1016.684219][T24717] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1016.787916][T24719] program syz.3.4294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1016.799656][ T30] audit: type=1326 audit(1771152574.982:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.4.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1016.880290][ T30] audit: type=1326 audit(1771152574.982:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.4.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1016.960532][ T30] audit: type=1326 audit(1771152574.992:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.4.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1017.072468][ T30] audit: type=1326 audit(1771152574.992:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.4.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1017.095201][ T5915] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1017.232335][T24722] syzkaller1: entered promiscuous mode [ 1017.238073][T24722] syzkaller1: entered allmulticast mode [ 1017.275553][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 1017.290918][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.304340][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1017.354924][ T5915] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 1017.389934][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.420663][ T5915] usb 4-1: config 0 descriptor?? [ 1017.541766][T24727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1018.100438][ T5915] usbhid 4-1:0.0: can't add hid device: -71 [ 1018.108037][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1018.135526][ T5915] usb 4-1: USB disconnect, device number 119 [ 1018.396213][T24731] loop2: detected capacity change from 0 to 7 [ 1018.420265][ T5818] Dev loop2: unable to read RDB block 7 [ 1018.442390][ T5818] loop2: AHDI p2 p3 [ 1018.452456][ T5818] loop2: partition table partially beyond EOD, truncated [ 1018.490513][ T5818] loop2: p3 start 335544320 is beyond EOD, truncated [ 1018.550713][T24731] Dev loop2: unable to read RDB block 7 [ 1018.574880][T24731] loop2: AHDI p2 p3 [ 1018.584343][T24731] loop2: partition table partially beyond EOD, truncated [ 1018.595561][T24731] loop2: p3 start 335544320 is beyond EOD, truncated [ 1020.054500][ T5918] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1020.096161][T24764] macvlan2: entered promiscuous mode [ 1020.101869][T24761] kvm: pic: non byte write [ 1020.106343][T24764] macvlan2: entered allmulticast mode [ 1020.107376][T24764] bond9: entered promiscuous mode [ 1020.122496][T24764] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1020.135416][T24764] bond9: left promiscuous mode [ 1020.246530][ T5918] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1020.258052][ T5918] usb 2-1: can't read configurations, error -22 [ 1020.279312][T24773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4309'. [ 1020.312393][T24773] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4309'. [ 1020.411866][ T5918] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1020.491048][T24777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4311'. [ 1020.597722][ T5918] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1020.616830][ T5918] usb 2-1: can't read configurations, error -22 [ 1020.632200][ T5918] usb usb2-port1: attempt power cycle [ 1020.652347][T24779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4312'. [ 1020.694499][ T5915] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1020.854494][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 1020.880140][ T5915] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1020.899279][ T5915] usb 4-1: config 0 has no interface number 0 [ 1020.917944][ T5915] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1020.934478][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.963807][ T5915] usb 4-1: Product: syz [ 1020.968112][ T5915] usb 4-1: Manufacturer: syz [ 1020.972712][ T5915] usb 4-1: SerialNumber: syz [ 1020.977777][ T5918] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1021.005928][ T5915] usb 4-1: config 0 descriptor?? [ 1021.017773][ T5918] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1021.026517][ T5915] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1021.033158][ T5918] usb 2-1: can't read configurations, error -22 [ 1021.144631][T19181] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1021.164543][ T5918] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1021.187303][ T5918] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1021.197886][ T5918] usb 2-1: can't read configurations, error -22 [ 1021.205005][ T5918] usb usb2-port1: unable to enumerate USB device [ 1021.309818][T19181] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1021.319230][T19181] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.328841][T19181] usb 6-1: Product: syz [ 1021.333172][T19181] usb 6-1: Manufacturer: syz [ 1021.339696][T19181] usb 6-1: SerialNumber: syz [ 1021.349918][T19181] usb 6-1: config 0 descriptor?? [ 1021.360567][T19181] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1021.514927][T24792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.646513][ T5915] gspca_spca1528: reg_w err -71 [ 1021.665205][ T5915] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 1021.698667][ T5915] usb 4-1: USB disconnect, device number 120 [ 1021.755946][T24794] loop2: detected capacity change from 0 to 7 [ 1021.769519][ T6556] Dev loop2: unable to read RDB block 7 [ 1021.776357][ T6556] loop2: AHDI p2 p3 [ 1021.780564][ T6556] loop2: partition table partially beyond EOD, truncated [ 1021.790434][ T6556] loop2: p3 start 335544320 is beyond EOD, truncated [ 1021.803229][T24794] Dev loop2: unable to read RDB block 7 [ 1021.810572][T24794] loop2: AHDI p2 p3 [ 1021.815113][T24794] loop2: partition table partially beyond EOD, truncated [ 1021.823154][T24794] loop2: p3 start 335544320 is beyond EOD, truncated [ 1022.577519][T19181] usb 6-1: USB disconnect, device number 106 [ 1022.867725][T24811] vti0: entered promiscuous mode [ 1022.950386][T24817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4324'. [ 1023.364526][ T5915] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1023.457638][T24835] loop7: detected capacity change from 0 to 7 [ 1023.547622][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 1023.554897][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.590340][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.609953][T24835] Dev loop7: unable to read RDB block 7 [ 1023.619431][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1023.633433][ T5915] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1023.645010][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.653178][T24835] loop7: unable to read partition table [ 1023.660682][T24835] loop7: partition table beyond EOD, truncated [ 1023.671307][ T5915] usb 2-1: config 0 descriptor?? [ 1023.676922][T24835] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1023.850066][T24839] loop2: detected capacity change from 0 to 7 [ 1023.866418][T24839] Dev loop2: unable to read RDB block 7 [ 1023.879679][T24839] loop2: AHDI p2 p3 [ 1023.889124][T24839] loop2: partition table partially beyond EOD, truncated [ 1024.011436][T24839] loop2: p3 start 335544320 is beyond EOD, truncated [ 1024.051018][ T5915] usbhid 2-1:0.0: can't add hid device: -71 [ 1024.060675][ T5915] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1024.083956][ T5915] usb 2-1: USB disconnect, device number 93 [ 1024.368164][T24852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4333'. [ 1024.390553][T24852] netem: incorrect ge model size [ 1024.397474][T24852] netem: change failed [ 1024.404251][T24856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.444835][T24856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.566514][T24860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4335'. [ 1024.745404][ T5915] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1024.904565][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 1024.914344][ T5915] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1024.938869][ T5915] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1024.953148][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1024.961526][T19181] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1024.982009][ T5915] usb 2-1: Product: syz [ 1024.990219][ T5915] usb 2-1: Manufacturer: syz [ 1024.999484][ T5915] usb 2-1: SerialNumber: syz [ 1025.029860][ T5915] usb 2-1: config 0 descriptor?? [ 1025.040424][T24858] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1025.121115][T19181] usb 4-1: device descriptor read/64, error -71 [ 1025.215305][T24872] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 1025.222809][T24878] binder: 24877:24878 ioctl c0306201 2000000003c0 returned -14 [ 1025.237677][T24872] macvlan2: entered promiscuous mode [ 1025.243005][T24872] macvlan2: entered allmulticast mode [ 1025.287212][T24872] bond7: entered promiscuous mode [ 1025.298358][T24872] bridge7: entered promiscuous mode [ 1025.304969][T24872] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1025.324248][T24872] bond7: left promiscuous mode [ 1025.338426][T24872] bridge7: left promiscuous mode [ 1025.405987][T19181] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1025.544608][T19181] usb 4-1: device descriptor read/64, error -71 [ 1025.554736][ T5915] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1025.654798][T19181] usb usb4-port1: attempt power cycle [ 1025.679691][T24885] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4343'. [ 1025.716622][ T5915] usb 6-1: config 171 has an invalid interface number: 109 but max is 0 [ 1025.726224][ T5915] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.750076][ T5915] usb 6-1: config 171 has no interface number 0 [ 1025.768846][ T5915] usb 6-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1025.792908][ T5915] usb 6-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1025.829758][ T5915] usb 6-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1025.877812][ T5915] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1025.887359][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.917401][ T5915] usb 6-1: Product: syz [ 1025.926964][ T5915] usb 6-1: Manufacturer: syz [ 1025.946255][ T5915] usb 6-1: SerialNumber: syz [ 1025.975570][T24880] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1026.014808][T19181] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1026.035524][T19181] usb 4-1: device descriptor read/8, error -71 [ 1026.136771][T24893] loop2: detected capacity change from 0 to 7 [ 1026.143746][T24893] Dev loop2: unable to read RDB block 7 [ 1026.151102][T24893] loop2: AHDI p2 p3 [ 1026.159835][T24893] loop2: partition table partially beyond EOD, truncated [ 1026.191768][T24893] loop2: p3 start 335544320 is beyond EOD, truncated [ 1026.275002][T19181] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1026.321382][T24896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4347'. [ 1026.322133][T19181] usb 4-1: device descriptor read/8, error -71 [ 1026.535055][T19181] usb usb4-port1: unable to enumerate USB device [ 1026.984147][T24905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1027.074865][ T5915] ath6kl: Failed to submit usb control message: -110 [ 1027.093468][ T5915] ath6kl: unable to send the bmi data to the device: -110 [ 1027.107991][ T5915] ath6kl: Unable to send get target info: -110 [ 1027.132637][ T5915] ath6kl: Failed to init ath6kl core: -110 [ 1027.151348][ T5915] ath6kl_usb 6-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 1027.686579][ T5915] usb 2-1: USB disconnect, device number 94 [ 1028.054521][ T929] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1028.190433][T24914] netlink: 'syz.4.4352': attribute type 5 has an invalid length. [ 1028.245463][ T929] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1028.259411][ T929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.267860][ T929] usb 2-1: Product: syz [ 1028.272133][ T929] usb 2-1: Manufacturer: syz [ 1028.276945][ T929] usb 2-1: SerialNumber: syz [ 1028.291782][ T929] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1028.341114][T24917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.356532][T24917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.441636][T19811] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1028.470067][ T929] usb 6-1: USB disconnect, device number 107 [ 1028.945310][T24926] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 1029.374773][ T5915] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1029.526821][ T5915] usb 4-1: config 1 has an invalid interface number: 204 but max is 2 [ 1029.537154][ T5915] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1029.548592][ T5915] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1029.561419][ T5915] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1029.572923][ T5915] usb 4-1: config 1 has no interface number 1 [ 1029.579631][ T5915] usb 4-1: too many endpoints for config 1 interface 204 altsetting 7: 37, using maximum allowed: 30 [ 1029.592165][ T5915] usb 4-1: config 1 interface 204 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1029.609339][ T5915] usb 4-1: config 1 interface 204 has no altsetting 0 [ 1029.651544][ T5915] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1029.661342][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.675659][ T5915] usb 4-1: Product: syz [ 1029.694779][ T5915] usb 4-1: Manufacturer: syz [ 1029.699454][ T5915] usb 4-1: SerialNumber: syz [ 1029.805009][T19811] usb 2-1: Service connection timeout for: 256 [ 1029.815226][T19811] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1029.858734][T24941] fuse: Unknown parameter 'Xmode' [ 1029.895920][T19811] ath9k_htc: Failed to initialize the device [ 1029.958905][T19811] usb 2-1: ath9k_htc: USB layer deinitialized [ 1030.003821][ T5915] usb 4-1: 0:2 : does not exist [ 1030.039467][ T5915] usb 4-1: unknown interface protocol 0x80, assuming v1 [ 1030.072699][ T5915] usb 4-1: cannot find UAC_HEADER [ 1030.183229][ T5915] snd-usb-audio 4-1:1.204: probe with driver snd-usb-audio failed with error -22 [ 1030.207616][ T5915] usb 4-1: USB disconnect, device number 125 [ 1030.364545][ T929] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1030.514527][ T929] usb 6-1: Using ep0 maxpacket: 16 [ 1030.526749][ T929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.541579][ T929] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1030.551867][ T929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.565171][ T929] usb 6-1: config 0 descriptor?? [ 1030.782440][T24960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.791832][T24960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.820431][ T929] usbhid 6-1:0.0: can't add hid device: -71 [ 1030.844324][ T929] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1030.867730][ T929] usb 6-1: USB disconnect, device number 108 [ 1031.229883][T24969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.249065][T24967] netlink: 'syz.5.4364': attribute type 2 has an invalid length. [ 1031.428493][T24969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.502047][ T5915] usb 2-1: USB disconnect, device number 95 [ 1031.858675][T24976] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 1032.065043][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1032.065061][ T30] audit: type=1326 audit(1771152590.782:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1032.172430][ T30] audit: type=1326 audit(1771152590.782:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1032.297214][ T30] audit: type=1326 audit(1771152590.782:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1032.328600][ T30] audit: type=1326 audit(1771152590.782:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1032.396618][T24983] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1032.438169][ T30] audit: type=1326 audit(1771152590.782:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1032.764604][ T929] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1032.934797][ T30] audit: type=1326 audit(1771152590.782:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1032.974555][ T929] usb 4-1: Using ep0 maxpacket: 32 [ 1032.981545][ T929] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1032.990343][ T929] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1033.008974][ T929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.033942][ T30] audit: type=1326 audit(1771152590.782:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1033.065216][ T929] usb 4-1: Product: syz [ 1033.079010][ T929] usb 4-1: Manufacturer: syz [ 1033.090643][ T929] usb 4-1: SerialNumber: syz [ 1033.129811][ T30] audit: type=1326 audit(1771152590.782:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1033.154333][T24989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4369'. [ 1033.191463][ T30] audit: type=1326 audit(1771152590.782:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1033.195627][ T929] usb 4-1: config 0 descriptor?? [ 1033.273730][ T30] audit: type=1326 audit(1771152590.782:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1033.334162][T24989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.341519][T24989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.788355][ T929] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1033.893436][T16397] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.920222][T16397] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.012949][T16397] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1034.031934][T16397] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.049808][T16397] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1034.076451][T16397] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.104541][T16397] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1034.132500][T16397] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.208856][ T929] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1034.217991][ T929] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 1034.418005][T25017] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 1034.465265][T11740] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1034.509224][ T929] usb 4-1: USB disconnect, device number 126 [ 1034.614659][T11740] usb 2-1: device descriptor read/64, error -71 [ 1034.864574][T11740] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1035.058184][T25049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4383'. [ 1035.075715][T25050] netlink: 'syz.4.4384': attribute type 10 has an invalid length. [ 1035.191301][T25050] veth0_vlan: entered allmulticast mode [ 1035.224516][T11740] usb 2-1: device descriptor read/64, error -71 [ 1035.248405][T25050] veth0_vlan: left promiscuous mode [ 1035.276032][T25050] veth0_vlan: entered promiscuous mode [ 1035.284214][T25050] `: Device veth0_vlan failed to register rx_handler [ 1035.335234][T11740] usb usb2-port1: attempt power cycle [ 1035.394880][ T5915] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1035.557382][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 1035.578145][ T5915] usb 6-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.609696][ T5915] usb 6-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 1035.643228][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.651792][ T5915] usb 6-1: Product: syz [ 1035.656293][ T5915] usb 6-1: Manufacturer: syz [ 1035.660901][ T5915] usb 6-1: SerialNumber: syz [ 1035.694800][T11740] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1035.721227][ T5915] pwc: Askey VC010 type 1 USB webcam detected. [ 1035.735076][T11740] usb 2-1: device descriptor read/8, error -71 [ 1035.884180][T25066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4387'. [ 1035.912383][T25051] IPv6: Can't replace route, no match found [ 1035.951186][ T5915] pwc: send_video_command error -71 [ 1035.957113][ T5915] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1035.987191][T11740] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1035.994865][ T5915] Philips webcam 6-1:76.0: probe with driver Philips webcam failed with error -71 [ 1036.033571][ T5915] usb 6-1: USB disconnect, device number 109 [ 1036.040615][T11740] usb 2-1: device descriptor read/8, error -71 [ 1036.068621][T25068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4387'. [ 1036.158606][T11740] usb usb2-port1: unable to enumerate USB device [ 1036.177664][T25073] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 1036.184283][T25073] PKCS7: Only support pkcs7_signedData type [ 1036.624808][ T929] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1036.784586][ T929] usb 4-1: Using ep0 maxpacket: 8 [ 1036.791169][ T929] usb 4-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1036.801746][ T929] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1036.812861][ T929] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1036.824560][ T929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.835632][ T929] usb 4-1: Product: syz [ 1036.840015][ T929] usb 4-1: Manufacturer: syz [ 1036.844752][ T929] usb 4-1: SerialNumber: syz [ 1036.851472][ T929] usb 4-1: config 0 descriptor?? [ 1036.934745][ T5915] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1036.988802][T25100] loop2: detected capacity change from 0 to 7 [ 1036.998059][T25100] Dev loop2: unable to read RDB block 7 [ 1037.003695][T25100] loop2: AHDI p2 p3 [ 1037.007864][T25100] loop2: partition table partially beyond EOD, truncated [ 1037.015495][T25100] loop2: p3 start 335544320 is beyond EOD, truncated [ 1037.094555][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 1037.101395][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.111964][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1037.127497][ T5915] usb 6-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 1037.136704][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.145251][ T5915] usb 6-1: Product: syz [ 1037.149465][ T5915] usb 6-1: Manufacturer: syz [ 1037.162011][ T5915] usb 6-1: SerialNumber: syz [ 1037.178783][ T5915] usb 6-1: config 0 descriptor?? [ 1037.191737][ T5915] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1037.392905][T25091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.402352][T25091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.418589][T25091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.445134][T25091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.468299][ T5915] usb 6-1: USB disconnect, device number 110 [ 1038.139239][T25115] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4402'. [ 1038.998205][T11740] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1039.050487][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1039.050505][ T30] audit: type=1326 audit(1771152597.832:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25138 comm="syz.5.4410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac1099bf79 code=0x0 [ 1039.124501][ T30] audit: type=1326 audit(1771152597.882:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25138 comm="syz.5.4410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac1099bf79 code=0x0 [ 1039.165912][T11740] usb 2-1: device descriptor read/64, error -71 [ 1039.192852][ T30] audit: type=1326 audit(1771152597.972:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25138 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1039.250187][T25142] qrtr: Invalid version 0 [ 1039.298152][ T30] audit: type=1326 audit(1771152597.972:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25138 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac1095c84e code=0x7ffc0000 [ 1039.530431][ T30] audit: type=1326 audit(1771152597.982:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25138 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1039.554930][T11740] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1039.604001][ T30] audit: type=1326 audit(1771152597.982:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25138 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac1095c84e code=0x7ffc0000 [ 1039.630262][ T30] audit: type=1326 audit(1771152597.982:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25138 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac1095c84e code=0x7ffc0000 [ 1039.656256][ T30] audit: type=1326 audit(1771152597.982:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25138 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac1095c84e code=0x7ffc0000 [ 1039.679111][ T30] audit: type=1326 audit(1771152597.982:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25138 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac1095c84e code=0x7ffc0000 [ 1039.702686][ T30] audit: type=1326 audit(1771152597.982:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25138 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac1095c84e code=0x7ffc0000 [ 1039.725832][T11740] usb 2-1: device descriptor read/64, error -71 [ 1039.757004][T25149] hub 9-0:1.0: USB hub found [ 1039.764641][T25149] hub 9-0:1.0: 1 port detected [ 1039.794231][T25149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4411'. [ 1039.843903][ T5906] usb 4-1: USB disconnect, device number 127 [ 1039.855974][T11740] usb usb2-port1: attempt power cycle [ 1040.225141][T11740] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1040.304678][ T5915] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 1040.313404][T11740] usb 2-1: device descriptor read/8, error -71 [ 1040.375571][T25156] [U]  [ 1040.379084][T25156] [U] K{ [ 1040.382094][T25156] [U] t 1ŠFfˊ`GJgo/mC [ 1040.389012][T25156] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1040.404525][T25156] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1040.414922][T25156] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1040.450510][T25156] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1040.474023][T25156] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1040.485122][T25156] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1040.496651][T25156] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1040.634665][T11740] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1040.651309][T25156] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1040.651366][T25156] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1040.651379][T25156] [U] 22Ʃx?0;3u [ 1040.651397][T25156] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1040.651419][T25156] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1040.651432][T25156] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1040.727966][T25156] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1040.734105][T25156] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1040.746400][T25156] [U] ec [ 1040.749495][T25156] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1040.778190][ T5915] usb 6-1: config 201 has an invalid interface number: 249 but max is 0 [ 1040.795727][ T5915] usb 6-1: config 201 has no interface number 0 [ 1040.845233][ T5915] usb 6-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 1040.876077][T11740] usb 2-1: device descriptor read/8, error -71 [ 1040.925375][ T5915] usb 6-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1040.937081][ T5915] usb 6-1: config 201 interface 249 has no altsetting 0 [ 1040.966056][ T5915] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 1040.975741][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.983739][ T5915] usb 6-1: Product: syz [ 1040.994155][T11740] usb usb2-port1: unable to enumerate USB device [ 1041.002333][ T5915] usb 6-1: Manufacturer: syz [ 1041.010206][ T5915] usb 6-1: SerialNumber: syz [ 1041.211549][T25155] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1041.230789][T25152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.240976][T25152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.272187][ T5915] ath6kl: Failed to submit usb control message: -71 [ 1041.278917][ T5915] ath6kl: unable to send the bmi data to the device: -71 [ 1041.289201][ T5915] ath6kl: Unable to send get target info: -71 [ 1041.303302][ T5915] ath6kl: Failed to init ath6kl core: -71 [ 1041.312104][ T5915] ath6kl_usb 6-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 1041.331597][ T5915] usb 6-1: USB disconnect, device number 111 [ 1041.847240][T25175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4419'. [ 1042.062682][T25191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.079965][T25191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.146984][T25194] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4423'. [ 1042.204695][ T5915] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 1042.355710][ T5915] usb 6-1: not running at top speed; connect to a high speed hub [ 1042.364614][ T5915] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 1042.372975][ T5915] usb 6-1: config 95 has no interface number 0 [ 1042.379492][ T5915] usb 6-1: config 95 interface 1 has no altsetting 0 [ 1042.389677][ T5915] usb 6-1: string descriptor 0 read error: -22 [ 1042.396069][ T5915] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1042.405264][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.080562][T25199] netlink: 'syz.3.4425': attribute type 10 has an invalid length. [ 1043.089562][T25199] bond0: (slave wlan1): Opening slave failed [ 1043.131025][T25199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1044.003584][T16394] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.013955][T16394] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.024864][T16394] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.039960][T16394] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1044.901513][T25221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4431'. [ 1044.916799][T25221] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 1044.961604][ T5915] usb 6-1: USB disconnect, device number 112 [ 1045.249525][ T929] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1045.675952][T25237] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4434'. [ 1045.692032][ T929] usb 4-1: device descriptor read/64, error -71 [ 1045.702708][T25237] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4434'. [ 1046.114697][ T929] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1046.266352][ T929] usb 4-1: device descriptor read/64, error -71 [ 1046.404924][ T929] usb usb4-port1: attempt power cycle [ 1046.754817][ T929] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1046.775093][ T929] usb 4-1: device descriptor read/8, error -71 [ 1046.957797][T25263] QAT: failed to copy from user. [ 1047.035303][ T929] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1047.061084][ T929] usb 4-1: device descriptor read/8, error -71 [ 1047.126613][T25270] syzkaller0: entered promiscuous mode [ 1047.132114][T25270] syzkaller0: entered allmulticast mode [ 1047.179121][ T929] usb usb4-port1: unable to enumerate USB device [ 1047.546874][T25287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.555804][T25287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.834574][ T929] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1047.979469][T25295] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4452'. [ 1047.992744][T25295] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.006502][ T929] usb 6-1: Using ep0 maxpacket: 8 [ 1048.014078][ T929] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1048.024130][ T929] usb 6-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1048.038161][ T929] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1048.047292][ T929] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1048.056589][ T929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.064703][ T929] usb 6-1: Product: syz [ 1048.068956][ T929] usb 6-1: Manufacturer: ဉ [ 1048.073601][ T929] usb 6-1: SerialNumber: syz [ 1048.081770][T25289] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1048.108627][T25289] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1048.147137][T25298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.157644][T25298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.324054][T25289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.333994][T25289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.344158][T25289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.354037][T25289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.419162][ T929] usb 6-1: USB disconnect, device number 113 [ 1049.509205][T25319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4459'. [ 1050.289418][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 1050.289436][ T30] audit: type=1326 audit(1771152609.072:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25337 comm="syz.3.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1050.332287][ T30] audit: type=1326 audit(1771152609.072:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25337 comm="syz.3.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1050.356473][ T30] audit: type=1326 audit(1771152609.072:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25337 comm="syz.3.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1050.379752][ T30] audit: type=1326 audit(1771152609.072:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25337 comm="syz.3.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1050.383179][T25335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4464'. [ 1050.403065][ T30] audit: type=1326 audit(1771152609.072:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25337 comm="syz.3.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1050.440951][ T30] audit: type=1326 audit(1771152609.072:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25337 comm="syz.3.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1050.463505][T25343] openvswitch: netlink: Multiple metadata blocks provided [ 1050.471070][ T30] audit: type=1326 audit(1771152609.072:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25337 comm="syz.3.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1050.662864][T25350] kvm: pic: non byte read [ 1050.677491][T25350] kvm: pic: level sensitive irq not supported [ 1050.677545][T25350] kvm: pic: non byte read [ 1050.954499][ T5915] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1051.186756][ T5915] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1051.207042][ T5915] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1051.221515][ T5915] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1051.233974][T25358] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1051.239173][ T5915] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1051.240499][T25358] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1051.253105][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.344047][T25358] vhci_hcd vhci_hcd.0: Device attached [ 1051.352222][T25360] vhci_hcd: connection closed [ 1051.354889][T16393] vhci_hcd vhci_hcd.3: stop threads [ 1051.366044][T16393] vhci_hcd vhci_hcd.3: release socket [ 1051.371480][ T5915] usb 2-1: Product: syz [ 1051.376148][T16393] vhci_hcd vhci_hcd.3: disconnect device [ 1051.381835][ T5915] usb 2-1: Manufacturer: syz [ 1051.392539][ T5915] usb 2-1: SerialNumber: syz [ 1051.405487][T25350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1051.416801][T25350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1052.849083][ T5915] rtl8150 2-1:1.0: eth5: rtl8150 is detected [ 1052.894508][ T5906] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1053.156462][ T5906] usb 4-1: device descriptor read/64, error -71 [ 1053.414927][ T929] usb 2-1: USB disconnect, device number 104 [ 1053.426671][ T5906] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1053.566861][ T5906] usb 4-1: device descriptor read/64, error -71 [ 1053.575703][T25395] xt_socket: unknown flags 0x4 [ 1053.676287][ T5906] usb usb4-port1: attempt power cycle [ 1053.855972][T19181] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1054.025582][T19181] usb 6-1: Using ep0 maxpacket: 32 [ 1054.049436][T19181] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 1054.066817][T19181] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.084592][ T5906] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1054.092512][T19181] usb 6-1: Product: syz [ 1054.104796][T19181] usb 6-1: Manufacturer: syz [ 1054.109457][T19181] usb 6-1: SerialNumber: syz [ 1054.132199][T19181] usb 6-1: config 0 descriptor?? [ 1054.148490][ T5906] usb 4-1: device descriptor read/8, error -71 [ 1054.176963][T19181] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1054.299202][T25420] xt_hashlimit: size too large, truncated to 1048576 [ 1054.309513][T25415] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1054.318934][T25420] xt_hashlimit: max too large, truncated to 1048576 [ 1054.363767][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.370544][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.444527][ T5906] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1054.490811][ T5906] usb 4-1: device descriptor read/8, error -71 [ 1054.634842][ T5906] usb usb4-port1: unable to enumerate USB device [ 1054.875493][T19181] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1054.901130][ T5915] usb 6-1: USB disconnect, device number 114 [ 1055.023206][T25447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4490'. [ 1055.034885][T19181] usb 2-1: Using ep0 maxpacket: 8 [ 1055.057191][T19181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1055.078727][T19181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1055.152449][T19181] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1055.186045][T19181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1055.198855][T19181] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1055.209008][T19181] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1055.752750][T19181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.790694][T19181] usb 2-1: config 0 descriptor?? [ 1055.986674][ T5915] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1056.191851][T25460] macvlan4: entered promiscuous mode [ 1056.197953][T13756] Bluetooth: hci1: urb ffff88803a295e00 submission failed (90) [ 1056.239866][T19181] usb 2-1: USB disconnect, device number 105 [ 1056.274718][T25460] macvlan4: entered allmulticast mode [ 1056.281560][T25460] bond6: entered promiscuous mode [ 1056.289286][T25460] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1056.321181][T25463] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4493'. [ 1056.355281][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 1056.360620][T25460] bond6: left promiscuous mode [ 1056.377978][T25464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4493'. [ 1056.387738][ T5915] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1056.404773][ T5915] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1056.412997][ T5915] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1056.453487][ T5915] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1056.475662][ T5915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1056.494476][ T5915] usb 6-1: config 0 has no interface number 0 [ 1056.504521][ T5915] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1056.551231][ T5915] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1056.583455][ T5915] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1056.632371][ T5915] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1056.665194][ T5915] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1056.674753][T25470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4496'. [ 1056.683824][ T5915] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1056.712562][ T5915] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1056.721911][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.734921][ T5915] usb 6-1: Product: syz [ 1056.742046][ T5915] usb 6-1: Manufacturer: syz [ 1056.752036][ T5915] usb 6-1: SerialNumber: syz [ 1056.773436][ T5915] usb 6-1: config 0 descriptor?? [ 1056.786180][ T5915] usb 6-1: selecting invalid altsetting 2 [ 1057.304736][T19181] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1057.464588][T19181] usb 2-1: Using ep0 maxpacket: 8 [ 1057.479186][T19181] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1057.488642][T19181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.505270][T19181] usb 2-1: Product: syz [ 1057.510107][T19181] usb 2-1: Manufacturer: syz [ 1057.532860][T19181] usb 2-1: SerialNumber: syz [ 1057.562490][T19181] usb 2-1: config 0 descriptor?? [ 1057.585777][T19181] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1057.594952][T25489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.629851][T25489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.774479][T19811] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1057.812614][ T5915] usb 6-1: USB disconnect, device number 115 [ 1057.946272][T19811] usb 4-1: config index 0 descriptor too short (expected 2084, got 36) [ 1057.964566][T19811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.984448][T19811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.004476][T19811] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1058.013543][T19811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.022577][T25494] fuse: Unknown parameter '' [ 1058.044757][T19811] usb 4-1: config 0 descriptor?? [ 1058.686011][T19181] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 1058.693680][T19181] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 1058.748998][T19181] usb 2-1: USB disconnect, device number 106 [ 1059.069929][T19811] usbhid 4-1:0.0: can't add hid device: -71 [ 1059.084521][T19811] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1059.105376][T19811] usb 4-1: USB disconnect, device number 10 [ 1059.444782][T25513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4507'. [ 1059.614489][ T5906] usb 6-1: new low-speed USB device number 116 using dummy_hcd [ 1059.735867][T25517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.744703][T25517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.805656][T25519] netlink: 'syz.3.4508': attribute type 6 has an invalid length. [ 1059.827363][T25519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4508'. [ 1059.939852][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1059.971991][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.017162][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1060.082650][ T5906] usb 6-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 1060.099564][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.157116][ T5906] usb 6-1: config 0 descriptor?? [ 1060.201040][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input83 [ 1060.369374][T25511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.378477][T25511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.391917][ T5177] bcm5974 6-1:0.0: could not read from device [ 1060.446088][ T5906] usb 6-1: USB disconnect, device number 116 [ 1060.513643][ T5818] udevd[5818]: Error opening device "/dev/input/event4": No such file or directory [ 1060.589710][ T5818] udevd[5818]: Unable to EVIOCGABS device "/dev/input/event4" [ 1060.613817][ T5818] udevd[5818]: Unable to EVIOCGABS device "/dev/input/event4" [ 1060.629235][ T5818] udevd[5818]: Unable to EVIOCGABS device "/dev/input/event4" [ 1060.641583][ T5818] udevd[5818]: Unable to EVIOCGABS device "/dev/input/event4" [ 1060.674587][ T929] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1060.695632][T25550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.744748][T25550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.830735][ T929] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.843487][ T929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1060.862391][ T929] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1060.881338][ T929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1060.904587][ T929] usb 2-1: SerialNumber: syz [ 1061.130130][ T929] usb 2-1: 0:2 : does not exist [ 1061.193161][ T929] usb 2-1: USB disconnect, device number 107 [ 1061.223804][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1062.081489][ T30] audit: type=1326 audit(1771152620.862:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25571 comm="syz.1.4521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96af59bf79 code=0x0 [ 1062.374590][ T929] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1062.624488][ T929] usb 2-1: device descriptor read/64, error -71 [ 1062.881498][ T929] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1063.024880][ T929] usb 2-1: device descriptor read/64, error -71 [ 1063.047983][T25576] input: syz0 as /devices/virtual/input/input84 [ 1063.185141][ T929] usb usb2-port1: attempt power cycle [ 1063.527652][ T929] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1063.606326][ T929] usb 2-1: device descriptor read/8, error -71 [ 1064.033270][ T929] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1064.108717][ T929] usb 2-1: device descriptor read/8, error -71 [ 1064.175290][T25599] fuse: Bad value for 'fd' [ 1064.244834][ T929] usb usb2-port1: unable to enumerate USB device [ 1065.200582][T25632] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4536'. [ 1065.237145][T25632] netlink: 'syz.5.4536': attribute type 1 has an invalid length. [ 1065.251665][T25634] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4538'. [ 1065.310993][T25632] bond10: entered promiscuous mode [ 1065.334644][T25632] bond10: entered allmulticast mode [ 1065.345435][T25632] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1065.369656][T25621] erspan1: entered allmulticast mode [ 1065.379196][T25621] bond10: (slave erspan1): making interface the new active one [ 1065.571865][T25621] erspan1: entered promiscuous mode [ 1065.591593][T25621] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 1065.608810][T25639] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1066.689230][T25661] macvlan1: entered promiscuous mode [ 1066.738114][T25661] macvlan1: entered allmulticast mode [ 1066.762349][T25661] bond11: entered promiscuous mode [ 1066.852288][T25661] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1067.077758][T25661] bond11: left promiscuous mode [ 1067.274187][T25671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.317234][T25671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.445900][T25671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.459362][T25671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.834501][ T929] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 1067.986398][ T929] usb 6-1: config 0 has no interfaces? [ 1067.991972][ T929] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1068.030974][ T929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.085528][ T929] usb 6-1: config 0 descriptor?? [ 1068.364673][ T929] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1068.536065][ T929] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 1068.546938][ T929] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.568508][ T929] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.584899][ T929] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.597913][ T929] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.609979][ T929] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.640032][ T929] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.694073][ T929] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.727773][ T929] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.756686][ T929] usb 4-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 1068.779544][ T929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.873790][ T929] pwc: Logitech QuickCam detected (reserved ID). [ 1068.891167][ T929] pwc: Warning: more than 1 configuration available. [ 1069.282222][ T929] pwc: send_video_command error -71 [ 1069.295785][ T929] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1069.307703][ T929] Philips webcam 4-1:250.0: probe with driver Philips webcam failed with error -71 [ 1069.333384][ T929] usb 4-1: USB disconnect, device number 11 [ 1069.737589][T25704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4556'. [ 1070.008824][T25712] IPv6: addrconf: prefix option has invalid lifetime [ 1070.465119][ T929] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1070.516332][T19811] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1070.636995][ T929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.656563][ T929] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1070.674557][T19811] usb 4-1: Using ep0 maxpacket: 16 [ 1070.728763][T19811] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1070.760419][T19811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.783565][ T929] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1070.810035][T19811] usb 4-1: Product: syz [ 1070.817635][ T929] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1070.827944][T19811] usb 4-1: Manufacturer: syz [ 1070.838201][T19811] usb 4-1: SerialNumber: syz [ 1070.847319][ T929] usb 2-1: Manufacturer: syz [ 1070.870978][T19811] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1070.885579][T19811] r8152-cfgselector 4-1: config 0 descriptor?? [ 1070.922323][ T929] usb 2-1: config 0 descriptor?? [ 1070.987445][ T929] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1071.047304][ T5915] usb 6-1: USB disconnect, device number 117 [ 1071.169544][T25722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.197225][T25722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.647447][T25735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1071.726234][T19811] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1071.743114][T19811] r8152-cfgselector 4-1: bad CDC descriptors [ 1071.805891][T19811] r8152-cfgselector 4-1: USB disconnect, device number 12 [ 1072.383848][ T30] audit: type=1326 audit(1771152631.142:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96af59bf79 code=0x7ffc0000 [ 1072.533894][ T30] audit: type=1326 audit(1771152631.142:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96af59bf79 code=0x7ffc0000 [ 1072.719620][ T30] audit: type=1326 audit(1771152631.142:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f96af59bf79 code=0x7ffc0000 [ 1072.801306][ T30] audit: type=1326 audit(1771152631.142:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96af59bf79 code=0x7ffc0000 [ 1072.824488][ T30] audit: type=1326 audit(1771152631.142:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96af59bf79 code=0x7ffc0000 [ 1072.860479][ T30] audit: type=1326 audit(1771152631.142:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96af59bf79 code=0x7ffc0000 [ 1072.883987][T25757] fuse: Bad value for 'group_id' [ 1072.903689][T25757] fuse: Bad value for 'group_id' [ 1072.903697][ T30] audit: type=1326 audit(1771152631.142:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96af59bf79 code=0x7ffc0000 [ 1072.903736][ T30] audit: type=1326 audit(1771152631.142:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96af59bf79 code=0x7ffc0000 [ 1073.364012][ T30] audit: type=1326 audit(1771152631.142:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96af59bf79 code=0x7ffc0000 [ 1073.467376][ T30] audit: type=1326 audit(1771152631.142:5920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25718 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96af59bf79 code=0x7ffc0000 [ 1073.924479][ T5906] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1074.043499][ T5915] usb 2-1: USB disconnect, device number 112 [ 1074.445768][T25787] loop2: detected capacity change from 0 to 14 [ 1074.463808][T25787] Dev loop2: unable to read RDB block 14 [ 1074.490616][T25787] loop2: unable to read partition table [ 1074.506100][T25787] loop2: partition table beyond EOD, truncated [ 1074.537207][T25787] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1074.567410][T25786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.583647][T25786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.932485][T25801] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1074.986996][ T5915] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1075.154778][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 1075.164765][ T5915] usb 6-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1075.180931][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1075.205393][ T5915] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 1075.220978][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.239555][ T5915] usb 6-1: config 0 descriptor?? [ 1075.256762][ T5915] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1075.330590][T25804] netlink: 464 bytes leftover after parsing attributes in process `syz.4.4579'. [ 1075.345333][T25804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.365219][T25804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.724735][ T5915] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1075.877705][ T5915] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1075.886429][ T5915] usb 2-1: config 0 has no interface number 0 [ 1075.892776][ T5915] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1075.902461][ T5915] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1075.911873][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.919983][ T5915] usb 2-1: Product: syz [ 1075.924456][ T5915] usb 2-1: Manufacturer: syz [ 1075.929053][ T5915] usb 2-1: SerialNumber: syz [ 1075.936063][ T5915] usb 2-1: config 0 descriptor?? [ 1076.182328][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026410000: rx timeout, send abort [ 1076.194274][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888026410000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1076.584472][T19811] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1076.765022][T19811] usb 4-1: Using ep0 maxpacket: 16 [ 1076.803853][T19811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.823259][T19811] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1076.845684][T19811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.864114][T19811] usb 4-1: config 0 descriptor?? [ 1077.287568][T19811] mcp2221 0003:04D8:00DD.003F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1077.692213][T25811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.717869][T25811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.026985][T19811] usb 6-1: USB disconnect, device number 118 [ 1078.198420][T25818] tipc: Enabled bearer , priority 0 [ 1078.224788][T25818] syzkaller0: entered promiscuous mode [ 1078.230952][T25818] syzkaller0: entered allmulticast mode [ 1078.260687][T25818] tipc: Resetting bearer [ 1078.517301][ T5915] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1078.532484][T25820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.545332][ T5915] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 1078.550341][T25820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.568861][ T5915] usb 2-1: USB disconnect, device number 113 [ 1078.798862][T25820] Cannot find del_set index 0 as target [ 1078.824467][T25820] binder: 25819:25820 ioctl c0306201 2000000003c0 returned -14 [ 1078.884894][ T5915] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1078.956779][T25816] tipc: Resetting bearer [ 1078.977645][T25816] tipc: Disabling bearer [ 1079.046206][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.064792][ T5915] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1079.084836][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.105107][ T5915] usb 2-1: config 0 descriptor?? [ 1079.125412][ T5915] pwc: Askey VC010 type 2 USB webcam detected. [ 1079.182833][T25826] geneve3: entered promiscuous mode [ 1079.315873][ T5906] usb 4-1: USB disconnect, device number 14 [ 1079.513469][T25831] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 1079.528162][ T5915] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1079.538857][ T5915] pwc: recv_control_msg error -32 req 02 val 2700 [ 1079.545922][ T5915] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1079.556106][ T5915] pwc: recv_control_msg error -32 req 04 val 1000 [ 1079.565192][ T5915] pwc: recv_control_msg error -32 req 04 val 1300 [ 1079.565213][T25831] CUSE: unknown device info "3ܟ,̘" [ 1079.572362][ T5915] pwc: recv_control_msg error -32 req 04 val 1400 [ 1079.587739][ T5915] pwc: recv_control_msg error -32 req 02 val 2000 [ 1079.596459][T25831] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 1079.596459][T25831] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 1079.621022][T25831] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 1079.654219][T25831] CUSE: DEVNAME unspecified [ 1079.796229][ T5915] pwc: recv_control_msg error -32 req 04 val 1500 [ 1079.805194][ T5915] pwc: recv_control_msg error -32 req 02 val 2500 [ 1079.846638][ T5915] pwc: recv_control_msg error -32 req 02 val 2400 [ 1079.872178][ T5915] pwc: recv_control_msg error -32 req 02 val 2600 [ 1079.892399][ T5915] pwc: recv_control_msg error -32 req 02 val 2900 [ 1079.915489][ T5915] pwc: recv_control_msg error -32 req 02 val 2800 [ 1079.947826][ T5915] pwc: recv_control_msg error -32 req 04 val 1100 [ 1080.057800][ T5915] pwc: Registered as video103. [ 1080.065297][ T5915] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input86 [ 1080.221027][ T5906] usb 2-1: USB disconnect, device number 114 [ 1080.818999][T25871] netlink: 'syz.1.4598': attribute type 1 has an invalid length. [ 1080.885849][T25875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.911174][T25875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.014275][T25871] macvlan2: entered promiscuous mode [ 1081.025826][T25871] macvlan2: entered allmulticast mode [ 1081.042629][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1081.042647][ T30] audit: type=1326 audit(1771152639.822:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25873 comm="syz.4.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1081.050470][T25871] bond7: entered promiscuous mode [ 1081.160545][T25871] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1081.177097][ T30] audit: type=1326 audit(1771152639.822:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25873 comm="syz.4.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1081.195050][T25884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4602'. [ 1081.238503][ T30] audit: type=1326 audit(1771152639.822:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25873 comm="syz.4.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1081.262484][ T30] audit: type=1326 audit(1771152639.822:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25873 comm="syz.4.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1081.284988][T25871] bond7: left promiscuous mode [ 1081.290507][ T30] audit: type=1326 audit(1771152639.822:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25873 comm="syz.4.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1081.314276][ T30] audit: type=1326 audit(1771152639.822:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25873 comm="syz.4.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1081.340283][ T30] audit: type=1326 audit(1771152639.822:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25873 comm="syz.4.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1081.364643][ T30] audit: type=1326 audit(1771152639.822:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25873 comm="syz.4.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1081.387953][ T30] audit: type=1326 audit(1771152639.822:5944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25873 comm="syz.4.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1081.411880][ T30] audit: type=1326 audit(1771152639.822:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25873 comm="syz.4.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd3279bf79 code=0x7ffc0000 [ 1081.522726][T25887] loop2: detected capacity change from 0 to 7 [ 1081.532498][ T5818] Dev loop2: unable to read RDB block 7 [ 1081.539018][ T5818] loop2: AHDI p2 p3 [ 1081.543362][ T5818] loop2: partition table partially beyond EOD, truncated [ 1081.552073][ T5818] loop2: p3 start 335544320 is beyond EOD, truncated [ 1081.562053][T25887] Dev loop2: unable to read RDB block 7 [ 1081.568492][T25887] loop2: AHDI p2 p3 [ 1081.574949][T25887] loop2: partition table partially beyond EOD, truncated [ 1081.584592][ T5915] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1081.597771][T25887] loop2: p3 start 335544320 is beyond EOD, truncated [ 1081.744495][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 1081.756477][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1081.777611][ T5915] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1081.795019][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.808555][ T5915] usb 4-1: Product: syz [ 1081.816180][ T5915] usb 4-1: Manufacturer: syz [ 1081.823597][ T5915] usb 4-1: SerialNumber: syz [ 1081.835854][ T5915] usb 4-1: config 0 descriptor?? [ 1081.847835][ T5915] hub 4-1:0.0: bad descriptor, ignoring hub [ 1081.858396][ T5915] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1081.873014][ T5915] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1082.106529][ T5915] usb 4-1: USB disconnect, device number 15 [ 1082.198989][T25890] syzkaller0: entered promiscuous mode [ 1082.205100][T25890] syzkaller0: entered allmulticast mode [ 1082.266815][T25890] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1082.416042][T25893] macvlan2: entered promiscuous mode [ 1082.421481][T25893] macvlan2: entered allmulticast mode [ 1082.429171][T25893] bond8: entered promiscuous mode [ 1082.434988][T25893] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1082.445542][T25893] bond8: left promiscuous mode [ 1082.556214][T25896] raw_sendmsg: syz.1.4606 forgot to set AF_INET. Fix it! [ 1084.326790][T25939] macvlan2: entered promiscuous mode [ 1084.375896][T25939] macvlan2: entered allmulticast mode [ 1084.421859][T25939] bond6: entered promiscuous mode [ 1084.428164][T25939] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1084.488491][T25939] bond6: left promiscuous mode [ 1084.540814][T25942] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1084.917921][T25955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.955506][T25952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.986936][T25955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.015525][T25952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.254629][ T5906] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1085.459048][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 1085.475560][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1085.488969][ T5906] usb 2-1: config 7 has an invalid interface number: 1 but max is 0 [ 1085.611618][ T5906] usb 2-1: config 7 has no interface number 0 [ 1085.658559][ T5906] usb 2-1: config 7 interface 1 altsetting 6 bulk endpoint 0x5 has invalid maxpacket 1023 [ 1085.687447][ T5906] usb 2-1: config 7 interface 1 has no altsetting 0 [ 1085.709834][ T5906] usb 2-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=49.20 [ 1085.719206][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.734469][ T5906] usb 2-1: Product: syz [ 1085.758130][ T5906] usb 2-1: Manufacturer: syz [ 1085.769716][ T5906] usb 2-1: SerialNumber: syz [ 1085.821602][T25954] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1086.074011][ T5906] HFC-S_USB 2-1:7.1: probe with driver HFC-S_USB failed with error -5 [ 1086.115179][T25970] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1086.115243][T25970] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1086.160897][ T5906] usb 2-1: USB disconnect, device number 115 [ 1086.184757][T25970] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1086.184800][T25970] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1086.217995][T25970] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1086.218019][T25970] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1086.235119][T25970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1086.235144][T25970] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1086.334574][T25970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1086.334601][T25970] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1086.734491][ T5915] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1086.776559][T25984] syzkaller0: entered promiscuous mode [ 1086.782226][T25984] syzkaller0: entered allmulticast mode [ 1086.896976][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1086.933543][ T5915] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1086.950419][ T5915] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1086.960036][ T5915] usb 6-1: Manufacturer: syz [ 1086.991815][ T5915] usb 6-1: config 0 descriptor?? [ 1087.007373][ T5915] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1087.365839][T25989] loop2: detected capacity change from 0 to 7 [ 1087.385269][ T5818] Dev loop2: unable to read RDB block 7 [ 1087.392919][ T5818] loop2: AHDI p2 p3 [ 1087.397203][ T5818] loop2: partition table partially beyond EOD, truncated [ 1087.407797][ T5818] loop2: p3 start 335544320 is beyond EOD, truncated [ 1087.417332][T25989] Dev loop2: unable to read RDB block 7 [ 1087.423005][T25989] loop2: AHDI p2 p3 [ 1087.429771][T25989] loop2: partition table partially beyond EOD, truncated [ 1087.437840][T25989] loop2: p3 start 335544320 is beyond EOD, truncated [ 1087.936699][ T5906] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 1088.094824][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1088.110585][ T30] audit: type=1326 audit(1771152646.852:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25977 comm="syz.5.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1088.269729][ T5906] usb 2-1: config 2 has an invalid interface number: 108 but max is 0 [ 1088.284465][ T30] audit: type=1326 audit(1771152646.852:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25977 comm="syz.5.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1088.308371][ T5906] usb 2-1: config 2 has an invalid descriptor of length 45, skipping remainder of the config [ 1088.319003][ T5906] usb 2-1: config 2 has no interface number 0 [ 1088.325256][ T5906] usb 2-1: config 2 interface 108 has no altsetting 0 [ 1088.332478][ T30] audit: type=1326 audit(1771152646.852:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25977 comm="syz.5.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1088.369489][ T5906] usb 2-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=1b.d8 [ 1088.379010][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.387544][ T5906] usb 2-1: Product: syz [ 1088.394521][ T30] audit: type=1326 audit(1771152646.852:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25977 comm="syz.5.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1088.417334][ T5906] usb 2-1: Manufacturer: syz [ 1088.422000][ T5906] usb 2-1: SerialNumber: syz [ 1088.434457][ T30] audit: type=1326 audit(1771152646.852:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25977 comm="syz.5.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1088.494897][ T30] audit: type=1326 audit(1771152646.852:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25977 comm="syz.5.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1088.522702][ T30] audit: type=1326 audit(1771152646.852:5978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25977 comm="syz.5.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1088.551997][ T30] audit: type=1326 audit(1771152646.852:5979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25977 comm="syz.5.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1088.579710][ T30] audit: type=1326 audit(1771152646.852:5980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25977 comm="syz.5.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1088.620010][ T30] audit: type=1326 audit(1771152646.852:5981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25977 comm="syz.5.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1088.646494][T25992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.655702][T25992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.668944][ T5906] usb 2-1: Could not find all expected endpoints [ 1088.678582][ T5906] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1088.687724][ T5906] usb 2-1: MIDIStreaming interface descriptor not found [ 1088.798168][ T5906] usb 2-1: USB disconnect, device number 116 [ 1089.440549][T26008] netlink: 'syz.4.4633': attribute type 1 has an invalid length. [ 1089.473506][T26008] bond9: (slave bridge8): making interface the new active one [ 1089.481923][T26008] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 1089.501709][T26008] macvlan2: entered promiscuous mode [ 1089.507235][T26008] macvlan2: entered allmulticast mode [ 1089.513550][T26008] bond9: entered promiscuous mode [ 1089.519027][T26008] bridge8: entered promiscuous mode [ 1089.525080][T26008] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1089.532570][T26008] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1089.559899][T26008] bond9: left promiscuous mode [ 1089.573355][T26008] bridge8: left promiscuous mode [ 1090.124743][ T5906] usb 6-1: USB disconnect, device number 119 [ 1090.253954][T26034] input: syz0 as /devices/virtual/input/input87 [ 1090.274244][T26035] loop2: detected capacity change from 0 to 7 [ 1090.317311][T26035] Dev loop2: unable to read RDB block 7 [ 1090.337811][T26035] loop2: AHDI p2 p3 [ 1090.365080][T26035] loop2: partition table partially beyond EOD, truncated [ 1090.372576][T26035] loop2: p3 start 335544320 is beyond EOD, truncated [ 1090.536276][T26039] fuse: Bad value for 'fd' [ 1090.545750][T26044] netlink: 'syz.3.4648': attribute type 1 has an invalid length. [ 1090.634167][T26048] bond7: (slave bridge7): making interface the new active one [ 1090.644180][T26048] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 1090.679614][T26044] macvlan4: entered promiscuous mode [ 1090.685386][T26044] macvlan4: entered allmulticast mode [ 1090.691691][T26044] bond7: entered promiscuous mode [ 1090.698114][T26044] bridge7: entered promiscuous mode [ 1090.704286][T26044] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1090.716986][T26044] bond7: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1090.733504][T26044] bond7: left promiscuous mode [ 1090.738446][T26044] bridge7: left promiscuous mode [ 1090.766495][T26052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1090.793456][T26052] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1091.001231][T26063] blktrace: Concurrent blktraces are not allowed on sg0 [ 1091.037394][T26063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.066842][T26063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.124471][T19811] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1091.388004][T19811] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1091.408087][T19811] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1091.408118][T19811] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1091.408138][T19811] usb 4-1: Manufacturer: syz [ 1091.417768][T19811] usb 4-1: config 0 descriptor?? [ 1091.468105][T19811] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1091.670403][T26087] fuse: Bad value for 'fd' [ 1091.951499][T26095] usb usb8: usbfs: process 26095 (syz.1.4662) did not claim interface 0 before use [ 1093.040797][T26107] loop2: detected capacity change from 0 to 7 [ 1093.049278][T26107] Dev loop2: unable to read RDB block 7 [ 1093.055319][T26107] loop2: AHDI p2 p3 [ 1093.059400][T26107] loop2: partition table partially beyond EOD, truncated [ 1093.067218][T26107] loop2: p3 start 335544320 is beyond EOD, truncated [ 1094.097014][T19811] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1094.106742][ T5915] usb 4-1: USB disconnect, device number 16 [ 1094.274527][T19811] usb 2-1: Using ep0 maxpacket: 32 [ 1094.290756][T19811] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 1094.319560][T19811] usb 2-1: config 0 has no interface number 0 [ 1094.337561][T19811] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1094.366199][T19811] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1094.396750][T19811] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1094.419145][T19811] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 1094.440454][T19811] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1094.471628][T19811] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1094.481814][T19811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.490041][T19811] usb 2-1: Product: syz [ 1094.521594][T19811] usb 2-1: Manufacturer: syz [ 1094.540976][T19811] usb 2-1: SerialNumber: syz [ 1094.583319][T19811] usb 2-1: config 0 descriptor?? [ 1094.607356][T19811] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input88 [ 1094.803922][T19811] usb 2-1: USB disconnect, device number 117 [ 1095.297374][ T5915] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1095.307806][T26147] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1095.495160][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 1095.523284][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1095.543322][ T5915] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1095.583042][ T5915] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1095.602739][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.621402][ T5915] usb 4-1: Product: syz [ 1095.631557][ T5915] usb 4-1: Manufacturer: syz [ 1095.641708][ T5915] usb 4-1: SerialNumber: syz [ 1095.673858][ T5915] usb 4-1: config 0 descriptor?? [ 1095.740236][T26161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.744869][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1095.780231][T26161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.937445][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1095.952990][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1095.982695][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1096.011959][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1096.028779][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1096.048249][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1096.057869][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1096.066334][ T9] usb 2-1: Product: syz [ 1096.070499][ T9] usb 2-1: Manufacturer: syz [ 1096.080310][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1096.085581][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1096.092006][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1096.098297][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 1096.126194][ T9] usb 4-1: USB disconnect, device number 17 [ 1097.004478][T19811] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1097.156220][T19811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.167187][T19811] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1097.176588][T19811] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1097.184670][T19811] usb 4-1: Manufacturer: syz [ 1097.191703][T19811] usb 4-1: config 0 descriptor?? [ 1097.200231][T19811] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1098.260230][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1098.260248][ T30] audit: type=1326 audit(1771152657.042:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.3.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1098.549651][ T9] usb 2-1: USB disconnect, device number 118 [ 1098.635188][ T30] audit: type=1326 audit(1771152657.042:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.3.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1098.671178][ T30] audit: type=1326 audit(1771152657.072:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.3.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1098.700403][ T30] audit: type=1326 audit(1771152657.072:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.3.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1098.723967][ T30] audit: type=1326 audit(1771152657.072:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.3.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1098.753067][ T30] audit: type=1326 audit(1771152657.072:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.3.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1098.779183][ T30] audit: type=1326 audit(1771152657.072:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.3.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1098.852483][ T30] audit: type=1326 audit(1771152657.072:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.3.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1098.921758][ T30] audit: type=1326 audit(1771152657.072:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.3.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1098.945973][ T9] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1099.041777][ T30] audit: type=1326 audit(1771152657.072:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.3.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacc59bf79 code=0x7ffc0000 [ 1099.113222][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1099.129762][ T9] usb 6-1: config 0 has an invalid interface number: 206 but max is 1 [ 1099.138461][ T9] usb 6-1: config 0 has no interface number 1 [ 1099.152488][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1099.184224][ T9] usb 6-1: config 0 interface 206 has no altsetting 0 [ 1099.205230][ T9] usb 6-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 1099.232300][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.248973][ T9] usb 6-1: Product: syz [ 1099.259668][ T9] usb 6-1: Manufacturer: syz [ 1099.268715][ T9] usb 6-1: SerialNumber: syz [ 1099.278817][ T9] usb 6-1: config 0 descriptor?? [ 1099.513325][ T9] usb 6-1: USB disconnect, device number 120 [ 1099.891989][ T9] usb 4-1: USB disconnect, device number 18 [ 1100.314786][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1100.476283][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1100.497578][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1100.508810][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1100.524486][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1100.552742][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1100.689919][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.712469][ T9] usb 4-1: Product: syz [ 1100.722308][ T9] usb 4-1: Manufacturer: syz [ 1100.735488][ T9] usb 4-1: SerialNumber: syz [ 1100.753450][T26202] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1100.778960][ T9] cdc_mbim 4-1:1.0: skipping garbage [ 1100.992475][T26202] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1101.014997][T26202] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1101.032770][T26212] i2c i2c-0: dtv_property_process_set: SET cmd 0xa3040000 undefined [ 1101.796498][T26228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1101.851725][T26228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1101.908076][ T9] cdc_mbim 4-1:1.0: setting tx_max = 48 [ 1101.929285][ T9] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 1102.011169][ T9] wwan wwan0: port wwan0mbim0 attached [ 1102.024328][ T9] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 1e:85:9a:99:9f:86 [ 1102.120122][ T9] usb 4-1: USB disconnect, device number 19 [ 1102.137048][ T9] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1102.236879][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 1102.723914][T26249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1103.544921][ T9] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1103.719594][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1103.746272][ T9] usb 6-1: config 0 has no interfaces? [ 1103.759089][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1103.795131][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1103.823474][ T9] usb 6-1: Manufacturer: syz [ 1103.857305][ T9] usb 6-1: config 0 descriptor?? [ 1104.145168][T26305] program syz.1.4711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1104.652008][T26305] syz.1.4711 (26305): drop_caches: 2 [ 1105.246861][T26313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4713'. [ 1105.365084][T26319] xt_hashlimit: max too large, truncated to 1048576 [ 1105.629846][T26324] netlink: 'syz.1.4716': attribute type 1 has an invalid length. [ 1105.770450][T26328] bond9: (slave bridge8): making interface the new active one [ 1105.781888][T26326] netlink: 'syz.3.4717': attribute type 4 has an invalid length. [ 1105.795813][T26328] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 1105.810969][T26326] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4717'. [ 1105.839861][T26328] macvlan2: entered promiscuous mode [ 1105.857543][T26328] macvlan2: entered allmulticast mode [ 1105.881806][T26328] bond9: entered promiscuous mode [ 1105.887095][T26328] bridge8: entered promiscuous mode [ 1105.897174][T26328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1105.912146][T26328] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1105.962659][T26328] bond9: left promiscuous mode [ 1105.977910][T26328] bridge8: left promiscuous mode [ 1106.033164][T26326] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1106.226887][ T929] usb 6-1: USB disconnect, device number 121 [ 1106.301312][T26337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.310100][T26337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.810207][T26351] UHID_CREATE from different security context by process 1304 (syz.3.4723), this is not allowed. [ 1107.094480][ T929] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1107.285802][ T929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.331066][ T929] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1107.360713][ T929] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1107.382089][ T929] usb 6-1: Manufacturer: syz [ 1107.423556][ T929] usb 6-1: config 0 descriptor?? [ 1107.461168][ T929] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1107.959615][T26371] netlink: 'syz.1.4730': attribute type 1 has an invalid length. [ 1108.025322][T26371] bond10: (slave bridge9): making interface the new active one [ 1108.047533][T26371] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 1108.079210][T26371] macvlan2: entered promiscuous mode [ 1108.094640][T26371] macvlan2: entered allmulticast mode [ 1108.105562][T26371] bond10: entered promiscuous mode [ 1108.116934][T26371] bridge9: entered promiscuous mode [ 1108.131300][T26371] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1108.138459][T19181] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1108.155645][T26371] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1108.192880][T26371] bond10: left promiscuous mode [ 1108.198525][T26371] bridge9: left promiscuous mode [ 1108.324725][T19181] usb 4-1: Using ep0 maxpacket: 16 [ 1108.335863][T19181] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.361747][T19181] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.382748][T19181] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1108.394762][T19181] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1108.410906][T19181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.436341][T19181] usb 4-1: config 0 descriptor?? [ 1108.585400][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1108.585419][ T30] audit: type=1326 audit(1771152667.362:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26352 comm="syz.5.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1108.697352][ T30] audit: type=1326 audit(1771152667.362:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26352 comm="syz.5.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1108.720166][ T30] audit: type=1326 audit(1771152667.402:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26352 comm="syz.5.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1108.779774][ T30] audit: type=1326 audit(1771152667.402:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26352 comm="syz.5.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1108.814681][ T30] audit: type=1326 audit(1771152667.402:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26352 comm="syz.5.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1108.840575][ T30] audit: type=1326 audit(1771152667.402:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26352 comm="syz.5.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1108.914793][ T30] audit: type=1326 audit(1771152667.402:6094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26352 comm="syz.5.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1108.955637][ T30] audit: type=1326 audit(1771152667.402:6095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26352 comm="syz.5.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1108.996164][ T30] audit: type=1326 audit(1771152667.402:6096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26352 comm="syz.5.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1109.020950][ T30] audit: type=1326 audit(1771152667.402:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26352 comm="syz.5.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1099bf79 code=0x7ffc0000 [ 1109.103249][T19181] hid (null): unknown global tag 0xc [ 1109.108913][T19181] hid (null): global environment stack underflow [ 1109.117303][T19181] hid (null): invalid report_size 1216975657 [ 1109.208952][T26384] netlink: 'syz.4.4732': attribute type 1 has an invalid length. [ 1109.222754][T26384] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1109.305434][ T929] usb 4-1: USB disconnect, device number 20 [ 1109.703864][T26396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.734023][T26396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.020229][ T929] usb 6-1: USB disconnect, device number 122 [ 1111.490983][T26423] netlink: 'syz.5.4743': attribute type 29 has an invalid length. [ 1111.549596][T26425] netlink: 'syz.5.4743': attribute type 29 has an invalid length. [ 1112.055019][T19181] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1112.242459][T19181] usb 2-1: device descriptor read/64, error -71 [ 1112.485058][T19181] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1112.626227][T19181] usb 2-1: device descriptor read/64, error -71 [ 1112.769670][T19181] usb usb2-port1: attempt power cycle [ 1113.139987][T26462] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 1113.146643][T26462] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1113.154721][T19181] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1113.164801][T26462] vhci_hcd vhci_hcd.0: Device attached [ 1113.204609][T26462] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15) [ 1113.211424][T26462] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1113.214755][T19181] usb 2-1: device descriptor read/8, error -71 [ 1113.219555][T26462] vhci_hcd vhci_hcd.0: Device attached [ 1113.243829][T26462] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(17) [ 1113.250473][T26462] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1113.259116][T26462] vhci_hcd vhci_hcd.0: Device attached [ 1113.266729][T26462] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(19) [ 1113.273347][T26462] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1113.281638][T26462] vhci_hcd vhci_hcd.0: Device attached [ 1113.289734][T26462] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(21) [ 1113.296351][T26462] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1113.314335][T26462] vhci_hcd vhci_hcd.0: Device attached [ 1113.324567][T26462] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(23) [ 1113.331192][T26462] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1113.344467][T26462] vhci_hcd vhci_hcd.0: Device attached [ 1113.356291][T26462] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1113.383537][T26462] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1113.416973][T26462] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1113.451562][T26471] vhci_hcd: connection closed [ 1113.451792][ T36] vhci_hcd vhci_hcd.5: stop threads [ 1113.461509][T26466] vhci_hcd: connection closed [ 1113.463767][T26464] vhci_hcd: connection closed [ 1113.464554][ T5915] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1113.470265][T26475] vhci_hcd: connection closed [ 1113.480782][T26465] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1113.484547][T19181] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1113.486082][T26473] vhci_hcd: connection closed [ 1113.499275][T26468] vhci_hcd: connection closed [ 1113.514622][T19181] usb 2-1: device descriptor read/8, error -71 [ 1113.544091][ T36] vhci_hcd vhci_hcd.5: release socket [ 1113.564818][ T36] vhci_hcd vhci_hcd.5: disconnect device [ 1113.573339][ T36] vhci_hcd vhci_hcd.5: stop threads [ 1113.581928][ T36] vhci_hcd vhci_hcd.5: release socket [ 1113.587712][ T36] vhci_hcd vhci_hcd.5: disconnect device [ 1113.598536][ T36] vhci_hcd vhci_hcd.5: stop threads [ 1113.605356][ T36] vhci_hcd vhci_hcd.5: release socket [ 1113.610944][ T36] vhci_hcd vhci_hcd.5: disconnect device [ 1113.625676][ T36] vhci_hcd vhci_hcd.5: stop threads [ 1113.630928][ T36] vhci_hcd vhci_hcd.5: release socket [ 1113.656728][T19181] usb usb2-port1: unable to enumerate USB device [ 1113.684230][ T36] vhci_hcd vhci_hcd.5: disconnect device [ 1113.691221][T26480] netlink: 'syz.3.4764': attribute type 1 has an invalid length. [ 1113.699577][ T36] vhci_hcd vhci_hcd.5: stop threads [ 1113.709414][ T36] vhci_hcd vhci_hcd.5: release socket [ 1113.717248][ T36] vhci_hcd vhci_hcd.5: disconnect device [ 1113.723749][ T36] vhci_hcd vhci_hcd.5: stop threads [ 1113.730605][ T36] vhci_hcd vhci_hcd.5: release socket [ 1113.737159][ T36] vhci_hcd vhci_hcd.5: disconnect device [ 1114.313643][T26503] netlink: 'syz.4.4774': attribute type 22 has an invalid length. [ 1114.321731][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4774'. [ 1114.331023][T26503] bond0: option ad_select: unable to set because the bond device is up [ 1114.537326][T26510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4777'. [ 1114.883724][T26525] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1114.908476][T26525] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1114.977400][T26529] [ 1114.979766][T26529] ====================================================== [ 1114.986792][T26529] WARNING: possible circular locking dependency detected [ 1114.993905][T26529] syzkaller #0 Tainted: G L [ 1114.999891][T26529] ------------------------------------------------------ [ 1115.006915][T26529] syz.4.4787/26529 is trying to acquire lock: [ 1115.012984][T26529] ffff88801b6d5a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 1115.023387][T26529] [ 1115.023387][T26529] but task is already holding lock: [ 1115.030748][T26529] ffff888025b32680 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 1115.040527][T26529] [ 1115.040527][T26529] which lock already depends on the new lock. [ 1115.040527][T26529] [ 1115.050935][T26529] [ 1115.050935][T26529] the existing dependency chain (in reverse order) is: [ 1115.059946][T26529] [ 1115.059946][T26529] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 1115.068622][T26529] blk_alloc_queue+0x546/0x680 [ 1115.073905][T26529] __blk_mq_alloc_disk+0x197/0x390 [ 1115.079613][T26529] loop_add+0x482/0xb40 [ 1115.084291][T26529] loop_init+0xd9/0x170 [ 1115.089029][T26529] do_one_initcall+0x250/0x8d0 [ 1115.094315][T26529] do_initcall_level+0x104/0x190 [ 1115.099835][T26529] do_initcalls+0x59/0xa0 [ 1115.104757][T26529] kernel_init_freeable+0x2a6/0x3e0 [ 1115.110465][T26529] kernel_init+0x1d/0x1d0 [ 1115.115306][T26529] ret_from_fork+0x51e/0xb90 [ 1115.120408][T26529] ret_from_fork_asm+0x1a/0x30 [ 1115.125685][T26529] [ 1115.125685][T26529] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1115.132882][T26529] fs_reclaim_acquire+0x71/0x100 [ 1115.138342][T26529] kmem_cache_alloc_noprof+0x40/0x650 [ 1115.144234][T26529] __kernfs_iattrs+0xdf/0x340 [ 1115.149463][T26529] kernfs_iop_setattr+0xea/0x3f0 [ 1115.154907][T26529] notify_change+0xc1a/0xf40 [ 1115.160005][T26529] do_truncate+0x1c2/0x250 [ 1115.164926][T26529] path_openat+0x2f89/0x3860 [ 1115.170030][T26529] do_file_open+0x23e/0x4a0 [ 1115.175051][T26529] do_sys_openat2+0x113/0x200 [ 1115.180245][T26529] __x64_sys_openat+0x138/0x170 [ 1115.185603][T26529] do_syscall_64+0x14d/0xf80 [ 1115.190699][T26529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.197097][T26529] [ 1115.197097][T26529] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1115.205600][T26529] __lock_acquire+0x15a5/0x2cf0 [ 1115.210964][T26529] lock_acquire+0xf0/0x2e0 [ 1115.215892][T26529] down_read+0x47/0x2e0 [ 1115.220554][T26529] kernfs_iop_getattr+0x9e/0x450 [ 1115.226042][T26529] vfs_getattr_nosec+0x2e1/0x430 [ 1115.231487][T26529] loop_assign_backing_file+0x27a/0x4b0 [ 1115.237547][T26529] lo_ioctl+0x1acb/0x1fb0 [ 1115.242390][T26529] blkdev_ioctl+0x5e3/0x740 [ 1115.247405][T26529] __se_sys_ioctl+0xfc/0x170 [ 1115.252509][T26529] do_syscall_64+0x14d/0xf80 [ 1115.257607][T26529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.264079][T26529] [ 1115.264079][T26529] other info that might help us debug this: [ 1115.264079][T26529] [ 1115.274290][T26529] Chain exists of: [ 1115.274290][T26529] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 1115.274290][T26529] [ 1115.288719][T26529] Possible unsafe locking scenario: [ 1115.288719][T26529] [ 1115.296162][T26529] CPU0 CPU1 [ 1115.301532][T26529] ---- ---- [ 1115.306961][T26529] lock(&q->q_usage_counter(io)#23); [ 1115.312427][T26529] lock(fs_reclaim); [ 1115.318923][T26529] lock(&q->q_usage_counter(io)#23); [ 1115.326821][T26529] rlock(&root->kernfs_iattr_rwsem); [ 1115.332183][T26529] [ 1115.332183][T26529] *** DEADLOCK *** [ 1115.332183][T26529] [ 1115.340309][T26529] 3 locks held by syz.4.4787/26529: [ 1115.345491][T26529] #0: ffff888025be0448 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0 [ 1115.354537][T26529] #1: ffff888025b32680 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 1115.364798][T26529] #2: ffff888025b326b8 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 1115.375175][T26529] [ 1115.375175][T26529] stack backtrace: [ 1115.381049][T26529] CPU: 0 UID: 0 PID: 26529 Comm: syz.4.4787 Tainted: G L syzkaller #0 PREEMPT(full) [ 1115.381070][T26529] Tainted: [L]=SOFTLOCKUP [ 1115.381076][T26529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1115.381086][T26529] Call Trace: [ 1115.381095][T26529] [ 1115.381103][T26529] dump_stack_lvl+0xe8/0x150 [ 1115.381126][T26529] print_circular_bug+0x2e1/0x300 [ 1115.381150][T26529] check_noncircular+0x12e/0x150 [ 1115.381172][T26529] __lock_acquire+0x15a5/0x2cf0 [ 1115.381196][T26529] lock_acquire+0xf0/0x2e0 [ 1115.381212][T26529] ? kernfs_iop_getattr+0x9e/0x450 [ 1115.381236][T26529] down_read+0x47/0x2e0 [ 1115.381253][T26529] ? kernfs_iop_getattr+0x9e/0x450 [ 1115.381269][T26529] kernfs_iop_getattr+0x9e/0x450 [ 1115.381285][T26529] vfs_getattr_nosec+0x2e1/0x430 [ 1115.381304][T26529] loop_assign_backing_file+0x27a/0x4b0 [ 1115.381327][T26529] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 1115.381358][T26529] lo_ioctl+0x1acb/0x1fb0 [ 1115.381380][T26529] ? __pfx_lo_ioctl+0x10/0x10 [ 1115.381399][T26529] ? ima_match_policy+0x2146/0x21e0 [ 1115.381421][T26529] ? __lock_acquire+0x6b5/0x2cf0 [ 1115.381440][T26529] ? __lock_acquire+0x6b5/0x2cf0 [ 1115.381458][T26529] ? __lock_acquire+0x6b5/0x2cf0 [ 1115.381475][T26529] ? __lock_acquire+0x6b5/0x2cf0 [ 1115.381493][T26529] ? __lock_acquire+0x6b5/0x2cf0 [ 1115.381510][T26529] ? __lock_acquire+0x6b5/0x2cf0 [ 1115.381530][T26529] ? unwind_next_frame+0xa5/0x23c0 [ 1115.381557][T26529] ? is_bpf_text_address+0x26/0x2b0 [ 1115.381579][T26529] ? is_bpf_text_address+0x292/0x2b0 [ 1115.381600][T26529] ? is_bpf_text_address+0x26/0x2b0 [ 1115.381621][T26529] ? kernel_text_address+0xa5/0xe0 [ 1115.381637][T26529] ? __kernel_text_address+0xd/0x30 [ 1115.381651][T26529] ? unwind_get_return_address+0x4d/0x90 [ 1115.381671][T26529] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1115.381686][T26529] ? arch_stack_walk+0xfb/0x150 [ 1115.381709][T26529] ? stack_trace_save+0xa9/0x100 [ 1115.381723][T26529] ? __pfx_stack_trace_save+0x10/0x10 [ 1115.381736][T26529] ? kasan_save_free_info+0x46/0x50 [ 1115.381756][T26529] ? stack_depot_save_flags+0x33/0x810 [ 1115.381776][T26529] ? format_decode+0xd0/0xe10 [ 1115.381795][T26529] ? kasan_save_track+0x4f/0x80 [ 1115.381815][T26529] ? kasan_save_track+0x3e/0x80 [ 1115.381845][T26529] ? kasan_save_free_info+0x46/0x50 [ 1115.381862][T26529] ? __kasan_slab_free+0x5c/0x80 [ 1115.381875][T26529] ? kfree+0x1c1/0x630 [ 1115.381894][T26529] ? tomoyo_path_number_perm+0x501/0x630 [ 1115.381913][T26529] ? security_file_ioctl+0xc3/0x2a0 [ 1115.381930][T26529] ? __se_sys_ioctl+0x47/0x170 [ 1115.381944][T26529] ? do_syscall_64+0x14d/0xf80 [ 1115.381958][T26529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.381976][T26529] ? __asan_memset+0x22/0x50 [ 1115.381995][T26529] ? blk_get_meta_cap+0x16d/0x7a0 [ 1115.382014][T26529] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1115.382032][T26529] ? blkdev_common_ioctl+0x14b7/0x3250 [ 1115.382054][T26529] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1115.382072][T26529] ? kasan_quarantine_put+0xbb/0x1f0 [ 1115.382095][T26529] ? tomoyo_path_number_perm+0x219/0x630 [ 1115.382114][T26529] ? tomoyo_path_number_perm+0x219/0x630 [ 1115.382133][T26529] ? do_vfs_ioctl+0x1166/0x1530 [ 1115.382148][T26529] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1115.382165][T26529] ? do_futex+0x333/0x420 [ 1115.382186][T26529] ? __pfx_lo_ioctl+0x10/0x10 [ 1115.382205][T26529] blkdev_ioctl+0x5e3/0x740 [ 1115.382229][T26529] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1115.382247][T26529] ? __fget_files+0x2a/0x420 [ 1115.382266][T26529] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1115.382282][T26529] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1115.382299][T26529] __se_sys_ioctl+0xfc/0x170 [ 1115.382314][T26529] do_syscall_64+0x14d/0xf80 [ 1115.382328][T26529] ? trace_irq_disable+0x3b/0x150 [ 1115.382347][T26529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.382362][T26529] ? clear_bhb_loop+0x40/0x90 [ 1115.382378][T26529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.382393][T26529] RIP: 0033:0x7efd3279bf79 [ 1115.382409][T26529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.382423][T26529] RSP: 002b:00007efd336e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1115.382438][T26529] RAX: ffffffffffffffda RBX: 00007efd32a15fa0 RCX: 00007efd3279bf79 [ 1115.382450][T26529] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 1115.382459][T26529] RBP: 00007efd328327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.382469][T26529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1115.382479][T26529] R13: 00007efd32a16038 R14: 00007efd32a15fa0 R15: 00007efd32b3fa48 [ 1115.382495][T26529] [ 1115.854779][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.861091][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.584565][ T5915] vhci_hcd vhci_hcd.5: vhci_device speed not set